35 unchanged sentences
As the head of our cybersecurity team, both internal and outsourced, our CISO is primarily responsible for assessing and managing risks from cybersecurity threats.
−Removed: The processes by which he is informed about and monitors the prevention, detection,
−Removed: mitigation and remediation of cybersecurity incidents is described above.
+Added: The processes by which he is informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents is described above.
He reports information about such risks to the CDTO and other members of senior management, who, in turn, report them to our Board and Audit and Compliance Committee, as appropriate.
2 unchanged sentences
The Board has delegated certain risk management responsibilities with respect to cybersecurity to our Audit and Compliance Committee.
−Removed: Our Board has identified the oversight of cybersecurity risks to be one of its priorities, and it receives regular reports from management, including the CDTO and the CISO, on various cybersecurity matters, including the security of our information systems, anticipated sources of future material cyber risks and how management is addressing any significant potential vulnerability.
+Added: Our Board has identified the oversight of cybersecurity risks to be one of its priorities, and it receives regular
+Added: reports from management, including the CDTO and the CISO, on various cybersecurity matters, including the security of our information systems, anticipated sources of future material cyber risks and how management is addressing any significant potential vulnerability.
The Board’s Audit and Compliance Committee receives regular updates on cybersecurity threats and other matters.
8 unchanged sentences
Following the Cybersecurity Incident, we implemented certain changes to our information systems and processes meant to provide additional protections to our environment, including, among other things, enhancing the visibility of our Security Operations Center, training practices, detection tools and capabilities, and implemented new tools and processes, expanded the scope of vulnerability management, and increased scrutiny of internet access.
−Removed: In addition, we adopted several technologies that incorporate artificial intelligence capabilities to enhance our protection capabilities.
+Added: In addition, we adopted several technologies that incorporate AI capabilities to enhance our protection capabilities.
However, we continue to face a heightened risk of cybersecurity threats targeting healthcare providers, including ransomware attacks, which may materially impact our operations.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.