2 unchanged sentences
Risk Management and Strategy
−Removed: We have certain processes in place to assess, identify and manage material cybersecurity risks.
−Removed: We also periodically monitor and test our information systems for potential vulnerabilities.
−Removed: We use various tools designed to help identify, investigate and resolve cybersecurity incidents, and to help recover from them in a timely manner.
−Removed: These processes, policies and tools comprise our cybersecurity risk program and are integrated into our overall risk management program.
−Removed: We have implemented cybersecurity processes in accordance with our risk profile and business size and we are continually seeking to improve processes to enhance our risk management processes.
−Removed: Currently, we engage external resources that contribute to our existing cybersecurity practices and organizational risk assessment systems.
−Removed: For example, we have an employee training program that includes annual cybersecurity awareness training that is reinforced by approximately quarterly phishing campaigns.
−Removed: In order to help protect us from any related cybersecurity vulnerabilities, we take a risk-based approach to the evaluation of third -party providers with whom we engage and apply mitigations and processes based on our evaluation of the sensitivity of the data accessed by the vendor and the maturity of the third -party service provider’s programs.
−Removed: In fiscal 2024, and through the filing of this Annual Report on Form 10-K, we have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.
+Added: We maintain a proactive approach to identifying, assessing, and mitigating cybersecurity risks, which is integrated into our broader risk considerations and informed by industry best-practices.
+Added: Our efforts include, but are not limited to, continuous monitoring of systems for vulnerabilities, deployment of advanced security tools for threat detection and response, and implementation of access controls and encryption to protect sensitive data.
+Added: We maintain an official Incident Response Policy that outlines procedures for triage, containment, remediation, and recovery in the event of a cybersecurity incident.
+Added: In addition, we conduct periodic employee training and phishing simulations to reinforce awareness and preparedness.
+Added: In fiscal year 2025, and through the filing of this Annual Report on Form 10-K, we have not identified cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.
Cybersecurity Governance
−Removed: Our management team, including our Chief Financial Officer, and our external information technology service provider are responsible for assessing and managing our material risks from cybersecurity threats.
−Removed: We have outsourced implementation and day-to-day function of our overall cybersecurity risk management program to our third-party information technology service provider.
−Removed: Our management team supervises both our internal personnel and our third-party information technology service provider.
−Removed: Our management team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from the finance department or external information technology personnel;
−Removed: threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us;
−Removed: and alerts and reports produced by security tools deployed in the information technology environment.
−Removed: Our Board of Directors has delegated oversight of cybersecurity risk management to the Audit Committee.
−Removed: The Audit Committee reviews our major cybersecurity risk exposures and the steps that our management has taken to monitor and control such exposures.
−Removed: The Audit Committee receives periodic reports from management on our cybersecurity risks.
−Removed: In addition, management updates the Audit Committee, as necessary or appropriate, regarding any material cybersecurity incidents.
+Added: Oversight of cybersecurity resides with our management team, including our Chief Financial Officer, our Director, of IT & Cybersecurity with day-to-day management and execution of our cybersecurity program being a shared responsibilities between our Director of IT & Cybersecurity and our third-party managed cybersecurity services provider .
+Added: Our Director of IT & Cybersecurity has over 25 years of experience in information technology and cybersecurity and reports directly to our Chief Financial Officer.
+Added: Management monitors cybersecurity risks through regular briefings and reports generated from security tools.
+Added: Our Board of Directors has delegated oversight of cybersecurity risk management to our Audit Committee, which reviews significant risk exposures and receives periodic updates from management.
+Added: Any material cybersecurity incidents would be escalated in accordance with our Incident Response Policy and applicable disclosure procedures.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.