CISO Tribune

Disclosure · Form 10-K · fiscal 2025

ESG Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025

Filed March 31, 2026· period ended December 31, 2025· ESGH· CIK 1883835· Updated · filing on sec.gov ↗

ESG Inc.'s Form 10-K for fiscal 2025, filed March 31, 2026, carries an Item 1C cybersecurity section; a top security role title is not identified.

What the filing says, in plain English

Who leads security (the top role, as the filing names it)

not identified

Reports to

not identified

Board oversight

not identified

CISO or other person named

not identified

Frameworks and standards named

not identified

Outside assessors, consultants or testers

not identified

Experience of the security leadership, as stated

not identified

Material incident

The filing states none

“As of the date of this Annual Report, we are not aware of any cybersecurity incident that has materially affected or is reasonably likely to materially affect the Company, including our business strategy, results of operations or financial condition.”

The section

123 words, Form 10-K filed March 31, 2026 for the period ended December 31, 2025

Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.

How peers in the same industry describe the seat

The SEC assigns ESG Inc. standard industrial classification 0100, Agricultural production-crops (SEC SIC list). 6 other filers in our library have the same code.

FilerTop security roleReports toBoard oversight
Bloomia Holdings, Inc.FY 2026, filed September 21, 2026not identifiednot identifiedAudit Committee
Edible Garden AG IncFY 2025, filed March 31, 2026not identifiednot identifiedfull board
Planet 13 Holdings Inc.FY 2025, filed March 25, 2026Vice President of Operationsnot identifiedAudit Committee
TerrAscend Corp.FY 2025, filed March 12, 2026Chief Information Officernot identifiedAudit Committee
Fresh Del Monte Produce IncFY 2025, filed February 19, 2026Vice President of Information Technologynot identifiedGovernance Committee
Genvor IncFY 2025, filed December 10, 2025Chief Executive Officernot identifiednot identified

Item 1C, verbatim from the filing

The text below is the Cybersecurity item of ESG Inc.'s Form 10-K as filed with the SEC on March 31, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.

Item 1C. Cybersecurity

We maintain processes for assessing, identifying and managing material

risks from cybersecurity threats. These processes are integrated into our overall risk-management activities and include administrative,

technical and physical safeguards, user-access controls, periodic review of information systems, third-party service-provider oversight,

and internal reporting procedures for potential incidents.

Management is responsible for day-to-day oversight of cybersecurity

risk, including the evaluation of potential incidents and escalation of material matters to senior management and the Board of Directors,

or the appropriate committee thereof, as applicable.

As of the date of this Annual Report, we are not aware of any cybersecurity

incident that has materially affected or is reasonably likely to materially affect the Company, including our business strategy, results

of operations or financial condition.

Earlier filings on record

Fiscal 2024 Form 10-K, filed April 15, 2025 sec.gov ↗

Top security role, as the filing names it

not identified

Reports to, as the filing names it

not identified

Board oversight

Full board

“The full board of directors has oversight responsibility for the Company's overall risk management, including cybersecurity risk, and has not delegated oversight authority for cybersecurity risks to any committee.”

Person named in the filing

not identified

Experience, as stated

not identified

Material incident

The filing states none

“In fiscal year 2024, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition.”

Read by claude-sonnet-5-5 on November 8, 2026; every quote verified in the stored text by code.

Item 1C. Cybersecurity

The Company has not adopted any formal cybersecurity

risk management program or formal processes for assessing, identifying, and managing material risks from cybersecurity threats. The full

board of directors has oversight responsibility for the Company's overall risk management, including cybersecurity risk, and has

not delegated oversight authority for cybersecurity risks to any committee. In fiscal year 2024, we did not identify any cybersecurity

threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or

financial condition.

The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.

Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.