1 unchanged sentence
CYBERSECURITY
−Removed: Cybersecurity Risk Management and Strategy
+Added: Cybersecurity Ris k Management and Strategy
The Company’s cybersecurity risk management program is an integral part of its overall enterprise risk management efforts.
4 unchanged sentences
implements appropriate internal controls, and engages independent third-party auditors to evaluate its compliance with security industry standards.
−Removed: The Company’s incident response team, comprised of representatives from the Company’s information technology, information security, product security, engineering, communications, privacy and legal groups, is responsible for addressing actual and potential security threats and other security incidents and implementing the Company’s incident response plan.
−Removed: The Company’s incident response plan includes processes and procedures for assessing potential internal and external threats, escalation, activation and notification, crisis management, and post-incident recovery.
+Added: The Company’s incident response team, comprised of representatives from the Company’s information technology, information security, product security, engineering, communications, privacy and legal groups, is responsible for addressing potential and actual security threats and other security incidents and implementing the Company’s incident response plan.
+Added: The Company’s incident response plan includes processes and procedures for assessing potential internal and external threats, activation, escalation, crisis management, notifications, post-incident recovery and after-action review.
The readiness of the incident response team is promoted through table-top exercises and threat simulations, including during the fiscal year ended February 28, 2026.
6 unchanged sentences
Cybersecurity Governance
−Removed: The Board has overall responsibility for the Company’s enterprise risk management program, including cybersecurity risk, and the Audit and Risk Management Committee assists the Board with this oversight.
−Removed: The Company’s internal audit function reports to the Audit and Risk Management Committee and, among other things, provides independent assurance on the Company’s risk management activities and internal controls related to cybersecurity risk.
+Added: The Board oversees the Company’s enterprise risk management program, including cybersecurity risk.
+Added: The Audit and Risk Management Committee assist the Board in this oversight.
+Added: The Company’s internal audit function reports to the Audit and Risk Management Committee and provides independent assurance on the design and operating effectiveness of risk management activities and internal controls related to cybersecurity risk.
For more information, see Part 3, Item 10, “Directors, Executive Officers and Corporate Governance – Enterprise Risk Management”.
−Removed: Management’s cybersecurity programs operate under the leadership of the Company’s Chief Information Security Officer (“CISO”), who oversees a team of information and product security professionals and monitors the prevention, detection, mitigation and remediation of cybersecurity risks.
−Removed: The CISO provides quarterly updates to the Board on the advancing maturity of the Company’s cybersecurity program, including reports on security controls coverage and effectiveness, secure software development and product security, vulnerability testing and remediation, and security operations.
−Removed: The updates also include reports on improvements to processes, technology and governance to mitigate residual cybersecurity risk.
+Added: The Company’s cybersecurity program is managed by the Chief Information Security Officer (“CISO”), who leads a team of information security professionals and is responsible for activities to prevent, detect, mitigate, and remediate cybersecurity risk.
+Added: The CISO provides quarterly updates to the Board on the program, including security control coverage and effectiveness, vulnerability testing and remediation, and security operations.
+Added: These updates also address improvements to processes, technology, and governance intended to reduce residual cybersecurity risk.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.