22 unchanged sentences
Such firms are overseen by our General Counsel and Chief Information Security Officer and provide the following services:
−Removed: • On an annual basis, conduct penetration testing to evaluate the susceptibility of our information systems to cybersecurity threats and the effectiveness of our cybersecurity program;
+Added: • On an annual basis, conduct external and internal penetration testing to evaluate the susceptibility of our information systems to cybersecurity threats and the effectiveness of our cybersecurity program;
• On a biennial basis, conduct a comprehensive “tabletop” exercise to evaluate our incident response policies and procedures and provide relevant experience for our employees tasked with executing such response;
1 unchanged sentence
We have also established a process to evaluate third-party vendors and suppliers for cybersecurity risk and compliance with our security standards.
−Removed: As applicable, on an annual basis we review System and Organization Controls (SOC) 1 reports for all significant third-party vendors.
+Added: As applicable, on an annual basis we review System and Organization Controls (SOC) 1 reports and similar reports or security controls questionnaires for all significant third-party vendors.
In addition to the efforts discussed above, we have developed and maintain an Incident Response Plan to establish a process for addressing cybersecurity incidents.
2 unchanged sentences
Like other companies, we are the target of cyberattacks.
−Removed: In 2020, for example, we publicly announced that we were the target of a systems intrusion in which a third party infected certain of the Company’s systems with malware.
+Added: In 2020, for example, we publicly announced that we were the target of a systems intrusion in which a third party infected certain of our systems with malware.
Although we were able to resolve that matter without material impact, we cannot provide assurance that we will not be materially affected in the future by cybersecurity risks or any future material incidents.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.