NSP-Wisconsin, a wholly owned subsidiary of Xcel Energy, reports in its Item 1C cybersecurity disclosure that as of Feb. 25, 2026, no cybersecurity incident or attack affecting the company or its vendors has had a material impact on its business or results of operations, and there are no material cybersecurity incidents to report. The disclosure describes governance, NERC CIP compliance, NIST-aligned controls, and third-party risk management practices.