7 unchanged sentences
Annually, we review cybersecurity risk in the context of our overall enterprise risk management assessment.
−Removed: As a component of these processes, our management
−Removed: team, including our Senior Vice President and Chief Technology Officer, identifies and assesses the likelihood and magnitude of risks, on both inherent and residual basis.
+Added: As a component of these processes, our management team, including our Senior Vice President and Chief Technology Officer, identifies and assesses the likelihood and magnitude of risks, on both inherent and residual basis.
These evaluations inform our overall cybersecurity strategy.
Our business operations depend significantly on third party service providers .
−Removed: We have processes in place to evaluate the operational and cybersecurity risks posed to us by third parties on whom we are reliant for these services at the inception of our engagement, and we annually review third-party firms that pose the greatest risks to our business and operations from cybersecurity threats.
+Added: We have processes in place to evaluate the operational and cybersecurity risks posed to us by third parties on whom we are reliant for these services at the inception of our engagement, and we continuously monitor third-party firms that pose the greatest risks to our business and operations from cybersecurity threats.
Nonetheless, we rely on the third parties we use to implement security programs commensurate with their own risk, and we cannot ensure that their efforts will be successful.
2 unchanged sentences
However, our business is highly dependent on the availability of information systems, and a cybersecurity incident, if one were to occur, could have the potential to disrupt our operations.
−Removed: Please refer to Risks Related to Our Business Operations in Item 1A.
−Removed: Risk Factors of this Form 10-K for a further discussion of the risks posed by cybersecurity threats.
+Added: To date, the Company has not identified any cybersecurity incidents which have materially affected, or are reasonably likely to materially affect, our operations, business strategy, or financial condition.
+Added: As discussed more fully under Risks Related to Our Business Operations in Item 1A.
+Added: Risk Factors of this Form 10-K, given the evolving nature and increasing sophistication of cyber threats, there is no guarantee that future incidents will not have a material impact.
+Added: While we continuously assess, identify,
+Added: and mitigate cybersecurity risks through policies, procedures, and industry-standard security measures, cyber threats remain dynamic and could potentially disrupt our operations, expose us to legal or regulatory liabilities, or cause reputational harm.
Governance and Oversight
−Removed: The Audit Committee of the Board of Directors has responsibility to oversee management’s strategy to address risks from cybersecurity threats.
+Added: The Audit Committee of the Board has responsibility to oversee management’s strategy to address risks from cybersecurity threats.
The Audit Committee periodically reviews with management the Company’s policies, controls, and procedures used to identify, mitigate, and manage cybersecurity risks.
−Removed: To accomplish this objective, we have established processes for reporting cybersecurity risks to the Audit Committee of the Board of Directors on a quarterly basis.
+Added: To accomplish this objective, we have established processes for reporting cybersecurity risks to the Audit Committee of the Board on a quarterly basis.
This report, which is prepared by our Senior Vice President and Chief Technology Officer, includes performance as against key performance indicators (KPIs) and service level objectives specifically defined to measure the effectiveness of our cybersecurity controls and risk management efforts, current threat landscape, and strategy.
−Removed: In addition, on an annual basis the Company’s Senior Vice President and Chief Technology Officer presents to the Audit Committee on cybersecurity matters, including material changes to the Company’s information systems, policies and controls, the results of penetration and other testing and findings from any third-party reviews.
+Added: In addition, on at least an annual basis the Company’s Senior Vice President and Chief Technology Officer presents to the Audit Committee on cybersecurity matters, including material changes to the Company’s information systems, policies and controls, the results of penetration and other testing and findings from any third-party reviews.
Our Audit Committee is committed to maintaining a well-informed and cybersecurity-aware posture, regularly engaging by receiving scheduled and requested updates on our strategy to address risks from cybersecurity threats and the evolving threat landscape.
−Removed: The Board of Directors also is appraised of cybersecurity risks as part of its review of management’s annual enterprise risk management assessment.
+Added: The Board also is apprised of cybersecurity risks as part of its review of management’s annual enterprise risk management assessment.
Management plays a pivotal role in identifying, assessing, and managing material risks from cybersecurity threats.
−Removed: This involves continuous monitoring, analyzing emerging threats, and the development and implementation of risk mitigation strategies.
−Removed: Led by our Senior Vice President and Chief Technology Officer with over 20 years of cyber and risk management experience, the Company actively implements and enforces cybersecurity policies, procedures, and strategies, including employee training programs, security assessments, and updates to ensure alignment with our evolving threat landscape.
+Added: This involves continuous monitoring, analyzing emerging threats, and developing and implementing risk mitigation strategies.
+Added: The Company, led by our Senior Vice President and Chief Technology Officer—who holds the Certified Information Systems Security Professional (CISSP) designation and has over 20 years of cyber and risk management experience—actively implements and enforces cybersecurity policies, procedures, and strategies, including employee training programs, security assessments, and updates to ensure alignment with our evolving threat landscape.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.