5 unchanged sentences
Our enterprise risk management program addresses risks facing Columbia from cybersecurity threats impacting our internal systems and/or systems supported by third-party software providers.
−Removed: Our Chief Digital Information Officer ("CDIO") and Chief Information Security Officer ("CISO") are responsible for identifying, assessing and managing these risks.
−Removed: Our CDIO has served in various information technology and digital engineering roles for nearly 30 years.
−Removed: See Item 1 in this Annual Report on Form 10-K for further discussion of our CDIO's background.
−Removed: Our CISO has served in various information technology and information security roles for over 20 years, including management of information security programs in the Department of Defense, private and public companies, as well as holds multiple industry certifications in information security.
+Added: On January 6, 2025, Skip Potter, Executive Vice President, Chief Digital Information Officer, departed the Company.
+Added: Jim Swanson, Executive Vice President and Chief Financial Officer, is overseeing the digital technology department at the Company in an interim capacity.
+Added: Our Chief Information Security Officer ("CISO") reports to Mr.
+Added: Swanson and is responsible for identifying, assessing and managing risks facing the Company from cybersecurity threats impacting our internal systems and/or systems supported by third-party providers.
+Added: Our CISO has served in various information technology and information security roles for over 20 years, including management of information security programs in the Department of Defense, private and public companies, and holds multiple industry certifications in information security.
We leverage certain third-party providers and our internal Incident Response Team to alert us when a cybersecurity event occurs.
3 unchanged sentences
Our risk assessment process related to cybersecurity threats is subject to change in the future as threats may evolve over time.
−Removed: Our Information Security committee oversees this cybersecurity program and consists of senior management, including our CDIO, Chief Financial Officer and Chief Administrative Officer and General Counsel.
+Added: COLUMBIA SPORTSWEAR COMPANY | 2024 FORM 10-K | 17
+Added: Our Information Security committee oversees this cybersecurity program and consists of senior management, including Mr.
+Added: Swanson and our Chief Administrative Officer and General Counsel.
At least quarterly, this committee reviews updates regarding cybersecurity threats and incidents that have occurred.
4 unchanged sentences
The Board has delegated primary oversight of the management of cybersecurity risk to the Audit Committee.
−Removed: The Audit Committee annually reviews the strategies, investments and risk related to Columbia's information technology systems, including a review of Columbia's cybersecurity programs, and also receives quarterly updates from our CISO.
−Removed: The Board is informed of cybersecurity events to the extent they may materially impact Columbia or management otherwise believes they should be escalated.
−Removed: See Item 1A of this Annual Report on Form 10-K for more information of risks relating to cybersecurity, including the risk factors "We Rely on Information Technology Systems, including Third-Party Cloud-based Solutions, and Any Failure of These Systems May Result in Disruptions or Outages in Our E-Commerce and In-Store Retail Platforms, Loss of Processing Capabilities, and/or Loss of Data, Any of Which May Have a Material Adverse Effect on Our Financial Condition, Results of Operations or Cash Flow" and "A Security Breach of Our or Our Third-
−Removed: COLUMBIA SPORTSWEAR COMPANY | 2023 FORM 10-K | 17
−Removed: Parties' Systems, Exposure of Personal or Confidential Information or Increased Government Regulation Relating to Handling of Personal Data, Could, Among Other Things, Disrupt Our Operations or Cause Us to Incur Substantial Costs or Negatively Affect Our Reputation".
+Added: The Audit Committee annually reviews the strategies, investments and risks related to Columbia's information technology systems, including a review of Columbia's cybersecurity programs, and also receives quarterly updates from our CISO.
+Added: The Board is informed of cybersecurity events to the extent they may materially impact Columbia or management otherwise believes they should be escalated to the Board.
+Added: See Item 1A of this Annual Report on Form 10-K for more information of risks relating to cybersecurity, including the risk factors "We Rely on Information Technology Systems, including Third-Party Cloud-based Solutions, and Any Failure of These Systems or Interruption in Services Provided by the Systems May Result in Disruptions or Outages in Our E-Commerce and In-Store Retail Platforms, Loss of Processing Capabilities, and/or Loss of Data, Any of Which May Have a Material Adverse Effect on Our Financial Condition, Results of Operations or Cash Flow" and "A Security Breach of Our or Our Third-Parties' Systems, Exposure of Personal or Confidential Information or Increased Government Regulation Relating to Handling of Personal Data, Could, Among Other Things, Disrupt Our Operations or Cause Us to Incur Substantial Costs or Negatively Affect Our Reputation".
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.