Disclosure · Form 10-K · fiscal 2025
Bonk, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 31, 2026· period ended December 31, 2025· BNKK· CIK 1760903· Updated · filing on sec.gov ↗
Bonk, Inc.'s Form 10-K for fiscal 2025, filed March 31, 2026, places oversight of cybersecurity risk with the audit committee; a top security role title is not identified.
What Bonk's Item 1C says
Bonk's Form 10-K for fiscal 2025 places oversight of cybersecurity risk management with the audit committee of the board of directors. Primary responsibility for assessing, monitoring and managing cybersecurity risks rests with NeTTronix Technology Solutions, which reports to the CFO.
Board and management oversight
The board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The audit committee receives regular reports from the information technology team concerning significant cybersecurity threats and risk and the processes implemented to address them. The executive team, including the Chief Executive Officer and Chief Financial Officer, is responsible for hiring appropriate personnel and communicating key priorities to relevant personnel.
How the company manages cyber risk
The company conducts periodic risk assessments to identify cybersecurity threats, and also assesses risks when a material change in business practices occurs. After these risk assessments, the company re-designs, implements and maintains reasonable safeguards to minimize identified risks and regularly monitors the effectiveness of its safeguards.
Third parties and incidents
The company engages consultants or other third parties in connection with its risk assessment processes. The company requires each third-party service provider to certify that it has the ability to implement and maintain appropriate security measures. The company states it has not encountered cybersecurity challenges that have materially impaired its operations or financial standing.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed March 31, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
CFO
“Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with NeTTronix Technology Solutions who reports to our CFO, to manage the risk assessment and mitigation process.”
Board oversight
audit committee
“The board of directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.”
The section
561 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code; 1 proposed field not found in the text and left empty.
How peers in the same industry describe the seat
The SEC assigns Bonk, Inc. standard industrial classification 2844, Perfumes, cosmetics & other toilet preparations (SEC SIC list). 2 other filers in our library have the same code. Also shown: filers whose codes the SEC assigns to the same review office (Industrial Applications and Services).
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Karbon-X Corp.FY 2026, filed September 15, 2026 | Chief Executive Officer | not identified | full board |
| e.l.f. Beauty, Inc.FY 2026, filed May 21, 2026 | Chief Technology & AI Officer | not identified | full board |
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Advanced Biomed Inc.FY 2026, filed October 13, 2026 | Chief Executive Officer | not identified | not identified |
| Bion Environmental Technologies IncFY 2026, filed September 29, 2026 | not identified | not identified | full board |
| Bloomia Holdings, Inc.FY 2026, filed September 21, 2026 | not identified | not identified | Audit Committee |
| Aehr Test SystemsFY 2026, filed July 27, 2026 | Chief Operating Officer | not identified | Audit Committee |
| Adm Tronics Unlimited, Inc.FY 2026, filed July 10, 2026 | CSO | not identified | full board |
| PetVivo Holdings, Inc.FY 2026, filed June 29, 2026 | CFO | Board | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Bonk, Inc.'s Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. CYBERSECURITY
We
have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated
these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats,
including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on
the confidentiality, integrity, or availability of our information systems or any information residing therein .
General
We
conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our
business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include
identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such
risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Following
these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address
any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing,
monitoring and managing our cybersecurity risks rests with NeTTronix Technology Solutions who reports to our CFO, to manage the risk
assessment and mitigation process.
We
engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design
and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service
provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws,
to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach
of its security measures that may affect our company.
We
have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.
Governance
Our
board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The board of
directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight
and mitigation of risks from cybersecurity threats.
Our
cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information
technology team at the direction of NeTTronix Technology Solutions. Our executive team including our Chief Executive Officer, and Chief
Financial Officer are responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company's
overall risk management strategy, and communicating key priorities to relevant personnel. This executive team is responsible for approving
budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other
security-related reports.
Our
cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members
of management depending on the circumstances, including our Chief Executive Officer, and Chief Financial Officer. In addition, the Company's
incident response and vulnerability management policies include reporting to the audit committee of the board of directors for certain
cybersecurity incidents including significant breaches to the Company's networks or systems. The audit committee receives regular
reports from the information technology team concerning the Company's significant cybersecurity threats and risk and the processes
the Company has implemented to address them. The audit committee also has access to various reports, summaries or presentations related
to cybersecurity threats, risk and mitigation.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 28, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“The board of directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats .”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.”
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
ITEM
1C. CYBERSECURITY
We
have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated
these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats,
including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on
the confidentiality, integrity, or availability of our information systems or any information residing therein .
We
conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our
business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include
identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such
risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Following
these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address
any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards. Primary responsibility for assessing,
monitoring and managing our cybersecurity risks rests with NeTTronix Technology Solutions who reports to our CFO, to manage the risk
assessment and mitigation process.
We
engage consultants, or other third parties in connection with our risk assessment processes. These service providers assist us to design
and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service
provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws,
to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach
of its security measures that may affect our company.
We
have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.
Governance
Our
board of directors addresses the Company's cybersecurity risk management as part of its general oversight function . The board of
directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight
and mitigation of risks from cybersecurity threats .
Our
cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information
technology team at the direction of NeTTronix Technology Solutions. Our executive team including our Chief Executive Officer, and Chief
Financial Officer are responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company's
overall risk management strategy, and communicating key priorities to relevant personnel. This executive team is responsible for approving
budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other
security-related reports .
Our
cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members
of management depending on the circumstances, including our Chief Executive Officer, and Chief Financial Officer. In addition, the Company's
incident response and vulnerability management policies include reporting to the audit committee of the board of directors for certain
cybersecurity incidents including significant breaches to the Company's networks or systems. The audit committee receives regular
reports from the information technology team concerning the Company's significant cybersecurity threats and risk and the processes
the Company has implemented to address them. The audit committee also has access to various reports, summaries or presentations related
to cybersecurity threats, risk and mitigation.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.