9 unchanged sentences
Due to the complex and evolving cybersecurity threat landscape, BBSI engages third-party experts to conduct in-depth threat assessments, identify vulnerabilities, monitor and detect threats, and offer strategic insights into our risk management process.
−Removed: Leveraging the knowledge, expertise, and resources of third-party experts, we regularly evaluate our cybersecurity risk management strategy to help us align
−Removed: with best practices and address cybersecurity threats that could impact our ability to achieve our business objectives.
+Added: Leveraging the knowledge, expertise, and resources of third-party experts, we regularly evaluate our cybersecurity risk management strategy to help us align with best practices and address cybersecurity threats that could impact our ability to achieve our business objectives.
Third-Party Service Provider Risk Management
11 unchanged sentences
The Board’s Risk Management Committee provides oversight of BBSI’s enterprise-wide risk management framework, including the strategies, policies, procedures, processes, and systems established by management to identify, assess, measure, monitor, and manage cybersecurity and other risks facing the Company.
−Removed: The Board of Directors also periodically receives reports from third-party consultants on the current cybersecurity threat environment, the results of third-party penetration testing, and the evaluation of the Company’s cybersecurity preparedness.
+Added: Board of Directors also periodically receives reports from third-party consultants on the current cybersecurity threat environment, the results of third-party penetration testing, and the evaluation of the Company’s cybersecurity preparedness.
Management’s Role in Assessing and Managing Cybersecurity Risk
−Removed: BBSI’s Chief Information Security Officer (“CISO”) leads our enterprise information security program and is primarily responsible for the assessment and management of the Company’s cybersecurity risk.
+Added: BBSI’s Chief Information Security Officer (“CISO”) leads our enterprise information security program and is primarily responsible for the assessment and management of the Company’s cybersecurity risks.
The CISO has extensive experience in information technology and cybersecurity, including at another publicly traded company.
2 unchanged sentences
Ongoing Monitoring and Reporting of Cybersecurity Incidents
−Removed: The Company has an internal security team, supplemented with third-party security partners, to consistently monitor, detect and respond to potential cybersecurity incidents.
+Added: The Company has an internal security team, supplemented with third-party security partners, to regularly monitor, detect and respond to potential cybersecurity incidents.
The Company has a cybersecurity incident reporting protocol that provides a mechanism for the appropriate members of management and the Board to be made aware of cybersecurity incidents.
−Removed: The Company also requires security awareness training for all employees to enable employees to understand their role in preventing and reporting cybersecurity incidents.
+Added: The Company also requires security awareness training for all internal employees to enable employees to understand their role in preventing and reporting cybersecurity incidents.
Reporting to the Board of Directors
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.