3 unchanged sentences
The company’s risk management programs for cybersecurity are integrated into the company’s enterprise risk management and general compliance programs and processes.
+Added: CYBERSECURITY, continued
Our cybersecurity program utilizes a layered, defense-in-depth strategy to identify and mitigate cybersecurity threats.
18 unchanged sentences
The Audit Committee conducts a minimum of two cybersecurity program updates per year, including a review of capital spend, budget, and staffing, as well as quarterly reports on cybersecurity threats and key risk indicators related to the company’s progress on risk mitigation activities.
−Removed: The Governance and Compliance Committee, as part of its oversight for the enterprise risk management program company-wide, reviews and ensures that the company’s oversight
−Removed: and governance structure related to company risks, including cybersecurity risks, remains appropriate and that risks are appropriately managed.
+Added: The Governance and Compliance Committee, as part of its oversight for the enterprise risk management program company-wide, reviews and ensures that the company’s oversight and governance structure related to company risks, including cybersecurity risks, remains appropriate and that risks are appropriately managed.
The company’s CIO oversees the company’s information technology programs and investments.
The company’s CISO reports to the CIO and oversees the company’s information security programs.
−Removed: The company’s CIO has over 30 years of information technology experience, including nine years in various information technology leadership roles.
+Added: The company’s CIO has over thirty years of information technology experience, including ten years in various information technology leadership roles.
Our CIO holds a bachelor of science and master of science degrees in organizational communications as well as an M.B.A.
3 unchanged sentences
in operations, technology.
+Added: CYBERSECURITY, continued
Both the CIO and CISO regularly report to the Audit Committee, Board and Governance and Compliance Committee, on the company’s identification, prevention, detection, mitigation and remediation of cybersecurity risks and incidents.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.