7 unchanged sentences
Additionally, the CIRP is referenced in and integrated into the Company’s Cross-Functional Incident Response Plan, which serves as an outline of the actions to be taken across the Company immediately following a vehicle incident.
−Removed: Aurora’s Information Security team reports to and is led by our Vice President, Head of Security Engineering, who is responsible for structuring and driving all cybersecurity initiatives at Aurora.
+Added: Aurora’s Information Security team reports to and is led by our Chief Information Security Officer (CISO), who is responsible for structuring and driving all cybersecurity initiatives at Aurora.
This individual regularly reports cybersecurity progress to our Board of Directors , as well as senior leadership across the Company.
The Information Security team proactively reports, on a company-wide basis, the status of cybersecurity initiatives and risks, along with various assessments of our information security programs and the emerging threat landscape.
−Removed: We also perform periodic assessments and audits internally and also leverage third party experts , and the results of such assessments and audits are reported directly to senior leadership.
−Removed: Following these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards and regularly monitor the effectiveness of our safeguards.
+Added: We maintain rigorous security and privacy controls that are aligned with industry standards and best practices to protect Aurora and Customer data while also ensuring the reliability of our products and platform.
+Added: As part of this program, we perform periodic assessments, internal audits and engage with third party auditors with relevant industry expertise .
+Added: The results of such assessments and audits are reported directly to senior leadership.
+Added: Following these risk assessments, we re-design, implement, and maintain reasonable safeguards to minimize identified risks, reasonably address any identified gaps in existing safeguards and regularly monitor the effectiveness of our
We also actively engage with key partners, vendors, customers, industry participants, government entities, intelligence and law enforcement communities as part of our continuing efforts to evaluate and enhance the effectiveness of our information security policies and procedures, especially around self-driving / autonomous vehicles.
8 unchanged sentences
Our information security management team is responsible for assessing and managing material risks from cybersecurity threats.
−Removed: Our Vice President, Head of Security Engineering has more than thirty-five plus years of experience as a security expert and more than twenty-five plus years of experience leading information security teams at renowned technology companies.
+Added: Our Chief Information Security Officer (CISO) has more than thirty-five plus years of experience as a security expert and more than twenty-five plus years of experience leading information security teams at renowned technology companies.
Members of our security operations team are responsible for notifying the information security management team about cybersecurity incidents.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.