2 unchanged sentences
The operating systems of Federated Hermes, and its offerings, customers, shareholders and service providers are dependent on the effectiveness of information security policies and procedures (both at Federated Hermes and at third parties, such as its service providers) which seek to ensure that such systems are protected from cybersecurity incidents.
−Removed: Federated Hermes has
−Removed: established a robust cybersecurity program aimed at assessing, identifying and managing material risks from cybersecurity threats.
+Added: Federated Hermes has established a robust cybersecurity program aimed at assessing, identifying and managing material risks from cybersecurity threats.
Federated Hermes’ board of directors has ultimate oversight responsibility for cybersecurity risks and threats.
16 unchanged sentences
Federated Hermes’ Enterprise-Wide Risk Management Committee (ERC), which is chaired by Federated Hermes’ CRO, oversees Federated Hermes’ company-wide enterprise risk management program.
−Removed: The ERC includes department heads from across Federated Hermes and implements the processes established to identify, report and monitor material risks facing the Company, including cybersecurity risks.
+Added: The ERC includes department heads from
+Added: across Federated Hermes and implements the processes established to identify, report and monitor material risks facing the company, including cybersecurity risks.
Federated Hermes maintains a written cybersecurity program protocol, along with ancillary policies and procedures, which set forth the key features of the cybersecurity program.
11 unchanged sentences
Due diligence consists of reviewing several key data points regarding service providers.
−Removed: These include, but are not limited to, the business
−Removed: processes the service provider will provide, the sensitivity of the data they will store, process, transmit or access, and network connectivity with the service provider.
+Added: These include, but are not limited to, the business processes the service provider will provide, the sensitivity of the data they will store, process, transmit or access, and network connectivity with the service provider.
Using this criteria, Federated Hermes will categorize the service provider into a tiered structure.
4 unchanged sentences
He holds a Bachelor of Science (BS) in Electrical Engineering from the University of Pittsburgh, a Master of Science (MS) in Engineering from Youngstown State University, and a Master of Business Administration (MBA) from Carnegie Mellon University.
−Removed: Federated Hermes’ CISO has 20 years of technology experience, including deep experience in cybersecurity risk management.
+Added: Federated Hermes’ CISO has more than 20 years of technology experience, including deep experience in cybersecurity risk management.
Prior to assuming his current role in 2020, Federated Hermes’ CISO served as information security officer and director of technology for a large publicly traded travel center company and, prior to that, as information security officer for a leading retail chain.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.