12 unchanged sentences
For additional information
−Removed: regarding risks from cybersecurity threats, please refer to Item 1A, “Risk Factors,” in this Annual Report on Form 10-K.
+Added: regarding risks from cybersecurity threats, please refer to Item 1A, “Risk Factors,” in this Annual Report
Management and Strategy
4 unchanged sentences
evaluated annually as a part of our Sarbanes-Oxley information technology control testing procedures.
+Added: We carry cybersecurity insurance coverage intended to help mitigate certain financial exposures that could arise
+Added: from cybersecurity incidents.
+Added: Such coverage is intended to supplement, and not replace, our cybersecurity controls and risk management
+Added: Our cybersecurity insurance policies are designed to provide coverage for certain costs associated with incident response,
+Added: forensic investigation, data restoration, notification obligations, regulatory defense, legal expenses, and certain third-party liabilities
+Added: arising from data breaches or other cybersecurity events.
+Added: Company periodically evaluates its cybersecurity insurance coverage in light of evolving cybersecurity risks, changes in the threat landscape,
+Added: and developments in our business operations.
+Added: While we believe that our cybersecurity insurance coverage is consistent with that maintained
+Added: by similarly situated companies, such coverage is subject to policy limits, deductibles, exclusions, and other terms, and may not be
+Added: sufficient to cover all losses or liabilities that may arise from a cybersecurity incident.
+Added: cybersecurity insurance program is one component of our broader cybersecurity risk management framework, which also includes administrative,
+Added: technical, and physical safeguards designed to identify, assess, and mitigate cybersecurity risks affecting our systems, data, and operations.
have processes to assess, identify, manage, and address material cybersecurity threats and incidents.
−Removed: These include annual and ongoing
−Removed: security awareness training for employees, vulnerability scanning, code reviews, annual pen testing of the network and charging stations,
−Removed: and third-party risk assessments, among others.
−Removed: We actively engage with industry groups for benchmarking and best practices awareness.
−Removed: While we are unaware of having been subjected to or impacted by a significant cybersecurity threat to date, we monitor internally discovered
−Removed: or externally reported issues that may affect our products and services and have processes to assess those issues for potential cybersecurity
−Removed: impact or risk.
+Added: These include annual and
+Added: ongoing security awareness training for employees, vulnerability scanning, and code reviews, among others.
+Added: We actively engage with
+Added: industry groups for benchmarking and best practices awareness.
+Added: While we are unaware of having been subjected to or impacted by a
+Added: significant cybersecurity threat to date, we monitor internally discovered or externally reported issues that may affect our
+Added: products and services and have processes to assess those issues for potential cybersecurity impact or risk.
also have a process to manage cybersecurity risks associated with third-party service providers.
4 unchanged sentences
and notify us of any known or suspected cyber incident, among others.
−Removed: We obtain and review our third-party
−Removed: service providers’ SOC 1 Type II reports for appropriate information technology controls, including security, to ensure that they
−Removed: adhere to these standards, when available.
+Added: We obtain and review our
+Added: third-party service providers’ SOC 1 Type II reports for appropriate information technology controls, including security, to ensure
+Added: that they adhere to these standards, when available.
Cybersecurity
1 unchanged sentence
is an integral part of our risk management processes and a significant area of focus for the Board of Directors and management team.
−Removed: The Audit Committee is responsible for the cybersecurity component of our IT operations, and the Audit Committee reviews the status of
−Removed: ongoing efforts and incidents at every Board of Directors meeting.
+Added: The Audit Committee is responsible for the cybersecurity component of our IT operations.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.