Disclosure · Form 10-K · fiscal 2025
Strawberry Fields REIT, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 19, 2026· period ended December 31, 2025· STRW· CIK 1782430· Updated · filing on sec.gov ↗
Strawberry Fields REIT, Inc.'s Form 10-K for fiscal 2025, filed March 19, 2026, names the Information Security Officer as its top security role, with oversight by the full board.
What Strawberry Fields REIT's Item 1C says
Strawberry Fields REIT's Form 10-K for fiscal 2025 places oversight of cybersecurity risk management with the Board of Directors. The company's Information Security Officer and the Cybersecurity Incident Response Team are responsible for assessing and managing cybersecurity risks.
Board and management oversight
The Information Security Officer provides regular updates to the chief executive officer and the Board of Directors on cybersecurity risks, initiatives, incidents, response activities and strategies.
How the company manages cyber risk
The IRT is made up of individuals with expertise in information security, technology, legal and risk management. The team monitors cybersecurity incidents and potential threats. The company performs regular assessments and evaluations of the effectiveness of its cybersecurity measures.
Third parties and incidents
The company engages consultants, outside counsel and other technology experts to enhance its cybersecurity risk management processes. Vendor management processes are employed to evaluate vendors' cybersecurity practices and assess risk position. The filing states that cybersecurity incidents and risks have not materially affected the company, including its business strategy, results of operations or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight.
Read from the Form 10-K filed March 19, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Information Security Officer
Reports to
not identified
Board oversight
Full board
“The Board of Directors has been designated to oversee cybersecurity risk management.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“The IRT is comprised of individuals with expertise in information security, technology, legal and risk management.”
Material incident
The filing states none
“To date, cybersecurity incidents and risks have no t materially affected us, including our business strategy, results of operations, or financial condition.”
The section
340 words, Form 10-K filed March 19, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on October 30, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Strawberry Fields REIT, Inc. standard industrial classification 6798, Real estate investment trusts (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Ashford Hospitality Trust IncFY 2025, filed March 23, 2026 | Executive Vice President of Technology | Executive Vice President of Asset Management | Audit Committee |
| Sunrise Realty Trust, Inc.FY 2025, filed March 12, 2026 | not identified | not identified | Audit and Valuation Committee |
| ACRES Commercial Realty Corp.FY 2025, filed March 10, 2026 | not identified | not identified | audit committee |
| Franklin Street Properties CorpFY 2025, filed March 9, 2026 | Vice President and Director of Information Technology | not identified | Audit Committee |
| RLJ Lodging TrustFY 2025, filed February 27, 2026 | not identified | not identified | Audit Committee |
| Medical Properties Trust IncFY 2025, filed February 26, 2026 | Head of Technology | not identified | Risk Committee |
| NexPoint Residential Trust, Inc.FY 2025, filed February 26, 2026 | Director of Information Technology | not identified | Audit Committee |
| FrontView REIT, Inc.FY 2025, filed February 25, 2026 | IT Manager | Chief Operating Officer | audit committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Strawberry Fields REIT, Inc.'s Form 10-K as filed with the SEC on March 19, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. Cybersecurity
Our
management recognizes the critical importance of addressing cybersecurity threats and risks to our business and operations. Therefore,
we have established a comprehensive framework to assess and manage material risks arising from cybersecurity threats.
Our
Information Security Officer ("ISO") and the Cybersecurity Incident Response Team ("IRT") are responsible for
assessing and managing cybersecurity risks. The IRT is comprised of individuals with expertise in information security, technology, legal
and risk management. The IRT monitors cybersecurity incidents and potential threats. It liaises with external cybersecurity experts and
industry partners to stay current on emerging threats and best practices. The diverse expertise of the IRT members enables comprehensive
risk assessment and swift responses to mitigate the potential impact of breaches or other cybersecurity incidents.
We
actively engage consultants, outside counsel and other technology experts to enhance our cybersecurity risk management processes. We
perform regular assessments and evaluations of the effectiveness of our cybersecurity measures. In addition to third party engagements,
we maintain rigorous oversight of cybersecurity risks associated with our use of third party service providers. Vendor management processes
are employed to evaluate vendors' cybersecurity practices, assess risk position and implement measures to mitigate potential threats
arising from these external relationships.
The
Board of Directors has been designated to oversee cybersecurity risk management. Its members possess diverse expertise, which enables
them to effectively evaluate the adequacy of our cybersecurity measures and challenge management's approach when necessary. The
Information Security Officer provides regular updates to our chief executive officer and Board of Directors on cybersecurity risks, ongoing
initiatives, incidents, response activities and strategies. The Board of Directors acknowledges cybersecurity as a strategic risk and
a priority for the Company. The Board of Directors is actively involved in the oversight of our cybersecurity risk management efforts,
ensuring alignment with our overall business objectives.
