Disclosure · Form 10-K · fiscal 2025
Wenyuan Group Corp. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed May 8, 2026· period ended December 31, 2025· WYGC· CIK 723533· Updated · filing on sec.gov ↗
Wenyuan Group Corp.'s Form 10-K for fiscal 2025, filed May 8, 2026, places oversight of cybersecurity risk with the full board; a top security role title is not identified.
What Wenyuan's Item 1C says
Wenyuan's Form 10-K for fiscal 2025 places oversight of any cybersecurity risk management framework with the Board.
Board and management oversight
A dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.
How the company manages cyber risk
The company states it currently has no formalized cybersecurity measures, no dedicated cybersecurity team and no specific protocols to manage cybersecurity risks. The company is evaluating its cybersecurity needs and developing measures, and it is considering vulnerability assessments and an incident response strategy.
Third parties and incidents
The company says its approach to cybersecurity is in the developmental stage and it has not yet engaged external cybersecurity consultants for assessments or services. The company says that, given its current stage of cybersecurity development, it has not experienced any significant cybersecurity incidents to date.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard. The section does not say how often the board or its committee is briefed on cybersecurity.
Read from the Form 10-K filed May 8, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
not identified
Reports to
not identified
Board oversight
Full board
“In addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“Given our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date.”
The section
347 words, Form 10-K filed May 8, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Wenyuan Group Corp. standard industrial classification 8742, Services-management consulting services (SEC SIC list). 5 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| GenFlat Holdings, Inc.FY 2026, filed September 25, 2026 | Chief Executive Officer and Chief Financial Officer | not identified | full board |
| Booz Allen HamiltonFY 2026, filed May 22, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| CISO GlobalFY 2025, filed March 30, 2026 | Chief Information Security Officer | not identified | Audit Committee |
| Bowman Consulting Group Ltd.FY 2025, filed March 5, 2026 | Chief Information Security Officer | CEO | Audit Committee |
| Astrana Health, Inc.FY 2023, filed February 29, 2024 | not identified | not identified | audit committee |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Wenyuan Group Corp.'s Form 10-K as filed with the SEC on May 8, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item
1C. Cybersecurity.
We
acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose
significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.
As
a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols
in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive
risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.
Given
our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date. However, we
recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity
incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business
operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.
We
are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This
includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments
and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size,
complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.
In
addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed
by the Board will review and approve any cybersecurity policies, strategies and risk management practices.
Despite
our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed
by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity
measures in response to emerging threats.
For
a discussion of potential cybersecurity risks affecting us, please refer to the "Risk Factors" section of this Annual Report.
Earlier filings on record
Fiscal 2024 Form 10-K, filed April 15, 2025 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“In addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“Given our current stage of cybersecurity development, we have no t experienced any significant cybersecurity incidents to date.”
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
Item
1C. Cybersecurity.
We
acknowledge the increasing importance of cybersecurity in today's digital and interconnected world. Cybersecurity threats pose
significant risks to the integrity of our systems and data, potentially impacting our business operations, financial condition and reputation.
As
a smaller reporting company, we currently do not have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols
in place to manage cybersecurity risks. Our approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive
risk assessments, established an incident response plan or engaged with external cybersecurity consultants for assessments or services.
Given
our current stage of cybersecurity development, we have no t experienced any significant cybersecurity incidents to date. However, we
recognize that the absence of a formalized cybersecurity framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity
incidents. Such events could potentially lead to unauthorized access to, or disclosure of, sensitive information, disrupt our business
operations, result in regulatory fines or litigation costs and negatively impact our reputation among customers and partners.
We
are in the process of evaluating our cybersecurity needs and developing appropriate measures to enhance our cybersecurity posture. This
includes considering the engagement of external cybersecurity experts to advise on best practices, conducting vulnerability assessments
and developing an incident response strategy. Our goal is to establish a cybersecurity framework that is commensurate with our size,
complexity and the nature of our operations, thereby reducing our exposure to cybersecurity risks.
In
addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed
by the Board will review and approve any cybersecurity policies, strategies and risk management practices.
Despite
our efforts to improve our cybersecurity measures, there can be no assurance that our initiatives will fully mitigate the risks posed
by cyber threats. The landscape of cybersecurity risks is constantly evolving, and we will continue to assess and update our cybersecurity
measures in response to emerging threats.
For
a discussion of potential cybersecurity risks affecting us, please refer to the "Risk Factors" section of this Annual Report.
Fiscal 2023 Form 10-K, filed April 1, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Full board
“In addition, the Board will oversee any cybersecurity risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity policies, strategies and risk management practices.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“Given our current stage of cybersecurity development, we have not experienced any significant cybersecurity incidents to date.”
Read by claude-sonnet-5-5 on November 13, 2026; every quote verified in the stored text by code.
Item 1C. Cybersecurity.
We acknowledge the increasing importance of cybersecurity
in today's digital and interconnected world. Cybersecurity threats pose significant risks to the integrity of our systems and data,
potentially impacting our business operations, financial condition and reputation.
As a smaller reporting company, we currently do not
have formalized cybersecurity measures, a dedicated cybersecurity team or specific protocols in place to manage cybersecurity risks. Our
approach to cybersecurity is in the developmental stage, and we have not yet conducted comprehensive risk assessments, established an
incident response plan or engaged with external cybersecurity consultants for assessments or services.
Given our current stage of cybersecurity development,
we have not experienced any significant cybersecurity incidents to date. However, we recognize that the absence of a formalized cybersecurity
framework may leave us vulnerable to cyberattacks, data breaches and other cybersecurity incidents. Such events could potentially lead
to unauthorized access to, or disclosure of, sensitive information, disrupt our business operations, result in regulatory fines or litigation
costs and negatively impact our reputation among customers and partners.
We are in the process of evaluating our cybersecurity
needs and developing appropriate measures to enhance our cybersecurity posture. This includes considering the engagement of external cybersecurity
experts to advise on best practices, conducting vulnerability assessments and developing an incident response strategy. Our goal is to
establish a cybersecurity framework that is commensurate with our size, complexity and the nature of our operations, thereby reducing
our exposure to cybersecurity risks.
In addition, the Board will oversee any cybersecurity
risk management framework and a dedicated committee of the Board or an officer appointed by the Board will review and approve any cybersecurity
policies, strategies and risk management practices.
Despite our efforts to improve our cybersecurity measures,
there can be no assurance that our initiatives will fully mitigate the risks posed by cyber threats. The landscape of cybersecurity risks
is constantly evolving, and we will continue to assess and update our cybersecurity measures in response to emerging threats.
For a discussion of potential cybersecurity risks
affecting us, please refer to the "Risk Factors" section of this Annual Report.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.