25 unchanged sentences
The Board and the Audit Committee each receive regular presentations and reports on cybersecurity risks, which address a wide range of topics including recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends, and information security considerations arising with respect to the Company’s peers and third parties.
−Removed: The Board and the Audit Committee also receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, or that management otherwise deems to be significant, as well as ongoing updates regarding any such incident until it has been addressed.
+Added: The Board and the Audit Committee also receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, or that management otherwise deems to be significant, as well as ongoing updates regarding any such incident until it has been fully addressed.
On an annual basis, the Board and the Audit Committee discuss the Company’s approach to cybersecurity risk management with the members of management’s Cybersecurity Council, which includes the Company’s Chief Executive Officer (“CEO”), Chief Financial Officer (“CFO”), Director of Risk, and Director of Information Technology & Cybersecurity.
3 unchanged sentences
The Director of Information Technology & Cybersecurity has served in various roles in information technology and information security for over 25 years, including the design and management of operational and cybersecurity activities of two large public companies.
−Removed: The Director of Information Technology & Cybersecurity holds undergraduate and graduate degrees in computer science and is certified in NIST, CMMC, CIS, and GDPR.
+Added: The Director of Information Technology & Cybersecurity holds undergraduate and graduate degrees in computer science and is certified in National Institute of Standards and Technology (“NIST”), Cybersecurity Maturity Model Certification (“CMMC”), Cybersecurity and Infrastructure Security (“CIS”), and General Data Protection Regulation (“GDPR”).
The Company’s CEO and CFO each hold undergraduate and graduate degrees in their respective fields, and each has over 20 years of experience managing risks at the Company and at similar companies, including risks arising from cybersecurity threats.
−Removed: Cybersecurity threats, including as a result of previous cybersecurity incidents, have not materially affected and are not reasonably likely to affect the Company, including its business strategy, results of operations or financial condition.
+Added: Cybersecurity threats, including as a result of previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.