Disclosure · Form 10-K · fiscal 2025
Royale Energy, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed July 13, 2026· period ended December 31, 2025· ROYL· CIK 1694617· Updated · filing on sec.gov ↗
Royale Energy, Inc.'s Form 10-K for fiscal 2025, filed July 13, 2026, places oversight of cybersecurity risk with the audit committee; a top security role title is not identified.
What Royale Energy's Item 1C says
Royale Energy's Form 10-K for fiscal 2025 places oversight of management's cybersecurity risk processes with the audit committee. The company's cybersecurity environment is led by its third-party information technology contractor.
Board and management oversight
The Audit Committee also reports material cybersecurity risks to the board of directors. In a cybersecurity incident, the process calls for the IT contractor, the Chief Executive Officer and the Chief Financial Officer to assess and respond and to brief the audit committee.
Who leads security
The IT contractor is primarily responsible for the day-to-day operation of the company's cybersecurity program.
How the company manages cyber risk
The company maintains a cybersecurity risk management program that establishes safeguards for the confidentiality, integrity, and availability of its data, technology, and information systems. The program includes general controls over changes to and access to the IT environment, cybersecurity awareness and training for employees, incident response plans and third-party incident response retainers.
Third parties and incidents
The company's IT contractor engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications. As of and for the year ended December 31, 2025, no cybersecurity incidents have materially affected the company's business strategy, results of operations, or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed July 13, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
audit committee
“The audit committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of and for the year ended December 31, 2025, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.”
The section
346 words, Form 10-K filed July 13, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Royale Energy, Inc. standard industrial classification 1311, Crude petroleum & natural gas (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| EON Resources Inc.FY 2025, filed October 13, 2026 | not identified | not identified | full board |
| Norris Industries, Inc.FY 2026, filed May 29, 2026 | Chief Executive Officer | not identified | not identified |
| Blue Dolphin Energy CoFY 2025, filed March 31, 2026 | chief executive officer | not identified | full board |
| W&T Offshore IncFY 2025, filed March 16, 2026 | CIO & CISO | not identified | Audit Committee of the board of directors |
| Empire Petroleum CorpFY 2025, filed March 13, 2026 | Vice President of IT | Chief Executive Officer | Audit Committee |
| Us Energy CorpFY 2025, filed March 13, 2026 | Director of IT | not identified | Audit Committee |
| APA CorpFY 2025, filed February 26, 2026 | Executive Vice President, Administration | Chief Executive Officer | Cybersecurity Committee |
| Chord Energy CorpFY 2025, filed February 26, 2026 | Vice President, Information Technology | not identified | Audit and Reserves Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Royale Energy, Inc.'s Form 10-K as filed with the SEC on July 13, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C Cybersecurity
Risk Management and Strategy
The Company's cybersecurity environment is led by our third-party
information technology (IT) contractor, which, in addition to cybersecurity matters, oversees the Company's IT infrastructure.
The IT contractor is responsible for monitoring and managing the security of the Company's corporate network and enterprise systems,
including technical controls, and safety protocols and responding to security threats.
The Company maintains a cybersecurity risk management program that
establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems.
The program includes general controls for managing changes in and access to the Company's IT environment, cybersecurity awareness
and training to help employees identify and mitigate against cybersecurity threats, cybersecurity incident response plans and third-party
incident response retainers to help expedite the Company's response in the event of a cybersecurity incident.
The Company's IT contractor is primarily responsible for the
day-to-day operation of the Company's cybersecurity program and for identifying cybersecurity threats and incidents and managing
the material risks associated with the cybersecurity threats. The Company's IT contractor engages third-party vendors and cybersecurity
consortiums periodically for cybersecurity-related guidance and certifications. In the event of a cybersecurity incident, the Company's
process calls for the IT contractor, our Chief Executive Officer and our Chief Financial Officer, to work to assess and respond to the
incident and provide briefings to the audit committee of the board of directors.
The audit committee is responsible for providing oversight over management's
processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage
cybersecurity risks and mitigate any incidents. The Audit Committee also reports material cybersecurity risks to the board of directors.
