6 unchanged sentences
We consider the internal risk oversight programs of third-party service providers before engaging them in order to help protect us from any related vulnerabilities.
−Removed: We do not believe that there are currently any known risks from cybersecurity threats that have or are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
+Added: We do not believe that there are currently any risks from known cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations or financial condition.
+Added: For additional information regarding risks we face, please refer to Part I, Item 1A “Risk Factors—Risks Related to Employee Matters, Managing Growth, Public Health and Information Technology—Security breaches and other disruptions to our information technology structure could compromise our information, disrupt our business and expose us to liability, which would cause our business and reputation to suffer” of this Annual Report on Form 10-K.
The Audit Committee of our Board of Directors oversees our cybersecurity and data privacy risk management activities, and reports to the Board regarding such oversight as appropriate.
7 unchanged sentences
In the event of a cyber security incident, the team is responsible for the swift detection, containment, mitigation, and recovery from such incident to minimize business disruption, protect intellectual property, and maintain the trust of our stakeholders.
−Removed: In an effort to deter prevent and detect cyber threats, we provide all employees, including part-time and temporary employees, with a data protection, cybersecurity and incident response and prevention training and compliance program, which covers timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educates employees on the importance of reporting all incidents immediately.
+Added: In an effort to deter prevent and detect cyber threats, we provide all employees, including part-time and temporary employees, with a data protection, cybersecurity and incident response and prevention training and compliance program, which covers a range of timely and relevant topics.
+Added: Past topics have included social engineering, phishing, password protection, confidential data protection, asset use and mobile security.
+Added: The training and compliance program functions to educate employees on the importance of reporting all incidents immediately.
We also use technology-based tools to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.