4 unchanged sentences
Our information security program is integrated into our overall enterprise risk management process, which the Board ultimately oversees.
−Removed: The Board has delegated its responsibility for cybersecurity risk oversight to the Technology Committee of the Board, which is responsible for (i) regularly reviewing with management significant cybersecurity, privacy, and IT risks or exposures, and our policies and processes with respect to risk assessment and risk management of the same;
+Added: The Board has delegated its responsibility for cybersecurity risk oversight to the Technology Committee of the Board, which is responsible for (i) regularly reviewing with management significant cybersecurity, privacy, artificial intelligence, and IT risks or exposures, and our policies and processes with respect to risk assessment and risk management of the same;
(ii) regularly reviewing with management an assessment of the steps management has taken to monitor and control such risks;
12 unchanged sentences
The DITSC is the Company's management position with primary responsibility for the development, operation, and maintenance of our information security program.
−Removed: The DITSC has over 20 years of experience in cybersecurity, including over 15 years of experience in the Cyber Defense and Electronic Warfare section of the U.S.
−Removed: The DITSC has obtained multiple subject matter certifications, including the Global Information Assurance Certification.
+Added: The DITSC offers over 20 years in cybersecurity expertise, cultivated through service in the United States Air Force and subsequent roles in both public and private sectors across diverse industries.
+Added: The DITSC has obtained multiple industry specific certifications, including the Certified Information Systems Security Professional and Certified Information Security Manager.
The DITSC briefs the Technology Committee of the Board regularly and oversees regular cybersecurity training and education opportunities for the Board, which covers topics ranging from the current threat landscape to our cybersecurity program metrics, risks, and roadmap.
2 unchanged sentences
The Crisis Committee will work with the DITSC to respond to and remediate any actual cybersecurity incidents.
−Removed: Depending on the severity of the security incident, the DITSC and the Crisis Committee are to escalate the security incident to the Chief Legal Officer and the Principal Accounting Officer, who will assess materiality in consultation with outside counsel.
−Removed: The Chief Legal Officer will notify the Technology Committee and the Board of any potential material incident.
−Removed: Although the risks from cyber threats have not materially affected our business strategy, results of operations, or financial condition to date, we continue to closely monitor cyber risk.
+Added: Depending on the severity of the security incident, the DITSC and the Crisis Committee are to escalate the security incident to the Company's General Counsel and the Principal Accounting Officer, who will assess materiality in consultation with outside counsel.
+Added: The General Counsel will notify the Technology Committee and the Board of any potential material incident.
+Added: As of the date of this report, the Company has not identified risks from known cybersecurity threats that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.
+Added: However, there can be no assurance that the Company, or third parties on which it relies, will not experience a cybersecurity threat or incident in the future, and we continue to closely monitor cyber risk.
We may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.