Disclosure · Form 10-K · fiscal 2025
Planet 13 Holdings Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 25, 2026· period ended December 31, 2025· PLNH· CIK 1813452· Updated · filing on sec.gov ↗
Planet 13 Holdings Inc.'s Form 10-K for fiscal 2025, filed March 25, 2026, names the Vice President of Operations as its top security role, with oversight by the Audit Committee.
What Planet 13's Item 1C says
Planet 13's Form 10-K for fiscal 2025 places oversight of cybersecurity risk with the Audit Committee of the Board of Directors. The cybersecurity program is managed by the Vice President of Operations and the Director of Information Technology.
Board and management oversight
The Audit Committee performs an annual assessment of the company's cybersecurity program, which includes a discussion of management's actions to identify and detect threats. The Cybersecurity Team provides periodic reports to the Audit Committee, as well as the Co-CEOs, and other members of senior management as appropriate. The Audit Committee and appropriate levels of senior management maintain an ongoing dialogue regarding emerging or potential cybersecurity risks.
Who leads security
The VP Operations and the IT Director have experience with large information technology footprints, including cybersecurity.
How the company manages cyber risk
Management approves initial policies and reviews them periodically for updates and changes. The company's network security provider follows the internationally recognized risk framework, ISO 27001. The company has a cross-departmental approach to addressing cybersecurity risk, including input from employees, senior management, and the Audit Committee of the Board.
Third parties and incidents
The company engages external service providers that assist in evaluating and enhancing the effectiveness of its information security policies and procedures. The company conducts assessments of all third party providers before engagement and maintains ongoing monitoring for compliance with its cybersecurity standards. The company states it has not encountered cybersecurity challenges that have materially impacted its strategic plan, operations, or financial standing.
What the section does not state
The section does not name the person who holds the top security role.
Read from the Form 10-K filed March 25, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Vice President of Operations
Reports to
not identified
Board oversight
Audit Committee
“The Audit Committee of our Board of Directors oversees management's process for identifying and mitigating risks, including cybersecurity risks.”
CISO or other person named
not identified
Frameworks and standards named
ISO/IEC 27001
Where the filing names it
- ISO/IEC 27001: “Our network security provider follows the internationally recognized risk framework, ISO 27001.”
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“Our VP Operations and IT Director have experience with large information technology footprints, including cybersecurity.”
Material incident
The filing states none
“We have not encountered cybersecurity challenges that have materially impacted our strategic plan, operations, or financial standing.”
The section
569 words, Form 10-K filed March 25, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Planet 13 Holdings Inc. standard industrial classification 0100, Agricultural production-crops (SEC SIC list). 6 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Bloomia Holdings, Inc.FY 2026, filed September 21, 2026 | not identified | not identified | Audit Committee |
| Edible Garden AG IncFY 2025, filed March 31, 2026 | not identified | not identified | full board |
| ESG Inc.FY 2025, filed March 31, 2026 | not identified | not identified | not identified |
| TerrAscend Corp.FY 2025, filed March 12, 2026 | Chief Information Officer | not identified | Audit Committee |
| Fresh Del Monte Produce IncFY 2025, filed February 19, 2026 | Vice President of Information Technology | not identified | Governance Committee |
| Genvor IncFY 2025, filed December 10, 2025 | Chief Executive Officer | not identified | not identified |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Planet 13 Holdings Inc.'s Form 10-K as filed with the SEC on March 25, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item 1C. Cybersecurity.
We recognize the critical importance of developing, implementing, and maintaining cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of data we produce and collect.
Managing Material Risks & Overall Risk Management
We have a cross-departmental approach to addressing cybersecurity risk, including input from our employees, senior management, and Audit Committee of our Board. The Company devotes significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats promptly and effectively.
We have a set of Company-wide cybersecurity policies and procedures and continue building these important document libraries. Management approves initial policies and reviews them periodically for updates and changes. Our network security provider follows the internationally recognized risk framework, ISO 27001. We regularly assess the threat landscape and take a holistic view of cybersecurity risks, with a multi-faceted cybersecurity strategy based on prevention, detection, and mitigation. The Company continues to work to ensure the inclusion of our cybersecurity risks are fully incorporated into the Company's overall risk management approach.
