6 unchanged sentences
Ultimately, our ISP is part of our full enterprise risk framework, which includes information technology, business continuity and resiliency, in addition to cybersecurity risk.
−Removed: Our ISP is coordinated with our broader risk management team, including our Chief Security Officer.
−Removed: Enterprise risk, including cybersecurity risk, is overseen by the Audit and Risk Committee on behalf of the Board.
−Removed: AllianceBernstein
+Added: Enterprise risk, including cybersecurity risk, is overseen by the Audit and Risk Committee (" Audit Committee ") on behalf of the Board.
Our CISO, with assistance from internal and external resources, is responsible for implementing and providing oversight of our ISP.
13 unchanged sentences
Cyber Risk Governance
−Removed: The Audit and Risk Committee is responsible for assisting the Board with oversight of our enterprise risk framework, including cybersecurity, information security, information technology and business continuity and resiliency.
−Removed: Our CISO and other members of senior management including our General Counsel, CCO and CRO report quarterly to the Audit and Risk Committee at its regular meetings on the status of the Company's cybersecurity risk, risk management policies and risk assessment initiatives.
+Added: The Audit Committee is responsible for assisting the Board with oversight of our enterprise risk framework, including cybersecurity, information security, information technology and business continuity and resiliency.
+Added: Our CISO and other members of senior management including our General Counsel, CCO and CRO report quarterly to the Audit Committee at its regular meetings on the status of the Company's cybersecurity risk, risk management policies and risk assessment initiatives.
The full Board is updated on an as needed basis.
−Removed: In addition, management updates the Audit and Risk Committee, as appropriate, regarding any material cybersecurity threats or incidents, as well as any incidents with lesser impact potential.
+Added: In addition, management updates the Audit Committee, as appropriate, regarding any material cybersecurity threats or incidents, as well as any incidents with lesser impact potential.
While our Board provides oversight of our cybersecurity risk environment, the ultimate responsibility for our processes for identifying, assessing and managing cybersecurity risks resides with management.
2 unchanged sentences
Management oversight of our ISP is provided by various governance committees including the Operational Risk Oversight Committee, the Information Security Risk Oversight Subcommittee and the Financial Crimes Control Oversight Subcommittee.
−Removed: 2024 Annual Report 25
+Added: AllianceBernstein
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.