2 unchanged sentences
RISK MANAGEMENT AND STRATEGY
−Removed: Table o f Contents
We maintain a technology and cybersecurity program, which includes information security, as part of our overall risk management process with the aim that our information systems, including those of our vendors and other third parties, will be resilient, effective and capable of safeguarding against emerging risks and cybersecurity threats.
3 unchanged sentences
Cybersecurity Agency's National Cyber Incident Scoring System model to benchmark, inform and evaluate the design of our program, our operational capabilities and our program maturity.
+Added: We have designed our cybersecurity policies and procedures to align with international regulatory frameworks, including the NIS2 Directive in the E.U.
+Added: Our program integrates periodic reviews and updates to ensure our controls remain effective and compliant with evolving international regulations.
Consistent with NIST 800-53, our technology and cybersecurity program and controls include a third party and vendor risk management component .
12 unchanged sentences
Our Executive Committee will inform our Board of Directors of cybersecurity incidents, as appropriate, considering a variety of factors, including financial, operational, legal or reputational impact.
−Removed: Our program's maturity and operational readiness are regularly evaluated by independent experts using the U.S.
+Added: Our program's maturity and operational readiness are regularly evaluated by internal audit and independent experts using the U.S.
NIST's CyberSecurity Framework and penetration tests.
2 unchanged sentences
We are committed to appropriate cybersecurity governance and oversight.
−Removed: Our technology and cybersecurity program is the principal responsibility of our Chief Information Officer and CISO , each of whom have over 20 years of experience in information systems, including cybersecurity training and experience .
+Added: Our technology and cybersecurity program is the principal responsibility of our Chief Information Officer and CISO , each of whom have over 20 years of
+Added: experience in information systems, including cybersecurity training and experience .
Additionally, we have a Cybersecurity steering committee that includes senior representatives from our Legal, Finance and IT departments, which meets regularly to discuss cybersecurity matters.
5 unchanged sentences
• Incident report and learnings from any cybersecurity events;
−Removed: Table o f Contents
−Removed: • Compliance with regulatory requirements and industry standards.
+Added: • Compliance with regulatory requirements and industry standards, including international regulations such as the NIS2 Directive in the E.U.
We do not believe that any risks from cybersecurity threats have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition during the period covered by this filing.
For additional information on our cybersecurity risks, please read Item 1A.
−Removed: Risk Factors - A breakdown or breach of our information systems could subject us to liability or interrupt the operation of our business , included in this report.
+Added: Risk Factors - A breakdown or breach of our information systems could subject us to liability or interrupt the operation of our business operations , included in this report.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.