7 unchanged sentences
We test and evaluate this plan on a routine basis.
−Removed: We train our team members on cybersecurity risks and mitigation and retain experienced cybersecurity consultants prepared to assist us in the event of any breach.
−Removed: For material cybersecurity risks, we’ve developed mitigation measures to reduce the risk’s likelihood of occurrence and/or its expected impact.
+Added: We train our team members on cybersecurity risks and mitigation and retain experienced third-party cybersecurity consultants prepared to assist us in the event of any breach.
+Added: For material cybersecurity risks, we've developed mitigation measures to reduce each risk's likelihood of occurrence and/or its expected impact.
Such mitigation measures have involved, among other things, implementing additional technology controls or policies, increased training for Company personnel, and obtaining additional insurance for the identified risk.
9 unchanged sentences
For a discussion of how risks from cybersecurity threats affect our business, see “Part 1.
−Removed: Risk Factors – Risk Related to our Business – Information technology failures and data security breaches could harm our business” in this Annual Report on Form 10-K.
+Added: Risk Factors – Risk Related to our Business – Information technology failures or cyber incidents could harm the Company's business” in this Annual Report.
As of the date of this Annual Report, we do not believe that any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, have materially affected or are reasonably likely to have a material adverse effect on us, our business strategy, results of operations, or financial condition .
1 unchanged sentence
Our Board has overall responsibility for risk oversight, with its committees assisting the Board in performing this function based on their respective areas of expertise.
−Removed: Our Board has delegated oversight of risks related to cybersecurity to the Legal and Compliance Oversight ("LCO") Committee and the review of materiality determinations of cyber incidents to the Audit Committee.
+Added: Our Board has delegated oversight of risks related to cybersecurity to the Legal and Compliance Oversight ("LCO") Committee and the review of materiality determinations of cybersecurity incidents to the Audit Committee.
The LCO Committee is charged with, among other responsibilities, reviewing our cybersecurity processes for assessing key strategic, operational, and compliance risks.
1 unchanged sentence
The Senior Director's presentations to the LCO Committee include assessments of cyber risks, the threat landscape, updates on incidents, and reports on our investments in cybersecurity risk mitigation and governance.
−Removed: The Chair of the Audit Committee is regularly informed of both material and non-material cybersecurity risks and incidents.
−Removed: The full Audit Committee is notified any time our incident response program has determined that a cybersecurity incident is material or requires reporting to a regulatory body.
+Added: The Chair of the Audit Committee is regularly informed by our CFO of both material and non-material cybersecurity risks and incidents.
+Added: The full Audit Committee must be notified any time our incident response program has determined that a cybersecurity incident is material or requires reporting to a regulatory body.
Our cybersecurity team is led by our Senior Director who reports directly to our Chief Financial Officer and is responsible for assessing and managing cybersecurity risks.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.