3 unchanged sentences
Cybersecurity risk oversight and management is a top priority for the Company and the Board of Directors.
−Removed: The Company offers a broad portfolio of industrial cybersecurity solutions to its customers, and an understanding of cybersecurity risks is critical to both the Company internally and to our customers and business partners.
+Added: The Company offers a broad portfolio of cybersecurity solutions to its customers, and an understanding of cybersecurity risks is critical to both the Company internally and to our customers and business partners.
The Company identifies, assesses, and manages cybersecurity risk as part of both the enterprise cybersecurity program and the enterprise risk management program.
3 unchanged sentences
• 24/7 Security Operations Center,
−Removed: • advanced endpoint detection/response,
+Added: • advanced endpoint detection and response,
• user behavior analytics,
−Removed: • vulnerability identification/patching,
+Added: • vulnerability identification and patching,
• email threat prevention,
• data loss prevention,
−Removed: • privileged access management, and
−Removed: • ongoing/annual phishing training / testing.
+Added: • identity and privileged access management, and
+Added: • ongoing phishing training and testing.
To ensure the Company is addressing constant changes in the threat landscape, management and the Board of Directors continue to advance their cybersecurity knowledge and stay current with evolving information, regulations and industry practices through our memberships and affiliations with industry leading companies such as Crowdstrike, IBM, and Palo Alto Networks, as well as national organizations such as the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency and others.
8 unchanged sentences
Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected, and the Company believes that they are not reasonably likely to materially affect, the Company, including its business strategy, results of operations or financial condition.
−Removed: The Company experienced a cybersecurity breach in 2020.
−Removed: The Company determined the impact of this incident was not material, but enhanced its cybersecurity controls and processes in response to the incident.
+Added: The Company determined the impact of a past incident was not material, but enhanced its cybersecurity controls and processes in response to the incident.
The Company has taken reasonable measures to protect against future compromise, and believes these measures will protect against material adverse impact, including its business strategy, results of operations or financial condition.
3 unchanged sentences
The Subcommittee meets regularly on at least a quarterly basis.
−Removed: The Subcommittee has full access to management and consultants engaged by management and receives regular reporting directly from the Company’s chief information officer, head of cybersecurity, internal audit and the legal function, as well as third-party assessments of the Company’s cybersecurity processes.
+Added: The Subcommittee has full access to management and consultants engaged by management and receives regular reporting directly from the Company’s chief information officer, head of cybersecurity, internal audit and the legal function, as well as third-party assessments of the Company’s cybersecurity processes and posture.
In addition, the full Board of Directors receives a report on cybersecurity annually, or as necessary .
9 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.