6 unchanged sentences
From risk assessment and threat detection and continuous improvement, our approach to cybersecurity reflects our resolve to maintain the confidentiality, integrity and availability of our systems and data.
+Added: Our cybersecurity risk management program is integrated into our overall risk management system.
Key components of our cybersecurity risk management program include:
2 unchanged sentences
Threat Detection and Prevention – Given our limited resources, we prioritize the deployment of cost-effective tools and technologies for threat detection and prevention.
−Removed: This includes the use of firewalls, intrusion detection systems, antivirus software, and security information and event management (SIEM) solutions to monitor and mitigate potential security incidents.
+Added: This includes the use of firewalls, intrusion detection systems, antivirus software, security information and event management (SIEM) solutions, and a managed detection and response (MDR) solution, which enhances continuous monitoring, threat detection, and incident response capabilities.
Employee Training and Awareness – We understand that employees play a crucial role in maintaining cybersecurity.
3 unchanged sentences
Continuous Improvement – We are committed to continuously improving our cybersecurity posture in line with industry standards and best practices.
−Removed: This includes staying informed about emerging threats and vulnerabilities, conducting regular security audits and assessments and investing in cybersecurity technologies and training as resources allow.
+Added: This includes staying informed about emerging threats and vulnerabilities, leveraging insights from security monitoring and response activities, conducting regular security audits and assessments and investing in cybersecurity technologies and training as resources allow.
Currently, we have not identified any risks stemming from known cybersecurity threats, including those resulting from previous cybersecurity incidents, which have significantly impacted our operations, business strategy, financial condition or results of operations.
2 unchanged sentences
Cybersecurity Governance
−Removed: Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other threats or risks.
+Added: Our Board considers cybersecurity risk as part of its overall risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other threats or risks.
The Audit Committee is primarily responsible for overseeing the Company’s risk management processes, which include cybersecurity, global operations, product compliance and other regulatory risks.
2 unchanged sentences
The Audit Committee reports regularly to the full Board regarding its activities, including those related to cybersecurity.
−Removed: Management of the Company is responsible for the day to day risk management process, specifically the Director of IT, who reports and operates under the direction of the Chief Financial Officer (CFO), who then reports directly to the Audit Committee regarding such risks.
−Removed: The CFO provides updates to the Audit Committee on cybersecurity risks and threats annually, but the Director of IT attends both the Audit Committee meetings and the Board meetings to provide further updates on cybersecurity and other IT related matters.
+Added: Management of the Company is responsible for the day to day risk management process, specifically the Vice President of IT, who reports and operates under the direction of the Chief Financial Officer (CFO), who then reports directly to the Audit Committee regarding such risks.
+Added: The CFO provides updates to the Audit Committee on cybersecurity risks and threats annually, but the Vice President of IT attends both the Audit Committee meetings and the Board meetings to provide further updates on cybersecurity and other IT related matters.
At a minimum, the Audit Committee is given updates on a quarterly basis, but if a situation were to arise, the Audit Committee would be notified once the Company was aware of the issue.
−Removed: Our management team, led by our CFO, is informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity risks and incidents through updates by our Director of IT.
−Removed: Our CFO and Director of IT are responsible for assessing and managing risks that may arise from cybersecurity threats.
+Added: Our management team, led by our CFO, is informed about and monitors the prevention, detection, mitigation and remediation of cybersecurity risks and incidents through updates by our Vice President of IT.
+Added: Our CFO and Vice President of IT are responsible for assessing and managing risks that may arise from cybersecurity threats.
Our CFO has over 10 years of experience managing IT operations including strategy, infrastructure and execution.
−Removed: Our Director of IT has over 20 years of experience in information technology including roles managing operations, compliance, development, applications, information security, support and execution.
+Added: Our Vice President of IT has over 20 years of experience in information technology including roles managing operations, compliance, development, applications, information security, support and execution.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.