Disclosure · Form 10-K · fiscal 2025
Lifeward Ltd. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 18, 2026· period ended December 31, 2025· LFWD· CIK 1607962· Updated · filing on sec.gov ↗
Lifeward Ltd.'s Form 10-K for fiscal 2025, filed March 18, 2026, names the Chief Technology Officer as its top security role, reporting to the Chief Financial Officer, with oversight by the audit committee.
What Lifeward's Item 1C says
Lifeward's Form 10-K for fiscal 2025 places oversight of cybersecurity risk with the audit committee, which reports directly to the board of directors. The Chief Technology Officer manages the company's cybersecurity risk management program on a day to day basis.
Board and management oversight
The audit committee receives periodic updates from the Chief Financial Officer on cybersecurity risks, mitigation strategies and, if an incident occurs, incident response strategies. The audit committee updates the full board of directors on cybersecurity risk management and critical cybersecurity risks as appropriate.
Who leads security
The Chief Technology Officer, called the CTO, reports directly to the Chief Financial Officer. The individual currently serving in the position is a third-party consultant with 20 years of experience advising similarly situated companies on information technology and cybersecurity risk management. The CTO provides regular cybersecurity updates to the Chief Financial Officer.
How the company manages cyber risk
The company provides an employee education and training program on an annual basis that is designed to raise awareness of cybersecurity threats. The company's cybersecurity risk management program includes ongoing monitoring of critical risks from cybersecurity threats using automated tools.
Third parties and incidents
The company requires certain third-party providers and consultants to adhere to contractual requirements relating to privacy and cybersecurity standards. The company has not identified any cybersecurity incidents or threats that have materially affected it or are reasonably likely to do so.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed March 18, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Chief Technology Officer
Reports to
Chief Financial Officer
“Our Chief Technology Officer ("CTO"), who reports directly to our Chief Financial Officer , is responsible for the day-to-day management of our cybersecurity risk management program.”
Board oversight
audit committee
“Our audit committee, which reports directly to the board of directors, is responsible for overseeing our cybersecurity risk management program.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“The individual currently serving in this position is a third-party consultant who maintains 20 years of experience advising similarly situated companies on information technology and cybersecurity risk management.”
Material incident
The filing states none
“We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.”
The section
387 words, Form 10-K filed March 18, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 10, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Lifeward Ltd. standard industrial classification 3842, Orthopedic, prosthetic & surgical appliances & supplies (SEC SIC list). 5 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| STERIS plcFY 2026, filed May 29, 2026 | Vice President, Chief Information Security Officer | not identified | Audit Committee |
| NutriBand Inc.FY 2026, filed April 29, 2026 | not identified | not identified | Audit Committee |
| Axe Compute Inc.FY 2025, filed March 31, 2026 | Senior Director of IT and Cybersecurity | not identified | full board |
| Sanara MedTech Inc.FY 2025, filed March 24, 2026 | not identified | not identified | audit committee of the Board of Directors |
| Lakeland Industries IncFY 2025, filed April 17, 2025 | Vice President of Information Technology | not identified | Technology Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Lifeward Ltd.'s Form 10-K as filed with the SEC on March 18, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. CYBERSECURITY
Cybersecurity
Risk Management and Strategy
We
rely on information systems and the data stored on them to conduct our operations. We
have adopted
and maintain a cybersecurity risk management program in accordance with our risk profile and business that is informed
by and incorporates elements of industry standards.
Our
cybersecurity risk management program incorporates multiple components, including, but not limited to, ongoing monitoring of critical
risks from cybersecurity threats using automated tools. Additionally, we have implemented an employee education and training program,
which we provide on an annual basis, that is designed to raise awareness of cybersecurity threats. To support our cybersecurity risk management
program, we leverage managed service providers and other third-party information technology and cybersecurity providers and consultants,
including to perform regular system scans and threat intelligence analysis. Additionally,
we require certain
third-party providers and consultants to adhere to contractual requirements relating to privacy and cybersecurity standards.
