Disclosure · Form 10-K · fiscal 2026
Adm Tronics Unlimited, Inc. 10-K cybersecurity disclosure (Item 1C), fiscal 2026
Filed July 10, 2026· period ended March 31, 2026· ADMT· CIK 849401· Updated · filing on sec.gov ↗
Adm Tronics Unlimited, Inc.'s Form 10-K for fiscal 2026, filed July 10, 2026, names the CSO as its top security role, with oversight by the full board.
What Adm Tronics Unlimited's Item 1C says
Adm Tronics Unlimited's Form 10-K for fiscal 2026 describes a management committee that reviews cybersecurity policies and updates the Board of Directors on cybersecurity risks.
Board and management oversight
The incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.
Who leads security
The company has an engineer responsible for the security of its computers and network.
How the company manages cyber risk
The company states that it is ISO-13485 Certified for medical device manufacturing.
Third parties and incidents
The company says it has an independent consultant who is a cybersecurity expert and has advised on its systems and procedures. The company states it has not encountered cybersecurity threats or incidents that have had a material impact on its business.
What the section does not state
The section does not name the person who holds the top security role.
Read from the Form 10-K filed July 10, 2026, on . Every sentence rests on a passage of the section reproduced below.
The filing's fields, each with its sentence
Who leads security (the top role, as the filing names it)
CSO
Reports to
not identified
Board oversight
Full board
“Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis.”
How often the board or committee hears about it
Quarterly
“Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis.”
CISO or other person named
not identified
Frameworks and standards named
not identified
Outside assessors, consultants or testers
not identified
Experience of the security leadership, as stated
not identified
Material incident
The filing states none
“We have not encountered cybersecurity threats or incidents that have had a material impact on our business.”
The section
326 words, Form 10-K filed July 10, 2026 for the period ended March 31, 2026
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
How peers in the same industry describe the seat
The SEC assigns Adm Tronics Unlimited, Inc. standard industrial classification 3845, Electromedical & electrotherapeutic apparatus (SEC SIC list). 5 other filers in our library have the same code.
| Filer | Top security role | Reports to | Board oversight |
|---|---|---|---|
| CapsoVision, IncFY 2025, filed March 26, 2026 | Senior Director of Information Technology | not identified | Audit Committee |
| Nuwellis, Inc.FY 2025, filed March 11, 2026 | Director of Operations | board of directors | Audit Committee |
| Axogen, Inc.FY 2025, filed February 24, 2026 | Vice President of Information Technology | not identified | Audit Committee |
| Outset Medical, Inc.FY 2025, filed February 13, 2026 | VP of Information Technology | not identified | Audit Committee |
| Non Invasive Monitoring Systems IncFY 2025, filed January 30, 2026 | not identified | not identified | full board |
Item 1C, verbatim from the filing
The text below is the Cybersecurity item of Adm Tronics Unlimited, Inc.'s Form 10-K as filed with the SEC on July 10, 2026, reproduced word for word from the filing on sec.gov. Page numbers and navigation lines have been removed; nothing has been added. It describes governance as of that date.
ITEM 1C. CYBERSECURITY
Risk management and strategy
We rely on information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.
Due to our highly regulated stature for medical device development and manufacture, we have been practicing cybersecurity for a long time. We are ISO-13485 Certified for medical device manufacturing. Elements of that certification include risk management. And we are knowledgeable about ISO-27001. We have an engineer responsible for the security of our computers, network, etc.
We have robust firewalls for all access points. We have top line anti-virus on all computers and networks. We have prioritized the risks to protect our networks. To protect our departments, we have implemented an architecture of a separate network for administration and one for engineering. This gives redundancy and protection. There is onsite as well as offsite backup as well as a separation of Wi-Fi for visitors to prevent access to our network.
A plan is in place to restore our networks if attacked by both our on-site backup and if needed the off-site backup. We have very complex software for our engineering. We also have a robust accounting ERP software. These are regularly maintained and updated.
