31 unchanged sentences
practices and standards.
−Removed: For 2023, our Information Security Management System is compliant with ISO 27001.
−Removed: We also had a SOC 2, Type
−Removed: 2 review performed for the year 2023.
+Added: For 2024 and 2023, our Information Security Management System is compliant with ISO 27001.
+Added: We also had SOC 2,
+Added: Type 2 reviews performed for the years 2024 and 2023.
risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from
14 unchanged sentences
recognized standards such as the ISO 27001 framework, healthcare regulatory guidelines under HIPAA and other recognized standards.
−Removed: Cybersecurity
+Added: Cybersecurity Governance
Cybersecurity
4 unchanged sentences
subcommittee receive updates on a quarterly basis from senior management, including leaders from our Information Security, Finance, Internal
−Removed: Audit, Compliance and Legal teams regarding matters of cybersecurity.
+Added: Audit, Compliance and Legal teams regarding cybersecurity matters.
This includes existing and new cybersecurity risks, status on how
−Removed: management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents, (if any), and status on key information
+Added: management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents, (if any), and the status on key information
security initiatives.
−Removed: cybersecurity risk management and strategy processes are overseen by leaders from our Information Technology department.
−Removed: These individuals
−Removed: are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management
−Removed: of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident
−Removed: response plan, and report to the Cybersecurity subcommittee on any appropriate items.
+Added: Our cybersecurity
+Added: risk management and strategy processes are overseen by our Vice President of IT Infrastructure and leaders from our Information
+Added: Technology department.
+Added: individuals are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through
+Added: their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the
+Added: operation of our incident response plan, and report to the Cybersecurity subcommittee on any appropriate items.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.