11 unchanged sentences
We also supplement our own internal expertise with qualified third parties to engage in varying security operational functions aiding in the identification and remediation of potential cybersecurity threats.
−Removed: We require the crew and temporary staffing to complete annual training on information security, including cybersecurity, global data privacy requirements and compliance measures.
+Added: We require our crew and temporary employees to complete annual training on information security, including cybersecurity, global data privacy requirements and compliance measures.
We have implemented a third-party service provider risk assessment program to assess material cyber threats associated with using third-party providers.
3 unchanged sentences
The Audit Committee oversees management’s policies and procedures related to cybersecurity risk management and periodically reports to the Board of Directors.
−Removed: The Chairman of the Audit Committee acts as the lead with respect to direct oversight of management.
+Added: The Chair of the Audit Committee acts as the lead with respect to direct oversight of management.
Our Board of Directors considers cybersecurity risks through interaction with our management team and the Audit Committee, as well as through quarterly updates with our CISO.
3 unchanged sentences
We have an experienced and dedicated CISO with over 25 years of Information Technology experience in retail for several globally recognized brands, with the majority of their career focused on all aspects of cybersecurity from delivery to operations including incident response.
−Removed: The CISO holds a Master’s Degree in Information Technology, has attained the professional certifications of Chief Information Security Manager and National Association of Corporate Directors, and actively participates in the cybersecurity industry through advisory boards and forums that promote peer to peer collaboration.
+Added: The CISO holds a Master’s Degree in Information Technology, has attained the professional certifications of Certified Information Security Manager and National Association of Corporate Directors, and actively participates in the cybersecurity industry through advisory boards and forums that promote peer to peer collaboration.
Management is informed of cybersecurity risks and activities as part of the quarterly business review of the Information Technology function.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.