McKesson Corporation's Form 10-K Item 1C describes its cybersecurity risk management program, governance structure (CIO/CTO and CISO reporting lines, Audit and Compliance Committee oversight), incident response plan, training, and third-party risk management. The filing is a programmatic disclosure under Reg S-K Item 106; no specific cybersecurity incident, breach, affected-individual count, threat actor, or data-type impact is described.