3 unchanged sentences
We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information.
−Removed: Our cybersecurity risk management program is integrated into our overall risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.
−Removed: We perform an annual assessment to measure the maturity of our information security program in a manner aligned with the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework (“CSF”).
+Added: Our cybersecurity risk management program is integrated into our overall risk management program, and shares common methodologies, reporting channels and governance processes that apply across the risk management program to other legal, compliance, strategic, operational, and financial risk areas.
+Added: We measure the maturity of our information security program in a manner informed by the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework (“CSF”).
This does not imply that we meet any specific technical standards, specifications, or requirements, only that we use the NIST CSF as a guide to implement controls to combat and respond to cybersecurity risks.
13 unchanged sentences
Cybersecurity Governance
−Removed: Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee ("Committee") oversight of overall risk assessment and management, which includes cybersecurity and other information technology risks.
+Added: Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee ("Committee") oversight of overall risk assessment and management, including oversight of management's implementation of our cybersecurity risk management program.
The Committee receives periodic reports from management on our cybersecurity risks.
−Removed: In addition, management updates the Committee, as where it deems appropriate, regarding any material cybersecurity incidents.
+Added: In addition, management updates the Committee, where it deems appropriate, regarding cybersecurity incidents it considers to be significant.
The Committee reports to the full Board regarding its activities, including those related to cybersecurity.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.