Disclosure · Form 10-K · fiscal 2025
Tenon Medical, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 27, 2026· period ended December 31, 2025· TNON· CIK 1560293· Updated · filing on sec.gov ↗
Tenon Medical, Inc.'s Form 10-K for fiscal 2025, filed March 27, 2026, places oversight of cybersecurity risk with the full board; a top security role title is not identified.
What Tenon Medical's Item 1C says
Tenon Medical's Form 10-K for fiscal 2025 places oversight of the cyber-risk management program with the Board of Directors.
Board and management oversight
Management ensures implementation of management and employee level cybersecurity practices and training and provides the Board of Directors with regular reports regarding any cybersecurity attacks or vulnerabilities.
How the company manages cyber risk
The company maintains a cyber-risk management program intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to its data and information systems. The company employs cybersecurity intrusion detection systems and continuous monitoring to help defend against unauthorized access.
Third parties and incidents
The company manages independent vendor relationships with third parties who are responsible for maintaining significant elements of its information technology systems and infrastructure.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight. The section does not name a specific security framework or standard. The section does not say how often the board or its committee is briefed on cybersecurity.
Read from the Form 10-K filed March 27, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Full board
“Our Board of Directors is responsible for oversight of our cyber-risk management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors with regular reports regarding any cybersecurity attacks or vulnerabilities.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of the date of this Annual Report on Form 10-K, we have not experienced any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition.”
The section
309 words, Form 10-K filed March 27, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Tenon Medical, Inc. standard industrial classification 3841, Surgical & medical instruments & apparatus (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| PetVivo Holdings, Inc.FY 2026, filed June 29, 2026 | CFO | Board | Audit Committee |
| Autonomix Medical, Inc.FY 2026, filed May 27, 2026 | Chief Executive Officer and Chief Financial Officer | Audit Committee | Audit Committee |
| Vivos Therapeutics, Inc.FY 2025, filed April 15, 2026 | Senior Vice President of Technology | Chief Financial Officer | full board |
| Vycor Medical IncFY 2025, filed March 31, 2026 | not identified | not identified | full board |
| PAVmed Inc.FY 2025, filed March 27, 2026 | not identified | not identified | audit committee |
| Retractable Technologies IncFY 2025, filed March 27, 2026 | Information Security Officer | Chief Financial Officer (CFO) | full board |
| enVVeno Medical CorpFY 2025, filed March 26, 2026 | Chief Financial Officer | not identified | Audit Committee |
| Lucid Diagnostics Inc.FY 2025, filed March 25, 2026 | Techneto, Inc. d/b/a CyberTeam | our president and chief operating officer | audit committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Tenon Medical, Inc.'s Form 10-K as filed with the SEC on March 27, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity
Cybersecurity Risk Management and Strategy . We maintain a cyber-risk management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our data and information systems. This program is to ensure that cybersecurity considerations are included in decision-making processes throughout the Company.
Our approach consists of, among other things, cybersecurity threat and vulnerability prevention, detection, mitigation and remediation of potential cybersecurity risks. We employ cybersecurity intrusion detection systems and continuous monitoring, in order to help defend against unauthorized access. We also employ identity-based access controls and identity authentication requirements. Access to the Company's data is monitored and controlled according to access control policies. Data protection and privacy practices, including data loss prevention, help to safeguard sensitive information. We have also outsourced significant elements of our information technology infrastructure; as a result, we manage independent vendor relationships with third parties who are responsible for maintaining significant elements of our information technology systems and infrastructure.
Our Board of Directors is responsible for oversight of our cyber-risk management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors with regular reports regarding any cybersecurity attacks or vulnerabilities.
As of the date of this Annual Report on Form 10-K, we have not experienced any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition. For more information regarding the risks the Company faces from cybersecurity threats, see "Item 1A. Risk Factors––Risks Related to Our Business and Operations––We are increasingly dependent on information technology, and our systems and infrastructure face certain risks, including cybersecurity and data leakage risks."
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 26, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“Our Board of Directors is responsible for oversight of our cyber-risk management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors with regular reports regarding any cybersecurity attacks or vulnerabilities .”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of the date of this Annual Report on Form 10-K, we have not experienced any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
Cybersecurity Risk Management and Strategy . We maintain a cyber-risk
management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our
data and information systems. This program is to ensure that cybersecurity considerations are included in decision-making processes throughout
the Company.
Our approach consists of, among other things, cybersecurity threat
and vulnerability prevention, detection, mitigation and remediation of potential cybersecurity risks. We employ cybersecurity intrusion
detection systems and continuous monitoring, in order to help defend against unauthorized access. We also employ identity-based access
controls and identity authentication requirements. Access to the Company's data is monitored and controlled according to access
control policies. Data protection and privacy practices, including data loss prevention, help to safeguard sensitive information. We have
also outsourced significant elements of our information technology infrastructure; as a result, we manage independent vendor relationships
with third parties who are responsible for maintaining significant elements of our information technology systems and infrastructure.
Our Board of Directors is responsible for oversight of our cyber-risk
management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity
risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors
with regular reports regarding any cybersecurity attacks or vulnerabilities .
As of the date of this Annual Report on Form 10-K, we have not experienced
any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably
likely to materially affect, our business strategy, results of operations, or financial condition. For more information regarding the
risks the Company faces from cybersecurity threats, see "Item 1A. Risk Factors––Risks Related to Our Business and Operations––We
are increasingly dependent on information technology, and our systems and infrastructure face certain risks, including cybersecurity and
data leakage risks."
Fiscal 2023 Form 10-K, filed March 29, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“Our Board of Directors is responsible for oversight of our cyber-risk management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors with regular reports regarding any cybersecurity attacks or vulnerabilities.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of the date of this Annual Report on Form 10-K, we have not experienced any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably likely to materially affect, our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
Cybersecurity Risk Management and Strategy . We maintain a cyber-risk
management program which is intended to assist in assessing, identifying, and managing material risks from cybersecurity threats to our
data and information systems. This program is to ensure that cybersecurity considerations are included in decision-making processes throughout
the Company.
Our approach consists of, among other things,
cybersecurity threat and vulnerability prevention, detection, mitigation and remediation of potential cybersecurity risks. We employ
cybersecurity intrusion detection systems and continuous monitoring, in order to help defend against unauthorized access. We also employ
identity-based access controls and identity authentication requirements. Access to the Company's data is monitored and controlled
according to access control policies. Data protection and privacy practices, including data loss prevention, help to safeguard sensitive
information. We have also outsourced significant elements of our information technology infrastructure; as a result, we manage independent
vendor relationships with third parties who are responsible for maintaining significant elements of our information technology systems
and infrastructure.
Our Board of Directors is responsible for oversight of our cyber-risk
management program and management's role is to assist the Board of Directors in identifying and considering material cybersecurity
risks, ensure implementation of management and employee level cybersecurity practices and training and provide the Board of Directors
with regular reports regarding any cybersecurity attacks or vulnerabilities.
As of the date of this Annual Report on Form 10-K, we have not experienced
any significant cybersecurity attacks and, to date, the risks from cybersecurity threats have not materially affected, or are reasonably
likely to materially affect, our business strategy, results of operations, or financial condition. For more information regarding the
risks the Company faces from cybersecurity threats, see "Item 1A. Risk Factors––Risks Related to Our Business and Operations––We
are increasingly dependent on information technology, and our systems and infrastructure face certain risks, including cybersecurity and
data leakage risks."
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.