Disclosure · Form 10-K · fiscal 2026
Brightline Interactive, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed September 28, 2026· period ended June 30, 2026· BTLN· CIK 1854445· Updated · filing on sec.gov ↗
Brightline Interactive, Inc.'s Form 10-K for fiscal 2026, filed September 28, 2026, names the Chief Technology Officer as its top security role, reporting to the Chief Executive Officer, with oversight by the full board.
What Brightline Interactive's Item 1C says
Brightline Interactive's Form 10-K for fiscal 2026 places primary responsibility for oversight of cybersecurity risk with the board of directors. At the management level, the Chief Technology Officer leads the enterprise-wide cybersecurity program.
Board and management oversight
The board of directors receives reports from the Chief Technology Officer on cybersecurity matters on an as needed basis. These reports can cover the cybersecurity risk profile, current and emerging threats, the status of ongoing initiatives, incident reports, and results of internal and external assessments of information systems. The board of directors also annually reviews the adequacy and effectiveness of the information and technology security policies and related internal controls.
Who leads security
The Chief Technology Officer reports to the Chief Executive Officer. The cybersecurity risk management program is led by the Chief Technology Officer, who is principally responsible for managing risk assessment processes, security controls, and detection and response to cybersecurity incidents. The Chief Technology Officer is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through managing and participating in the cybersecurity risk management program.
How the company manages cyber risk
The company says its cybersecurity risks are evaluated within its broader enterprise risk management program, which is designed to identify, assess, prioritize and mitigate risks across the organization. The company relies on an information security management system supported by policies based upon industry frameworks, including the NIST Cybersecurity Framework and NIST SP 800-171. The program includes protocols for preventing, detecting and responding to cybersecurity incidents, cross-functional coordination, and planning for business continuity and disaster recovery. The company has a cybersecurity incident response plan for the cyber incident response team, which includes escalation procedures based on incident nature and severity and, where appropriate, escalation to the board of directors. As part of its risk mitigation strategy, the company maintains insurance coverage intended to address certain aspects of cybersecurity risks, though such insurance may not be sufficient.
Third parties and incidents
The company uses external service providers, where appropriate, to assess, test or otherwise assist with aspects of its security controls. As of the date of the report, the company does not believe that risks from cybersecurity threats have materially affected or are reasonably likely to materially affect it. The company states there is no assurance that it, or third parties with which it interacts, will not experience a future cybersecurity incident that materially affects it.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight.
Read from the Form 10-K filed September 28, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Chief Technology Officer
Reports to
Chief Executive Officer
“Our Chief Technology Officer reports to our Chief Executive Officer.”
Board oversight
Full board
“Our board of directors has primary responsibility for oversight of our cybersecurity and other information technology risks, including our plans to mitigate cybersecurity risks and to respond to data breaches.”
CISO or other person named
not identified
Frameworks and standards named
NIST Cybersecurity Framework, NIST SP 800-171
Where the filing names them
- NIST Cybersecurity Framework: “of policies based upon industry frameworks, including the NIST Cybersecurity Framework and NIST SP 800-171.”
- NIST SP 800-171: “of policies based upon industry frameworks, including the NIST Cybersecurity Framework and NIST SP 800-171.”
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of the date of this Report, we do no t believe that any risks from cybersecurity threats, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.”
The section
674 words, Form 10-K filed September 28, 2026 for the period ended June 30, 2026
Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Brightline Interactive, Inc. standard industrial classification 7371, Services-computer programming services (SEC SIC list). 5 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| ZscalerFY 2026, filed September 3, 2026 | chief security officer | not identified | audit committee of the board of directors |
| Avalon GloboCare Corp.FY 2025, filed March 30, 2026 | CFO | Audit Committee | Audit Committee |
| EPAM Systems, Inc.FY 2025, filed February 26, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| Cognizant Technology Solutions CorpFY 2025, filed February 12, 2026 | CSO | Cognizant's CLO | Audit Committee |
| HashiCorpFY 2024, filed March 21, 2024 | Chief Security Officer | not identified | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Brightline Interactive, Inc.'s Form 10-K as filed with the SEC on September 28, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. CYBERSECURITY
Risk
Management and Strategy
Our
cybersecurity risk management program is intended to protect the confidentiality, integrity , and availability of our critical IT systems,
information and IP. Cybersecurity risks are among the risks evaluated and considered by, our broader enterprise risk management program,
which is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our resilience and support the
achievement of our strategic objectives.
