3 unchanged sentences
The IS Program is led by our Chief Information Security Officer (“CISO”) under the direction of the Chief Administrative Officer and is subject to additional management oversight by our Operations Technology Committee.
−Removed: The CISO has over 20 years of experience in cybersecurity and has a bachelor's, master's, and Juris Doctorate law degrees.
−Removed: He is a licensed attorney in both Missouri and Illinois.
+Added: The CISO has over 20 years of experience in cybersecurity and is a licensed attorney in both Missouri and Illinois.
He currently holds multiple professional security certifications that include ISC2 Certified Information System Security Professional and Certified Cloud Security Professional, ISACA Certified Information Security Manager and EC-Council Certified Ethical Hacker.
−Removed: The Chief Administrative Officer has a bachelor’s degree and an MBA degree.
−Removed: He is also an active, licensed CPA in the state of Missouri.
+Added: The Chief Administrative Officer is a licensed CPA in the state of Missouri.
Prior to his appointment as Chief Administrative Officer, he served at Enterprise in senior finance roles within the Company, including Senior Vice President and Controller, and Chief Financial Officer of Enterprise Bank & Trust.
2 unchanged sentences
The Operations Technology Committee chair reports committee activities into the Risk Committee of the Board.
−Removed: Additionally, the CISO is a member of this committee, as well as the Risk Oversight and ESG Management Committees, and advises these committees on risks and opportunities related to information security, including data privacy.
+Added: Additionally, the CISO is a member of this committee, as well as the Risk Oversight and Sustainability Committees, and advises these committees on risks and opportunities related to information security, including data privacy.
The Risk Committee of the Board oversees the IS Program in the following ways:
9 unchanged sentences
We may face cybersecurity risks in connection with our normal business that could have a material adverse effect on our business strategy, results of operations, financial condition, or reputation.
−Removed: Although such risks have not materially affected us, we have experienced, and may continue to experience, cyber incidents during our normal course of business.
−Removed: For further discussion about these risks, see “Item 1A- Risk Factors - Technology and Cybersecurity Risks.”
+Added: Although such risks have not materially affected us, we have experienced, and may continue to experience, cyber incidents during our normal
+Added: course of business.
+Added: For further discussion about these risks, see “Item 1A.
+Added: Risk Factors - Technology and Cybersecurity Risks.”
Risk Management and Strategy
20 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.