What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2025-03-31 compared with 2024-04-16 · 32 added, 16 removed, 17 unchanged (74% of the section changed)

12 unchanged sentences

in the context of other material risks to the company.

part of our cybersecurity risk management system, our incident management teams track and log security incidents across our company

and our customers to remediate and resolve any such incidents.

Significant incidents are reviewed by a cross-functional working

group to determine whether further escalation is appropriate.

Any incident assessed as potentially being or potentially becoming

material is immediately escalated for further assessment and then reported to designated members of our senior management.

consult with outside counsel as appropriate, including on materiality analysis and disclosure matters, and our senior management

makes the final materiality determinations and disclosure and other compliance decisions.

Our management apprises our independent

registered public accounting firm of matters and any relevant developments.

Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including

compliance with disclosure requirements, cooperation with law enforcement, and related effects on financial and other risks, and reports

any findings and recommendations, as appropriate, to the full Board for consideration.

Senior management regularly discusses cyber risks

and trends and, should they arise, any material incidents with the Chief Information Security Officer.

part of our cybersecurity risk management system, our incident management teams track and log security incidents across our company and

our customers to remediate and resolve any such incidents.

Significant incidents are reviewed by a cross-functional working group to

determine whether further escalation is appropriate.

Any incident assessed as potentially being or potentially becoming material is immediately

escalated for further assessment and then reported to designated members of our senior management.

We consult with outside counsel as

appropriate, including on materiality analysis and disclosure matters, and our senior management makes the final materiality determinations

and disclosure and other compliance decisions.

Our management apprises our independent registered public accounting firm of matters and

any relevant developments.

Audit Committee has oversight responsibility for risks and incidents relating to cybersecurity threats, including compliance with disclosure

requirements, cooperation with law enforcement, and related effects on financial and other risks, and reports any findings and recommendations,

as appropriate, to the full Board for consideration.

Senior management regularly discusses cyber risks and trends and, should they arise,

any material incidents with the Chief Information Security Officer.

Chief Information Security Officer is accountable for our overall cybersecurity program in partnership with other business leaders.

Chief Information Security Officer has extensive experience leading global technology and IT organizations.

Team members and outside experts

supporting our program have relevant education and information, including security for larger multi-national, publicly traded companies.

Our Chief Information Security Officer has leading security certifications, including Certified Information Systems Security Professional

(CISSP), memberships in professional associations in the International Information System Security Certification Consortium and Information

Systems Security Association, an MBA in Management of Technology, and expertise in private, public and governmental entities.

Our information

security team remains abreast of the latest cybersecurity advancements, staying informed about potential threats and emerging risk management

This continuous learning is vital for proactively preventing, detecting, mitigating, and remediating cybersecurity incidents.

Our information security team is responsible for implementing and supervising processes for ongoing monitoring of our information systems,

incorporating advanced security measures and regular system audits to pinpoint vulnerabilities.

In the event of a cybersecurity incident,

our information security team employs a well-defined incident response plan, comprising immediate actions to minimize impact and long-term

strategies for remediation and prevention of future incidents.

business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats,

including as a result of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially

including because of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially

affected in the future by such risks or any future material incidents.

2 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments