15 unchanged sentences
We engage third-party services to assist in the scanning and testing of our web properties and cloud infrastructure.
−Removed: We have a retainer with a cybersecurity response organization to immediately respond
−Removed: and provide professional expertise and assistance if necessary.
+Added: We have a retainer with a cybersecurity response organization to immediately respond and provide professional expertise and assistance if necessary.
Our process is designed to provide any required notifications in case of a cyber event, including those to federal, state, and local authorities, as well as to our insurance providers and auditors.
5 unchanged sentences
The Security Council's membership consists of the following:
−Removed: the Company's Chief Executive Officer, Chief Financial Officer, Chief Technology Officer, General Counsel, Vice President of Technology, Manager of Security, and Head of Internal Audit.
+Added: the Company's Chief Executive Officer, Chief Financial Officer, General Counsel, Vice President of Technology Operations, Director of Systems Engineering, and Head of Internal Audit.
We also employ a Security Department responsible for cybersecurity across the organizations.
3 unchanged sentences
The team then considers each of these threats as applied to our environment, process, operations, vendors and clients.
−Removed: The Security Council is led by the Chief Technology Officer, Vice President of Technology, and Manager of Security, each of whom have a depth of knowledge and experience in the cyber security space.
+Added: The Security Council is led by the Vice President of Technology Operations, and Director of Systems Engineering, each of whom have a depth of knowledge and experience in the cyber security space.
Our Board of Directors has ultimate oversight of cybersecurity risk, which it manages as part of our enterprise risk management program, while the Audit Committee is directly responsible for oversight of the Company's cybersecurity and is briefed by the Security Council on a quarterly basis.
1 unchanged sentence
This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives.
−Removed: Our Board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.
+Added: Board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.
Although the risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition, such incidents could have a material adverse effect in the future as cyberattacks continue to increase in frequency and sophistication.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.