Disclosure · Form 10-K · fiscal 2025
GeoVax Labs, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2025
Filed April 15, 2026· period ended December 31, 2025· GOVX· CIK 832489· Updated · filing on sec.gov ↗
GeoVax Labs, Inc.'s Form 10-K for fiscal 2025, filed April 15, 2026, names the Chief Financial Officer as its top security role, with oversight by the Nominating and Governance Committee.
What GeoVax Labs' Item 1C says
GeoVax Labs' Form 10-K for fiscal 2025 places oversight of cybersecurity matters with the Nominating and Governance Committee. The company's information technology function, including cybersecurity, is centralized under the Chief Financial Officer.
Board and management oversight
The NGC receives periodic updates from management on cybersecurity matters. Management is responsible for implementing risk management strategies and for operational oversight of company-wide cybersecurity strategy, policy, and standards.
Who leads security
The Chief Financial Officer has over three decades of business leadership experience, including oversight of information technology functions.
How the company manages cyber risk
The company's processes for cybersecurity risk include physical, procedural and technical safeguards, response plans, and routine review of policies and procedures.
Third parties and incidents
The company engages independent third parties to assess and implement its cybersecurity procedures. The company does not believe any known risks from cybersecurity threats are currently reasonably likely to materially affect it or its business strategy, results of operations or financial condition.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard.
Read from the Form 10-K filed April 15, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
Chief Financial Officer
Reports to
not identified
Board oversight
Nominating and Governance Committee
“The Nominating and Governance Committee (NGC) has been assigned oversight of cybersecurity matters, particularly as they relate to financial risk and controls, integrity of financial data and public disclosures, and security of overall digital data.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
Stated
“The Company's information technology function (including cybersecurity) is centralized under the Chief Financial Officer, who has over three decades of business leadership experience including oversight of information technology functions.”
Material incident
The filing states none
“We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.”
The section
311 words, Form 10-K filed April 15, 2026 for the period ended December 31, 2025
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns GeoVax Labs, Inc. standard industrial classification 2834, Pharmaceutical preparations (SEC SIC list). 8 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Nanoviricides, Inc.FY 2026, filed September 28, 2026 | not identified | not identified | audit committee |
| Phibro Animal Health CorpFY 2026, filed August 26, 2026 | Chief Technology and Digital Innovation Officer | not identified | full board |
| Protagenic Therapeutics, Inc.\newFY 2026, filed August 14, 2026 | not identified | not identified | audit committee |
| Earth Science Tech, Inc.FY 2026, filed June 18, 2026 | not identified | not identified | not identified |
| KALA BIO, Inc.FY 2025, filed April 15, 2026 | Chief Business Officer | not identified | Audit Committee |
| Oncotelic Therapeutics, Inc.FY 2025, filed April 15, 2026 | not identified | not identified | full board |
| Sunshine Biopharma Inc.FY 2025, filed April 3, 2026 | not identified | not identified | not identified |
| LFTD Partners Inc.FY 2025, filed April 1, 2026 | not identified | not identified | not identified |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of GeoVax Labs, Inc.'s Form 10-K as filed with the SEC on April 15, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C.
CYBERSECURITY
Risk oversight and management is a key role for the Board and its committees. The Board is responsible for identifying and understanding the Company's principal risks and ensuring that appropriate systems are implemented to monitor, manage and mitigate those risks. The committees of the Board have oversight over risks within their respective mandates.
Oversight of cybersecurity is integrated into the responsibilities of the Board. The Nominating and Governance Committee (NGC) has been assigned oversight of cybersecurity matters, particularly as they relate to financial risk and controls, integrity of financial data and public disclosures, and security of overall digital data.
