3 unchanged sentences
The company’s risk management programs for cybersecurity are integrated into the company’s enterprise risk management and general compliance programs and processes.
−Removed: CYBERSECURITY, continued
Our cybersecurity program utilizes a layered, defense-in-depth strategy to identify and mitigate cybersecurity threats.
18 unchanged sentences
The Audit Committee conducts a minimum of two cybersecurity program updates per year, including a review of capital spend, budget, and staffing, as well as quarterly reports on cybersecurity threats and key risk indicators related to the company’s progress on risk mitigation activities.
−Removed: The Governance and Compliance Committee, as part of its oversight for the enterprise risk management program company-wide, reviews and ensures that the company’s oversight and governance structure related to company risks, including cybersecurity risks, remains appropriate and that risks are appropriately managed.
+Added: The Governance and Compliance Committee, as part of its oversight for the enterprise risk management program company-wide, reviews the company’s oversight and governance structure related to company risks, including cybersecurity risks, remains appropriate and that risks are appropriately managed.
The company’s CIO oversees the company’s information technology programs and investments.
The company’s CISO reports to the CIO and oversees the company’s information security programs.
−Removed: The company’s CIO has over thirty years of information technology experience, including ten years in various information technology leadership roles.
+Added: The company’s CIO has over 30 years of information
+Added: CYBERSECURITY, continued
+Added: technology experience, including 10 years in various information technology leadership roles.
Our CIO holds a bachelor of science and master of science degrees in organizational communications as well as an M.B.A.
in information technology.
−Removed: The company’s CISO has over thirty years of experience in information security and is a Certified Information Security Manager ® (CISM ® ) , a Certified Data Privacy Solutions Engineer™ (CDPSE ® ), as well as being Certified in Risk and Information Systems Control ® (CRISC ® ).
+Added: The company’s CISO has over 30 years of experience in information security and is a Certified Information Security Manager ® (CISM ® ) , a Certified Data Privacy Solutions Engineer™ (CDPSE ® ), as well as being Certified in Risk and Information Systems Control ® (CRISC ® ).
Our CISO holds a bachelor of science degree in electric engineering as well as an M.B.A.
in operations, technology.
−Removed: CYBERSECURITY, continued
−Removed: Both the CIO and CISO regularly report to the Audit Committee, Board and Governance and Compliance Committee, on the company’s identification, prevention, detection, mitigation and remediation of cybersecurity risks and incidents.
−Removed: In 2024, the Board reviewed the company’s cybersecurity program and maturity assessment, while the Audit Committee provided regular oversight of cybersecurity risks, with cybersecurity discussions and dashboard reviews of key performance indicators and risks at five committee meetings during the course of the year.
+Added: Both the CIO and CISO regularly report to the Audit Committee, and Board, on the company’s identification, prevention, detection, mitigation and remediation of cybersecurity risks and incidents.
+Added: In 2025, the Board reviewed the company’s cybersecurity program and maturity assessment, while the Audit Committee provided regular oversight of cybersecurity risks, with cybersecurity discussions and dashboard reviews of key performance indicators and risks at four committee meetings during the course of the year.
With respect to specific incidents, the company leverages an incident response framework to elevate and evaluate specific incidents to the CIO and CISO, along with the company’s senior leadership, including the finance and legal functions.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.