We have an independent consultant who is a cybersecurity expert who has advised us on the above systems and procedures.
We have not encountered cybersecurity threats or incidents that have had a material impact on our business.
Governance
Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.
Earlier filings on record
Fiscal 2025 Form 10-K, filed July 14, 2025 sec.gov ↗
Top security role, as the filing names it
CSO
Reports to, as the filing names it
not identified
Board oversight
Full board
“Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have not encountered cybersecurity threats or incidents that have had a material impact on our business.”
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Risk management and strategy
We rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.
Due to our highly regulated stature for medical device development and manufacture, we have been practicing cybersecurity for a long time. We are ISO-13485 Certified for medical device manufacturing. Elements of that certification include risk management. And we are knowledgeable about ISO-27001. We have an engineer responsible for the security of our computers, network, etc.
We have robust firewalls for all access points. We have top line anti-virus on all computers and networks. We have prioritized the risks to protect our networks. To protect our departments we have implemented an architecture of a separate network for administration and one for engineering. This gives redundancy and protection. There is onsite as well as offsite backup as well as a separation of WiFi for visitors to prevent access to our network.
A plan is in place to restore our networks if attacked by both our on-site backup and, if needed the off-site backup. We have very complex software for our engineering. We also have a robust accounting ERP software. These are regularly maintained and updated.
We have an independent consultant who is a cybersecurity expert who has advised us on the above systems and procedures.
We have not encountered cybersecurity threats or incidents that have had a material impact on our business.
Governance
Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.
Fiscal 2024 Form 10-K, filed July 15, 2024 sec.gov ↗
Top security role, as the filing names it
CSO
Reports to, as the filing names it
not identified
Board oversight
Full board
“Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis.”
Person named in the filing
not identified
Experience, as stated
not identified
Material incident
The filing states none
“We have not encountered cybersecurity threats or incidents that have had a material impact on our business.”
Read by claude-sonnet-5-5 on November 12, 2026; every quote verified in the stored text by code.
ITEM 1C. CYBERSECURITY
Risk management and strategy
We rely on our information technology to operate our business. We have policies and processes designed to protect our information technology systems, some of which are managed by third parties, and resolve issues in a timely manner in the event of a cybersecurity threat or incident.
Due to our highly regulated stature for medical device development and manufacture, we have been practicing cybersecurity for a long time. We are ISO-13485 Certified for medical device manufacturing. Elements of that certification include risk management. And we are knowledgeable about ISO-27001. We have an engineer responsible for the security of our computers, network, etc.
We have robust firewalls for all access points. We have top line anti-virus on all computers and networks. We have prioritized the risks to protect our networks. To protect our departments we have implemented an architecture of a separate network for administration and one for engineering. This gives redundancy and protection. There is onsite as well as offsite backup as well as a separation of WiFi for visitors to prevent access to our network.
A plan is in place to restore our networks if attacked by both our on-site backup and, if needed the off-site backup. We have very complex software for our engineering. We also have a robust accounting ERP software. These are regularly maintained and updated.
We have an independent consultant who is a cybersecurity expert who has advised us on the above systems and procedures.
We have not encountered cybersecurity threats or incidents that have had a material impact on our business.
Governance
Our committee for the review and implementation of cybersecurity policies and procedures are made up of the CEO, CSO and VP of Regulatory and through the CEO, provides an update to the Board of Directors on any risks related to cybersecurity on a quarterly basis. Our incident response plan includes notifying the Board of Directors of any material threats or incidents that arise.
The fields above are exact quotes from the stored text. "Not identified" means no supporting sentence was found, not that the company has no such arrangement. A name in a filing is not a record of who holds the seat today: the Wire tracks that.
Browse the whole library at /disclosures, or see who the top security role reports to, by sector. Cite as "CISO Tribune, 10-K cybersecurity governance disclosures" with a link.