CSX Corporation (CIK 882872) filed its 2025 Form 10-K disclosing its cybersecurity risk management and governance framework. The filing describes proactive measures including vulnerability scans, employee training, third-party monitoring, and tabletop exercises. It details governance oversight by the CISO and Audit Committee, and notes the company is subject to cybersecurity risks but does not disclose a specific, material cybersecurity incident.