3 unchanged sentences
The Audit Committee of the Board, acting through its written charter, serves as the principal agent of the Board in fulfilling its oversight and review of the Company’s policies and procedures with respect to cybersecurity risk assessment and risk management .
−Removed: The Company’s Chief Information Officer (CIO) leads the Company’s cybersecurity risk assessment and risk management program.
−Removed: Our CIO, with over 25 years of experience leading cybersecurity
−Removed: oversight, brings a wealth of expertise and in-depth knowledge that is instrumental in developing and executing our cybersecurity program.
+Added: The Company’s Chief Digital and Information Officer ("CDIO") leads the Company’s cybersecurity risk assessment and risk management program.
+Added: Our CDIO, with over 25 years of experience leading cybersecurity oversight, brings a wealth of expertise and in-depth knowledge that is instrumental in developing and executing our cybersecurity program.
Our cybersecurity program is fully integrated into the Company’s overall enterprise risk management program.
Our Vice President, Risk and Compliance ("VP of Risk") facilitates the enterprise risk management program, and helps ensure that risk management is integrated into our strategic and operating planning process.
−Removed: The VP of Risk works closely with the CIO and his information technology security team to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.
+Added: The VP of Risk works closely with the CDIO and his information technology security team to continuously evaluate and address cybersecurity risks in alignment with our business objectives and operational needs.
This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level.
−Removed: The CIO continually assesses industry best practices, frameworks, and standards, and leverages them to advance our cybersecurity program.
+Added: The CDIO continually assesses industry best practices, frameworks, and standards, and leverages them to advance our cybersecurity program.
This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents.
2 unchanged sentences
Employing a multi-layer strategy of defense designed to ensure the safety, security, and responsible use of information and data.
−Removed: Monitoring of all IT assets, resources, and data 24-hours per day, 7-days per week, 365-days per year by security operations center (SOC).
+Added: Monitoring of all IT assets, resources, and data 24-hours per day, 7-days per week, 365-days per year by security operations center.
Performing annual testing of the Company’s incident response plan and cybersecurity posture by a third party.
−Removed: Incorporating external expertise to manage the SOC, perform penetration tests, cyber-attack simulation exercises, and log management to review anomalies indicating a possible breach.
+Added: Incorporating external expertise to manage the security operations center, perform penetration tests, cyber-attack simulation exercises, and log management to review anomalies indicating a possible breach.
Maintaining a business continuity program and cyber insurance.
5 unchanged sentences
If a third-party vendor is not able to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis .
−Removed: The CIO plays a pivotal role in informing the Audit Committee, as well as our CEO and other members of our senior management team, including our Chief Financial Officer (CFO), COO, and General Counsel, on cybersecurity risks.
−Removed: The CIO provides comprehensive briefings to the Audit Committee on a periodic basis, which the CEO and other members of our senior management team attend.
+Added: The CDIO plays a pivotal role in informing the Audit Committee, as well as our CEO and other members of our senior management team, including our Chief Financial Officer ("CFO"), COO, and General Counsel, on cybersecurity risks.
+Added: The CDIO provides comprehensive briefings to the Audit Committee on a periodic basis, which the CEO and other members of our senior management team attend.
This report includes discussions of rapidly evolving cybersecurity threats, cybersecurity incidents, cybersecurity technologies and solutions deployed, major cybersecurity risk areas, and policies and procedures to address those risks and cybersecurity incidents.
The report also includes third-party assessments of our cybersecurity program, which are conducted regularly.
−Removed: The CIO also informs the CEO and other members of our senior management team on a more informal basis of all aspects related to cybersecurity risks and incidents.
+Added: The CDIO also informs the CEO and other members of our senior management team on a more informal basis of all aspects related to cybersecurity risks and incidents.
This ensures that the highest levels of management are kept abreast of the cybersecurity posture and potential risks facing us.
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.