We believe this risk management process provides visibility and oversight to allow the board and executive leadership team to make timely,
data-driven decisions ensuring that the Company, its employees, investors, and partners are adequately protected.
As of and for the year ended December 31, 2025, there have been no
cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.
Earlier filings on record
Fiscal 2024 Form 10-K, filed April 9, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
Item
1C Cybersecurity
Risk
Management and Strategy
The
Company's cybersecurity environment is led by our third-party information technology (IT) contractor, which, in addition to cybersecurity
matters, oversees the Company's IT infrastructure. The IT contractor is responsible for monitoring and managing the security
of the Company's corporate network and enterprise systems, including technical controls, and safety protocols and responding to security
threats.
The
Company maintains a cybersecurity risk management program that establishes safeguards for protecting the confidentiality, integrity,
and availability of our data, technology, and information systems. The program includes general controls for managing changes in and
access to the Company's IT environment, cybersecurity awareness and training to help employees identify and mitigate against cybersecurity
threats, cybersecurity incident response plans and third-party incident response retainers to help expedite the Company's response
in the event of a cybersecurity incident.
The
Company's IT contractor is primarily responsible for the day-to-day operation of the Company's cybersecurity program and
for identifying cybersecurity threats and incidents and managing the material risks associated with the cybersecurity threats. The Company's
IT contractor engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications.
In the event of a cybersecurity incident, the Company's process calls for the IT contractor, our Chief Executive Officer and our
Chief Financial Officer, to work to assess and respond to the incident and provide briefings to the Audit Committee of the Board of Directors.
The
Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which
the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents. The Audit Committee
also reports material cybersecurity risks to the Board. We believe this risk management process provides visibility and oversight to
allow the Board and executive leadership team to make timely, data-driven decisions ensuring that the Company, its employees, investors,
and partners are adequately protected.
As
of and for the year ended December 31, 2024, there have been no cybersecurity incidents that have materially affected the Company's
business strategy, results of operations, or financial condition.
Fiscal 2023 Form 10-K, filed April 12, 2024 sec.gov ↗
Top security role, as the filing names it
IT contractor
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of and for the year ended December 31, 2023, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
Item 1C Cybersecurity
Risk Management and Strategy
The Company's cybersecurity environment is led by our information technology (IT) contractor, which, in addition to cybersecurity matters, oversees the Company's IT infrastructure. The IT contractor is responsible for monitoring and managing the security of the Company's corporate network and enterprise systems, including technical controls, and safety protocols and responding to security threats.
The Company maintains a cybersecurity risk management program that establishes safeguards for protecting the confidentiality, integrity, and availability of our data, technology, and information systems. The program includes general controls for managing changes in and access to the Company's IT environment, cybersecurity awareness and training to help employees identify and mitigate against cybersecurity threats, cybersecurity incident response plans and third-party incident response retainers to help expedite the Company's response in the event of a cybersecurity incident.
The Company's IT contractor is primarily responsible for the day-to-day operation of the Company's cybersecurity program and for identifying cybersecurity threats and incidents and managing the material risks associated with the cybersecurity threats. The Company's IT contractor engages third-party vendors and cybersecurity consortiums periodically for cybersecurity-related guidance and certifications. In the event of a cybersecurity incident, the Company's process calls for the IT contractor, Chief Executive Officer and Chief Financial Officer, work to assess and respond to the incident and provide briefings to the Audit Committee of the Board of Directors.
The Audit Committee is responsible for providing oversight over management's processes to identify and evaluate cybersecurity risks to which the Company is exposed and to implement processes and programs to manage cybersecurity risks and mitigate any incidents. The Audit Committee also reports material cybersecurity risks to the Board. We believe this risk management process provides visibility and oversight to allow the Board and executive leadership team to make timely, data-driven decisions ensuring that the Company, its employees, investors, and partners are adequately protected.
As of and for the year ended December 31, 2023, there have been no cybersecurity incidents that have materially affected the Company's business strategy, results of operations, or financial condition.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.