2 unchanged sentences
Cybersecurity and Risk Management Strategy
−Removed: Our business involves the storage and transmission of a significant amount of confidential and sensitive information.
+Added: Our business involves the collection, storage, processing and transmission of a significant amount of confidential and sensitive information.
As a result, we take the confidentiality, integrity, and availability of such information seriously and invest significant time, effort, and resources into protecting such information.
1 unchanged sentence
To implement our cybersecurity risk management strategy, we maintain comprehensive processes and safeguards to secure the data we hold and to assess, identify and manage material risks from cybersecurity threats, including:
−Removed: • encrypting sensitive data, utilizing a robust 24/7/365 security monitoring system;
+Added: • encrypting sensitive data;
+Added: • utilizing a robust 24/7/365 security monitoring system;
• regularly assessing product features for security vulnerabilities;
−Removed: • periodically conducting internal penetration tests;
+Added: • periodically conducting both internal and third-party penetration tests;
• providing our customers with multi-factor authentication options to help them effectively protect their information.
4 unchanged sentences
These third parties help us assess our internal preparedness, adherence to best practices and industry standards, and compliance with applicable laws and regulations as well as help us to identify areas for continued focus and improvement.
−Removed: We conduct annual information security awareness training for employees involved in the systems or processes connected to confidential and sensitive information.
−Removed: We also carry insurance that provides certain, limited protection against potential losses arising from a cybersecurity incident.
+Added: We also conduct annual information security awareness training for all employees.
+Added: In addition, we carry insurance that provides certain, limited protection against potential losses arising from a cybersecurity incident.
Cybersecurity Governance
8 unchanged sentences
Notwithstanding the foregoing efforts, there can be no assurance that our cybersecurity risk management program will entirely eliminate all risks from cybersecurity threats or incidents.
−Removed: Like many other businesses, we have experienced, and expect to continually be subject to, cyber-attacks.
−Removed: While these past cyber-attacks have not materially affected and, in our belief, are not reasonably likely to materially affect us, future cybersecurity incidents and threats may materially affect us, including by affecting our business strategy, results of operations, or financial condition.
+Added: Like many other businesses, we have experienced cybersecurity threats and incidents in the past, and expect to continue to experience cybersecurity threats and potentially cybersecurity incidents in the future.
+Added: While the risks from previous cybersecurity threats and incidents have not materially affected, and, in our belief, are not reasonably likely to materially affect, us, including our business strategy, results of operations or financial condition, future cybersecurity threats and incidences may materially affect us, including our business strategy, results of operations, or financial condition.
See Item 1A., " Risk Factors " for additional details regarding cybersecurity risks.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.