3 unchanged sentences
Atkore’s commitment to cybersecurity emphasizes maintaining secure technology and data environments and the cultivation of a security-minded culture and capability.
−Removed: We do this through education and training, and a layered approach to identifying, preventing, detecting, responding and restoration from cybersecurity threats and incidents.
+Added: We do this through education and training, and a layered approach to identifying, preventing, detecting, responding to and recovering from cybersecurity threats and incidents.
Key elements of our program for assessing, identifying, and managing material risks from cybersecurity threats are anchored in widely used and industry recognized security frameworks and are described below.
4 unchanged sentences
In addition to training, Atkore conducts table-top exercises as often as twice a year to simulate cybersecurity risk and response scenarios.
−Removed: Our cybersecurity team implements measures to ensure that Atkore can quickly identify and mitigate cybersecurity risks.
+Added: Our cybersecurity team implements measures designed to ensure that Atkore can quickly identify and mitigate cybersecurity risks.
Our controls are designed to restrict access to locations that house significant physical information technology assets.
12 unchanged sentences
Based on the information we have as of the date of this Annual Report, we do not believe any risks from cybersecurity threats have materially affected or are likely to materially affect Atkore, including our business strategy, results of operations or financial condition.
+Added: For more information on risks relating to our cybersecurity threats, see Item 1A, “Risk Factors-Risks Related to Our Business-Interruptions in the proper functioning of our information technology (“IT”) systems and the IT systems of those with whom we do business, including from cybersecurity threats, could disrupt operations and cause unanticipated increases in costs or decreases in revenues, or both.”
Cybersecurity Governance and Oversight
−Removed: At the management level, Atkore’s cybersecurity program is led by the Company’s Vice President - Chief Information Officer (“CIO”), who reports to Atkore’s Vice President – Business Development and Strategy, who in turn reports to Atkore’s Chief Executive Officer.
−Removed: Atkore’s CIO has over 30 years of experience in information technology roles with responsibilities including global cyber security strategy, global IT strategy, technology platforms and internal controls.
−Removed: The CIO has a Master of Business Administration from Kellogg School of Management at Northwestern University and a Bachelor of Science in Computer Information Systems from DeVry Institute of Technology.
+Added: At the management level, Atkore’s cybersecurity program is led by the Company’s Vice President - Chief Information Officer (“CIO”) , who is a member of the Executive Leadership Team.
+Added: Atkore’s CIO has over 30 years of experience in information technology roles with responsibilities including global cybersecurity strategy, global IT strategy, technology platforms and internal controls.
+Added: The CIO has a Master of Business Administration from Kellogg School of Management at Northwestern University and
+Added: a Bachelor of Science in Computer Information Systems from DeVry Institute of Technology.
Reporting to the CIO is a Director of Cybersecurity.
−Removed: The current Director of Cybersecurity has over 20 years of experience in information technology roles with responsibilities including cyber security and security architecture
−Removed: and engineering.
−Removed: The CIO is supported by the Cybersecurity Steering Committee (“CSC”), a management committee comprising members of the Executive Leadership Team and includes the leaders of the information technology, legal, finance, human resources, commercial and communications functions and that report to the Chief Executive Officer.
+Added: The current Director of Cybersecurity has over 20 years of experience in information technology roles with responsibilities including cybersecurity and security architecture and engineering.
+Added: The CIO is supported by the Cybersecurity Steering Committee (“CSC”), a management committee comprising members of the Executive Leadership Team and the leaders of the information technology, legal, finance, human resources, commercial and communications functions that report to the Chief Executive Officer.
The CSC supports the CIO in overseeing and managing information security risks and in the event of a cybersecurity incident provides oversight and leadership with respect to incident investigation, mitigation, and remediation.
1 unchanged sentence
This oversight includes a quarterly review of Atkore’s cybersecurity program, including key program metrics, initiatives, and developments.
−Removed: In addition, in the event of a significant cybersecurity incident, Atkore’s policy and process requires timely engagement of and consultation with the Board of Directors.
+Added: In addition, in the event of a significant cybersecurity incident, Atkore’s policy and process require engagement of, and consultation with, the Board of Directors.
Additional information about cybersecurity risks we face is discussed in “Item 1A.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.