13 unchanged sentences
This experience is reinforced with regular cybersecurity training from industry leading organizations such as the SANS Institute and ISC2.
−Removed: In an effort to protect our resources from cyber threats, we maintain a security program that includes multiple layers designed to prevent, mitigate, detect, defend against, and remediate these threats.
−Removed: These include, but are not limited to, continuous vulnerability assessment and remediation, annual penetration testing conducted by a third party, security and monitoring tools that are monitored by a 24x7 SOC (Security Operations Center) and Incident Response Planning.
+Added: In an effort to protect our resources from cyber threats, we employ a multi-layered cyber risk management strategy that is designed to govern, identify, protect, detect, respond and recover from these threats.
+Added: Our security program includes, but is not limited to, continuous vulnerability assessment and remediation, annual penetration testing conducted by a third party, security and monitoring tools that are monitored by a 24x7 SOC (Security Operations Center) and Incident Response Planning.
Additionally, all employees are required to take annual cyber security training that aligns with our risks and current cyber trends such as ransomware, BEC (business email compromise), phishing, and social engineering.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.