Genvor Inc 10-K Cybersecurity GRC - 2025-12-10

Page last updated on December 10, 2025

Genvor Inc reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2025-12-10 11:18:22 EST.

Filings

10-K filed on 2025-12-10

Genvor Inc filed a 10-K at 2025-12-10 11:18:22 EST
Accession Number: 0001903596-25-000575

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity Risk Management and Strategy The Company has implemented several measures to protect against cybersecurity threats, while recognizing the importance of continuing to strengthen its overall security framework. Current protections include: Identity Threat Detection & Response: Active monitoring for account takeover attempts and identity-based threats. Endpoint Detection & Response: Continuous monitoring, detection, and response to potential endpoint threats. Two-Factor Authentication: Enforced across Office 365 accounts, which comprise the majority of the Company's infrastructure. Managed Device Security: Company devices are centrally managed for patching, antivirus, monitoring, and security enforcement. Vulnerability Scanning & Remediation: Regular scanning of systems to identify potential weaknesses, with remediation measures applied to reduce risk. Engagement of a Third-Party MSSP: The Company consults with an external Managed Security Services Provider for continuous support, monitoring, and guidance. Standard Security Practices: Baseline controls such as password policies and antivirus software provide foundational protection. 15 Planned enhancements include: Developing a Comprehensive Cybersecurity Framework: Establishing a formal risk assessment process to better identify and manage vulnerabilities. Expanding Cybersecurity Governance: Reviewing and formalizing Board-level oversight and considering additional training or expertise at the management level. Governance Board Oversight: The Board of Directors currently does not have a formal structure for cybersecurity oversight. The Company intends to review and establish appropriate oversight in the near future. Management's Role: Day-to-day cybersecurity responsibilities are managed by our Chief Executive Officer ("CEO"), with the support of an external Managed Security Services Provider. The Company is evaluating options to enhance management's cybersecurity role through additional training or external expertise. Expertise: While current management and the Board do not have in-depth cybersecurity expertise, the Company is considering educational opportunities and consulting resources to address this gap. Material Effect from Cybersecurity Threats To date, no known cybersecurity incidents have materially affected the Company's business strategy, results of operations, or financial condition. However, as with all companies, we remain exposed to the risk of cybersecurity threats. The controls currently in place provide a meaningful level of protection, and the Company is committed to continuing to strengthen its cybersecurity posture as resources allow.

Company Information