GEORGE RISK INDUSTRIES, INC. 10-K

Item 1 Business Business Development George Risk Industries, Inc. (“GRI” or the “Company”) was incorporated in 1967 in Colorado. The Company is presently engaged in the design, manufacture, and sale of custom computer keyboards, proximity switches, security alarm components and systems, pool access alarms, EZ Duct wire covers, water sensors, electronic switching devices, high security switches and wire and cable installation tools. Products, Market, and Distribution The Company designs, manufactures, and sells computer keyboards, proximity switches, security alarm components and systems, pool access alarms, water sensors, electronic switching devices, high security switches, and wire and cable installation tools. The Security sales division, which concentrates on selling products for security purposes, comprises approximately 96.0% of net revenues and these goods are sold to distributors and alarm dealers/installers. The security segment has approximately 1,000 current customers. One of the distributors, Ademco, Inc. (previously known as ADI), accounts for approximately 37.7% of the Company’s sales of these products. Anixter, Inc. accounts for another 23.5% of the security segment of the Company sales. The loss of these distributors would be significant to the Company. However, both companies have purchased products from the Company for many years and are expected to continue. The Company also has a written agreement with Ademco. This agreement was signed in February 2011 and was initiated by the customer. The contents of the agreement include product terms, purchasing, payment terms, term and termination, product marketing, representations and warranties, product support, mutual confidentiality, indemnification and insurance, and general provisions. 1 The keyboard and proximity switch segment has approximately 300 customers. These products are primarily sold to original equipment manufacturers to their specifications and to distributors of off-the-shelf keyboards of proprietary design. Competition The Company has intense competition in the keyboard/proximity and security/burglar alarm lines. The security/burglar alarm segment has approximately six major competitors. The Company competes well based on price, product design, quality, customization, and having products made in the USA. The competitors in the keyboard/proximity segment are larger companies with automated production facilities. GRI has emphasized small custom order sales that many of its competitors decline or discourage. Research and Development The Company conducts research and development for its customers when needed and as requested. Costs in connection with such product development have been borne by the customers. Costs associated with the development of new products are expensed as incurred. The Company’s internal research and development activities support the development of new products. Employees GRI has approximately 185 employees. Item 1C Cybersecurity We believe a proactive approach to cybersecurity risks and threats is essential to achieving our business objectives and protecting our business. We therefore have processes for assessing, identifying, and managing risks from cybersecurity threats, that are conducted both in-house and with the aid of a third-party IT service, Five Nines, and have integrated these processes into our overall risk management system. We continually monitor our safeguards and provide our employees at all levels with the tools and training on these safeguards. Five Nine’s security specialists monitor and aid with industry best practices and compliance and assist us in implementing our cybersecurity procedures. Additionally, they routinely assess risks from cybersecurity threats, including but not limited to changes to firmware, disruption/denial of service and any potential unauthorized occurrence on or conducted through our information systems that may result in adverse effects on the confidentiality, integrity, or availability of our information systems or any information residing therein. We have established policies for tracking, managing, and safely disposing of physical hardware that may contain confidential information. We intend to continually evaluate best practices and methods, including continued cyber defense systems and training programs to protect our business from a wide range of potential threats and the ever-evolving cybersecurity risks. 2 Governance Our company IT Manager continually monitors company computers and information systems for potential malware, ransomware and other malicious activity. The IT Manager works directly with our third-party IT service, Five Nines, and periodically updates the CEO on our cybersecurity and information security policies, training, new concerns, and plans. The CEO reports, as and if needed, directly to the audit committee and board of directors. The board of directors and audit committee will be apprised of any cybersecurity incidents deemed to have a moderate or higher business impact and will be provided with updates as necessary.