3 unchanged sentences
Our commercial success depends on developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity and availability of our data.
+Added: Accordingly, we have adopted processes designed to identify, assess and mange material risks from cybersecurity threats.
Managing Material Risks & Integrated Enterprise Risk Management
9 unchanged sentences
We have not encountered cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition, although we cannot rule out that a cyber-attack in the future could materially affect our ability to operate.
−Removed: Our Board of Directors (the “Board”) is aware of the critical nature of managing risks associated with cybersecurity threats.
−Removed: In recognition of the significance of these threats to our operational integrity and shareholder confidence, the Board has established oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats.
+Added: Our board of directors is aware of the critical nature of managing risks associated with cybersecurity threats.
+Added: In recognition of the significance of these threats to our operational integrity and shareholder confidence, our
+Added: board of directors has established oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats.
Board of Directors Oversight
−Removed: The Nominating and Corporate Governance Committee of the Board bears primary responsibility for oversight of cybersecurity risks.
−Removed: The Nominating and Corporate Governance Committee is briefed on cybersecurity risks at least once each year and any material cybersecurity incidents by the Chief Information Officer (“CIO”) and the Chief Legal Officer (“CLO”), as further described below.
+Added: The Nominating and Corporate Governance Committee of our board of directors bears primary responsibility for oversight of cybersecurity risks.
+Added: The Nominating and Corporate Governance Committee is briefed on cybersecurity risks at least once each year and any material cybersecurity incidents by our chief information officer and our chief financial officer, as further described below.
The Nominating and Corporate Governance Committee is composed of directors equipped with diverse skills needed to oversee the difference facets of cybersecurity risks effectively, including risk management, public company leadership, innovation and technology, corporate governance and finance.
Management’s Role Managing Risk
−Removed: The CIO and the CLO are responsible for updating the Nominating and Corporate Governance Committee on cybersecurity risks and the Company’s mitigation strategies.
+Added: The chief information officer and the chief financial officer are responsible for updating the Nominating and Corporate Governance Committee on cybersecurity risks and our mitigation strategies.
They provide quarterly updates to the Nominating and Corporate Governance Committee, as well as comprehensive briefings at least once per year and appropriate briefings during any potentially material cybersecurity incident.
5 unchanged sentences
• compliance with regulatory requirements and industry standards.
−Removed: In addition to regular scheduled meetings, the Nominating and Corporate Governance Committee, CIO and Chief Executive Officer (“CEO”) maintain an ongoing dialogue regarding emerging or potential cybersecurity risks.
+Added: In addition to regular scheduled meetings, the Nominating and Corporate Governance Committee, our chief information officer and our chief executive officer maintain an ongoing dialogue regarding emerging or potential cybersecurity risks.
Together, they receive periodic updates on significant developments in the cybersecurity landscape to support proactive and responsive board oversight.
The Nominating and Corporate Governance Committee actively participates in strategic decisions related to cybersecurity, reviewing and offering guidance on major initiatives and any potentially material cybersecurity incident.
−Removed: This involvement ensures that cybersecurity considerations are integrated into the Company’s broader strategic objectives.
+Added: This involvement ensures that cybersecurity considerations are integrated into our broader strategic objectives.
Risk Management Personnel
−Removed: Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with the CIO, Jovan Kangrga.
−Removed: Kangrga has managed cybersecurity and information security at Array for the past four years and has over 13 years of total experience as an information technology executive for publicly listed companies.
+Added: Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with the chief information officer, Jovan Kangrga.
+Added: Kangrga has managed cybersecurity and information security at Array for the past five years and has over 14 years of total experience as an information technology executive for publicly listed companies.
Kangrga holds B.S.
2 unchanged sentences
He manages a team with over 40 years of combined experience in cybersecurity.
−Removed: Our CIO reports to our CLO, and both our CIO and CLO are responsible for updating the CEO, the Nominating & Corporate Governance Committee, and the Board on cybersecurity issues.
+Added: Our chief information officer reports to our chief financial officer, and both our are responsible for updating the chief executive officer, the Nominating & Corporate Governance Committee, and our board of directors on cybersecurity issues.
Ongoing Education and Monitoring
−Removed: The CIO leads our cybersecurity team, which remains current with the latest developments in cybersecurity, including potential threats and innovative risk management techniques.
−Removed: This ongoing education is crucial for the effective prevention, detection, mitigation and remediation of cybersecurity threats and incidents.
−Removed: The CIO implements and oversees processes for the regular monitoring of our information systems.
+Added: The chief information officer leads our cybersecurity team, which remains current with the latest developments in cybersecurity, including potential threats and innovative risk management techniques.
+Added: education is crucial for the effective prevention, detection, mitigation and remediation of cybersecurity threats and incidents.
+Added: The chief information officer implements and oversees processes for the regular monitoring of our information systems.
This includes the deployment of advanced security measures and regular system audits, including penetration testing, to identify potential vulnerabilities.
2 unchanged sentences
Reporting to the Board of Directors
−Removed: The CIO regularly informs the CLO and CEO of all significant aspects related to cybersecurity risks and incidents.
+Added: The chief information officer regularly informs the chief financial officer and chief executive officer of all significant aspects related to cybersecurity risks and incidents.
This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential significant risks facing the Company.
−Removed: Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Nominating and Corporate Governance Committee of the
−Removed: Board and, in certain cases, the Board itself, ensuring that they have comprehensive oversight and can provide guidance on any potentially material cybersecurity incident.
+Added: Furthermore, significant cybersecurity matters, and strategic risk management decisions are escalated to the Nominating and Corporate Governance Committee of our board of directors and, in certain cases, the board itself, ensuring that they have comprehensive oversight and can provide guidance on any potentially material cybersecurity incident.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.