9 unchanged sentences
Manage Material Risks & Integrated Overall Risks
−Removed: We maintain an incident response plan to coordinate the activities we take to protect against, detect, respond to, mitigate the impact of, and remediate cybersecurity incidents, as well as to comply with applicable legal obligations and mitigate reputational damage.
+Added: We maintain an incident response plan to coordinate the activities we take to protect against, detect, respond to, mitigate the impact of and remediate cybersecurity incidents, and in an effort to comply with applicable legal obligations and mitigate reputational damage.
We have strategically integrated cybersecurity risk management into our broader risk management framework to promote company-wide awareness of the importance of cybersecurity risk management.
−Removed: This integration ensures that cybersecurity considerations are incorporated in our strategic and operational decision-making processes.
−Removed: Our management team works closely with our Information Technology (“IT”) team to continuously evaluate and address cybersecurity risks to ensure these efforts are in alignment with our business objectives and operational needs.
−Removed: We have implemented several cybersecurity
−Removed: processes, technologies, and controls to aid in our efforts to identify, assess, and manage material risks, as well as to test and improve our incident response plan.
+Added: This integration incorporates cybersecurity considerations into our strategic and operational decision-making processes.
+Added: Our management team works closely with our Information Technology (“IT”) team to continuously evaluate and address cybersecurity risks in an effort to align with our business objectives and operational needs.
+Added: We have implemented several cybersecurity processes, technologies, and controls to aid in our efforts to identify, assess, and manage material risks, as well as to test and improve our incident response plan.
Our approach includes, among other things:
9 unchanged sentences
• leveraging third-party score cards within our supply chain to regularly evaluate and report on our cybersecurity environment, including by integrating certain metrics into our corporate goal setting processes.
−Removed: These approaches vary in maturity across the business, and we work continually to improve them.
+Added: These approaches vary in maturity across our risk management processes, and we work continually to improve them.
Engage Third Parties on Risk Management
1 unchanged sentence
These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes are responsive to our identified risks.
−Removed: Our collaboration with these third parties include regular audits, threat assessments, and consultation on security enhancements.
+Added: Our collaboration with these third parties include audits, threat assessments, and consultation on security enhancements.
Oversee Third-party Risk
We are aware of and have processes in place to manage and mitigate the risks associated with third-party service providers.
−Removed: As needed in connection with certain third-party providers, we conduct risk-based diligence and assessment before engagement, implement contractual security provisions and maintain ongoing monitoring to ensure compliance with applicable cybersecurity standards or requirements.
+Added: As needed in connection with certain third-party providers, we conduct risk-based diligence and assessment before engagement, implement contractual security provisions and maintain ongoing monitoring intended for compliance with applicable cybersecurity standards or requirements.
Risks from Cybersecurity Threats
1 unchanged sentence
The Board is acutely aware of the critical nature of managing risks associated with cybersecurity threats.
−Removed: The Board has established oversight mechanisms to ensure effective governance in managing risks associated with cybersecurity threats because we recognize the potential significance of these threats to our operational integrity and financial condition.
+Added: The Board has established oversight mechanisms designed for effective governance in managing risks associated with cybersecurity threats because we recognize the potential significance of these threats to our operational integrity and financial condition.
Board of Directors' Oversight
5 unchanged sentences
In addition, the IT team maintains an ongoing dialog with our management team regarding emerging or potential cybersecurity risks.
−Removed: The management team receives updates on any significant developments in the cybersecurity domain, ensuring oversight
−Removed: is proactive and responsive.
−Removed: This involvement ensures that cybersecurity considerations are integrated into our broader strategic objectives.
+Added: The management team receives updates on any significant developments in the cybersecurity domain, ensuring oversight is proactive and responsive.
+Added: This involvement allows for cybersecurity considerations to be integrated into our broader strategic objectives.
Risk Management Personnel
12 unchanged sentences
The Chief Information Officer regularly informs the Chief Financial Officer and Chief Executive Officer of critical aspects related to cybersecurity risks and incidents.
−Removed: This ensures that the highest levels of management are kept abreast of the Company’s cybersecurity posture and potential risks.
+Added: This allows for the highest levels of management to be kept abreast of the Company’s cybersecurity posture and potential risks.
The Governance and Nominating Committee receives regular updates from management on cybersecurity risk, including:
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.