Disclosure · Form 10-K · fiscal 2026
George Risk Industries, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed August 7, 2026· period ended April 30, 2026· RSKIA· CIK 84112· Updated · filing on sec.gov ↗
George Risk Industries, Inc.'s Form 10-K for fiscal 2026, filed August 7, 2026, names the IT Manager as its top security role, reporting to the CEO, with oversight by the audit committee.
What George Risk Industries' Item 1C says
George Risk Industries' Form 10-K for fiscal 2026 states that the CEO reports, as and if needed, directly to the audit committee and board of directors.
Board and management oversight
The IT Manager works with Five Nines and periodically updates the CEO on cybersecurity and information security policies, training, new concerns, and plans.
Who leads security
The company IT Manager continually monitors company computers and information systems for potential malware, ransomware, and other malicious activity.
How the company manages cyber risk
The company has processes for assessing, identifying, and managing cybersecurity risks, conducted in-house and with Five Nines, and integrated into its overall risk management system. The company has policies for tracking, managing, and safely disposing of physical hardware that may contain confidential information.
Third parties and incidents
The board of directors and audit committee will be apprised of any cybersecurity incidents deemed to have a moderate or higher business impact.
What the section does not state
The section does not name the person who holds the top security role. The section does not name a specific security framework or standard. The section makes no statement on whether a cybersecurity incident has materially affected the company.
Read from the Form 10-K filed August 7, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
IT Manager
Reports to
CEO
“The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity and information security policies, training, new concerns, and plans.”
Board oversight
audit committee
“The CEO reports, as and if needed, directly to the audit committee and board of directors.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
not identified
The section
303 words, Form 10-K filed August 7, 2026 for the period ended April 30, 2026
Read by claude-sonnet-5-5 on November 6, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns George Risk Industries, Inc. standard industrial classification 3669, Communications equipment, nec (SEC SIC list). 2 other filers in our library have the same code. Also shown: filers whose codes the SEC assigns to the same review office (Office of Manufacturing).
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Napco Security Technologies, IncFY 2026, filed August 24, 2026 | Vice President of Information Technology | not identified | not identified |
| AmpliTech Group, Inc.FY 2025, filed March 26, 2026 | not identified | not identified | full board |
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| Insteel Industries IncFY 2026, filed October 29, 2026 | Chief Information Officer | not identified | full board |
| Penguin Solutions, Inc.FY 2026, filed October 20, 2026 | Chief Information Officer | not identified | not identified |
| News CorpFY 2026, filed August 7, 2026 | Chief Information Security Officer | Chief Technology Officer | Audit Committee |
| NikeFY 2026, filed July 15, 2026 | Vice President, Foundational Technology & Services | Chief Technology Officer | Audit & Finance Committee |
| Perfect Moment Ltd.FY 2026, filed June 29, 2026 | Chief Financial Officer and Chief Operating Officer | the President | Audit Committee |
| Emerson Radio CorpFY 2026, filed June 26, 2026 | not identified | not identified | audit committee of the Board |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of George Risk Industries, Inc.'s Form 10-K as filed with the SEC on August 7, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
Item
1C Cybersecurity
We
believe a proactive approach to cybersecurity risks and threats is essential to achieving our business objectives and protecting our
business. We therefore have processes for assessing, identifying, and managing risks from cybersecurity threats that are conducted both
in-house and with the aid of a third-party IT service, Five Nines, and have integrated these processes into our overall risk management
system. We continually monitor our safeguards and provide our employees at all levels with the tools and training on these safeguards.
Five Nine's security specialists monitor and aid with industry best practices and compliance and assist us in implementing our
cybersecurity procedures. Additionally, they routinely assess risks from cybersecurity threats, including but not limited to changes
to firmware, disruption/denial of service, and any potential unauthorized occurrence on or conducted through our information systems
that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing
therein. We have established policies for tracking, managing, and safely disposing of physical hardware that may contain confidential
information. We intend to continually evaluate best practices and methods, including continued cyber defense systems and training programs
to protect our business from a wide range of potential threats and ever-evolving cybersecurity risks.