Third-Party Risk Management and Oversight
As part of our cybersecurity program, we also engage with external service providers as part of our continuing cybersecurity efforts, assisting us in the evaluation and enhancement of the effectiveness of our information security policies and procedures. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity policies and procedures are comprehensive, up-to-date, and aligned with regulatory requirements.
The use of these third -party providers is regularly reviewed and monitored by the appropriate members of management. We conduct thorough assessments of all third -party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards.
Risks from Cybersecurity Threats
We have not encountered cybersecurity challenges that have materially impacted our strategic plan, operations, or financial standing. For additional information, see "Risk Factors."
Governance
Our cybersecurity program is managed by our Vice President of Operations ("VP Operations") and our Director of Information Technology ("IT Director"), whose team ("Cybersecurity Team") is responsible for facilitating the enterprise-wide cybersecurity program. Our VP Operations and IT Director have experience with large information technology footprints, including cybersecurity. Their in-depth knowledge and expertise are instrumental in supporting our cybersecurity program and policies and overseeing our governance and compliance programs. The Audit Committee of our Board of Directors oversees management's process for identifying and mitigating risks, including cybersecurity risks. The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.
Management's role in assessing and managing material risks from cybersecurity threats involves leadership, governance, resource allocation, and proactive risk management. Management's involvement is crucial in safeguarding the Company's digital assets, reputation, and long-term success. Our Cybersecurity Team provides periodic reports to our Audit Committee, as well as our Co-CEOs, and other members of senior management as appropriate.
The Audit Committee actively participates in discussions with management regarding cybersecurity risks. The Audit Committee performs an annual assessment of the Company's cybersecurity program, which includes a discussion of management's actions to identify and detect threats, and scenarios for potential response or recovery situations. In addition to regularly scheduled meetings, the Audit Committee and appropriate levels of senior management maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 26, 2025 sec.gov ↗
Top security role, as the filing names it
Vice President of Operations
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Audit Committee of our Board of Directors oversees management's process for identifying and mitigating risks, including cybersecurity risks.”
Person named in the filing
not identified
Experience, as stated
Stated
“Our VP Operations and IT Director have experience with large information technology footprints, including cybersecurity.”
Material incident
The filing states none
“We have not encountered cybersecurity challenges that have materially impacted our strategic plan, operations, or financial standing.”
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity.
We recognize the critical importance of developing, implementing, and maintaining cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of data we produce and collect.
Managing Material Risks & Overall Risk Management
We have a cross-departmental approach to addressing cybersecurity risk, including input from our employees, senior management, and Audit Committee of our Board of Directors (the " Board "). The Company devotes significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats promptly and effectively.
We have a set of Company-wide cybersecurity policies and procedures and continue building these important document libraries. Management approves initial policies and reviews them periodically for updates and changes. Our network security provider follows the internationally recognized risk framework, ISO 27001. We regularly assess the threat landscape and take a holistic view of cybersecurity risks, with a multi-faceted cybersecurity strategy based on prevention, detection, and mitigation. The Company continues to work to ensure the inclusion of our cybersecurity risks are fully incorporated into the Company's overall risk management approach.
Third-Party Risk Management and Oversight
As part of our cybersecurity program, we also engage with external service providers as part of our continuing cybersecurity efforts, assisting us in the evaluation and enhancement of the effectiveness of our information security policies and procedures. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity policies and procedures are comprehensive, up-to-date, and aligned with regulatory requirements.
The use of these third -party providers is regularly reviewed and monitored by the appropriate members of management. We conduct thorough assessments of all third -party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards.
Risks from Cybersecurity Threats
We have not encountered cybersecurity challenges that have materially impacted our strategic plan, operations, or financial standing. For additional information, see "Risk Factors."
Governance
Our cybersecurity program is managed by our Vice President of Operations ("VP Operations") and our Director of Information Technology ("IT Director"), whose team ("Cybersecurity Team") is responsible for facilitating the enterprise-wide cybersecurity program. Our VP Operations and IT Director have experience with large information technology footprints, including cybersecurity. Their in-depth knowledge and expertise are instrumental in supporting our cybersecurity program and policies and overseeing our governance and compliance programs. The Audit Committee of our Board of Directors oversees management's process for identifying and mitigating risks, including cybersecurity risks. The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.
