9 unchanged sentences
We engage third-party advisory firms to conduct assessments of the maturity of our cybersecurity program, including measures to improve our Payment Card Industry Data Security Standard (“PCI DSS”) compliance, as well as to conduct penetration testing of our shoreside and shipboard assets on a periodic basis.
−Removed: We continue to invest in our information technology, operational technology and cybersecurity programs to layer in the right mix of risk-based controls to protect against evolving threats.
+Added: We continue to invest in our information technology, operational technology and cybersecurity programs to layer in risk-based controls to protect against evolving threats.
We maintain an incident response plan and related policies and protocols which outline procedures for identifying, reporting and responding to cybersecurity incidents.
12 unchanged sentences
In the last three fiscal years, we have not experienced any material cybersecurity incidents and the expenses incurred in connection with cybersecurity incidents were not material.
−Removed: For additional information on the risks from cybersecurity threats and the potential related impacts on the company, refer to Operational Risk Factor f.
−Removed: Our Chief Information Security Officer (“CISO”) leads our worldwide efforts in cybersecurity risk reduction and regulatory compliance.
+Added: For additional information on the risks from cybersecurity threats and the potential related impacts on the company, refer to Operational Risk Factor “e”.
+Added: Our Global Chief Information Security Officer (“CISO”) leads our worldwide efforts in cybersecurity risk reduction and regulatory compliance.
Our CISO oversees risk management across information technology operations, cybersecurity and data privacy.
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.