Governance
Our
company IT Manager continually monitors company computers and information systems for potential malware, ransomware, and other malicious
activity. The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity
and information security policies, training, new concerns, and plans. The CEO reports, as and if needed, directly to the audit committee
and board of directors. The board of directors and audit committee will be apprised of any cybersecurity incidents deemed to have a moderate
or higher business impact and will be provided with updates as necessary.
Earlier filings on record
Fiscal 2025 Form 10-K, filed August 12, 2025 sec.gov ↗
Top security role, as the filing names it
IT Manager
Reports to, as the filing names it
CEO
“The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity and information security policies, training, new concerns, and plans.”
Board oversight
audit committee
“The CEO reports, as and if needed, directly to the audit committee and board of directors.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
not identified
Read by claude-sonnet-5-5 on November 6, 2026; every quote verified in the stored text by code.
Item
1C Cybersecurity
We
believe a proactive approach to cybersecurity risks and threats is essential to achieving our business objectives and protecting our
business. We therefore have processes for assessing, identifying, and managing risks from cybersecurity threats, that are conducted both
in-house and with the aid of a third-party IT service, Five Nines, and have integrated these processes into our overall risk management
system. We continually monitor our safeguards and provide our employees at all levels with the tools and training on these safeguards.
Five Nine's security specialists monitor and aid with industry best practices and compliance and assist us in implementing our
cybersecurity procedures. Additionally, they routinely assess risks from cybersecurity threats, including but not limited to changes
to firmware, disruption/denial of service and any potential unauthorized occurrence on or conducted through our information systems that
may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing
therein. We have established policies for tracking, managing, and safely disposing of physical hardware that may contain confidential
information. We intend to continually evaluate best practices and methods, including continued cyber defense systems and training programs
to protect our business from a wide range of potential threats and the ever-evolving cybersecurity risks.
Governance
Our
company IT Manager continually monitors company computers and information systems for potential malware, ransomware and other malicious
activity. The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity
and information security policies, training, new concerns, and plans. The CEO reports, as and if needed, directly to the audit committee
and board of directors. The board of directors and audit committee will be apprised of any cybersecurity incidents deemed to have a moderate
or higher business impact and will be provided with updates as necessary.
Fiscal 2024 Form 10-K, filed July 31, 2024 sec.gov ↗
Top security role, as the filing names it
IT Manager
Reports to, as the filing names it
CEO
“The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity and information security policies, training, new concerns, and plans.”
Board oversight
audit committee
“The CEO reports, as and if needed, directly to the audit committee and board of directors.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
not identified
Read by claude-sonnet-5-5 on November 6, 2026; every quote verified in the stored text by code.
Item 1C
Cybersecurity
We
believe a proactive approach to cybersecurity risks and threats is essential to achieving our business objectives and protecting our
business. We therefore have processes for assessing, identifying, and managing risks from cybersecurity threats, that are conducted both
in-house and with the aid of a third-party IT service, Five Nines, and have integrated these processes into our overall risk management
system. We continually monitor our safeguards and provide our employees at all levels with the tools and training on these safeguards.
Five Nine's security specialists monitor and aid with industry best practices and compliance and assist us in implementing our
cybersecurity procedures. Additionally, they routinely assess risks from cybersecurity threats, including but not limited to changes
to firmware, disruption/denial of service and any potential unauthorized occurrence on or conducted through our information systems that
may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing
therein. We have established policies for tracking, managing, and safely disposing of physical hardware that may contain confidential
information. We intend to continually evaluate best practices and methods, including continued cyber defense systems and training programs
to protect our business from a wide range of potential threats and the ever-evolving cybersecurity risks.
Governance
Our
company IT Manager continually monitors company computers and information systems for potential malware, ransomware and other malicious
activity. The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity
and information security policies, training, new concerns, and plans. The CEO reports, as and if needed, directly to the audit committee
and board of directors. The board of directors and audit committee will be apprised of any cybersecurity incidents deemed to have a moderate
or higher business impact and will be provided with updates as necessary.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.