3 unchanged sentences
The Board , through its Audit Committee, oversees enterprise risk management, including cybersecurity.
−Removed: To more effectively address cybersecurity threats, we have numerous security layers within our least privilege network approach which is managed by our Information Technology Department.
+Added: To more effectively address cybersecurity threats, we have numerous security layers within our least privilege network approach which is managed by our Information Technology ("IT") department.
Our cybersecurity programs align with numerous standards and continues to grow and develop as new technologies emerge.
Further, we have regular user awareness testing and trainings in place which helps keep all end users and executive leadership up-to-date on the most current threats.
−Removed: The global head of Information Security, possessing credentials in both information technology (“IT”) and cybersecurity, provides regular updates to senior management.
−Removed: Additionally, they provide at least an annual update, or more frequently if necessary, to both the Audit Committee and the full Board regarding the current threat landscape at Balchem, cybersecurity technologies, mitigation strategies, industry trends and best practices that we follow, major cybersecurity incidents (if any), and other areas of importance.
−Removed: The global head of Information Security has responsibility over cybersecurity management globally and reports directly to the Chief Financial Officer.
+Added: The global head of our IT department has responsibility over cybersecurity management globally and reports directly to the Chief Financial Officer.
+Added: He has degrees in both management information systems and cybersecurity - and has held a number of progressing roles, including management of global infrastructure, information security and technology operations at Balchem, in addition to managing a global team of information technology and cybersecurity experts.
+Added: The IT department provides regular updates to senior management.
+Added: Additionally, he provides at least an annual update, or more frequently if necessary, to both the Audit Committee and the full Board regarding the current threat landscape at Balchem, cybersecurity technologies, mitigation strategies, industry trends and best practices that we follow, major cybersecurity incidents (if any), and other areas of importance.
Additional activities to maintain and enhance information security are discussed below.
2 unchanged sentences
National Institute of Standards and Technology ("NIST") framework for information security, which is a set of guidelines, accepted standards, and best practices for mitigating organization cybersecurity risks published by NIST.
−Removed: We continue to make significant investments in industry-leading and advanced technologies as part of our strategy to strengthen our security posture, business continuity capabilities, and ability to protect and safeguard systems and stakeholder data.
+Added: We continue to make significant investments in industry-leading and advanced technologies as part of our strategy to strengthen our security
+Added: posture, business continuity capabilities, and ability to protect and safeguard systems and stakeholder data.
Our Information Security Program and systems are tested and assessed annually by an independent third party.
20 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.