1 unchanged sentence
Cybersecurity
−Removed: Risk Management
−Removed: believe cybersecurity is critical to our mission achievement to ensure uninterrupted business continuity, and enables us to deliver superior
−Removed: services while safeguarding our customers’ sensitive information.
+Added: Management and Strategy
+Added: believe cybersecurity is critical to our mission to ensure uninterrupted business continuity and enables us to deliver superior services
+Added: while safeguarding our customers’ sensitive information.
cybersecurity risk management processes are integrated into our overall risk management strategy.
1 unchanged sentence
our cybersecurity framework encompasses the following key processes:
−Removed: ● Risk-Based Controls for Information Systems:
−Removed: We maintain an Information Technology (IT) infrastructure with physical, administrative, and technical controls tailored to protect the confidentiality, integrity, and availability of our information and systems.
+Added: Controls for Information Systems:
+Added: We maintain an Information Technology (IT) infrastructure with physical, administrative, and technical
+Added: controls tailored to protect the confidentiality, integrity, and availability of our information and systems.
● Cybersecurity
Incident Response Plan and Testing:
−Removed: We have an incident response plan supported by a dedicated
−Removed: team to address cybersecurity incidents.
−Removed: This includes vulnerability identification, initial
−Removed: assessment, and engagement of external experts as needed.
−Removed: We provide security awareness training to help our employees understand their
−Removed: information protection and cybersecurity responsibilities at FEI.
−Removed: We also provide additional
−Removed: role-based training to employees based on customer requirements, regulatory obligations and
+Added: We have an incident response plan supported by a dedicated team to address cybersecurity incidents.
+Added: This incident response plan includes vulnerability identification, initial assessment, and engagement of external experts as needed.
+Added: We provide security awareness training to help our employees understand their information protection and cybersecurity responsibilities
+Added: at the Company.
+Added: We also provide additional role-based training to employees based on customer requirements, regulatory obligations and
industry risks, as needed.
−Removed: ● Third-Party Assessments:
−Removed: We engage cybersecurity firms to regularly evaluate our cybersecurity posture, helping identify and mitigate risks posed by evolving threats.
+Added: ● Third-Party
+Added: We engage cybersecurity firms to regularly evaluate our cybersecurity posture, helping identify and mitigate risks posed
+Added: by evolving threats.
seek to continually strengthen our cybersecurity defenses through significant investments in resources and maintaining comprehensive
10 unchanged sentences
adherence to Defense Federal Acquisition Regulation Supplement (DFARS) and Cybersecurity Maturity Model Certification (CMMC) requirements
−Removed: ensures strict protection of Controlled Unclassified Information (CUI), mandated by the U.S.
−Removed: Department of Defense.
−Removed: These efforts underscore
−Removed: our commitment to maintaining the highest cybersecurity resilience standards and regulatory compliance.
+Added: seeks to ensure strict protection of Controlled Unclassified Information (CUI), as mandated by the U.S.
+Added: Department of War.
+Added: These efforts
+Added: underscore our commitment to maintaining the highest cybersecurity resilience standards and regulatory compliance.
Government defense industry contractor, we have experienced cybersecurity attacks and may be subject to significant cybersecurity
12 unchanged sentences
communicates directly with the Board of Directors to report any material risks from cybersecurity threats.
−Removed: Chief Information Officer (CIO) leads our cybersecurity program and reports directly to our Chief Executive Officer.
−Removed: Our CIO is supported
−Removed: by our internal IT team that assists our CIO in the day-to-day management of the cybersecurity program, including the cybersecurity incident
−Removed: response plan, training initiatives and third-party assessments.
−Removed: Our CIO has over two decades of experience in various cybersecurity
−Removed: functions, including implementing stringent cybersecurity measures to protect sensitive information and meet established security standards,
−Removed: extensive work in IT governance and operations, network intrusion and critical systems protection, Enterprise Resource Planning (ERP)
−Removed: systems, and data analytics.
+Added: Our Chief Information Officer
+Added: (CIO) leads our cybersecurity program and reports directly to our Chief Executive Officer.
+Added: Our CIO is supported by our internal IT team
+Added: that assists our CIO in the day-to-day management of the cybersecurity program, including the cybersecurity incident response plan, training
+Added: initiatives and third-party assessments.
+Added: Our CIO has over two decades of experience in various cybersecurity functions, including implementing
+Added: stringent cybersecurity measures to protect sensitive information and meet established security standards, extensive work in IT governance
+Added: and operations, network intrusion and critical systems protection, Enterprise Resource Planning (ERP) systems, and data analytics.
+Added: in Computer Information Systems, and additional training in Risk Management Framework 2, COMSEC, and APICS.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.