2 unchanged sentences
Our management recognizes the critical importance of addressing cybersecurity threats and risks to our business and operations.
−Removed: Therefore, we have established a comprehensive framework to assess, respond to, and manage material risks arising from cybersecurity threats.
+Added: Therefore, we have established a framework to assess, respond to, and manage material risks arising from cybersecurity threats.
Our chief technology officer and the Cybersecurity Incident Response Team (“IRT”) are responsible for assessing and managing cybersecurity risks.
2 unchanged sentences
It liaises with external cybersecurity experts and industry partners to stay current on emerging threats and best practices.
−Removed: The diverse expertise of the IRT members enables comprehensive risk assessment and swift responses to mitigate the potential impact of breaches or other cybersecurity incidents.
+Added: The diverse expertise of the IRT members enables comprehensive risk assessment and timely responses to mitigate the potential impact of breaches or other cybersecurity incidents.
We actively engage consultants, outside counsel and other technology experts to enhance our cybersecurity risk management processes, who perform regular assessments and evaluations of the effectiveness of our cybersecurity measures.
−Removed: In addition to third party engagements, we maintain rigorous oversight of cybersecurity risks associated with our use of third party service providers.
+Added: In addition to third-party engagements, we maintain oversight of cybersecurity risks associated with our use of third-party service providers.
Vendor management processes are employed to evaluate vendors' cybersecurity practices, assess risk position and implement measures to mitigate potential threats arising from these external relationships.
2 unchanged sentences
The chief technology officer provides regular updates to our chief executive officer and Board of Directors on cybersecurity risks, ongoing initiatives, incidents, response activities and strategies.
−Removed: The Board of Directors acknowledges cybersecurity as a strategic risk and a priority for the Company.
−Removed: The Board of Directors is actively involved in the oversight of our cybersecurity risk management efforts, ensuring alignment with our overall business objectives.
+Added: The Board of Directors acknowledges cybersecurity as a strategic risk and
+Added: a priority for the Company.
+Added: The Board of Directors is actively involved in the oversight of our cybersecurity risk management efforts, which is one of our core components of our enterprise risk management, ensuring alignment with our overall business objectives.
Our commitment to cybersecurity resilience is rooted in the collaborative efforts between management, the IRT and the Board of Directors.
−Removed: We continuously strive to strengthen our cybersecurity measures to protect our systems, data, customers and stakeholders from evolving threats.
+Added: The Board of Directors is briefed twice annually by our chief technology officer and on an as needed basis when, and if, threats materialize.
To date, cybersecurity incidents and risks have not materially affected us, including our business strategy, results of operations, or financial condition.
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.