25 unchanged sentences
We also participate and support multiple threat-sharing communities including the National Defense Information Sharing and Assessment Center, the defense industrial base Cybersecurity Program, and the National Defense Cyber Alliance.
−Removed: Participating these communities allows us to collaborate with our Defense Industrial Base sector peers, government agencies, information sharing and analysis centers, and cybersecurity associations.
+Added: Participating in these communities allows us to collaborate with our Defense Industrial Base sector peers, government agencies, information sharing and analysis centers, and cybersecurity associations.
The Cybersecurity Program staff also maintains regular contact with the Federal Bureau of Investigation for sharing of threat information.
1 unchanged sentence
The Chief Information Security Officer coordinates third-party assessments with the Company’s Internal Audit team.
−Removed: Third parties are regularly engaged to assess our security controls and incident response capabilities.
+Added: Third parties are
+Added: regularly engaged to assess our security controls and incident response capabilities.
We invest in tools to assess our external vulnerabilities and perform penetration testing regularly.
15 unchanged sentences
Prior to joining DRS, our Chief Executive Officer oversaw the development of the DoD cybersecurity strategy while serving as Deputy Secretary of Defense from 2009 to 2011.
−Removed: While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, there can be no guarantee that
−Removed: we will not experience such an incident in the future.
+Added: While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that materially affected or is reasonably likely to materially affect our business strategy, results of operations, or financial condition, there can be no guarantee that we will not experience such an incident in the future.
Such incidents, whether or not successful, could result in our incurring significant costs related to, for example, rebuilding our internal systems, writing down inventory value, implementing additional threat protection measures, providing modifications or replacements to our products and services, defending against litigation, responding to regulatory inquiries or actions, paying damages, providing customers with incentives to maintain a business relationship with us, or taking other remedial steps with respect to third parties, as well as incurring significant program delays and reputational harm.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.