4 unchanged sentences
Our management performs a semi-annual assessment of enterprise-wide risks to help assess, identify, and manage existing and emerging risks for our company, including cybersecurity risks.
−Removed: Through our ERM program we assess the characteristics and circumstances of the evolving business environment at the time and seek to identify the potential impacts to our company of a particular risk.
+Added: Through our ERM program we
+Added: assess the characteristics and circumstances of the evolving business environment at the time and seek to identify the potential impacts to our company of a particular risk.
Primary responsibility for assessing, identifying, and managing our cybersecurity risks rests with our management.
4 unchanged sentences
As part of our overall ERM program, we monitor and test our safeguards and train our employees on these safeguards, in certain instances with the assistance of our external third party information technology consultant.
−Removed: Personnel at all levels and
−Removed: departments are made aware of our cybersecurity policies through trainings.
+Added: Personnel at all levels and departments are made aware of our cybersecurity policies through trainings.
We also maintain an incident response plan designed to respond to, mitigate and remediate cybersecurity incidents according to a defined set of severity ratings based on the potential impact to our business, information technology systems, network or data, including data held or information technology services provided by third-party vendors or other service providers.
6 unchanged sentences
The audit committee also receives a report on cybersecurity matters and related risk exposures at least semi-annually from our Chief Accounting Officer.
−Removed: Many of our board members have achieved the National Association of Corporate Directors Carnegie Mellon University CERT Certification in Cybersecurity Oversight.
+Added: The chair of our audit committee has a National Association of Corporate Directors Carnegie Mellon University CERT Certification in Cybersecurity Oversight.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.