8 unchanged sentences
Additionally, we partner with third-party experts to conduct periodic penetration tests and to evaluate our information technology infrastructure for vulnerabilities.
−Removed: We also evaluate cybersecurity risks associated with third-party vendors that provide the hosted applications we use in our financial close process through review of their System and Organization Controls (“SOC”) 1 reports at least annually.
+Added: We also evaluate cybersecurity risks
+Added: associated with third-party vendors that provide the hosted applications we use in our financial close process through review of their System and Organization Controls (“SOC”) 1 reports at least annually.
We continue to invest in our information technology infrastructure and cybersecurity program to strengthen our ability to protect the confidentiality, integrity, and availability of our data and the security of our information systems.
3 unchanged sentences
The results are analyzed to identify vulnerabilities and then risk management/mitigation plans are designed, implemented, and evaluated for effectiveness.
−Removed: If a cybersecurity incident were to occur, we would implement our incident response plan in an effort to contain and mitigate the threat.
−Removed: As part of our incident response plan, our Cybersecurity Incident Response Team (a cross-functional taskforce comprised of senior representatives), would convene to assess the potential impact to our business, including financial reporting requirements and legal implications.
−Removed: We, like other companies in our industry, face a number of cybersecurity risks in connection with our business.
−Removed: Although such risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we and/or our vendors have, from time to time, experienced threats to, or security incidents, related to our data and systems or that had the potential to otherwise impact our business.
+Added: In the event of a cybersecurity incident, we maintain an incident response plan in an effort to contain and mitigate the threat.
+Added: As part of our incident response plan, our Cybersecurity Incident Response Team (a cross-functional taskforce comprised of senior representatives), is responsible for convening to assess the potential impact to our business, including financial reporting requirements and legal implications.
+Added: We, like other companies in our industry, face a number of cybersecurity risks, including cybersecurity incidents, in connection with our business.
+Added: Although such risks and incidents have not materially affected us , including our business strategy, results of operations or financial condition, to date, we and/or our vendors have, from time to time, experienced threats to, or security incidents, related to our data and systems or that had the potential to otherwise impact our business.
For more information about the cybersecurity risks we face, refer to “Item 1A.
7 unchanged sentences
The individual occupying this role has over 20 years of experience in information technology and cybersecurity and has served in senior cybersecurity leadership positions for over 10 years.
−Removed: Thus, we believe our Head of Information Technology is well-qualified to serve in this role.
Our Head of Information Technology conducts bi-weekly meetings with our information technology department to remain apprised of cybersecurity matters.
−Removed: If a cybersecurity incident were to occur, our Head of Information Technology may inform our Executive Vice President and Head of Technological Operations and/or Audit Committee, depending on the severity of the incident in accordance with the established severity and response matrix as defined in our incident response plan.
+Added: In the event of a cybersecurity incident, our Head of Information Technology may inform our Executive Vice President and Head of Technological Operations and/or Audit Committee, depending on the severity of the incident in accordance with the established severity and response matrix as defined in our incident response plan.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.