Disclosure · Form 10-K · fiscal 2026
Tianci International, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed November 4, 2026· period ended July 31, 2026· CIIT· CIK 1557798· Updated · filing on sec.gov ↗
Tianci International, Inc.'s Form 10-K for fiscal 2026, filed November 4, 2026, names the Corporate Controller as its top security role, reporting to the CEO/CFO, with oversight by the Audit Committee.
What Tianci International's Item 1C says
Tianci International's Form 10-K for fiscal 2026 places oversight of cybersecurity risk with the Board and its Audit Committee. The Corporate Controller reports to the CEO/CFO on cybersecurity matters, and together they carry responsibility for the cybersecurity risk management program.
Board and management oversight
The Board of Directors considers cybersecurity risk within the Board's risk oversight function. The CEO/CFO provides prompt reports to the Board on cybersecurity risks and incidents as they are revealed, and periodic reports on the cybersecurity program. Copies of the auditor's report go to members of the Board of Directors, which reviews it and is responsible for causing remediation of any material inadequacies in the controls environment.
Who leads security
The Corporate Controller reviews the efficacy of the cybersecurity program from time to time and annually in connection with the annual audit of the financial statements. The Corporate Controller gives the auditor a written report regarding IT general controls, including cybersecurity systems, risk assessment and monitoring practices.
How the company manages cyber risk
The company's cybersecurity risk management program is integrated into its overall enterprise risk management program. The cybersecurity risk management program of the company includes a cybersecurity incident response plan. Identified cybersecurity threats are communicated to management for review, response and mitigation as appropriate.
Third parties and incidents
The company uses external service providers, where appropriate, to assess, test or otherwise assist with aspects of its security controls. The company assesses and manages cybersecurity threats associated with the information technology systems of its third party service providers. As of the filing date, the company has not identified risks from known cybersecurity threats that have materially affected it.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed November 4, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Corporate Controller
Reports to
CEO/CFO
“Our Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program.”
Board oversight
Audit Committee
“The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management program.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition.”
The section
552 words, Form 10-K filed November 4, 2026 for the period ended July 31, 2026
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Tianci International, Inc. standard industrial classification 3576, Computer communications equipment (SEC SIC list). 7 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| CiscoFY 2026, filed September 2, 2026 | Chief Security and Trust Officer | Executive Vice President, Operations | Audit Committee |
| Lantronix IncFY 2026, filed August 27, 2026 | Director of IT | not identified | full board |
| Extreme NetworksFY 2026, filed August 17, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| A10 NetworksFY 2025, filed February 25, 2026 | Head of Information Security | not identified | Audit Committee |
| Arista NetworksFY 2025, filed February 17, 2026 | Vice President and Chief Information Security Officer | not identified | Audit Committee |
| F5FY 2025, filed November 25, 2025 | Chief Information Security Officer | not identified | Risk Committee |
| Juniper NetworksFY 2024, filed February 21, 2025 | Chief Information Security Officer | not identified | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Tianci International, Inc.'s Form 10-K as filed with the SEC on November 4, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity
Cybersecurity: Risk Management and Strategy
We have developed and
implemented a cybersecurity risk management program that is designed to protect the confidentiality, integrity , and availability of the
Company's data and systems. Our cybersecurity risk management program includes a cybersecurity incident response plan.
Our cybersecurity risk
management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels
and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational,
and financial risk areas.
Our cybersecurity risk
management program includes:
·
A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;
·
A security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;
·
The use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;
·
Cybersecurity awareness training of our employees, incident response personnel, and senior management; and
·
A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.
Additionally, the Company
assesses and manages cybersecurity threats associated with its third party service providers' information technology systems that
could compromise the Company's information security or data. Identified cybersecurity threats are communicated to management for
review, response and mitigation as appropriate.
As of the date of this
filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that
have materially affected us, including our operations, business strategy, results of operations, or financial condition. We face risks
from cybersecurity threats that, if realized, are likely to materially affect us, including our operations, business strategy, results
of operations, or financial condition.
Cybersecurity: Governance
Our Board of Directors considers cybersecurity
risk within the Board's risk oversight function. The Board of Directors has charged management with responsibility for oversight
of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system
controls and security. The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management
program.
Our Corporate Controller reviews the efficacy
of our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the
Company's financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls,
including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment
of the Company's internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company's
internal controls. Copies of the Corporate Controller's report are also given to the CEO/CFO and made available to members of the
Board of Directors. Copies of the auditor's report are delivered to the members of the Board of Directors, which reviews and is
responsible to cause a remediation of any material inadequacies in the controls environment.
Our Corporate Controller reports to our CEO/CFO
on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO
provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as
appropriate, regarding the Company's cybersecurity program.
