3 unchanged sentences
We have an overarching cybersecurity program for assessing, identifying, and managing material risks from cybersecurity threats that includes documented policies and procedures and incorporates a layered cybersecurity defense.
−Removed: We utilize a variety of technologies that target detection of malicious attempts to infiltrate our information systems.
+Added: We utilize a variety of technologies that are designed to target detection of malicious attempts to infiltrate our information systems.
We also maintain an endpoint threat detection and response tool which uses artificial intelligence to alert our managed security service provider.
−Removed: On a regular basis, we hire a third-party cybersecurity service provider that performs a penetration test on our information systems.
−Removed: The Company seeks to address vulnerabilities that are found.
+Added: On a regular basis, we hire a third-party cybersecurity service provider that performs a penetration test on our information systems and the Company seeks to address vulnerabilities that are found.
We also utilize a third-party cybersecurity training company to educate our employees about cybersecurity threats.
2 unchanged sentences
On an annual basis, we receive system and organization control reports from many of our key external IT vendors as these will reveal any sort of potential security issues these companies have had in the past year.
−Removed: We have experienced cybersecurity threats to our information technology infrastructure and have experienced non-material cybersecurity attacks, attempts to breach our systems, fraudulent activity and other similar incidents.
−Removed: As of the filing of this Annual Report, we are not aware of any such incidents that have occurred that have materially affected, or are reasonably likely to materially affect, the Company, including our business strategy, results of operations, or financial condition.
−Removed: However, future security and/or privacy breaches, acts of vandalism or terror, computer viruses, misplaced or lost data, programming, and/or human error or other similar events with respect to our information technology systems or processes or the information technology systems or processes of third-parties that have been entrusted with our information expose us to a risk of loss or misuse of this information, litigation and potential liability, which could have a material adverse effect on our business, financial condition, results of operations or cash flows.
−Removed: Risks related to cybersecurity events are detailed in the section of this Annual Report titled “Risk Factors—Risks related to our business and industry—We may be subject to information technology systems failures, cybersecurity attacks, network disruptions and breaches of data security, which could compromise our information and expose us to liability.”
+Added: We have experienced cybersecurity threats to our information technology infrastructure and have experienced non-material cybersecurity incidents, attempts to breach our systems, fraudulent activity and other similar incidents.
+Added: As of the filing of this Annual Report, we are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected, or are reasonably likely to materially affect, the Company, including our business strategy, results of operations, or financial condition.
+Added: However, future security and/or privacy breaches, cybersecurity incidents, acts of vandalism or terror, misplaced, corrupted, altered or lost data, programming, and/or human error or other similar events with respect to our information technology systems or processes or the information technology systems or, processes of third-parties that have been entrusted with our information, could have a material adverse effect on our business strategy, financial condition, results of operations or cash flows.
+Added: Risks related to cybersecurity events are detailed in the section of this Annual Report titled “Risk Factors—Risks related to our business and industry—We may be subject to information technology systems failures, cybersecurity incidents, network disruptions and breaches of data security, which could compromise our information and expose us to liability.”
The Board oversees risks from cybersecurity threats through the same framework it uses to oversee the management of our risk exposure in general.
7 unchanged sentences
The Audit Committee, which is made up solely of independent directors, is responsible for overseeing Company policies and practices with respect to cybersecurity issues.
−Removed: Our Vice President, Information Technology leads our information security program and team, which is comprised of several members devoted to infrastructure and information systems security and management.
+Added: Our Vice President, Information Technology is responsible for managing and assessing material risks from cybersecurity threats and leads our information security program and team, which is comprised of several members devoted to infrastructure and information systems security and management.
Our Vice President, Information Technology has over 20 years of industry experience, including over 15 years at our Company, serving in roles throughout his career such as engineer, infrastructure manager, Director of Information Technology Infrastructure, and Global Director of IT.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.