21 unchanged sentences
Finally, we maintain cybersecurity insurance coverage.
+Added: T able of Content s
Impact of Risks from Cybersecurity Threats
2 unchanged sentences
Some of these parties have in the past been the target of security breaches and cyber attacks, and because the transactions involve third parties and environments that we do not control or secure, future security breaches or cyber attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them.
−Removed: We also rely on
−Removed: numerous other third party service providers to conduct other aspects of our business operations and face similar risks relating to them.
+Added: We also rely on numerous other third party service providers to conduct other aspects of our business operations and face similar risks relating to them.
While we conduct security assessments on our higher risk third party service providers, we cannot be sure that their information security protocols are sufficient to withstand a cyber attack or other security breach.
There can be no assurance that cyber incidents will not occur, and they could occur more frequently and on a more significant scale.
+Added: Although we have not experienced a cybersecurity incident that has materially affected our business strategy, results of operations, or financial condition, future cybersecurity threats or incidents could materially adversely affect our business strategy, results of operations, or financial condition.
Board of Directors’ Oversight and Management’s Role
3 unchanged sentences
Management (including representatives from the Legal, Operations, Human Resources, Information Systems and Risk Management departments) is notified by the Information Services team whenever a discovered cybersecurity incident may potentially have a significant impact on our business operations.
+Added: Our Information Services Security Officer and other members of management responsible for cybersecurity risk management have experience in information security, technology operations, and risk management developed through prior work experience, professional training, and industry certifications.
Our Board of Directors has delegated the responsibility for the oversight of cybersecurity risks to the Information Security and Technology Committees, which are ultimately responsible for assessing and managing our material risks from cybersecurity threats.
1 unchanged sentence
Management also updates the Board as new risks are identified and the steps taken to mitigate such risks.
+Added: Despite these efforts, our cybersecurity measures and those of our third-party service providers may not be effective in preventing, detecting, or mitigating all cybersecurity incidents or breaches.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.