We
have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect
us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, from
time to time we and our third-party vendors have experienced threats and security incidents that could affect our information or systems .
For more information, please see the section entitled "Risk Factors - Risks Related to Our Intellectual Property and Information
Technology" in this Annual Report on Form 10-K.
Governance
Our
audit committee, which reports directly to the board of directors, is responsible for overseeing our cybersecurity risk management program. The
audit committee receives periodic updates on cybersecurity risks, mitigation strategies, and, in the event of a cybersecurity incident,
incident response strategies from our Chief Financial Officer. The audit committee updates the full board of directors on matters relating
to cybersecurity risk management and critical cybersecurity risks as appropriate.
Our
Chief Technology Officer ("CTO"), who reports directly to our Chief
Financial Officer , is responsible for the day-to-day management of our cybersecurity risk management program. The
individual currently serving in this position is a third-party consultant who maintains 20 years of experience advising similarly situated
companies on information technology and cybersecurity risk management. Our
CTO provides regular cybersecurity updates to our Chief
Financial Officer on matters relating to our cybersecurity program and cybersecurity risk management.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 7, 2025 sec.gov ↗
Top security role, as the filing names it
Chief Technology Officer
Reports to, as the filing names it
Vice President of Finance and, ultimately, our Chief Financial Officer
“Our Chief Technology Officer ("CTO"), who reports directly to our Vice President of Finance and, ultimately, our Chief Financial Officer , is responsible for the day-to-day management of our cybersecurity risk management program.”
Board oversight
audit committee
“Our audit committee, which reports directly to the board of directors, is responsible for overseeing our cybersecurity risk management program.”
Person named in the filing
not identified
Experience, as stated
Stated
“The individual currently serving in this position is a third-party consultant who maintains 20 years of experience advising similarly situated companies on information technology and cybersecurity risk management.”
Material incident
The filing states none
“We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 10, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Cybersecurity Risk Management and Strategy
We rely on information systems and the data stored on them to conduct our operations. We have adopted and maintain a cybersecurity risk management program in accordance with our risk profile and business that is informed by and incorporates elements of industry standards.
Our cybersecurity risk management program incorporates multiple components, including, but not limited to, ongoing monitoring of critical risks from cybersecurity threats using automated tools. Additionally, we have implemented an employee education and training program, which we provide on an annual basis, that is designed to raise awareness of cybersecurity threats. To support our cybersecurity risk management program, we leverage managed service providers and other third-party information technology and cybersecurity providers and consultants, including to perform regular system scans and threat intelligence analysis. Additionally, we require certain third-party providers and consultants to adhere to contractual requirements relating to privacy and cybersecurity standards.
We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, like other companies in our industry, from time to time we and our third-party vendors have experienced threats and security incidents that could affect our information or systems. For more information, please see the section entitled "Risk Factors - Risks Related to Our Intellectual Property and Information Technology" in this Annual Report on Form 10-K.
Governance
Our audit committee, which reports directly to the board of directors, is responsible for overseeing our cybersecurity risk management program. The audit committee receives periodic updates on cybersecurity risks, mitigation strategies, and, in the event of a cybersecurity incident, incident response strategies from our Chief Financial Officer. The audit committee updates the full board of directors on matters relating to cybersecurity risk management and critical cybersecurity risks as appropriate.
Our Chief Technology Officer ("CTO"), who reports directly to our Vice President of Finance and, ultimately, our Chief Financial Officer , is responsible for the day-to-day management of our cybersecurity risk management program. The individual currently serving in this position is a third-party consultant who maintains 20 years of experience advising similarly situated companies on information technology and cybersecurity risk management. Our CTO provides regular cybersecurity updates to our Vice President of Finance and Chief Financial Officer on matters relating to our cybersecurity program and cybersecurity risk management.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.