8 unchanged sentences
We assess the security of our networks, websites, and systems with automated vulnerability detection services from a provider that is validated by the NIST, based on the Security Content Automation Protocol ("SCAP") standard.
−Removed: We perform an annual review of our efforts to manage risk with controls that align with and map to key compliance frameworks, such as NIST and the ISO 27000 series of regulations.
+Added: We perform an annual review of our efforts to manage risk with controls that align with and map to key compliance frameworks, such as NIST and the ISO 27000 series of standards.
We perform quarterly IT risk assessments that include cybersecurity risk assessments focused on action plans developed through annual reviews.
19 unchanged sentences
We have an Information Technology Steering Committee ("ITSC"), comprised of the Company President and Chief Executive Officer, the Executive Vice Presidents of our Vegetation Management and Industrial Equipment Divisions, the Chief
−Removed: Financial Officer, and the Chief Sustainability Officer, that determines the priority of cybersecurity initiatives.
+Added: Financial Officer, and the Chief Sustainability Officer, that assesses and manages material risks from cybersecurity threats and determines the priority of cybersecurity initiatives.
The ITSC also reviews the Board's and Audit Committee’s feedback and incorporates it into ongoing cybersecurity management efforts.
−Removed: Our IT team, led by the Vice President of IT and the Director of Network and Information Systems, is responsible for day-to-day assessment and management of cybersecurity risks.
+Added: Our IT team, led by the Vice President of IT and the Director of Network and Information Systems, is responsible for day-to-day assessment and management of cybersecurity risks, including the monitoring and detecting of cybersecurity incidents and executing our cybersecurity incident response plans.
Members of our IT team have undergraduate and graduate degrees in relevant fields, including information systems, information assurance, and information technology with a concentration in cybersecurity.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.