Disclosure · Form 10-K · fiscal 2025
Genvor Inc 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed December 10, 2025· period ended September 30, 2025· GNVR· CIK 1792941· Updated · filing on sec.gov ↗
Genvor Inc's Form 10-K for fiscal 2025, filed December 10, 2025, names the Chief Executive Officer as its top security role.
What Genvor's Item 1C says
Genvor's Form 10-K for fiscal 2025 states that the Board of Directors currently does not have a formal structure for cybersecurity oversight. Day-to-day cybersecurity responsibilities are managed by the Chief Executive Officer, with the support of an external Managed Security Services Provider.
Board and management oversight
The company intends to review and establish appropriate oversight in the near future.
Who leads security
The company is evaluating options to enhance management's cybersecurity role through additional training or external expertise.
How the company manages cyber risk
The company scans systems regularly to identify potential weaknesses and applies remediation measures to reduce risk.
Third parties and incidents
The company consults with an external Managed Security Services Provider for continuous support, monitoring, and guidance. To date, no known cybersecurity incidents have materially affected the company's business strategy, results of operations, or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight. The section does not name a specific security framework or standard. The section does not say how often the board or its committee is briefed on cybersecurity.
Read from the Form 10-K filed December 10, 2025, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Chief Executive Officer
Reports to
not identified
Board oversight
not identified
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“While current management and the Board do not have in-depth cybersecurity expertise, the Company is considering educational opportunities and consulting resources to address this gap.”
Material incident
The filing states none
“To date, no known cybersecurity incidents have materially affected the Company's business strategy, results of operations, or financial condition.”
The section
342 words, Form 10-K filed December 10, 2025 for the period ended September 30, 2025
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Genvor Inc standard industrial classification 0100, Agricultural production-crops (SEC SIC list). 6 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Bloomia Holdings, Inc.FY 2026, filed September 21, 2026 | not identified | not identified | Audit Committee |
| Edible Garden AG IncFY 2025, filed March 31, 2026 | not identified | not identified | full board |
| ESG Inc.FY 2025, filed March 31, 2026 | not identified | not identified | not identified |
| Planet 13 Holdings Inc.FY 2025, filed March 25, 2026 | Vice President of Operations | not identified | Audit Committee |
| TerrAscend Corp.FY 2025, filed March 12, 2026 | Chief Information Officer | not identified | Audit Committee |
| Fresh Del Monte Produce IncFY 2025, filed February 19, 2026 | Vice President of Information Technology | not identified | Governance Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Genvor Inc's Form 10-K as filed with the SEC on December 10, 2025, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity
Risk
Management and Strategy
The
Company has implemented
several
measures to protect against cybersecurity threats, while recognizing the importance of continuing
to strengthen its overall security framework.
Current
protections include:
Identity
Threat Detection & Response: Active monitoring for account takeover attempts and identity-based threats.
Endpoint
Detection & Response: Continuous monitoring, detection, and response to potential endpoint threats.
Two-Factor
Authentication: Enforced across Office 365 accounts, which comprise the majority of the Company's infrastructure.
Managed
Device Security: Company devices are centrally managed for patching, antivirus, monitoring, and security enforcement.
Vulnerability
Scanning & Remediation: Regular scanning of systems to identify potential weaknesses, with remediation measures applied to reduce
risk.
Engagement
of a Third-Party
MSSP: The Company
consults with an external Managed Security Services Provider for continuous support, monitoring, and guidance.
Standard
Security Practices: Baseline controls such as password policies and antivirus software provide foundational protection.
Planned
enhancements include:
Developing
a Comprehensive Cybersecurity Framework: Establishing a formal risk assessment process to better identify and manage vulnerabilities.
Expanding
Cybersecurity Governance: Reviewing and formalizing Board-level oversight and considering additional training or expertise at the management
level.
Governance
Board
Oversight: The
Board of Directors currently does not have a formal structure for cybersecurity oversight. The Company intends to review and establish
appropriate oversight in the near future.
Management's
Role: Day-to-day
cybersecurity responsibilities are managed by our Chief Executive Officer ("CEO"), with the support of an external Managed
Security Services Provider. The Company is evaluating options to enhance management's cybersecurity role through additional training
or external expertise.
Expertise: While
current management and the Board do not have in-depth cybersecurity expertise, the Company is considering educational opportunities and
consulting resources to address this gap.
Material Effect
from Cybersecurity Threats
To date, no known
cybersecurity incidents have materially affected the Company's business strategy, results of operations, or financial condition.
However, as with all companies, we remain exposed to the risk of cybersecurity threats. The controls currently in place provide a meaningful
level of protection, and the Company is committed to continuing to strengthen its cybersecurity posture as resources allow.
Earlier filings on record
Fiscal 2024 Form 10-K, filed August 1, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
not identified
Person named in the filing
not identified
Experience, as stated
Stated
“Day-to-day management of cybersecurity is handled by our Chief Executive Officer ("CEO"), who does not have specialized training in cybersecurity.”
Material incident
The filing states none
“To date, no known cybersecurity incidents have materially affected our business strategy, results of operations, or financial condition.”
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity
Risk Management and Strategy
At this time, the Company does not have
formal processes in place for assessing, identifying, and managing material risks from cybersecurity threats. Our approach to cybersecurity
is currently informal and primarily reactive, involving basic security measures such as:
● Basic Security Software: We use standard antivirus and anti-malware software for protection against
common threats.
● Password Policies: Simple password policies are in place to protect access to our systems.
However, we recognize the importance of
cybersecurity and are in the process of developing more robust strategies. We plan to:
● Develop a Cybersecurity Framework: Establish a formal risk assessment process to identify vulnerabilities.
● Engage Cybersecurity Expertise: Consider hiring or consulting with cybersecurity professionals
to guide our strategy.
We acknowledge that the absence of comprehensive
cybersecurity processes could potentially expose the company to risks, which might materially affect our operations, financial
condition, or strategic decisions in the future. We are committed to improving our cybersecurity posture as our resources allow.
Governance
● Board Oversight: Currently, our directors do not have a formal structure for overseeing cybersecurity
risks. We plan to review this oversight in the near future to ensure appropriate governance is established.
● Management's Role: Day-to-day management of cybersecurity is handled by our Chief Executive
Officer ("CEO"), who does not have specialized training in cybersecurity. We are considering enhancing this role or
outsourcing to professionals with specific cybersecurity expertise.
● Expertise: Our current management and Board do not have in-depth cybersecurity expertise. We are
considering educational opportunities or consulting to address this gap.
Material Effect from Cybersecurity Threats
To date, no known cybersecurity incidents
have materially affected our business strategy, results of operations, or financial condition. However, due to our limited cybersecurity
measures, we acknowledge that our company could be at higher risk of material impact from cybersecurity threats. We are actively
working to mitigate these risks.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.