Our
cybersecurity risk management program is led by our Chief Technology Officer, who is principally responsible for managing our
cybersecurity risk assessment processes, our security controls, and our detection and response to cybersecurity incidents. Our
program includes protocols for preventing, detecting and responding to cybersecurity incidents, and cross-functional coordination,
and planning for business continuity and disaster recovery. We rely on our information security management system supported by a set
of policies based upon industry frameworks, including the NIST Cybersecurity Framework and NIST SP 800-171. This does not imply that we meet any
particular technical standards, specifications, or requirements, only that we use the NIST CSF as a guide to help us identify,
assess, and manage cybersecurity risks relevant to our business.
Our
cybersecurity risk management program includes:
●
Risk
assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and
our broader enterprise IT environment.
●
Security
team principally responsible for managing (i) our cybersecurity risk assessment processes, (ii) our security controls, and (iii)
our response to cybersecurity incidents;
●
The
use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls.
●
Cybersecurity
awareness training of our employees, incident response personnel, and senior management.
●
Cybersecurity
incident response plan that includes procedures for responding to cybersecurity incidents.
●
Third-party
risk management process for service providers, suppliers, and vendors.
We
also have a cybersecurity incident response plan for the cyber incident response team to assess and manage cybersecurity incidents, which includes escalation
procedures based on the nature and severity of the incident including, where appropriate, escalation to our board of directors.
As
part of our overall risk mitigation strategy, we maintain insurance coverage that is intended to address certain aspects of cybersecurity
risks; however, such insurance may not be sufficient in type or amount to cover us against claims related to cybersecurity breaches,
cyberattacks and other related breaches.
As
of the date of this Report, we do no t believe that any risks from cybersecurity threats, have materially affected or are reasonably likely
to materially affect us, including our business strategy, results of operations or financial condition. Despite our security measures,
however, there can be no assurance that we, or third parties with which we interact, will not experience a cybersecurity incident in
the future that will materially affect us.
Governance
Our
board of directors has primary responsibility for oversight of our cybersecurity and other information technology risks, including our
plans to mitigate cybersecurity risks and to respond to data breaches.
Our
board of directors receives reports from our Chief Technology Officer on cybersecurity matters on as needed basis. These reports
can include a range of topics, including our cybersecurity risk profile, the current cybersecurity and emerging threat landscape, the
status of ongoing cybersecurity initiatives, incident reports, and the results of internal and external assessments of our information
systems. Our board of directors also annually reviews the adequacy and effectiveness of our information and technology security policies
and the internal controls regarding information and technology security and cybersecurity, and periodically receives updates.
At
the management level, our Chief Technology Officer leads our enterprise-wide cybersecurity
program, and is responsible for assessing and managing our materials risks from cybersecurity threats. In performing his role, our Chief Technology Officer is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks
and incidents through the management of, and participation in, the cybersecurity risk management program and other processes described
above, including the maintenance and execution of our cyber incident response plan. Our Chief Technology Officer reports to
our Chief Executive Officer.
Earlier filings on record
Fiscal 2025 Form 10-K, filed September 29, 2025 sec.gov ↗
Top security role, as the filing names it
Director of Information Technology
Reports to, as the filing names it
Chief Financial Officer/Chief Operating Officer and to our Chief Executive Officer
“Our Director of Information Technology reports to our Chief Financial Officer/Chief Operating Officer and to our Chief Executive Officer.”
Board oversight
Full board
“Our board of directors has primary responsibility for oversight of our cybersecurity and other information technology risks, including our plans to mitigate cybersecurity risks and to respond to data breaches.”
Person named in the filing
not identified
Experience, as stated
Stated
“At the management level, our Director of Information Technology who is experienced in cybersecurity matters, leads our enterprise-wide cybersecurity program, and is responsible for assessing and managing our materials risks from cybersecurity threats.”
