5 unchanged sentences
Our core IT Systems consist mostly of purchased and licensed software programs that integrate together and with our internally developed solutions.
−Removed: As part of our overall enterprise risk management program, we monitor and assess the risks posed by cybersecurity threats to those internal and external systems and solutions and maintain an information security program designed to mitigate such risks.
+Added: As part of our risk management program, we monitor and assess the risks posed by cybersecurity threats to those internal and external systems and solutions and maintain an information security program designed to mitigate such risks.
Our information security program includes development, implementation, and improvement of policies and procedures to safeguard information to help ensure availability of critical data and systems.
3 unchanged sentences
With the assistance of one such reputable third party, the Company conducts biannual maturity assessments of its IT Systems against the National Institute of Standards of Technology (NIST) Cybersecurity Framework.
−Removed: We also carry insurance that provides protection against the risks from
−Removed: cybersecurity threats.
−Removed: To our knowledge, during fiscal 2023, there were no material cybersecurity incidents or threats that materially affected or are reasonably likely to materially affect the Company’s business strategy, results of operations, or financial condition.
+Added: We also carry insurance that provides protection against the risks from cybersecurity threats.
+Added: To our knowledge, during 2024, there were no material cybersecurity incidents or threats that materially affected or are reasonably likely to materially affect the Company’s business strategy, results of operations, or financial condition.
Pursuant to its charter, the Audit Committee of the Board of Directors (the “Board”) has oversight of the Company's information security program, including, but not limited to, risks regarding cybersecurity threats.
2 unchanged sentences
Our CIO is an IT veteran with over 25 years of experience in building and maturing cyber programs for large public companies.
−Removed: The CIO is supported by an internal team of certified security analysts that work in conjunction with leading security operations managed service providers to manage detection and response.
+Added: The CIO is supported by an internal team of certified security analysts who work in conjunction with leading security operations managed service providers to manage detection and response.
On at least an annual basis, a cyber risk report that highlights program governance, risks, and opportunities is provided to the Audit Committee and the full Board.
2 unchanged sentences
These reviews typically include the number of events, number of investigations, mean response time, and cyber trends.
−Removed: The Security Committee oversees the Company’s security roadmap and ensures monitoring of information security policies and procedures covering areas such as back-up and retention, acceptable use, disaster recovery, incident management, and passwords.
−Removed: The success of the Company’s information security program relies not only on ownership by the CIO’s organization but also an active and collaborative relationship within the business.
+Added: The Security Committee oversees the Company’s security roadmap and ensures the monitoring of information security policies and procedures covering areas such as back-up and retention, acceptable use, disaster recovery, incident management, and passwords.
+Added: The success of the Company’s information security program relies not only on ownership by the CIO’s organization but also on an active and collaborative relationship within the business.
The Company requires all employees to complete cyber training annually.
−Removed: For fiscal 2023, the Company maintained a security learning management system with phishing simulations distributed regularly to enhance cyber resiliency.
+Added: For 2024, the Company maintained a security learning management system with phishing simulations distributed regularly to enhance cyber resiliency.
Additionally, the Company leverages communications, contests, policies, videos, and visuals to continuously raise awareness among employees.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.