6 unchanged sentences
Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards, and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example:
−Removed: dedicated cybersecurity staff, including a 24X7 security operations center monitoring for and responding to threat activity, incident response plans and processes, vulnerability management, secure software development, static and dynamic code scanning for vulnerabilities, open-source software scanning, internal and third-party penetration testing, a bug bounty program, internal audit and assurance of security controls, disaster recovery/business continuity plans, attainment and maintenance of industry-standard security certifications, identity and access management, asset management, tracking and disposal, encryption, access controls, third-party risk management, phish testing and reporting, employee security awareness training, and maintaining cybersecurity insurance.
+Added: dedicated cybersecurity staff, including a 24/7 security operations center monitoring for and responding to threat activity, incident response plans and processes, vulnerability management, secure software development, static and dynamic code scanning for vulnerabilities, open-source software scanning, internal and third-party penetration testing, a bug bounty program, internal audit and assurance of security controls, disaster recovery/business continuity plans, attainment and maintenance of industry-standard security certifications, identity and access management, asset management, tracking and disposal, encryption, access controls, third-party risk management, phish testing and reporting, employee security awareness training, and maintaining cybersecurity insurance.
Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes.
19 unchanged sentences
The Audit Committee receives reports as part of its quarterly meetings from our CISO concerning our significant cybersecurity threats and risk and the processes we have implemented to address them.
−Removed: Our board also receives periodic reports (at least annually) from our CISO regarding the our overall cybersecurity landscape, including material related to cybersecurity threats, risk, and mitigation.
+Added: Our board also receives periodic reports (at least annually) from our CISO regarding the overall cybersecurity landscape, including material related to cybersecurity threats, risk, and mitigation.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.