2 unchanged sentences
CYBERSECURITY
−Removed: Our technologies, systems and networks may be subject to cybersecurity threats.
+Added: Our IT Systems and Confidential Information may be subject to cybersecurity threats.
Our business, like others within the energy technologies industry, is faced with growing cybersecurity threats as we increasingly rely on digital technologies across our business, some of which are managed by third -party service providers on whom we rely to help us collect, host or process information.
−Removed: We recognize the significance of these threats, sometimes referred to as hacking, cybersecurity fraud, and cyberattacks, and maintains processes and procedures designed to protect our critical systems and sensitive information from unauthorized access.
+Added: We recognize the significance of these threats, sometimes referred to as hacking, cybersecurity fraud, and cyberattacks, and maintain processes and procedures designed to protect our IT Systems and Confidential Information from unauthorized access.
However, there can be no assurance that a cyber-attack would timely be detected or thwarted.
2 unchanged sentences
Risk Management and Strategy
−Removed: Our cybersecurity risk management program includes operational, technical and physical controls to protect against and respond timely to cybersecurity threats.
+Added: Our cybersecurity risk management program includes operational, technical and physical controls designed to protect against and respond timely to cybersecurity threats.
To address evolving cybersecurity risks and corresponding regulations, our policies and procedures are benchmarked to industry, regulatory and cybersecurity frameworks (including the National Institute of Standards and Technology).
13 unchanged sentences
See "Risk Factors – Our business and operations may be materially adversely impacted in the event of a failure or security breach of our or any critical third parties' IT Systems or Confidential Information."
−Removed: The Board of Directors has delegated the oversight of risks from cybersecurity threats to the Audit Committee, which has delegated authority to the Chief Financial Officer to oversee the Company’s day-to-day cybersecurity risk management, including prevention, detection and responding to any suspected cybersecurity incident.
+Added: The Board of Directors has delegated the oversight of risks from cybersecurity threats to the Audit Committee, which has delegated authority to the Chief Financial Officer to oversee the Company’s day-to-day cybersecurity risk management, including prevention, detection and responding to cybersecurity incidents.
The Audit Committee is updated at least annually by the CFO on the status of cybersecurity matters.
−Removed: Contemporaneous reporting is provided on an as needed basis to the Audit Committee and to the full Board of Directors on significant cyber events including response, legal obligations, and outreach and notification to regulators, and third parties when needed.
−Removed: The Director, Global Information Technology and Financial Systems (the “IT Director”), leads an internal team who work directly with our third-party vendors to manage our cybersecurity risk management program and activities.
+Added: Contemporaneous reporting is provided where deemed necessary to the Audit Committee and to the full Board of Directors on significant cyber events including response, legal obligations, and outreach and notification to regulators and third parties.
+Added: The Director, Global Information Technology and Financial Systems (the “IT Director”), works closely with our Director, IT Operations, Security and Compliance, who serves as our Chief Information Security Officer (the "CISO") and leads an internal team that works directly with our third-party vendors to manage our cybersecurity risk management program and activities.
The internal team monitors our information systems for cybersecurity threats, reviews cybersecurity incidents, analyzes emerging threats, and develops and implements risk mitigation strategies.
+Added: The CISO has over 25 years of progressive experience in information technology in both publicly traded and private companies.
Under our CFO’s authority, the IT Director periodically reports on the cybersecurity program to our executive leadership team, including by providing the team with updates on cybersecurity threats and incidents, the status of ongoing projects and initiatives, performance metrics, and additional cybersecurity topics.
−Removed: On an annual basis, the IT Director reviews the results of the current state of cybersecurity risk management, including the results of our cybersecurity risk assessment and any action plan to address any identified vulnerabilities.
+Added: On an annual basis, both the IT Director and the CISO review the results of the current state of cybersecurity risk management, including the results of our cybersecurity risk assessment and any action plan to address any identified vulnerabilities.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.