14 unchanged sentences
The monitoring and surveillance procedures over our key systems and IT environments are performed jointly with Genworth.
−Removed: Potential threats are evaluated, correlated and escalated to the extent appropriate.
+Added: Potential threats are evaluated, correlated and escalated to the extent
Incidents that are subject to escalation are initially evaluated by a team of IT security personnel led by our Chief Information Security Officer.
If the incident is sufficiently severe, it will trigger our cybersecurity incident response plan, which is carried out by a cross-functional team who ultimately report findings and suggest action plans to our senior leadership team and Genworth.
−Removed: In accordance with
−Removed: the plan, we assess, contain and eradicate the threat and notify relevant external parties.
+Added: In accordance with the plan, we assess, contain and eradicate the threat and notify relevant external parties.
We engage with third parties to assist with the research and evaluation, if deemed necessary.
16 unchanged sentences
At least annually, management presents a cybersecurity report to our full Board of Directors along with semiannual briefings.
−Removed: These sessions may cover, among other topics, the information security organization, material risks, technical threats, information technology security infrastructure, patching and vulnerability management, cybersecurity incidents, an annual cybersecurity tabletop exercise and incident preparedness, supplier management, security awareness training, cybersecurity personnel/staffing and a cybersecurity threat assessment.
+Added: These sessions may cover, among other topics, the information security organization, material risks, technical threats, information technology security infrastructure, patching and vulnerability management, cybersecurity incidents, an annual cybersecurity tabletop exercise and incident
+Added: preparedness, supplier management, security awareness training, cybersecurity personnel/staffing and a cybersecurity threat assessment.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.