10 unchanged sentences
The checklist is periodically reviewed by the IT Department for lessons learned from both mock and actual incidents, and to assure compliance with most current industry best practices and latest regulatory developments.
−Removed: The incident response plan includes processes through which cybersecurity
−Removed: incidents are escalated to the Company’s executive officers.
+Added: The incident response plan includes processes through which cybersecurity incidents are escalated to the Company’s executive officers.
To improve preparedness for a cybersecurity incident, we conduct tabletop exercises at least annually.
2 unchanged sentences
The mission of the Cyber Security Committee is to be responsible for the cultivation of a corporate culture that recognizes risk awareness and the development of the Company’s cyber security solutions, utilizing thought leadership, technology and systems, and development of applicable policies and procedures.
−Removed: Through its cyber security policy and procedures, the Committee will ensure effective collaboration and coordination between affected departments and staff in identifying and responding to both privacy and cyber security risks and events.
+Added: Through its cyber security policy and procedures, the Committee will ensure effective
+Added: collaboration and coordination between affected departments and staff in identifying and responding to both privacy and cyber security risks and events.
The Committee will oversee the development and implementation of an enterprise-wide strategic framework related to the identification and prevention of cyber security threats as an integral part of the Firm’s risk management process, otherwise known as CISP.
14 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.