2 unchanged sentences
Risk Management and
−Removed: The Company's policies
−Removed: and practices are based on frameworks and standards that address risks through a comprehensive, cross-functional approach that assess,
+Added: The Company’s policies and
+Added: practices are based on frameworks and standards that address risks through a comprehensive, cross-functional approach that assess,
identify, monitor, and mitigate material risks from cybersecurity threats as part of the overall enterprise risk management
5 unchanged sentences
to assist in network monitoring and control testing, among other functions of similar capacity.
−Removed: The Company's cybersecurity
−Removed: program focuses on the following areas:
−Removed: ● Technological
−Removed: safeguards that are designed to protect the Company's information systems from cybersecurity threats, including the prevention and detection
−Removed: of systems, access controls, and firewalls, which the Company assesses the vulnerability and cybersecurity threat and makes necessary
−Removed: improvements.
−Removed: ● Utilization
−Removed: of third parties as part of the Company's risk-based approach in identifying and overseeing cybersecurity risks.
−Removed: Company maintains an incident plan that addresses the Company’s response to a cybersecurity event, which is periodically reviewed
−Removed: While the Company is
−Removed: working to adopt the National Institute of Standards and Technology ("NIST") cybersecurity framework, the Company's on-going
−Removed: investment in information systems and utilization of external 3rd parties represents the best means for extensively testing
−Removed: both the design and operational effectiveness of cybersecurity controls, and to ensure continuity and functionality of the Company's
−Removed: operating systems.
−Removed: As of the date of this
−Removed: report, the Company has not experienced any material cybersecurity events.
−Removed: However, the presence of new or more advanced forms
−Removed: of cybersecurity threats could have a material and adverse impact on the business, results of operations, and financial position.
−Removed: For further discussion relating to this topic, see Item 1A.
−Removed: Risk Factors "The Company's information technology systems may
−Removed: be negatively affected by cybersecurity threats."
−Removed: The Audit Committee of
−Removed: the Board of Director's has the responsibility of overseeing the Company's cybersecurity risks.
+Added: The Company’s
+Added: cybersecurity program focuses on the following areas:
+Added: ● Technological safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including the prevention and detection of systems, access controls, and firewalls, which the Company assesses the vulnerability and cybersecurity threat and makes necessary improvements.
+Added: ● Utilization of third parties as part of the Company’s risk-based approach in identifying and overseeing cybersecurity risks.
+Added: ● The Company maintains an incident plan that addresses the Company’s response to a cybersecurity event, which is periodically reviewed and updated.
+Added: While the Company is working
+Added: to adopt the National Institute of Standards and Technology (“NIST”) cybersecurity framework, the Company’s on-going investment
+Added: in information systems and utilization of external 3rd parties represents the best means for extensively testing both the design
+Added: and operational effectiveness of cybersecurity controls, and to ensure continuity and functionality of the Company’s operating systems.
+Added: As of the date of this report, the
+Added: Company has not experienced any material cybersecurity events.
+Added: However, the presence of new or more advanced forms of cybersecurity
+Added: threats could have a material and adverse impact on the business, results of operations, and financial position.
+Added: discussion relating to this topic, see Item 1A.
+Added: Risk Factors “The Company’s information technology systems may be negatively
+Added: affected by cybersecurity threats.
+Added: The Audit Committee of the
+Added: Board of Director’s has the responsibility of overseeing the Company’s cybersecurity risks.
The Chief Financial Officer provides
9 unchanged sentences
for assessing, monitoring, and managing the Company’s cybersecurity risks.
−Removed: The IT Director, along
−Removed: with members of management, inform the Audit Committee on cybersecurity risks by providing periodic updates regarding (i) Status of ongoing
+Added: The IT Director, along with
+Added: members of management, inform the Audit Committee on cybersecurity risks by providing periodic updates regarding (i) Status of ongoing
cybersecurity initiatives and strategies, (ii) The overall state of the Company’s security program and potential exposure to risks, and
2 unchanged sentences
significant developments in cybersecurity risks, ensuring the Audit Committee’s oversight is proactive and responsive.
−Removed: In addition to periodic updates to the Audit Committee, the IT Director,
−Removed: in his capacity, regularly informs the Chief Executive Officer ("CEO") and the Chief Financial Officer ("CFO") regarding
−Removed: matters related to cybersecurity risks and incidents.
−Removed: This ensures the highest level of management are informed of potential risks
−Removed: associated with cybersecurity that could have a material and adverse effect on the Company.
+Added: In addition to periodic updates
+Added: to the Audit Committee, the IT Director, in his capacity, regularly informs the Chief Executive Officer (“CEO”) and the Chief
+Added: Financial Officer (“CFO”) regarding matters related to cybersecurity risks and incidents.
+Added: This ensures the highest level
+Added: of management are informed of potential risks associated with cybersecurity that could have a material and adverse effect on the
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.