We
continuously strive to strengthen our cybersecurity measures to protect our systems and data from evolving threats. To date, cybersecurity
incidents and risks have no t materially affected us, including our business strategy, results of operations, or financial condition.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 13, 2025 sec.gov ↗
Top security role, as the filing names it
Information Security Officer
Reports to, as the filing names it
not identified
Board oversight
Full board
“The Board of Directors has been designated to oversee cybersecurity risk management.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“To date, cybersecurity incidents and risks have not materially affected us, including our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on October 30, 2026; every quote verified in the stored text by code.
ITEM
1C. Cybersecurity
Our
management recognizes the critical importance of addressing cybersecurity threats and risks to our business and operations. Therefore,
we have established a comprehensive framework to assess and manage material risks arising from cybersecurity threats.
Our
Information Security Officer ("ISO") and the Cybersecurity Incident Response Team ("IRT") are responsible for
assessing and managing cybersecurity risks. The IRT is comprised of individuals with expertise in information security, technology, legal
and risk management. The IRT monitors cybersecurity incidents and potential threats. It liaises with external cybersecurity experts and
industry partners to stay current on emerging threats and best practices. The diverse expertise of the IRT members enables comprehensive
risk assessment and swift responses to mitigate the potential impact of breaches or other cybersecurity incidents.
We
actively engage consultants, outside counsel and other technology experts to enhance our cybersecurity risk management processes. We
perform regular assessments and evaluations of the effectiveness of our cybersecurity measures. In addition to third party engagements,
we maintain rigorous oversight of cybersecurity risks associated with our use of third party service providers. Vendor management processes
are employed to evaluate vendors' cybersecurity practices, assess risk position and implement measures to mitigate potential threats
arising from these external relationships.
The
Board of Directors has been designated to oversee cybersecurity risk management. Its members possess diverse expertise, which enables
them to effectively evaluate the adequacy of our cybersecurity measures and challenge management's approach when necessary. The
Information Security Officer provides regular updates to our chief executive officer and Board of Directors on cybersecurity risks, ongoing
initiatives, incidents, response activities and strategies. The Board of Directors acknowledges cybersecurity as a strategic risk and
a priority for the Company. The Board of Directors is actively involved in the oversight of our cybersecurity risk management efforts,
ensuring alignment with our overall business objectives.
We
continuously strive to strengthen our cybersecurity measures to protect our systems and data from evolving threats. To date, cybersecurity
incidents and risks have not materially affected us, including our business strategy, results of operations, or financial condition.
Fiscal 2023 Form 10-K, filed March 19, 2024 sec.gov ↗
Top security role, as the filing names it
Information Security Officer
Reports to, as the filing names it
not identified
Board oversight
Full board
“The Board of Directors has been designated to oversee cybersecurity risk management.”
Person named in the filing
not identified
Experience, as stated
Stated
“The IRT is comprised of individuals with expertise in information security, technology, legal and risk management.”
Material incident
The filing states none
“To date, cybersecurity incidents and risks have not materially affected us, including our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on October 30, 2026; every quote verified in the stored text by code.
ITEM
1C. Cybersecurity
Our
management recognizes the critical importance of addressing cybersecurity threats and risks to our business and operations. Therefore,
we have established a comprehensive framework to assess and manage material risks arising from cybersecurity threats.
Our
Information Security Officer ("ISO") and the Cybersecurity Incident Response Team ("IRT") are responsible for
assessing and managing cybersecurity risks. The IRT is comprised of individuals with expertise in information security, technology, legal
and risk management. The IRT monitors cybersecurity incidents and potential threats. It liaises with external cybersecurity experts and
industry partners to stay current on emerging threats and best practices. The diverse expertise of the IRT members enables comprehensive
risk assessment and swift responses to mitigate the potential impact of breaches or other cybersecurity incidents.
We
actively engage consultants, outside counsel and other technology experts to enhance our cybersecurity risk management processes. We
perform regular assessments and evaluations of the effectiveness of our cybersecurity measures. In addition to third party engagements,
we maintain rigorous oversight of cybersecurity risks associated with our use of third party service providers. Vendor management processes
are employed to evaluate vendors' cybersecurity practices, assess risk position and implement measures to mitigate potential threats
arising from these external relationships.
The
Board of Directors has been designated to oversee cybersecurity risk management. Its members possess diverse expertise, which enables
them to effectively evaluate the adequacy of our cybersecurity measures and challenge management's approach when necessary. The Information
Security Officer provides regular updates to our chief executive officer and Board of Directors on cybersecurity risks, ongoing initiatives,
incidents, response activities and strategies. The Board of Directors acknowledges cybersecurity as a strategic risk and a priority for
the Company. The Board of Directors is actively involved in the oversight of our cybersecurity risk management efforts, ensuring alignment
with our overall business objectives.
We
continuously strive to strengthen our cybersecurity measures to protect our systems and data from evolving threats. To date, cybersecurity
incidents and risks have not materially affected us, including our business strategy, results of operations, or financial condition.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.