10-K Item 1C cybersecurity risk-management disclosure by a water/electric utility registrant. The filing describes governance, the CIRT, NIST-framework-based vulnerability management, quarterly board reporting, and training. Registrant explicitly states that, to its knowledge, it has not experienced a cybersecurity incident and that prior cybersecurity threats have not materially affected the company. No breach event, affected count, threat actor, or data exposure is disclosed.