Disclosure · Form 10-K · fiscal 2025
OMNIQ Corp. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed April 15, 2026· period ended December 31, 2025· OMQS· CIK 278165· Updated · filing on sec.gov ↗
OMNIQ Corp.'s Form 10-K for fiscal 2025, filed April 15, 2026, places oversight of cybersecurity risk with the audit committee; a top security role title is not identified.
What OMNIQ's Item 1C says
OMNIQ's Form 10-K for fiscal 2025 places oversight of cybersecurity risk management processes with the audit committee of the board of directors. Certain company management, including the information technology team, implements and maintains the company's cybersecurity risk assessment and management processes.
Board and management oversight
The board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The audit committee receives regular reports from the information technology team about the Company's significant cybersecurity threats and risk and the processes implemented to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats, risk and mitigation. The executive team, including the Chief Executive Officer, is responsible for hiring appropriate personnel and helping to integrate cybersecurity risk considerations into the overall risk management strategy.
How the company manages cyber risk
The company has established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats and has integrated them into its overall risk management systems. The company conducts periodic risk assessments to identify cybersecurity threats, and also assesses in the event of a material change in its business practices. After the risk assessments, the company regularly monitors the effectiveness of its safeguards. The company's incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members of management, including the Chief Executive Officer, depending on the circumstances.
Third parties and incidents
The company engages consultants or other third parties in connection with its risk assessment processes. The company requires each third-party service provider to certify that it can implement and maintain appropriate security measures. The company states it has not encountered cybersecurity challenges that have materially impaired its operations or financial standing.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed April 15, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
audit committee
“The board of directors' audit committee is responsible for overseeing the Company's cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats .”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“We have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing .”
The section
498 words, Form 10-K filed April 15, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns OMNIQ Corp. standard industrial classification 7373, Services-computer integrated systems design (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| OpenTextFY 2026, filed August 6, 2026 | Chief Information Security Officer | Chief Digital Officer (CDO) | Audit Committee |
| KyndrylFY 2026, filed May 29, 2026 | CISO | not identified | Audit Committee |
| Super League Enterprise, Inc.FY 2025, filed March 31, 2026 | not identified | not identified | Audit Committee |
| Fusemachines Inc.FY 2025, filed March 27, 2026 | Head of Technology | not identified | Audit Committee |
| Science Applications International CorpFY 2026, filed March 16, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| Telos CorpFY 2025, filed March 16, 2026 | Chief Information Security Officer | Chief Information Technology Officer | Audit Committee |
| OneSpanFY 2025, filed February 26, 2026 | Chief Information Security Officer | CIO | Audit Committee |
| Ribbon Communications Inc.FY 2025, filed February 26, 2026 | Chief Information Security Officer | Chief Information Officer | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of OMNIQ Corp.'s Form 10-K as filed with the SEC on April 15, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. CYBERSECURITY
We
have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated
these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats,
including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on
the confidentiality, integrity, or availability of our information systems or any information residing therein.
We
conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our
business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include
identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such
risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Following
these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address
any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards.
We
engage consultants or other third parties in connection with our risk assessment processes. These service providers assist us to design
and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service
provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws,
to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach
of its security measures that may affect our company.
We
have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing .
Governance
Our
board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The
board of directors' audit committee is responsible for overseeing the Company's cybersecurity risk management processes,
including oversight and mitigation of risks from cybersecurity threats .
Our
cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information
technology team. Our executive team including our Chief Executive Officer, is responsible for hiring appropriate personnel, helping to
integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities
to relevant personnel .
Our
cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members
of management, depending on the circumstances, including our Chief Executive Officer. In addition, the Company's incident response
and vulnerability management policies include reporting to the audit committee of the board of directors for certain cybersecurity incidents,
including significant breaches to the Company's networks or systems. The audit committee receives regular reports from the information
technology team concerning the Company's significant cybersecurity threats and risk and the processes the Company has implemented
to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats,
risk and mitigation .
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 31, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“The board of directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats .”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing .”
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
ITEM
1C. CYBERSECURITY
We
have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated
these processes into our overall risk management systems and processes . We routinely assess material risks from cybersecurity threats,
including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on
the confidentiality, integrity, or availability of our information systems or any information residing therein.
We
conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our
business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include
identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such
risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Following
these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address
any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards.
We
engage consultants or other third parties in connection with our risk assessment processes. These service providers assist us to design
and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service
provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws,
to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach
of its security measures that may affect our company.
We
have no t encountered cybersecurity challenges that have materially impaired our operations or financial standing .
Governance
Our
board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The board of
directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight
and mitigation of risks from cybersecurity threats .
Our
cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information
technology team. Our executive team including our Chief Executive Officer, is responsible for hiring appropriate personnel, helping to
integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities
to relevant personnel .
Our
cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members
of management depending on the circumstances, including our Chief Executive Officer. In addition, the Company's incident response
and vulnerability management policies include reporting to the audit committee of the board of directors for certain cybersecurity incidents
including significant breaches to the Company's networks or systems. The audit committee receives regular reports from the information
technology team concerning the Company's significant cybersecurity threats and risk and the processes the Company has implemented
to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats,
risk and mitigation .
Fiscal 2023 Form 10-K, filed April 1, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
audit committee
“The board of directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.”
Read by claude-sonnet-5-5 on November 14, 2026; every quote verified in the stored text by code.
ITEM
1C. CYBERSECURITY
We
have established policies and processes for assessing, identifying, and managing material risk from cybersecurity threats, and have integrated
these processes into our overall risk management systems and processes. We routinely assess material risks from cybersecurity threats,
including any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on
the confidentiality, integrity, or availability of our information systems or any information residing therein.
We
conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our
business practices that may affect information systems that are vulnerable to such cybersecurity threats. These risk assessments include
identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such
risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Following
these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks; reasonably address
any identified gaps in existing safeguards; and regularly monitor the effectiveness of our safeguards.
We
engage consultants or other third parties in connection with our risk assessment processes. These service providers assist us to design
and implement our cybersecurity policies and procedures, as well as to monitor and test our safeguards. We require each third-party service
provider to certify that it has the ability to implement and maintain appropriate security measures, consistent with all applicable laws,
to implement and maintain reasonable security measures in connection with their work with us, and to promptly report any suspected breach
of its security measures that may affect our company.
We
have not encountered cybersecurity challenges that have materially impaired our operations or financial standing.
Governance
Our
board of directors addresses the Company's cybersecurity risk management as part of its general oversight function. The board of
directors' audit committee is responsible for overseeing Company's cybersecurity risk management processes, including oversight
and mitigation of risks from cybersecurity threats.
Our
cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the information
technology team. Our executive team including our Chief Executive Officer, is responsible for hiring appropriate personnel, helping to
integrate cybersecurity risk considerations into the Company's overall risk management strategy, and communicating key priorities
to relevant personnel.
Our
cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents to members
of management depending on the circumstances, including our Chief Executive Officer. In addition, the Company's incident response
and vulnerability management policies include reporting to the audit committee of the board of directors for certain cybersecurity incidents
including significant breaches to the Company's networks or systems. The audit committee receives regular reports from the information
technology team concerning the Company's significant cybersecurity threats and risk and the processes the Company has implemented
to address them. The audit committee also has access to various reports, summaries or presentations related to cybersecurity threats,
risk and mitigation.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.