3 unchanged sentences
Internal Cybersecurity Team and Governance
−Removed: The Board maintains responsibility for oversight of risks that may affect the Company.
−Removed: Our Board has delegated the primary responsibility to oversee cybersecurity matters to the Audit Committee.
+Added: The BOD maintains responsibility for oversight of risks that may affect the Company.
+Added: Our BOD has delegated the primary responsibility to oversee cybersecurity matters to the Audit Committee.
The Audit Committee reviews the Company’s policies with respect to risk assessment and enterprise risk management, including with respect to cybersecurity risks.
3 unchanged sentences
These reports and updates may address a wide range of topics, including recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to the Company’s peers and third parties.
−Removed: The Audit Committee periodically reports to the Board on data protection and cybersecurity matters.
−Removed: We also have protocols by which certain cybersecurity incidents are escalated within the Company and, in certain circumstances, reported to the Board and/or Audit Committee in a timely manner.
+Added: The Audit Committee periodically reports to the BOD on data protection and cybersecurity matters.
+Added: We also have protocols by which certain cybersecurity incidents are escalated within the Company and, in certain circumstances, reported to the BOD and/or Audit Committee in a timely manner.
At the management level, our CIO is responsible for overseeing and implementing a cybersecurity strategy aligned with the Company’s goals and needs.
8 unchanged sentences
As a result, risks posed by cybersecurity threats are among the risks that the Company’s ERM process evaluates and assesses at least annually.
−Removed: The results of this risk assessment, including cybersecurity, are presented to the Board of Directors annually .
−Removed: The cybersecurity team implements, monitors and maintains controls that are aligned with the guidance defined by the National Institute of Standards and Technology (“NIST”) CyberSecurity Framework.
+Added: The results of this risk assessment, including cybersecurity, are presented to the BOD annually .
+Added: The cybersecurity team implements, monitors and maintains controls that are aligned with the guidance defined by the National Institute of Standards and Technology CyberSecurity Framework.
These controls are designed to protect the confidentiality, availability and integrity of information systems.
2 unchanged sentences
As an organization committed to continuous improvement, we periodically conduct incident response tabletop exercises with key members of our leadership team, including our Chief Executive Officer, perform internal and external assessments and engage consultants to help assess the design and effectiveness of our program.
−Removed: In addition, we expect all of our associates as well as our third-party vendors to help protect against cybersecurity risks, and we conduct periodic awareness campaigns, emerging threats communications and specific trainings.
+Added: In addition, we expect all of our associates as well as our third-party vendors to help protect against cybersecurity risks, and we conduct periodic awareness campaigns, emerging threats communications and specific training.
We have adopted a Global Cybersecurity Incident Response Procedure that applies in the event of a cybersecurity threat or incident.
These procedures include an incident response playbook that outlines the steps to be addressed in the event of a
−Removed: cybersecurity incident, from incident detection to mitigation, recovery and notification within the Company and to the Audit Committee and/or Board of Directors, as specified.
+Added: cybersecurity incident, from incident detection to mitigation, recovery and notification within the Company and to the Audit Committee and/or BOD, as specified.
We also rely on information technology and third-party vendors to support our operations, including our secure processing of personal, confidential, sensitive, proprietary and other types of information.
5 unchanged sentences
“Risk Factors—Risks Related to Our Business— Our electronic information systems have been and could in the future be, subject to service interruptions, data corruption, cyber-based attacks and network security breaches.
−Removed: Significant disruptions in, or breaches in security of, our electronic information systems or data can adversely affect our business and financial statements .”
+Added: Significant disruptions in, or breaches in security of, our electronic information systems or data can adversely affect our business and financial statements ” and “Risk Factors—Risks Related to Our Business— Failure to successfully integrate new technologies, including artificial intelligence and machine learning, could limit our ability to grow and maintain our competitive position and adversely affect our financial condition, results of operations and cash flow ” of this Form 10-K.
+Added: Our corporate headquarters are located in North Bethesda, Maryland in a leased facility.
+Added: As of December 31, 2025, we had a total of 4 production facilities in the United States and 33 production facilities outside the United States in 16 countries in Europe, Mexico, South America, the Middle East, India and Southeast Asia.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.