15 unchanged sentences
Third parties also play a role in our cybersecurity.
−Removed: We engage third-party services to conduct evaluations of our security controls,
−Removed: whether through independent audits or consulting on best practices to address new challenges.
+Added: We engage third-party services to conduct evaluations of our security controls, whether through independent audits or consulting on best practices to address new challenges.
These evaluations include testing both the design and operational effectiveness of security controls.
12 unchanged sentences
Cybersecurity risk matters are reflected on reports and updates to operations management, senior management and our audit committee on a quarterly basis.
−Removed: This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives.
−Removed: To aid the board of directors with its cybersecurity and data privacy oversight responsibilities, the board of directors periodically hosts experts for presentations on these topics.
−Removed: For example, in 2023, management hosted an expert during the annual board of directors’ retreat to discuss developments in the cybersecurity threat landscape.
+Added: This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those
+Added: risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives.
+Added: To aid the board of directors with its cybersecurity and data privacy oversight responsibilities, the board of directors engages outside experts as appropriate to evaluate the Company's cybersecurity posture.
+Added: Most recently, an independent third-party cybersecurity advisor presented to the board of directors on developments in the threat landscape, best practices in security program management, and an assessment of the Company's current cybersecurity posture.
Our board of directors also engages in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.