Material incident
The filing states none
“As of the date of this Report, we do no t believe that any risks from cybersecurity threats, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.
ITEM
1C. CYBERSECURITY
Risk
Management and Strategy
Our
cybersecurity risk management program is intended to protect the confidentiality, integrity , and availability of our critical IT systems,
information and IP. Cybersecurity risks are among the risks evaluated and considered by, our broader enterprise risk management program,
which is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our resilience and support the
achievement of our strategic objectives.
Our
cybersecurity risk management program is led by our Director of Information Technology, who is principally responsible for managing our
cybersecurity risk assessment processes, our security controls, and our detection and response to cybersecurity incidents. Our program
includes protocols for preventing, detecting and responding to cybersecurity incidents, and cross-functional coordination, and planning
for business continuity and disaster recovery. We rely on our information security management system supported by a set of policies based
upon industry frameworks, including the NIST Cybersecurity Framework. This does not imply that we meet any particular technical standards,
specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks
relevant to our business.
Our
cybersecurity risk management program includes:
●
Risk
assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and
our broader enterprise IT environment.
●
Security
team principally responsible for managing (i) our cybersecurity risk assessment processes, (ii) our security controls, and (iii)
our response to cybersecurity incidents;
●
The
use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls.
●
Cybersecurity
awareness training of our employees, incident response personnel, and senior management.
●
Cybersecurity
incident response plan that includes procedures for responding to cybersecurity incidents.
●
Third-party
risk management process for service providers, suppliers, and vendors.
We
also have a cybersecurity incident response plan for the CIRT to assess and manage cybersecurity incidents, which includes escalation
procedures based on the nature and severity of the incident including, where appropriate, escalation to our board of directors.
As
part of our overall risk mitigation strategy, we maintain insurance coverage that is intended to address certain aspects of cybersecurity
risks; however, such insurance may not be sufficient in type or amount to cover us against claims related to cybersecurity breaches,
cyberattacks and other related breaches.
As
of the date of this Report, we do no t believe that any risks from cybersecurity threats, have materially affected or are reasonably likely
to materially affect us, including our business strategy, results of operations or financial condition. Despite our security measures,
however, there can be no assurance that we, or third parties with which we interact, will not experience a cybersecurity incident in
the future that will materially affect us.
Governance
Our
board of directors has primary responsibility for oversight of our cybersecurity and other information technology risks, including our
plans to mitigate cybersecurity risks and to respond to data breaches.
Our
board of directors receives reports from our Director of Information Technology on cybersecurity matters on as needed basis. These reports
can include a range of topics, including our cybersecurity risk profile, the current cybersecurity and emerging threat landscape, the
status of ongoing cybersecurity initiatives, incident reports, and the results of internal and external assessments of our information
systems. The Audit Committee of our board of directors (the "Audit Committee") also annually reviews the adequacy and effectiveness
of our information and technology security policies and the internal controls regarding information and technology security and cybersecurity,
and periodically receives updates. The Chair of the Audit Committee reports to the full board of directors on these discussions as appropriate.
At
the management level, our Director of Information Technology who is experienced in cybersecurity matters, leads our enterprise-wide cybersecurity
program, and is responsible for assessing and managing our materials risks from cybersecurity threats. In performing his role, our Director
of Information Technology is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks
and incidents through the management of, and participation in, the cybersecurity risk management program and other processes described
above, including the maintenance and execution of our cyber incident response plan. Our Director of Information Technology reports to
our Chief Financial Officer/Chief Operating Officer and to our Chief Executive Officer.
Fiscal 2024 Form 10-K, filed September 30, 2024 sec.gov ↗
Top security role, as the filing names it
Director of Information Technology
Reports to, as the filing names it
CFO/COO and to our CEO
“Our Director of Information Technology reports to our CFO/COO and to our CEO.”
Board oversight
Audit Committee
“The Audit Committee also annually reviews the adequacy and effectiveness of our information and technology security policies and the internal controls regarding information and technology security and cybersecurity, and periodically receives updates.”
Person named in the filing
not identified
Experience, as stated
Stated
“At the management level, our Director of Information Technology who is experienced in experienced cybersecurity matters, leads our enterprise-wide cybersecurity program, and is responsible for assessing and managing our materials risks from cybersecurity threats.”
