16 unchanged sentences
Team members possess a broad scope of expertise, including cybersecurity, information technology, legal, compliance, risk management, insurance and crisis communications.
−Removed: The CIMT operates under the co-leadership of the General Counsel and CDO, who are responsible for oversight and composition of the CIMT, determining whether an incident warrants activating external service providers, providing updates to the Chief Executive Officer and Senior Management Team, keeping
−Removed: our Governance Committee as well as our Board of Directors informed as appropriate, and ultimately establishing and executing our enterprise-wide incident response strategy.
+Added: The CIMT operates under the co-leadership of the General Counsel and CDO, who are responsible for oversight and composition of the CIMT, determining whether an incident warrants activating external service providers, providing updates to the Chief Executive Officer and senior management team, keeping our Governance Committee as well as our Board of Directors informed as appropriate, and ultimately establishing and executing our enterprise-wide incident response strategy.
Training and preparation are essential to the overall success of the CIMT to help ensure team members develop and maintain the operational, technical and managerial skillsets necessary to support the effective function of the CIMT.
11 unchanged sentences
In general, when our cybersecurity team detects a cybersecurity threat by way of an alert within our cyber defense systems, employee notice, or otherwise, our IT Director, Cyber Security, along with other relevant personnel, is promptly apprised of the situation, and actively takes steps to prevent, mitigate, or remediate that threat.
−Removed: If a cybersecurity threat appears to progress into a possible cybersecurity incident, our IT Director, Cyber Security serves as the CIMT’s incident manager and the CDO or designee notifies the Chief Risk Officer of a need to activate the CIMT as appropriate, informs and updates the CIMT, and may consult other internal and external resources with the required technical, application, organizational, and business knowledge to provide effective advice to the CIMT.
+Added: If a cybersecurity threat appears to progress into a possible cybersecurity incident, our IT Director, Cyber Security serves as the CIMT’s incident manager and the CDO or designee notifies the Chief Risk
+Added: Officer of a need to activate the CIMT as appropriate, informs and updates the CIMT and may consult other internal and external resources with the required technical, application, organizational and business knowledge to provide effective advice to the CIMT.
The CIMT responds to potential cybersecurity incidents raised to its attention by making an assessment of the event to determine if a cybersecurity incident has, in fact, occurred, identifying any assets impacted by the incident, determining any information stored and processed by assets identified as compromised, assessing the nature and level of damage that has occurred (accessed, exfiltrated, released to the public, etc.) and revising the assessment throughout the incident response process when additional details are identified.
−Removed: Government contractor, we may be prone to a greater number of those threats than companies in other industries.
+Added: Government contractor, we may be prone to a greater number of cybersecurity threats than companies in other industries.
We believe we are well positioned to meet the requirements of the Cybersecurity Maturity Model Certification ("CMMC") program and are preparing for certification once the requirements are effective.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.