CISO Tribune

Disclosure · Form 10-K · fiscal 2026

Norris Industries, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026

Filed May 29, 2026· period ended February 28, 2026· NRIS· CIK 1603793· Updated · filing on sec.gov ↗

Norris Industries, Inc.'s Form 10-K for fiscal 2026, filed May 29, 2026, names the Chief Executive Officer as its top security role.

What the filing says, in plain English

Who leads security (the top role, as the filing names it)

Chief Executive Officer

Reports to

not identified

Board oversight

not identified

CISO or other person named

not identified

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

not identified

Material incident

The filing states none

“To date we have not experienced any material cybersecurity incidents.”

The section

151 words, Form 10-K filed May 29, 2026 for the period ended February 28, 2026

Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns Norris Industries, Inc. standard industrial classification 1311, Crude petroleum & natural gas (SEC SIC list). 8 other filers in our library have the same code.

FilerTop security roleReports toBoard oversight
EON Resources Inc.FY 2025, filed October 13, 2026not identifiednot identifiedfull board
Royale Energy, Inc.FY 2025, filed July 13, 2026not identifiednot identifiedaudit committee
Blue Dolphin Energy CoFY 2025, filed March 31, 2026chief executive officernot identifiedfull board
W&T Offshore IncFY 2025, filed March 16, 2026CIO & CISOnot identifiedAudit Committee of the board of directors
Empire Petroleum CorpFY 2025, filed March 13, 2026Vice President of ITChief Executive OfficerAudit Committee
Us Energy CorpFY 2025, filed March 13, 2026Director of ITnot identifiedAudit Committee
APA CorpFY 2025, filed February 26, 2026Executive Vice President, AdministrationChief Executive OfficerCybersecurity Committee
Chord Energy CorpFY 2025, filed February 26, 2026Vice President, Information Technologynot identifiedAudit and Reserves Committee

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of Norris Industries, Inc.'s Form 10-K as filed with the SEC on May 29, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

Item

1C. Cybersecurity.

We

do not presently maintain any formal processes for assessing, identifying and managing material risks from cybersecurity threats.

We

engage a consultant to maintain our website, email, financial record keeping and related internet capabilities, including, as necessary,

addressing any cybersecurity incidents. To date we have not experienced any material cybersecurity incidents. Given the nature of our

operations (single location, minimal customer interface, no gathering of customer digital data, etc.), we do not believe that we are

reasonably likely to face any material cybersecurity risks.

Our

Chief Executive Officer ("CEO") is tasked with oversight of risks from cybersecurity threats. Our CEO interfaces with our

consultant periodically to assess vulnerability to cybersecurity threats and determine actions to be taken in response to such threats.

In the event risks are identified and actions are recommended by our consultant, our consultant will interface with our CEO in addressing

any identified cybersecurity threats.

Earlier filings on record

Fiscal 2025 Form 10-K, filed May 28, 2025 sec.gov ↗

Top security role, as the filing names it

Chief Executive Officer

Reports to, as the filing names it

not identified

Board oversight

not identified

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“To date we have not experienced any material cybersecurity incidents.”

Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.

Item

1C. Cybersecurity.

We

do not presently maintain any formal processes for assessing, identifying and managing material risks from cybersecurity threats.

We

engage a consultant to maintain our website, email, financial record keeping and related internet capabilities, including, as necessary,

addressing any cybersecurity incidents. To date we have not experienced any material cybersecurity incidents. Given the nature of our

operations (single location, minimal customer interface, no gathering of customer digital data, etc.), we do no t believe that we are

reasonably likely to face any material cybersecurity risks.

Our

Chief Executive Officer ("CEO") is tasked with oversight of risks from cybersecurity threats. Our CEO interfaces with our

consultant periodically to assess vulnerability to cybersecurity threats and determine actions to be taken in response to such threats.

In the event risks are identified and actions are recommended by our consultant, our consultant will interface with our CEO in addressing

any identified cybersecurity threats.

Fiscal 2024 Form 10-K, filed May 28, 2024 sec.gov ↗

Top security role, as the filing names it

Chief Executive Officier

Reports to, as the filing names it

not identified

Board oversight

not identified

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“To date we have not experienced any material cybersecurity incidents.”

Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.

Item

1C. Cybersecurity.

We

do not presently maintain any formal processes for assessing, identifying and managing material risks from cybersecurity threats.

We

engage a consultant to maintain our website, email, financial record keeping and related internet capabilities, including, as necessary,

addressing any cybersecurity incidents. To date we have not experienced any material cybersecurity incidents. Given the nature of our

operations (single location, minimal customer interface, no gathering of customer digital data,ect.), we do not believe that we are reasonably

likely to face any material cybersecurity risks.

Our

Chief Executive Officier ("CEO") is tasked with oversight of risks from cybersecurity threats. Our CEO interfaces with our

consultant periodically to assess vulnerability to cybersecurity threats and determine actions to be taken in response to such threats.

In the event risks are identified and actions are recommended by our consultant, our consultant will interface with our CEO in addressing

any identified cybersecurity threats.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.