Disclosure · Form 10-K · fiscal 2025
Greenidge Generation Holdings Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed March 31, 2026· period ended December 31, 2025· GREE· CIK 1844971· Updated · filing on sec.gov ↗
Greenidge Generation Holdings Inc.'s Form 10-K for fiscal 2025, filed March 31, 2026, places oversight of cybersecurity risk with the Audit Committee; a top security role title is not identified.
What Greenidge Generation's Item 1C says
Greenidge Generation's Form 10-K for fiscal 2025 places oversight of cybersecurity and other information technology risks with the Audit Committee, to which the Board has delegated it. A management team of senior staff and executives from multiple departments leads all efforts for the cybersecurity risk management program.
Board and management oversight
The Audit Committee oversees management's implementation of the cybersecurity risk management program. The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity. Management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.
Who leads security
The management team supervises the company's internal information security personnel with prior work experience in cybersecurity and its retained cybersecurity consultants.
How the company manages cyber risk
The company has adopted an Information Security Policy and Incident Response Plan in support of its cybersecurity risk management program. The Information Security Policy and Incident Response Plan establishes controls and operating procedures so internal and external teams can prepare, detect, contain, and recover from cybersecurity incidents.
Third parties and incidents
In 2025, the company did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect its business strategy, results of operations or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard. The section does not say how often the board or its committee is briefed on cybersecurity.
Read from the Form 10-K filed March 31, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Audit Committee
“Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“In addition, our management team, comprised of senior staff and executives from multiple departments within the Company, including IT, finance, legal, and operations, leads all efforts for our overall cybersecurity risk management program and supervises both our internal information security personnel with prior work experience in cybersecurity and our retained cybersecurity consultants.”
Material incident
The filing states none
“In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.”
The section
458 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Greenidge Generation Holdings Inc. standard industrial classification 6199, Finance services (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| IREN LimitedFY 2026, filed August 27, 2026 | Chief Information Security Officer | not identified | Audit and Risk Committee |
| BeneficientFY 2026, filed June 30, 2026 | Chief Technology Officer | our Board | full board |
| HIVE Digital Technologies Ltd.FY 2026, filed June 2, 2026 | Chief Information Officer | not identified | audit committee of the Board |
| FORUM MARKETS IncFY 2025, filed April 1, 2026 | Chief Financial Officer | not identified | Audit Committee |
| Bitfarms LtdFY 2025, filed March 31, 2026 | Vice President, Global Corporate IT | executive management | audit committee of the Board |
| Mawson Infrastructure Group Inc.FY 2025, filed March 31, 2026 | not identified | not identified | Audit Committee |
| Universal TokenFY 2025, filed March 31, 2026 | not identified | not identified | not identified |
| Bit Digital, IncFY 2025, filed March 27, 2026 | Head of IT | not identified | full board |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Greenidge Generation Holdings Inc.'s Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C. CYBERSECURITY.
Cybersecurity Risk Management
We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K, and have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.
Our cybersecurity risk management program is an integral component of our overall information security platform sharing common governance processes that monitor, prevent, detect, mitigate, and remediate cybersecurity incidents and guiding continuous improvement to our broader enterprise IT infrastructure.
In support of our cybersecurity risk management program, we have adopted an Information Security Policy and Incident Response Plan. The Information Security Policy and Incident Response Plan establishes a comprehensive guide of controls and operating procedures to enable internal and external teams to prepare, detect, contain, and recover from cybersecurity incidents. Our cybersecurity risk management program also includes:
• Cybersecurity risk assessments to evaluate our readiness if certain risks were to materialize;
• Individuals, including management, employees, and external third party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;
• The use of external service providers and tools, where appropriate, to assess, test, or otherwise assist with aspects of our security controls;
• Cybersecurity awareness training of our employees, incident response planning and testing, and management; and
• Third-party risk management processes for service providers, suppliers, and vendors.
In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not be successful in eliminating all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred. See Part I, Item 1A. " Risk Factors—Risks Related to Our Business " of this Annual Report for more information regarding the cybersecurity risks we face.