Management is responsible for the implementation of risk management strategies and for the operational oversight of company-wide cybersecurity strategy, policy, and standards to assess and prepare us to address cybersecurity risks. We have evolving processes for assessing, identifying and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from cyber threats, protect employee and corporate information from unauthorized access or attack, as well as secure our networks and systems. Such processes include physical, procedural and technical safeguards, response plans, and routine review of our policies and procedures to identify risks and refine our practices. The Company's information technology function (including cybersecurity) is centralized under the Chief Financial Officer, who has over three decades of business leadership experience including oversight of information technology functions. We also engage independent third parties to assess and implement our cybersecurity procedures and enhance our oversight.
The NGC receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
Earlier filings on record
Fiscal 2024 Form 10-K, filed March 27, 2025 sec.gov ↗
Top security role, as the filing names it
Chief Financial Officer
Reports to, as the filing names it
not identified
Board oversight
Nominating and Governance Committee
“The Nominating and Governance Committee (NGC) has been assigned oversight of cybersecurity matters, particularly as they relate to financial risk and controls, integrity of financial data and public disclosures, and security of overall digital data.”
Person named in the filing
not identified
Experience, as stated
Stated
“The Company's information technology function (including cybersecurity) is centralized under the Chief Financial Officer, who has over three decades of business leadership experience including oversight of information technology functions.”
Material incident
The filing states none
“We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
ITEM 1C.
CYBERSECURITY
Risk oversight and management is a key role for the Board and its committees. The Board is responsible for identifying and understanding the Company's principal risks and ensuring that appropriate systems are implemented to monitor, manage and mitigate those risks. The committees of the Board have oversight over risks within their respective mandates.
Oversight of cybersecurity is integrated into the responsibilities of the Board. The Nominating and Governance Committee (NGC) has been assigned oversight of cybersecurity matters, particularly as they relate to financial risk and controls, integrity of financial data and public disclosures, and security of overall digital data.
Management is responsible for the implementation of risk management strategies and for the operational oversight of company-wide cybersecurity strategy, policy, and standards to assess and prepare us to address cybersecurity risks. We have evolving processes for assessing, identifying and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from cyber threats, protect employee and corporate information from unauthorized access or attack, as well as secure our networks and systems. Such processes include physical, procedural and technical safeguards, response plans, and routine review of our policies and procedures to identify risks and refine our practices. The Company's information technology function (including cybersecurity) is centralized under the Chief Financial Officer, who has over three decades of business leadership experience including oversight of information technology functions. We also engage independent third parties to assess and implement our cybersecurity procedures and enhance our oversight.
The NGC receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
Fiscal 2023 Form 10-K, filed February 29, 2024 sec.gov ↗
Top security role, as the filing names it
not identified
Reports to, as the filing names it
not identified
Board oversight
Nominating and Governance Committee
“The Nominating and Governance Committee (the "NGC") has been assigned oversight of cybersecurity matters, particularly as they relate to financial risk and controls, integrity of financial data and public disclosures, and security of overall digital data.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.”
Read by claude-sonnet-5-5 on November 15, 2026; every quote verified in the stored text by code.
ITEM 1C.
CYBERSECURITY
Risk oversight and management is a key role for the Board and its committees. The Board is responsible for identifying and understanding the Company's principal risks and ensuring that appropriate systems are implemented to monitor, manage and mitigate those risks. The committees of the Board have oversight over risks within their respective mandates.
Oversight of cybersecurity is integrated into the responsibilities of the Board. The Nominating and Governance Committee (the "NGC") has been assigned oversight of cybersecurity matters, particularly as they relate to financial risk and controls, integrity of financial data and public disclosures, and security of overall digital data.
Management is responsible for the implementation of risk management strategies and for the operational oversight of company-wide cybersecurity strategy, policy, and standards to assess and prepare us to address cybersecurity risks. We have evolving processes for assessing, identifying and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from cyber threats, protect employee and corporate information from unauthorized access or attack, as well as secure our networks and systems. Such processes include physical, procedural and technical safeguards, response plans, and routine review of our policies and procedures to identify risks and refine our practices. We engage independent third parties to assess and implement our cybersecurity procedures and enhance our oversight.
The NGC receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents. We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.