11 unchanged sentences
conduct employee training;
−Removed: and implement appropriate changes.
+Added: and implement appropriate changes to our safeguards and practices.
Security events and data incidents are evaluated, ranked by severity, and prioritized for response and remediation.
1 unchanged sentence
We leverage third-party expertise to audit and test our cybersecurity program and perform employee awareness training.
−Removed: These include periodic reviews of cybersecurity threats and related controls, including review of periodic penetration testing conducted by independent third parties.
+Added: These include periodic reviews of cybersecurity threats and related controls and periodic penetration testing conducted by independent third parties.
+Added: We also conduct due diligence on our third-party vendors, and exercise oversight to ensure such third parties meet established standards, including with respect to cyber-risks.
We maintain a cyber liability insurance plan underwritten by multiple insurance companies, which provides protection against certain potential losses arising from cybersecurity incidents.
4 unchanged sentences
Our Board of Directors delegated oversight of Cybersecurity to the Audit Committee .
−Removed: Members of our Board of Directors receive reports and presentations on data privacy and security, which address relevant cybersecurity issues, and which can span a wide range of topics, including but not limited to, recent developments, evolving standards, vulnerability assessments, review of risks from third parties such as service providers and suppliers, and the current threat environment.
−Removed: These updates are presented by IT third-party experts, finance, and
−Removed: legal departments.
+Added: Members of our Board of Directors regularly and on an ad hoc basis receive reports and presentations on data privacy and security, which address relevant cybersecurity issues, and which can span a wide range of topics, including but not limited to, recent developments, evolving standards, vulnerability assessments, review of risks from third parties such as service providers and suppliers, and the current threat environment.
+Added: These updates are presented by IT third-party experts, finance, and legal departments.
Members of our Board of Directors also engage in ad hoc conversations with management on cybersecurity-related news events and updates to our cybersecurity risk management and strategy programs.
9 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.