CMS Energy Corporation's 10-K Item 1C cybersecurity disclosure states the company has experienced no material cybersecurity incidents. The filing describes their enterprise risk management program, cybersecurity governance structure, board oversight, and proactive security measures including third-party penetration testing, annual employee training, and incident response planning.