5 unchanged sentences
Our program is informed by recognized frameworks (such as the U.S.
−Removed: Department of Commerce’s National Institute of Standards and Technology Cybersecurity Framework) and leverages external and internal expertise.
+Added: Department of Commerce’s National Institute of Standards and Technology Cybersecurity Framework) and leverages external and internal expertise, as appropriate.
Our program is integrated into our operations and is widely communicated to employees through annual employee and contractor cybersecurity awareness training, regular awareness exercises, and employee outreach activities including cybersecurity tech talks, on-site digital signage, intranet resources, CEO cybersecurity champion recognition at quarterly town hall meetings, and other targeted communications.
3 unchanged sentences
The cybersecurity program is an important part of the Company’s enterprise risk management (ERM), with our Senior Vice President & Chief Information Officer serving on our ERM Committee and our Vice President of ERM serving as the strategic crisis management coordinator under our cybersecurity incident response plan.
−Removed: We have developed processes for managing cybersecurity incidents including clear allocation of responsibilities and defined incident classifications, escalation requirements based on materiality, and prioritization parameters.
+Added: We have developed processes for managing cybersecurity
+Added: incidents including clear allocation of responsibilities and defined incident classifications, escalation requirements based on materiality, and prioritization parameters.
Our cybersecurity incident response plan is integrated into our ERM Committee risk mitigation action plan process, our Senior Leadership Team (SLT) strategic crisis management action plan process, and our Disclosure Committee protocol for cybersecurity incidents.
14 unchanged sentences
Learnings from these activities are used to inform our training, guide our incident response preparedness and enhance our plans and processes.
−Removed: We have also participated in discussions with third-party service providers who have experienced cybersecurity incidents to inform our cybersecurity program.
+Added: To further inform our cybersecurity program, we also participate in discussions with third-party service providers who have experienced cybersecurity incidents.
Investment in Cybersecurity Program
−Removed: The cybersecurity threat landscape is dynamic and volatile, and requires significant investment on the part of the Company in terms of investing in our employees through talent recruitment, retention, training and development, investing in external resources including procuring and deploying the correct tools to monitor, evaluate, and address threats, investing employee resources to maintain effective processes, and investing in strategic relationships to monitor evolving risks including third-party service provider vulnerabilities.
−Removed: While our third-party services providers have experienced cybersecurity incidents and we have experienced threats to our data and systems, to date, we are not aware that we have experienced a breach that had a material impact on our operations or business, however, cybersecurity risks that may materially impact the Company are discussed in more detail in Item 1A of Part I, “Risk Factors,” under the heading “Cybersecurity and Information Technology Risks,” which should be read in conjunction with the foregoing information.
+Added: The cybersecurity threat landscape is dynamic and volatile, and requires significant investment on the part of the Company in several key areas including investing in our employees through talent recruitment, retention, training and development, investing in external resources including procuring and deploying the correct tools to monitor, evaluate, and address threats, investing employee resources to maintain effective processes, and investing in strategic relationships to monitor evolving risks including third-party service provider vulnerabilities.
+Added: While our third-party service providers have experienced cybersecurity incidents and we have experienced threats to our data and systems, to date, we are not aware that we have experienced a breach that had a material impact on our operations or business, however, cybersecurity risks that may materially impact the Company are discussed in more detail in Item 1A of Part I, “Risk Factors,” under the heading “Cybersecurity and Information Technology Risks,” which should be read in conjunction with the foregoing information.
Our management is responsible for identifying, assessing, and managing our exposure to cybersecurity risk.
12 unchanged sentences
Conagra’s Cybersecurity Team is led by our Chief Information Security Officer (CISO) .
−Removed: Our CISO, a certified information security professional, has over 25 years of cybersecurity leadership experience across multiple industries and holds a Doctor of Science (DSc) degree in Cybersecurity.
−Removed: The CISO reports to our Chief Information Officer (CIO), who has been with Conagra for more than 20
−Removed: years serving in various leadership roles in information technology, finance, and business services.
+Added: Our CISO, a certified information security professional, has more than 25 years of cybersecurity leadership experience across multiple industries and holds a Doctor of Science (DSc) degree in Cybersecurity.
+Added: The CISO reports to our Chief Information Officer (CIO), who has been with Conagra for more than 20 years serving in various leadership roles in information technology, finance, and business services.
We believe our CIO possesses a firm understanding of the Company’s cybersecurity landscape, risks, and knowledge of the capabilities of our cybersecurity and information systems personnel.
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.