18 unchanged sentences
Detection and Analysis .
−Removed: Cybersecurity incidents may be detected through a variety of means, which include, but are not limited to, automated event-detection notifications or similar technologies which are monitored by our security operations team, as well as notifications from employees or third-party providers.
−Removed: Once a cybersecurity incident is identified, including third-party cybersecurity events, our incident response team investigates the incident, determines the nature of the event and assesses the severity of the event and sensitivity of any compromised data.
+Added: Cybersecurity incidents may be detected through a variety of means, which include, but are not limited to, automated event-detection notifications or similar technologies that are monitored by our security operations team, as well as notifications from employees or third-party providers.
+Added: Once a cybersecurity incident is identified, including third-party cybersecurity events, our incident response team investigates the incident, determines the nature of the event and assesses the severity of the event, including any operational impact and sensitivity of any compromised data.
Response and Recovery .
10 unchanged sentences
The Board has delegated to the Franklin Audit Committee oversight responsibility regarding cybersecurity risks.
−Removed: Our CSO reports directly to our Chief Risk and Transformation Officer, each of whom has extensive experience in information security and risk
+Added: Our CSO reports directly to our Chief Risk and Transformation Officer, each of whom has extensive experience in information security and risk management.
The Board and/or Audit Committee receive(s) a report on cybersecurity matters, including threats, events and program enhancements, at least annually.
2 unchanged sentences
We routinely face risks of cybersecurity incidents, whether through attempted or actual:
−Removed: cyber-attacks or cyber intrusions, ransomware and other forms of malware, computer viruses, attachments to emails, phishing, extortion or other scams.
+Added: cyber-attacks or cyber intrusions, ransomware and other forms of malware, computer viruses, attachments to emails, individual or brand impersonation, phishing, extortion or other scams.
Although we make efforts to maintain the security and integrity of our systems, these systems and the proprietary, confidential and personal information that resides on or is transmitted through them, are subject to the risk of a cybersecurity incident or disruption, and there can be no assurances regarding the effectiveness of our security efforts and measures or those of our third-party providers who have access to, transmit, or store such data.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.