Material incident
The filing states none
“As of the date of this report, we do not believe that any risks from cybersecurity threats, have materially affected or are reasonably likely to materially affect our Company, including our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 11, 2026; every quote verified in the stored text by code.
ITEM
1C. CYBERSECURITY
Risk
Management and Strategy
Our
cybersecurity risk management program is intended to protect the confidentiality, integrity, and availability of our critical IT systems,
information and Intellectual Property (IP). Cybersecurity risks are among the risks evaluated and considered by, our broader enterprise
risk management program, which is designed to identify, assess, prioritize and mitigate risks across the organization to enhance our
resilience and support the achievement of our strategic objectives.
Our
cybersecurity risk management program is led by our Director of Information Technology, who is principally responsible for managing our
cybersecurity risk assessment processes, our security controls, and our detection and response to cybersecurity incidents. Our program
includes protocols for preventing, detecting and responding to cybersecurity incidents, and cross-functional coordination, and planning
for business continuity and disaster recovery. We rely on our information security management system supported by a set of policies based
upon industry frameworks, including the NIST Cybersecurity Framework. This does not imply that we meet any particular technical standards,
specifications, or requirements, only that we use the NIST CSF as a guide to help us identify, assess, and manage cybersecurity risks
relevant to our business.
Our
cybersecurity risk management program includes:
● Risk
assessments designed to help identify material cybersecurity risks to our critical systems,
information, products, services, and our broader enterprise IT environment.
● Security
team principally responsible for managing (1) our cybersecurity risk assessment processes,
(2) our security controls, and (3) our response to cybersecurity incidents;
● The
use of external service providers, where appropriate, to assess, test or otherwise assist
with aspects of our security controls.
● Cybersecurity
awareness training of our employees, incident response personnel, and senior management.
● Cybersecurity
incident response plan that includes procedures for responding to cybersecurity incidents.
● Third-party
risk management process for service providers, suppliers, and vendors.
● We
also have a cybersecurity incident response plan for the CIRT to assess and manage cybersecurity
incidents, which includes escalation procedures based on the nature and severity of the incident
including, where appropriate, escalation to the Board.
As
part of our overall risk mitigation strategy, we maintain insurance coverage that is intended to address certain aspects of cybersecurity
risks; however, such insurance may not be sufficient in type or amount to cover us against claims related to cybersecurity breaches,
cyberattacks and other related breaches.
As
of the date of this report, we do not believe that any risks from cybersecurity threats, have materially affected or are reasonably likely
to materially affect our Company, including our business strategy, results of operations or financial condition. Despite our security
measures, however, there can be no assurance that we, or third parties with which we interact, will not experience a cybersecurity incident
in the future that will materially affect us. For more information on our cybersecurity related risks, see Item IA, "Risk Factors
- "Cybersecurity risk."
Governance
Our
Board has primary responsibility for oversight of our cybersecurity and other information technology risks, including our plans to mitigate
cybersecurity risks and to respond to data breaches.
The
Board receives reports from our Director of Information Technology on cybersecurity matters on as needed basis. These reports can include
a range of topics, including our cybersecurity risk profile, the current cybersecurity and emerging threat landscape, the status of ongoing
cybersecurity initiatives, incident reports, and the results of internal and external assessments of our information systems. The Audit
Committee also annually reviews the adequacy and effectiveness of our information and technology security policies and the internal controls
regarding information and technology security and cybersecurity, and periodically receives updates. The Chair of the Audit Committee
reports to the full Board on these discussions as appropriate.
At
the management level, our Director of Information Technology who is experienced in experienced cybersecurity matters, leads our enterprise-wide
cybersecurity program, and is responsible for assessing and managing our materials risks from cybersecurity threats. In performing his
role, our Director of Information Technology is informed about and monitors the prevention, detection, mitigation, and remediation of
cybersecurity risks and incidents through the management of, and participation in, the cybersecurity risk management program and other
processes described above, including the maintenance and execution of our cyber incident response plan. Our Director of Information Technology
reports to our CFO/COO and to our CEO.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.