4 unchanged sentences
These risks include operational risks, intellectual property or trade secret theft, improper disclosure of confidential information, fraud, extortion, harm to employees or customers, and violation of data privacy or security laws.
−Removed: Cybersecurity risks related to our business, technical operations, privacy, and compliance issues are identified and addressed through a multi-faceted approach including third-party assessments, internal information technology (“IT”)
−Removed: audits, and IT security reviews.
+Added: Cybersecurity risks related to our business, technical operations, privacy, and compliance issues are identified and addressed through a multi-faceted approach including third-party assessments , internal information technology (“IT”) audits, and IT security reviews.
To defend, detect, and respond to cybersecurity incidents, we perform cybersecurity reviews of systems and applications;
5 unchanged sentences
and implement appropriate changes.
+Added: Security events and data incidents are evaluated, ranked by severity, and prioritized for response and remediation.
+Added: Incidents are evaluated to determine materiality as well as operational and business impact, and reviewed for privacy impact.
We leverage third-party expertise to audit and test our cybersecurity program and perform employee awareness training.
1 unchanged sentence
We maintain a cyber liability insurance plan underwritten by multiple insurance companies, which provides protection against certain potential losses arising from cybersecurity incidents.
−Removed: Security events and data incidents are evaluated, ranked by severity, and prioritized for response and remediation.
−Removed: Incidents are evaluated to determine materiality as well as operational and business impact, and reviewed for privacy impact.
Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats , including as a result of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents.
1 unchanged sentence
Cybersecurity Governance
−Removed: Cybersecurity is an important part of our risk management processes and an area of focus for our Board of Directors and management.
+Added: Cybersecurity is an important part of our risk management processes and an area of focus for our Board of Directors (“Board of Directors”) and management.
Our Board of Directors delegated oversight of Cybersecurity to the Audit Committee .
−Removed: Our board members receive reports and presentations on data privacy and security, which address relevant cybersecurity issues, and which can span a wide range of topics, including but not limited to, recent developments, evolving standards, vulnerability assessments, review of risks from third parties such as service providers and suppliers, and the current threat environment.
−Removed: These updates are presented by IT third-party experts, finance, and legal departments.
−Removed: Our board members also engage in ad hoc conversations with management on cybersecurity-related news events and updates to our cybersecurity risk management and strategy programs.
+Added: Members of our Board of Directors receive reports and presentations on data privacy and security, which address relevant cybersecurity issues, and which can span a wide range of topics, including but not limited to, recent developments, evolving standards, vulnerability assessments, review of risks from third parties such as service providers and suppliers, and the current threat environment.
+Added: These updates are presented by IT third-party experts, finance, and
+Added: legal departments.
+Added: Members of our Board of Directors also engage in ad hoc conversations with management on cybersecurity-related news events and updates to our cybersecurity risk management and strategy programs.
The Audit Committee’s cybersecurity-related oversight includes the following:
8 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.