Disclosure · Form 10-K · fiscal 2026
Sparta Commercial Services, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed August 13, 2026· period ended April 30, 2026· SRCO· CIK 318299· Updated · filing on sec.gov ↗
Sparta Commercial Services, Inc.'s Form 10-K for fiscal 2026, filed August 13, 2026, names the Vice President Operations as its top security role, reporting to the Chief Executive Officer or the board, as appropriate.
What Sparta Commercial Services' Item 1C says
Sparta Commercial Services' Form 10-K for fiscal 2026 states that a third-party consultant team is managed by the Vice President Operations.
Who leads security
The Vice President Operations reports to the Chief Executive Officer or the board, as appropriate.
How the company manages cyber risk
The company seeks to mitigate cybersecurity risks through monitoring and detection activities, use of anti-malware applications, employee training, and quality audits.
Third parties and incidents
The company engages a third-party consultant to assist with its cybersecurity risk management framework. As of April 30, 2026, the company has not identified an indication of a cybersecurity incident that would have a material impact on its business.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a board committee as responsible for cybersecurity oversight.
Read from the Form 10-K filed August 13, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Vice President Operations
Reports to
Chief Executive Officer or the board, as appropriate
“Our third-party consultant team is managed by our Vice President Operations who reports to the Chief Executive Officer or the board, as appropriate.”
Board oversight
not identified
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
Described
“We engage a third-party consultant to assist us with our cybersecurity risk management framework, including the”
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“As of April 30, 2026, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.”
The section
191 words, Form 10-K filed August 13, 2026 for the period ended April 30, 2026
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Sparta Commercial Services, Inc. standard industrial classification 7389, Services-business services, nec (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| AccentureFY 2026, filed October 16, 2026 | chief information security officer | General Counsel | Audit Committee of the Board of Directors |
| CBIZ, Inc.FY 2025, filed August 4, 2026 | Vice President, IT Security and Compliance | Chief Information Officer | full board |
| Two Hands CorpFY 2025, filed April 10, 2026 | not identified | not identified | full board |
| Quotemedia IncFY 2025, filed April 7, 2026 | not identified | not identified | Audit Committee |
| Paysign, Inc.FY 2025, filed March 25, 2026 | Information Security Officer | not identified | Audit Committee |
| Datavault AI Inc.FY 2025, filed March 18, 2026 | not identified | not identified | Audit Committee |
| Heritage Global Inc.FY 2025, filed March 12, 2026 | not identified | not identified | Corporate Governance Committee |
| RB Global Inc.FY 2025, filed February 25, 2026 | Chief Information Security Officer | not identified | Audit Committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Sparta Commercial Services, Inc.'s Form 10-K as filed with the SEC on August 13, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM
1C. CYBERSECURITY
We
rely on our information technology to operate our business. As such, we have policies and processes designed to protect our information
technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity
threat or incident.
We
have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business
and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring
and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures,
among other processes. We engage a third-party consultant to assist us with our cybersecurity risk management framework, including the
monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. Our third-party consultant
team is managed by our Vice President Operations who reports to the Chief Executive Officer or the board, as appropriate.
As
of April 30, 2026, we have not identified an indication of a cybersecurity incident that would have a material impact on our business
and consolidated financial statements.
Earlier filings on record
Fiscal 2025 Form 10-K, filed August 13, 2025 sec.gov ↗
Top security role, as the filing names it
Vice President Operations
Reports to, as the filing names it
Chief Executive Officer or the board-level, as appropriate
“Our third-party consultant team is managed by our Vice President Operations who reports to the Chief Executive Officer or the board-level, as appropriate.”
Board oversight
not identified
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“As of April 30, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.”
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
ITEM
1C. CYBERSECURITY
We
rely on our information technology to operate our business. As such, we have policies and processes designed to protect our information
technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity
threat or incident.
We
have designed our business applications and hosting services to minimize the impact that cybersecurity incidents could have on our business
and have identified back-up systems where appropriate. We seek to further mitigate cybersecurity risks through a combination of monitoring
and detection activities, use of anti-malware applications, employee training, quality audits and communication and reporting structures,
among other processes. We engage a third-party consultant to assist us with our cybersecurity risk management framework, including the
monitoring and detection of cybersecurity threats and responding to any cybersecurity threats or incidents. Our third-party consultant
team is managed by our Vice President Operations who reports to the Chief Executive Officer or the board-level, as appropriate.
As of April 30, 2025, we have not identified an indication of a cybersecurity incident that would have a material impact on our business
and consolidated financial statements.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.