3 unchanged sentences
The Company’s policies, practices and technologies allow it to protect its information systems and operational assets from threats.
−Removed: The Board of Trustees and its Finance and Audit Committees continue to provide substantial and focused attention to cyber and system security.
−Removed: The Finance Committee of the Board of Trustees is responsible for oversight of the Company’s enterprise-wide risk s, including risks associated with cyber and physical security, and the Company’s programs and practices to monitor and mitigate these risks.
−Removed: Management prepares comprehensive cyber security reports that are discussed at each meeting of the Finance Committee.
+Added: The Board of Trustees and its Finance and Risk Management Committee and Audit Committee continue to provide substantial and focused attention to cyber and system security.
+Added: The Finance and Risk Management Committee of the Board of Trustees is responsible for oversight of the Company’s enterprise-wide risk s, including risks associated with cyber and physical security, and the Company’s programs and practices to monitor and mitigate these risks.
+Added: Management prepares comprehensive cyber security reports that are discussed at each meeting of the Finance and Risk Management Committee.
The reports focus on the changing threat landscape and the risks to the Company, describe Eversource’s cyber security drills and exercises, attempted and actual breaches on our systems, cyber incidents within the utility industry and around the world, and mitigation strategies.
−Removed: In addition, third-party experts of cyber security risks provide periodic assessments to the utility industry and the Company in particular to the Finance Committee.
−Removed: The Company regularly reviews and updates its cyber and system security programs, and the Finance Committee continues to enhance its robust oversight activities, including meetings with financial, information technology, legal and accounting management, other members of the Board, representatives of the Company’s independent registered public accounting firm, and outside advisors and experts in cyber security risks, at which cyber and system security programs and issues that might affect the Company’s financial statements and operational systems are discussed.
+Added: In addition, third-party experts of cyber security risks provide periodic assessments to the utility industry and the Company in particular to the Finance and Risk Management Committee.
+Added: The Company regularly reviews and updates its cyber and system security programs, and the Finance and Risk Management Committee continues to enhance its robust oversight activities, including meetings with financial, information technology, legal and accounting management, other members of the Board, representatives of the Company’s independent registered public accounting firm, and outside advisors and experts in cyber security risks, at which cyber and system security programs and issues that might affect the Company’s financial statements and operational systems are discussed.
The Company has a robust Enterprise Risk Management Program that has identified cyber security as a top enterprise risk.
The managing and monitoring of risks are the responsibility of the Company’s Risk Committee, which meets quarterly and is chaired by the Chief Financial Officer.
−Removed: Members include key leaders of the Company, including the Chief Information Officer.
+Added: Members include key leaders of the Company, including the Presidents of each operating business unit, the Chief Information Officer, Chief Customer Officer, Chief Accounting Officer and Chief Compliance Officer.
The Company is committed to continuous monitoring and assessment of cyber security controls.
30 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.