14 unchanged sentences
We conduct thorough security assessments of all third-party providers before engagement and maintain ongoing monitoring to ensure compliance with our cybersecurity standards.
−Removed: The monitoring includes quarterly assessments by our Vice President of Technology and Deployment (the “VP of Technology”) and on an ongoing basis by our security engineers.
+Added: The monitoring includes quarterly assessments by our Cybersecurity Manager and on an ongoing basis by our security engineers.
This approach is designed to mitigate risks related to data breaches or other security incidents originating from third parties.
8 unchanged sentences
Management’s Role Managing Risk
−Removed: The VP of Technology and Deployment and the CEO play a pivotal role in informing the Audit Committee on cybersecurity risks.
−Removed: They provide comprehensive briefings to the Audit Committee on a semi-annual basis, with a minimum frequency of once per year.
+Added: The COO and the CEO play a pivotal role in informing the Audit Committee on cybersecurity risks.
+Added: The COO was Castellum’s Vice President of Technology and Deployment before becoming COO in September of 2024, and is a certified CMMC Professional.
+Added: They provide comprehensive briefings to the Audit Committee on an at least an annual basis.
These briefings encompass a broad range of topics, including:
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.