Cybersecurity Governance
Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program. The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity. Management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.
In addition, our management team, comprised of senior staff and executives from multiple departments within the Company, including IT, finance, legal, and operations, leads all efforts for our overall cybersecurity risk management program and supervises both our internal information security personnel with prior work experience in cybersecurity and our retained cybersecurity consultants.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks.”
Person named in the filing
not identified
Experience, as stated
Stated
“In addition, our management team, comprised of senior staff and executives from multiple departments within the Company, including IT, finance, legal, and operations, leads all efforts for our overall cybersecurity risk management program and supervises both our internal information security personnel with prior work experience in cybersecurity and our retained cybersecurity consultants.”
Material incident
The filing states none
“In 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY.
Cybersecurity Risk Management
We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K, and have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.
Our cybersecurity risk management program is an integral component of our overall information security platform sharing common governance processes that monitor, prevent, detect, mitigate, and remediate cybersecurity incidents and guiding continuous improvement to our broader enterprise IT infrastructure.
In support of our cybersecurity risk management program, we have adopted an Information Security Policy and Incident Response Plan. The Information Security Policy and Incident Response Plan establishes a comprehensive guide of controls and operating procedures to enable internal and external teams to prepare, detect, contain, and recover from cybersecurity incidents. Our cybersecurity risk management program also includes:
• Cybersecurity risk assessments to evaluate our readiness if certain risks were to materialize;
• Individuals, including management, employees, and external third party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;
• The use of external service providers and tools, where appropriate, to assess, test, or otherwise assist with aspects of our security controls;
• Cybersecurity awareness training of our employees, incident response planning and testing, and management; and
• Third-party risk management processes for service providers, suppliers, and vendors.
In 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not be successful in eliminating all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred. See Part I, Item 1A. " Risk Factors—Risks Related to Our Business " of this Annual Report for more information regarding the cybersecurity risks we face.
Cybersecurity Governance
Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program. The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity. Management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.
In addition, our management team, comprised of senior staff and executives from multiple departments within the Company, including IT, finance, legal, and operations, leads all efforts for our overall cybersecurity risk management program and supervises both our internal information security personnel with prior work experience in cybersecurity and our retained cybersecurity consultants.
Fiscal 2023 Form 10-K, filed April 10, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Audit Committee
“Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Cybersecurity Risk Management
We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K, and have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.
Our cybersecurity risk management program is an integral component of our overall information security platform sharing common governance processes that monitor, prevent, detect, mitigate, and remediate cybersecurity incidents and guiding continuous improvement to our broader enterprise IT infrastructure.
In support of our cybersecurity risk management program, we have adopted an Information Security Policy and Incident Response Plan. The Information Security Policy and Incident Response Plan establishes a comprehensive guide of controls and operating procedures to enable internal and external teams to prepare, detect, contain, and recover from cybersecurity incidents. Our cybersecurity risk management program also includes:
• Cybersecurity risk assessments to evaluate our readiness if certain risks were to materialize;
• Individuals, including management, employees, and external third party service providers, who are responsible for managing our cybersecurity risk assessment processes, our security controls, and our response to cybersecurity incidents;
• The use of external service providers and tools, where appropriate, to assess, test, or otherwise assist with aspects of our security controls;
• Cybersecurity awareness training of our employees, incident response planning and testing, and management; and
• Third-party risk management processes for service providers, suppliers, and vendors.
In 2023, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition. However, despite our efforts, we may not be successful in eliminating all risks from cybersecurity threats and can provide no assurance that undetected cybersecurity incidents have not occurred. See Part I, Item 1A. " Risk Factors—Risks Related to Our Business " of this Annual Report for more information regarding the cybersecurity risks we face.
Cybersecurity Governance
Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management's implementation of our cybersecurity risk management program. The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity. Management updates the Audit Committee, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.
In addition, our management team, comprised of senior staff and executives from multiple departments within the Company, including IT, finance, legal, and operations, leads all efforts for our overall cybersecurity risk management program and supervises both our internal information security personnel and our retained cybersecurity consultants.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.