Management's role in assessing and managing material risks from cybersecurity threats involves leadership, governance, resource allocation, and proactive risk management. Management's involvement is crucial in safeguarding the Company's digital assets, reputation, and long-term success. Our Cybersecurity Team provides periodic reports to our Audit Committee, as well as our Co-CEOs, and other members of senior management as appropriate.
The Audit Committee actively participates in discussions with management regarding cybersecurity risks. The Audit Committee performs an annual assessment of the Company's cybersecurity program, which includes a discussion of management's actions to identify and detect threats, and scenarios for potential response or recovery situations. In addition to regularly scheduled meetings, the Audit Committee and appropriate levels of senior management maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive.
Fiscal 2023 Form 10-K, filed March 13, 2024 sec.gov ↗
Top security role, as the filing names it
Vice President of Operations
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“The Audit Committee of our Board of Directors oversees management's process for identifying and mitigating risks, including cybersecurity risks.”
Person named in the filing
not identified
Experience, as stated
Stated
“Our VP Operations and IT Director have experience with large information technology footprints, including cybersecurity.”
Material incident
The filing states none
“We have not encountered cybersecurity challenges that have materially impacted our strategic plan, operations, or financial standing.”
Read by claude-sonnet-5-5 on November 9, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity.
We recognize the critical importance of developing, implementing, and maintaining cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity, and availability of data we produce and collect.
Managing Material Risks & Overall Risk Management
We have a cross-departmental approach to addressing cybersecurity risk, including input from our employees, senior management, and Audit Committee of our Board of Directors (the " Board "). The Company devotes significant resources to cybersecurity and risk management processes to adapt to the changing cybersecurity landscape and respond to emerging threats promptly and effectively.
We have a set of Company-wide cybersecurity policies and procedures and continue building these important document libraries. Management approves initial policies and reviews them periodically for updates and changes. Our network security provider follows the internationally recognized risk framework, ISO 27001. We regularly assess the threat landscape and take a holistic view of cybersecurity risks, with a multi-faceted cybersecurity strategy based on prevention, detection, and mitigation. The Company continues to work to ensure the inclusion of our cybersecurity risks are fully incorporated into the Company's overall risk management approach.
Third-Party Risk Management and Oversight
As part of our cybersecurity program, we also engage with external service providers as part of our continuing cybersecurity efforts, assisting us in the evaluation and enhancement of the effectiveness of our information security policies and procedures. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity policies and procedures are comprehensive, up-to-date, and aligned with regulatory requirements.
The use of these third-party providers is regularly reviewed and monitored by the appropriate members of management. We conduct thorough assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards.
Risks from Cybersecurity Threats
We have not encountered cybersecurity challenges that have materially impacted our strategic plan, operations, or financial standing. For additional information, see " Risk Factors. "
Governance
Our cybersecurity program is managed by our Vice President of Operations (" VP Operations ") and our Director of Information Technology (" IT Director "), whose team (" Cybersecurity Team ") is responsible for facilitating the enterprise-wide cybersecurity program. Our VP Operations and IT Director have experience with large information technology footprints, including cybersecurity. Their in-depth knowledge and expertise are instrumental in supporting our cybersecurity program and policies and overseeing our governance and compliance programs. The Audit Committee of our Board of Directors oversees management's process for identifying and mitigating risks, including cybersecurity risks. The Audit Committee is composed of board members with diverse expertise including, risk management, technology, and finance, equipping them to oversee cybersecurity risks effectively.
Management's role in assessing and managing material risks from cybersecurity threats involves leadership, governance, resource allocation, and proactive risk management. Management's involvement is crucial in safeguarding the Company's digital assets, reputation, and long-term success. Our Cybersecurity Team provides periodic reports to our Audit Committee, as well as our Co-CEOs, and other members of senior management as appropriate.
The Audit Committee actively participates in discussions with management regarding cybersecurity risks. The Audit Committee performs an annual assessment of the Company's cybersecurity program, which includes a discussion of management's actions to identify and detect threats, and scenarios for potential response or recovery situations. In addition to regularly scheduled meetings, the Audit Committee and appropriate levels of senior management maintain an ongoing dialogue regarding emerging or potential cybersecurity risks. Together, they receive updates on any significant developments in the cybersecurity domain, ensuring the Board's oversight is proactive and responsive.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.