2 unchanged sentences
Cybersecurity Breaches and Other Disruptions of Our Information Technology Network and Systems Could Adversely Affect Our Business.
−Removed: Our Senior Vice President of Information Technology (who is also a certified Chief Information Security Officer) manages our security program.
+Added: Our Senior Vice President of Information Technology manages our security program.
Oversight of the program occurs via IT metrics-based updates provided to an Information Technology Steering team (consisting of the executive officers and other key employees of the Company) on a quarterly basis.
1 unchanged sentence
Our cybersecurity program is part of our enterprise risk management strategy and includes policies and procedures designed to safeguard the confidentiality, integrity, and availability of our information assets.
−Removed: Lastly, a cybersecurity risk assessment is provided to our Board of Directors on an annual basis which includes metrics, security incidents, key risk indicators, and risk mitigation plan as well as on the status of material risks, mitigation measures, and incidents related to such risks.
+Added: Lastly, a cybersecurity risk assessment is provided to our Board of Directors on an annual basis which includes metrics, security incidents, key risk indicators, and risk mitigation plans as well as on the status of material risks, mitigation measures, and incidents related to such risks.
Our Board of Directors has overall responsibility for risk oversight, with the Information Technology Steering team assisting the Board in performing this function based on its respective areas of expertise.
14 unchanged sentences
We utilize a variety of backup mechanisms for its data including both warm and cold storage solutions.
−Removed: Lastly, we utilize token-based technologies to support Payment Card Industry Data Security Standard (PCI DSS) compliant safe handling and protection of credit card data.
+Added: Lastly, we utilize token-based technologies to support Payment Card Industry Data Security Standard (PCI DSS) compliance safe handling and protection of credit card data.
We have a defined security policy that is reviewed on an annual basis.
−Removed: We have established response procedures for cyber-security incidents and tests the procedures on a periodic basis.
+Added: We have established response procedures for cyber-security incidents and test the procedures on a periodic basis.
We provide robust computer-based cybersecurity and wire fraud / phishing awareness training to all new employees as well as training to existing employees on an annual basis.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.