11 unchanged sentences
We also supplement our own internal expertise with qualified third parties to engage in varying security operational functions aiding in the identification and remediation of potential cybersecurity threats.
−Removed: We require employees and temporary staffing to complete annual training on information security, including cybersecurity, global data privacy requirements and compliance measures.
+Added: We require the crew and temporary staffing to complete annual training on information security, including cybersecurity, global data privacy requirements and compliance measures.
We have implemented a third-party service provider risk assessment program to assess material cyber threats associated with using third-party providers.
8 unchanged sentences
Management assesses and considers cybersecurity risks through its enterprise risk management program, consultation with external advisors, as well as through discussions with our CIO and CISO.
−Removed: We have an experienced and dedicated CISO, who has served in various roles in information technology, technology audit and security over the past 38 years, including serving as a senior partner in charge of various information security and business resiliency practices at one of the Big 4 Accounting consultancies, advising some of the largest public company leadership teams and boards of directors on cyber related issues and projects.
−Removed: The CISO also served as the CISO for one of the Big 4, as well as a retail ecommerce business virtual CISO.
−Removed: The CISO holds an undergraduate degree in Management Information Systems and has attained the professional certification of Certified Information Systems Auditor.
+Added: We have an experienced and dedicated CISO with over 25 years of Information Technology experience in retail for several globally recognized brands, with the majority of their career focused on all aspects of cybersecurity from delivery to operations including incident response.
+Added: The CISO holds a Master’s Degree in Information Technology, has attained the professional certifications of Chief Information Security Manager and National Association of Corporate Directors, and actively participates in the cybersecurity industry through advisory boards and forums that promote peer to peer collaboration.
Management is informed of cybersecurity risks and activities as part of the quarterly business review of the Information Technology function.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.