17 unchanged sentences
• Governance, Risk and Compliance (“GRC”) functions such as third-party risk management , cybersecurity policies, training, and awareness
−Removed: • Annual and independent penetration testing and vulnerability scanning activities conducted by trusted third parties
−Removed: Third party risk management, including, but not limited to, the following:
−Removed: • Periodic third-party reviews and assessments measuring cybersecurity services capability and maturity.
+Added: • Independent penetration testing and vulnerability scanning activities conducted by trusted third parties
+Added: External cybersecurity reviews and assessments performed by third-party risk management, including, but not limited to, the following:
+Added: • Periodic reviews and assessments measuring cybersecurity services capability and maturity
Cybersecurity risks are identified and documented by our cybersecurity team leadership, presented, and reviewed with the Fortrea Cybersecurity Risk Management Committee (the “Risk Committee”) as noted in the Governance of Cybersecurity section below.
4 unchanged sentences
We regularly review and update our cybersecurity insurance coverage to align with the evolving nature of cyber threats and industry standards.
−Removed: Fortrea will continue to leverage our internal audit department to provide independent reviews and recommendations to enhance Fortrea’s ability to manage risks effectively, as well as pursue external certifications.
+Added: Fortrea leverages our internal audit department to provide independent reviews and recommendations to enhance Fortrea’s ability to manage risks effectively, as well as pursue external certifications.
Although unknown cybersecurity risks could materialize, including in connection with the implementation of independent systems following the Spin, we are not aware of any disclosures at this time which would be considered material risks and associated with cybersecurity threats or incidents.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.