2 unchanged sentences
Cybersecurity
−Removed: We recognize that the safety and security of our systems, technology and infrastructure (and those of key third-party service providers upon which we rely), as well as our content and confidential or sensitive user and employee information, is critical to maintaining the trust and confidence of our users and subscribers, consumers, advertisers and investors (among other stakeholders).
+Added: We recognize that the safety and security of our systems, technology and infrastructure (and those of key third-party service providers upon which we rely), as well as our content and confidential or sensitive user and employee information, is critical to maintaining the trust and confidence of our users and subscribers, consumers, advertisers and investors (among other
+Added: stakeholders).
As a result, Company management has established programs and related processes designed to manage cybersecurity issues, including the assessment, identification and management of cybersecurity risks, together with related mitigation and recovery efforts.
10 unchanged sentences
As part of our information security program, we have implemented a number of tools and procedures designed to identify and remediate vulnerabilities and misconfigurations in our applications and infrastructure, as well as manage access and identities throughout their lifecycles.
−Removed: These tools and procedures
−Removed: are intended to be consistent with ISO and NIST frameworks.
+Added: These tools and procedures are intended to be consistent with ISO and NIST frameworks.
In addition, we have implemented an incident response policy that outlines established processes for addressing cybersecurity issues that leverages a cross-functional cybersecurity incident response team and outside advisors intended to allow the Company to take action in a timely and decisive manner in compliance with applicable laws, rules and regulations during the response, investigation and remediation of a given cybersecurity incident.
13 unchanged sentences
Our board of directors is responsible for overseeing Company management’s execution of its cybersecurity responsibilities, including our approach to cybersecurity risk management.
−Removed: Our board of directors executes this oversight in coordination with our Audit Committee, which pursuant to its charter, assists the Board with risk assessment and risk management policies as they relate to cybersecurity risk exposure (among other risk exposures), as well as part of its regularly scheduled meetings and through discussions with Company management on an as needed basis.
+Added: Our board of directors executes this oversight in coordination with our Audit Committee, which pursuant to its charter, assists the Board with risk assessment and risk management policies as
+Added: they relate to cybersecurity risk exposure (among other risk exposures), as well as part of its regularly scheduled meetings and through discussions with Company management on an as needed basis.
In addition, the assessment, identification and management of cybersecurity risks has been integrated into our ERM efforts.
2 unchanged sentences
Our Chief Technology Officer (“CTO”) is responsible for the development and implementation of our information security program on a Company-wide basis, together with a dedicated team of experienced, Company-wide information security analysts.
−Removed: Our CTO has over twenty years of experience leading the development, implementation, and oversight of information security programs.
+Added: Our CTO has more than fifteen years of relevant experience contributing to the development, implementation, and oversight of information security programs.
Other members of our information security team are generally seasoned professionals with broad cybersecurity experience and expertise, including with respect to cybersecurity threat assessment and detection, mitigation technologies, incident response, and training on such topics.
2 unchanged sentences
At each regularly scheduled meeting of our board of directors, the Chair of our Audit Committee provides quarterly updates regarding significant matters discussed , reviewed, considered and approved by the committee since the last regularly scheduled board meeting (including cybersecurity matters, as and if applicable), as well as timely updates outside of quarterly updates on an as needed basis.
−Removed: Our CTO promptly informs Company management and our Audit Committee (and IAC management) of cybersecurity incidents that meet established reporting thresholds or when otherwise determined appropriate, as well as provides ongoing updates regarding any such incidents until they have been resolved.
+Added: Our CTO promptly informs Company management and our Audit Committee of cybersecurity incidents that meet established reporting thresholds or when otherwise determined appropriate, as well as provides ongoing updates regarding any such incidents until they have been resolved.
Cybersecurity Risks
As discussed above and under “ Item 1A.
−Removed: Risk Factors—General Risk Factors, we face a number of cybersecurity risks across our various businesses, and from time to time we have experienced threats to and unauthorized intrusions of our systems,
−Removed: technology and infrastructure.
+Added: Risk Factors—General Risk Factors ”, we face a number of cybersecurity risks across our various businesses, and from time to time we have experienced threats to and unauthorized intrusions of our systems, technology and infrastructure.
Despite our efforts, we cannot eliminate all risks from cybersecurity threats or incidents, or provide assurances that we have not experienced an undetected cybersecurity incident.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.