7 unchanged sentences
manual and automated tools;
−Removed: subscribing to and analyzing reports of cybersecurity threats and threat actors;
+Added: subscribing to and analyzing certain reports of cybersecurity threats and threat actors;
conducing scans of our environment;
−Removed: evaluating our and our industry’s risk profile and threats reported to us;
+Added: evaluating our and our industry’s risk profile and certain threats reported to us;
coordinating with law enforcement concerning certain threats;
2 unchanged sentences
using external intelligence feeds;
−Removed: and working with a third-party test our incident response processes.
+Added: and working with a third-party to test our incident response processes.
Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example:
23 unchanged sentences
For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1.
−Removed: Risk Factors in this Annual Report on Form 10-K, including “If our information technology systems, or those of third parties upon which we rely, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions;
+Added: Risk Factors in this Annual Report on Form 10-K, including “If our information technology systems, or those of third parties with whom we work, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions;
fines and penalties;
10 unchanged sentences
Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including Security Management.
−Removed: Security Management work with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of
+Added: Security Management works with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of
which they are notified.
1 unchanged sentence
The DCSI provides periodic reports to our board of directors, as well as our Chief Operating Officer, Chief Executive Officer and other members of our senior management as appropriate, concerning the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.
−Removed: The audit committee also receives various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.
+Added: The audit committee also receives various reports, summaries or presentations related to cybersecurity threats, risk and mitigation, and assessment of our cybersecurity program against programs of other organizations.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.