8 unchanged sentences
In addition, members of the Cybersecurity Team have multiple network-security certifications relevant to the technologies we deploy.
−Removed: Our Board of Directors provides oversight over our enterprise-wide risk management, which includes cybersecurity risk-management, and the Audit Committee assists the Board with oversight of cybersecurity matters.
−Removed: The VP IT reports on cybersecurity matters to senior management regularly and to the Audit Committee at least annually, and more often if needed.
+Added: Our Board of Directors provides oversight of our enterprise-wide risk management, which includes cybersecurity risk-management, and the Audit Committee assists the Board with oversight of cybersecurity matters.
+Added: The VP IT reports on cybersecurity matters to senior management on a regular basis and to the Audit Committee at least annually, and more often if needed.
The Audit Committee, in turn, makes periodic reports to the Board on relevant cybersecurity matters.
−Removed: Our VP IT, the Manager of the Infrastructure Team, and our General Counsel make up the Information Security Committee, which has the initial responsibility for the assessment of and response to cybersecurity incidents consistent with our formal incident-response plan.
+Added: Our VP IT, the Director of the Infrastructure Team, and our General Counsel make up the Information Security Committee, which has the initial responsibility for the assessment of and response to cybersecurity incidents consistent with our formal incident-response plan.
Pursuant to the incident-response plan, more serious incidents are escalated to other senior members of management, including the Chief Executive Officer, Chief Financial Officer, and Chief Accounting Officer, as well as to the Audit Committee and our external auditors, as appropriate.
10 unchanged sentences
• Cybersecurity Tool and Processes and Industry Standards .
−Removed: We refer to industry standards, such as those issued by NIST and ISO, as part of our efforts to maintain best practices across our environment and we use various cybersecurity tools and processes designed to manage cybersecurity threats including network and systems authentication, network and infrastructure architecture security, endpoint security, and operating system patching.
+Added: We refer to industry standards, such as those issued by National Institutes of Standards and Technology ("NIST") and International Organization for standardization ("ISO"), as part of our efforts to maintain best practices across our environment and we use various cybersecurity tools and processes designed to manage cybersecurity threats including network and systems authentication, network and infrastructure architecture security, endpoint security, and operating system patching.
• Third-Party Network Security Assessments.
5 unchanged sentences
We also ensure SOC-1 or SOC-2 compliance for our third party providers, including our banking, payroll, and stock-plan administration relationships.
−Removed: While we and our service providers have experienced cybersecurity incidents in the past, as of the date of this Report, we are not aware of any previous cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operation, or financial condition.
+Added: While we and our service providers have experienced cybersecurity incidents in the past, as of the date of this Annual Report, we are not aware of any previous cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operation, or financial condition.
For more information regarding the risks we face, please read Part I, Item 1A.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.