7 unchanged sentences
Additionally, our technology encompasses a company-wide network through which employees have access to key business applications.
−Removed: We established a thorough, risk-based cybersecurity program aimed at safeguarding our data, along with the data of our customers and partners.
+Added: We maintain and continually enhance a comprehensive, risk-based cybersecurity program aimed at safeguarding our data, along with the data of our customers and partners.
The identification, assessment, and management of cyber risks fall under our Enterprise Risk Management (“ERM”) program, overseen by the board of directors of our general partner.
−Removed: Our Chief Technology Officer & Digital Officer/Chief Information Officer holds overall
−Removed: Unresolved Staff Comments & Properties
−Removed: responsibility for IT, OT, and cybersecurity.
+Added: Our Chief Technology & Data Officer/Chief Information Officer holds overall responsibility for IT, OT, and cybersecurity.
The Partnership follows well-organized cybersecurity frameworks with a Chief Information Security Officer dedicated to overseeing cybersecurity initiatives throughout the entire enterprise.
8 unchanged sentences
Furthermore, we have reinforced our data protection capabilities by investing in both hardware and software.
−Removed: Recognizing that humans are often the most vulnerable element of even the most secure computer architectures, The Partnership has increased the frequency and sophistication of the mandatory training and phishing campaign program for our employees.
+Added: Recognizing that humans are often the most vulnerable element of even the most secure computer architectures, The Partnership upholds a robust mandatory security awareness program, including required training and phishing campaigns for our employees.
The Partnership also conducts monthly reviews of global cybersecurity incidents to ensure that appropriate mitigation measures are in place to guard against similar threats.
The Partnership is committed to enhancing its organizational resilience through a multiyear, comprehensive incident response tabletop drill program.
−Removed: Building upon the success of the two drills conducted in 2023, we are dedicated to continuous improvement and proactive readiness in addressing potential challenges and ensuring the effective management of incidents.
+Added: Building upon the success of the drill conducted in 2024 and previous years, we remain committed to continuous improvement and proactive preparedness in addressing potential challenges and effectively managing incidents.
The Partnership has not experienced a significant cybersecurity breach or associated expenses, penalties, or settlements for years ended December 31, 2024, 2023 and 2022.
3 unchanged sentences
To assist in these efforts, the board of directors of our general partner has assigned a number of cybersecurity related responsibilities to its standing committees while retaining overall responsibility for the oversight of Delek's cybersecurity activities.
−Removed: Unresolved Staff Comments & Properties
+Added: Unresolved Staff Comments, Cybersecurity Related Matters, Legal Proceedings and Mine Safety Disclosures
In overseeing cybersecurity risks, the Board of Directors follows the principles identified by the National Association of Corporate Directors in the oversight of cybersecurity risks.
−Removed: Cybersecurity risks and Partnership programs are discussed with the Board of Directors by the Chief Technology & Digital Officer Chief Information Officer and others.
+Added: Cybersecurity risks and Partnership programs are discussed with the Board of Directors by the Chief Technology & Data Officer and others.
Third parties are periodically engaged in the assessment of cybersecurity, including evaluating maturity under the National Institute for Security and Technology’s and the International Society of Automation/ International Electrotechnical Commission’s cybersecurity frameworks, testing informational and operational cyber defenses, controls, and reviews of policies and procedures.
4 unchanged sentences
The Technology Committee’s designated focus on these areas of the Partnership’s digitalization, information and operational security policies help ensure strategic alignment of the Partnership’s strategies with information security and risk management.
−Removed: Unresolved Staff Comments & Properties
+Added: Unresolved Staff Comments, Cybersecurity Related Matters, Legal Proceedings and Mine Safety Disclosures
Management Oversight
1 unchanged sentence
Establishing clear lines of ownership and accountability, along with regular and transparent communication among our standing Board committees, the Board of Directors and executives, is crucial for effectively handling cybersecurity risks and opportunities.
−Removed: Our Chief Technology & Digital Officer/Chief Information Officer reports to the President, dedicating a substantial amount of their efforts to ensure the safety and security of our networks and systems.
−Removed: Our Chief Technology & Digital Officer/Chief Information Officer has nearly 20 years of IT experience including areas of technology, cybersecurity, data, analytics, and digital transformation as well as being an Adjunct Lecturer at Tel-Aviv University and the Technion for Big Data Technologies, Data Science and Data Visualization.
+Added: Our Chief Technology & Data Officer reports to the President, dedicating a substantial amount of their efforts to ensure the safety and security of our networks and systems.
+Added: Our Chief Technology & Data Officer has nearly 20 years of IT experience including areas of technology, cybersecurity, data, analytics, and digital transformation as well as being an Adjunct Lecturer at Tel-Aviv University and the Technion for Big Data Technologies, Data Science and Data Visualization.
Representing the state of Israel at MIT’s CDOIQ forum.
−Removed: Our Chief Technology & Digital Officer oversees a team of security professionals and regularly updates the Board of Directors on any potential risks and threats to the Partnership.
−Removed: Senior leadership including our Chief Technology & Digital Officer/Chief Information Officer and the Chief Information Security Officer brief the Board on information security matters multiple times throughout the year.
+Added: Our Chief Technology & Data Officer oversees a team of security professionals and regularly updates the Board of Directors on any potential risks and threats to the Partnership.
+Added: Senior leadership including our Chief Technology & Data Officer/Chief Information Officer and the Chief Information Security Officer brief the Board on information security matters multiple times throughout the year.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.