Disclosure · Form 10-K · fiscal 2025
Innovative Payment Solutions, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 31, 2026· period ended December 31, 2025· IPSI· CIK 1591913· Updated · filing on sec.gov ↗
Innovative Payment Solutions, Inc.'s Form 10-K for fiscal 2025, filed March 31, 2026, carries an Item 1C cybersecurity section; a top security role title is not identified.
What Innovative Payment Solutions' Item 1C says
Innovative Payment Solutions' Form 10-K for fiscal 2025 states that identifying and assessing cybersecurity risk is integrated into the company's overall risk management systems and processes.
How the company manages cyber risk
The company identifies cybersecurity risks related to its business, technical operations, privacy and compliance issues through review by its internal information technology governance, risk and compliance policies. The company may conduct privacy and cybersecurity reviews of systems and applications, audit applicable data, and conduct employee training.
Third parties and incidents
The company's risk management program also assesses third party risks, including risks from its vendors and suppliers. The company evaluates cybersecurity risks when determining the selection and oversight of applicable third-party service providers.
What the section does not state
The section does not name the person who holds the top security role. The section does not say who the top security role reports to.
Read from the Form 10-K filed March 31, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
not identified
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
not identified
The section
239 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Innovative Payment Solutions, Inc. standard industrial classification 5961, Retail-catalog & mail-order houses (SEC SIC list). 3 other filers in our library have the same code. Also shown: filers whose codes the SEC assigns to the same review office (Office of Trade & Services).
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Stitch Fix, Inc.FY 2026, filed September 24, 2026 | Chief Information Security Officer | Chief Product and Technology Officer | Audit Committee |
| Caro Holdings Inc.FY 2026, filed July 15, 2026 | not identified | not identified | not identified |
| AmazonFY 2025, filed February 6, 2026 | chief security officer | Chief Executive Officer | Security Committee |
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| VIP Play, Inc.FY 2026, filed September 29, 2026 | Chief Technology Officer | not identified | full board |
| GenFlat Holdings, Inc.FY 2026, filed September 25, 2026 | Chief Executive Officer and Chief Financial Officer | not identified | full board |
| CreditRiskMonitor Com IncFY 2025, filed August 19, 2026 | Chief Technology Officer | not identified | Audit Committee |
| H&R BlockFY 2026, filed August 14, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| Barnes & Noble Education, Inc.FY 2026, filed July 9, 2026 | Chief Information Security Officer | Chief Information Officer | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Innovative Payment Solutions, Inc.'s Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity
The manner in which we
store and/or transmit sensitive data in connection with our payment processing solutions is an important part of how we operate and plan
to operate. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats,
as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property
theft, fraud, extortion, harm to employees and violation of data privacy or security laws.
Identifying and assessing
cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business,
technical operations, privacy and compliance issues are identified through review by our internal information technology governance, risk
and compliance policies. To defend, detect and respond to cybersecurity incidents, we, among other things: may conduct proactive
privacy and cybersecurity reviews of systems and applications, audit applicable data, conduct employee training, monitor emerging laws
and regulations related to data protection and information security and implement appropriate changes.
Our risk management program
also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from our joint venture partners
and third parties, vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity
risks are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party
risks when handling and/or processing our employee, business or customer data.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
not identified
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
not identified
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
The manner in which
we store and/or transmit sensitive data in connection with our payment processing solutions is an important part of how we operate and
plan to operate. We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats,
as such term is defined in Item 106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property
theft, fraud, extortion, harm to employees and violation of data privacy or security laws.
Identifying and assessing
cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business,
technical operations, privacy and compliance issues are identified through review by our internal information technology governance,
risk and compliance policies. To defend, detect and respond to cybersecurity incidents, we, among other things: may conduct proactive
privacy and cybersecurity reviews of systems and applications, audit applicable data, conduct employee training, monitor emerging laws
and regulations related to data protection and information security and implement appropriate changes.
Our risk management
program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from IPSIPay Express
and third parties like OpenPath, EfinityPay, vendors, suppliers, and other business partners associated with our use of third-party service
providers. Cybersecurity risks are evaluated when determining the selection and oversight of applicable third-party service providers
and potential fourth-party risks when handling and/or processing our employee, business or customer data.
Fiscal 2023 Form 10-K, filed March 29, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
not identified
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
not identified
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
The manner in which we store and/or transmit sensitive
data in connection with our payment processing solutions is an important part of how we operate and plan to operate. We recognize the
importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item
106(a) of Regulation S-K. These risks include, among other things: operational risks, intellectual property theft, fraud, extortion, harm
to employees and violation of data privacy or security laws.
Identifying and assessing cybersecurity risk is
integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations,
privacy and compliance issues are identified through review by our internal information technology governance, risk and compliance policies.
To defend, detect and respond to cybersecurity incidents, we, among other things: may conduct proactive privacy and cybersecurity reviews
of systems and applications, audit applicable data, conduct employee training, monitor emerging laws and regulations related to data protection
and information security and implement appropriate changes.
Our risk management program also assesses third
party risks, and we perform third-party risk management to identify and mitigate risks from IPSIPay Express and third parties like OpenPath,
EfinityPay, vendors, suppliers, and other business partners associated with our use of third-party service providers. Cybersecurity risks
are evaluated when determining the selection and oversight of applicable third-party service providers and potential fourth-party risks
when handling and/or processing our employee, business or customer data.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.