12 unchanged sentences
To address this increased risk we are continually enhancing our Disaster Recovery and Business Continuity capabilities enabling system and data recovery and reducing the overall length our systems would be unavailable for normal operations.
+Added: In addition, we maintain policies and governance controls for the responsible use of artificial intelligence, including employee training and guidance intended to promote appropriate use and protect the confidentiality of Company and third-party information.
+Added: These measures are designed to help manage risks associated with AI-enabled tools, including potential intellectual property and data exposure.
To date, risks from cybersecurity threats have not materially affected the Company, and we do not believe these threats are reasonably likely to materially affect the Company, including its business strategy, financial condition or results of operations.
1 unchanged sentence
Refer to Item 1A – Risk Factors under the heading “ Our business operations may be adversely affected by information technology systems interruptions or intrusion " for additional information.
−Removed: Our cybersecurity program is overseen by a cross-functional committee of senior business leaders and is led by our Senior Vice President of Information Services and Chief Digital Officer (CDO).
+Added: Our cybersecurity program is overseen by a cross-functional committee of senior business leaders and is led by our Senior Vice President, Chief Digital and Information Services Officer (CIO).
This management committee meets regularly and is charged with overseeing our cybersecurity strategy, seeking to ensure that cyber risks relating to the Company and its operations are managed, and that the program is aligned with the Company's business goals and objectives.
−Removed: The CDO has a formal education in information technology as well as extensive experience working in the Company’s information and technology function;
+Added: The CIO has a formal education in information technology as well as extensive experience working in the Company’s information and technology function;
and receives periodic training and education on cybersecurity-related topics.
−Removed: The Board of Directors has delegated to the Audit Committee to assist the Board of Directors in fulfilling its oversight responsibilities on cybersecurity matters.
−Removed: The Audit Committee oversees a number of the Company’s risk management practices, including those relating to cybersecurity risks.
−Removed: Our CDO provides updates on cybersecurity risks, threats, key developments in Company policies and practices, and related risk exposures to the Audit Committee regularly.
−Removed: A member of the Audit Committee will then brief the full Board of Directors on items discussed within the Audit Committee, including cybersecurity risks and related matters.
−Removed: Additionally, management provides an update to the full Board of Directors on cybersecurity matters at least once a year, and more often as needed.
−Removed: The Board of Directors annually reviews and approves the capital and operating budgets, ultimately reviewing and approving the amount spent by the Company on cybersecurity measures.
+Added: The Audit Committee has primary responsibility for overseeing risks related to cybersecurity and privacy, although the full Board also exercises oversight over these risks.
+Added: Securing the information of our customers, employees, vendors and other third parties is important to us.
+Added: At least quarterly, or more frequently if needed, the Audit Committee and/or the full Board receives detailed reports on data protection and cybersecurity matters from senior IT leaders, including our CIO .
+Added: Our Cyber Sub-Committee meets bi-annually to take a deeper dive into cyber-related risks.
+Added: The topics covered at the various Audit Committee and full Board meetings include risk identification and management strategies, customer data protection, the Company’s ongoing risk mitigation activities, results of third-party assessments and testing, results of tabletop exercises, updates on potential cybersecurity threats, updates on training initiatives and governance.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.