18 unchanged sentences
however, such insurance may not insure us against all claims related to security breaches, cyberattacks and other related breaches.
−Removed: The company has previously experienced threats and breaches to its data and systems but has not experienced a breach that had a material impact on its operations or business and has not incurred any material breach-related expenses for the year ended July 28, 2024 that are reasonably likely to materially affect the company or its business strategy, results of operations or financial condition.
+Added: The company has previously experienced threats and breaches to its data and systems but has not experienced a breach that had a material impact on its operations or business and has not incurred any material breach-related expenses for the last three years that are reasonably likely to materially affect the company or its business strategy, results of operations or financial condition.
However, as discussed in “Item 1A.
5 unchanged sentences
Our Board annually reviews assessments of our information security program under the NIST CSF.
−Removed: It receives benchmarking results of our data security effectiveness and reports from our Chief Technology & Information Officer (CTIO) and Chief Information Security Officer (CISO) on our information security program and recent developments.
+Added: It receives benchmarking results of our data security effectiveness and reports from our Chief Digital & Technology Officer (CDTO) and Chief Information Security Officer (CISO) on our information security program and recent developments.
Our Board has delegated the primary responsibility to oversee cybersecurity matters to the Audit Committee.
−Removed: To fulfill its oversight responsibilities, the Audit Committee reviews the measures implemented by the company to identify and mitigate cybersecurity risks and receives quarterly updates from our CTIO and CISO on the information security program, including the status of significant cybersecurity incidences, the emerging threat landscape, and the status of projects to strengthen the company’s information security posture.
+Added: To fulfill its oversight responsibilities, the Audit Committee reviews the measures implemented by the company to identify and mitigate cybersecurity risks and receives quarterly updates from our CDTO and CISO on the information security program, including the status of significant cybersecurity incidences, the emerging threat landscape, and the status of projects to strengthen the company’s information security posture.
The Audit Committee regularly reports to the Board on cybersecurity matters.
1 unchanged sentence
Our risk oversight processes and disclosure controls and procedures are designed to escalate key risks for the Board to analyze for disclosure purposes.
−Removed: Our CTIO, a member of our corporate leadership team, oversees the team responsible for leading the enterprise-wide information technology strategy, policy, standards, architecture, and processes.
−Removed: Our CISO, who reports to the CTIO, oversees the dedicated information security team, which works in partnership with the company’s ERM team and corporate audit department as well as consultants as part of an overall internal controls process to monitor cybersecurity threats and prevent, detect, mitigate and remediate cybersecurity incidents.
−Removed: The CTIO has over 35 years of information technology experience,
−Removed: including serving in strategic planning, oversight and global operation of information systems and technology functions for companies in the food and beverage industries.
+Added: Our CDTO, a member of our corporate leadership team, oversees the team responsible for leading the enterprise-wide information technology strategy, policy, standards, architecture, and processes.
+Added: Our CISO, who reports to the CDTO, oversees the dedicated information security team, which works in partnership with the company’s ERM team and corporate audit department as well as consultants as part of an overall internal controls process to monitor cybersecurity threats and prevent, detect, mitigate and remediate cybersecurity incidents.
+Added: The CDTO has over 30 years of information technology experience, including serving in strategic planning, oversight and global operation of information systems and technology functions for
+Added: companies in the consumer packaged goods industry.
The CISO has over 25 years of information technology experience, including strategy, execution, and operations of enterprise-wide security programs, including cybersecurity programs, and global information technology infrastructure programs.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.