Earlier filings on record
Fiscal 2025 Form 10-K, filed October 3, 2025 sec.gov ↗
Top security role, as the filing names it
Corporate Controller
Reports to, as the filing names it
CEO/CFO
“Our Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program.”
Board oversight
Audit Committee
“The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management program.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
Cybersecurity: Risk Management and Strategy
We have developed and implemented a cybersecurity
risk management program that is designed to protect the confidentiality, integrity , and availability of the Company's data and systems.
Our cybersecurity risk management program includes a cybersecurity incident response plan.
Our cybersecurity risk management program is integrated
into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that
apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.
Our cybersecurity risk management program includes:
·
A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;
·
A security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;
·
The use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;
·
Cybersecurity awareness training of our employees, incident response personnel, and senior management; and
·
A cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents.
Additionally, the Company assesses and manages
cybersecurity threats associated with its third party service providers' information technology systems that could compromise the
Company's information security or data. Identified cybersecurity threats are communicated to management for review, response and
mitigation as appropriate.
As of the date of this filing, we have not identified
risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us,
including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that,
if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.
Cybersecurity: Governance
Our Board of Directors considers cybersecurity
risk within the Board's risk oversight function. The board of directors has charged management with responsibility for oversight
of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system
controls and security. The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management
program.
Our Corporate Controller reviews the efficacy of
our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the
Company's financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls,
including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment
of the Company's internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company's
internal controls. Copies of the Corporate Controller's report are also given to the CEO/CFO and made available to members of the
Board of Directors. Copies of the auditor's report are delivered to the members of the Board of Directors, which reviews and is
responsible to cause a remediation of any material inadequacies in the controls environment.
Our Corporate Controller reports to our CEO/CFO
on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO
provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as
appropriate, regarding the Company's cybersecurity program.
Fiscal 2024 Form 10-K, filed October 22, 2024 sec.gov ↗
Top security role, as the filing names it
Corporate Controller
Reports to, as the filing names it
CEO/CFO
“Our Corporate Controller reports to our CEO/CFO on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program.”
Board oversight
Audit Committee
“The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management program.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of the date of this filing, we have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us, including our operations, business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
Cybersecurity: Risk Management and Strategy
We have developed and implemented a cybersecurity
risk management program that is designed to protect the confidentiality, integrity, and availability of the Company's data and systems.
Our cybersecurity risk management program includes a cybersecurity incident response plan.
Our cybersecurity risk management program is integrated
into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that
apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.
Our cybersecurity risk management program includes:
· A risk assessment process designed to help identify material cybersecurity
risks to our critical systems, information, services, and our broader enterprise IT environment;
· A security team principally responsible for managing (1) our cybersecurity
risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;
· The use of external service providers, where appropriate, to assess, test
or otherwise assist with aspects of our security controls;
· Cybersecurity awareness training of our employees, incident response personnel,
and senior management; and
· A cybersecurity incident response plan that includes procedures for responding
to cybersecurity incidents.
Additionally, the Company assesses and manages
cybersecurity threats associated with its third party service providers' information technology systems that could compromise the
Company's information security or data. Identified cybersecurity threats are communicated to management for review, response and
mitigation as appropriate.
As of the date of this filing, we have not identified
risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected us,
including our operations, business strategy, results of operations, or financial condition. We face risks from cybersecurity threats that,
if realized, are likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.
Cybersecurity: Governance
Our Board of Directors considers cybersecurity
risk within the Board's risk oversight function. The board of directors has charged management with responsibility for oversight
of cybersecurity risks and incidents and any other risks and incidents relevant to the Company's computerized information system
controls and security. The Board and its Audit Committee oversee management's implementation of our cybersecurity risk management
program.
Our Corporate Controller reviews the efficacy of
our cybersecurity program from time to time as circumstances make appropriate and annually in connection with the annual audit of the
Company's financial statements. Our Corporate Controller renders to the auditor a written report regarding IT general controls,
including cybersecurity systems, risk assessment and monitoring practices. The auditor reviews the report in connection with its assessment
of the Company's internal controls over financial reporting, and advises Company management if the report reveals flaws in the Company's
internal controls. Copies of the Corporate Controller's report are also given to the CEO/CFO and made available to members of the
Board of Directors. Copies of the auditor's report are delivered to the members of the Board of Directors, which reviews and is
responsible to cause a remediation of any material inadequacies in the controls environment.
Our Corporate Controller reports to our CEO/CFO
on matters of cybersecurity, and together they carry responsibility for our overall cybersecurity risk management program. Our CEO/CFO
provides prompt reports to the Board regarding cybersecurity risks and incidents as they are revealed, as well as periodic reports, as
appropriate, regarding the Company's cybersecurity program.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.