3 unchanged sentences
The Board has delegated certain risk management responsibilities with respect to cybersecurity to our Audit and Compliance Committee.
−Removed: The Audit and Compliance Committee periodically reviews our data security programs, including cybersecurity processes and procedures regarding cybersecurity threats, AI, disaster recovery and critical business continuity, and reviews our programs and plans that management has established to monitor compliance with data security compliance programs and test emergency operations preparedness.
−Removed: The Audit and Compliance Committee also receives reports regarding risks associated with our data security programs and management’s plans for monitoring and testing compliance with data security regulations.
−Removed: The Audit and Compliance Committee meetings take place on a quarterly basis and include a report from our Chief Security Officer ("CSO") regarding our security programs, including (i) the status on activities under way to support our security strategy, (ii) an overview of the current threat landscape, including emerging threats and trends that may affect us, (iii) key performance measures of security operations and (iv) general security program needs.
+Added: The Audit and Compliance Committee periodically reviews our information technology systems, including cybersecurity processes and procedures regarding cybersecurity threats, data protection and privacy matters, AI, disaster recovery and critical business continuity, and reviews our programs and plans that management has established to monitor compliance with cybersecurity, data protection and privacy compliance programs and test emergency operations preparedness.
+Added: The Audit and Compliance Committee also receives reports regarding risks associated with our information technology systems and management’s plans for monitoring and testing compliance with cybersecurity, data protection and privacy regulations.
+Added: The Audit and Compliance Committee meetings take place on a quarterly basis and include a report from our Chief Information Security Officer (“CISO”) regarding our security programs, including (i) the status on activities under way to support our security strategy, (ii) an overview of the current threat landscape, including emerging threats and trends that may affect us, (iii) key performance measures of security operations and (iv) general security program needs.
The security program includes cybersecurity and information security risk management.
Our senior security leadership team has an average of 20 years of data security experience, and each member has served in multiple roles within our security programs.
−Removed: We seek to leverage a comprehensive risk management program aligned with the National Institute of Technology Cybersecurity Framework 2.0 that encompasses a structured approach to assess, identify, and manage cyber and information security risks.
+Added: We seek to leverage a comprehensive risk management program aligned with the National Institute of Standards and Technology Cybersecurity Framework 2.0 that encompasses a structured approach to assess, identify, and manage cyber and information security risks.
The internal processes for these activities are evaluated for alignment with our objectives and overall risk tolerance.
This approach is consistent with our overall risk management efforts.
−Removed: The CSO participates with other senior officers, including the Chief Executive Officer, Chief Information Officer, Chief Financial Officer, Chief Legal and Administrative Officer, Chief Ethics and Compliance Officer and others on our risk management committee, which develops and coordinates enterprise cybersecurity and information security policy and strategy, and provides guidance to senior management.
+Added: The CISO participates with other senior officers, including the Chief Executive Officer, Chief Information Officer, Chief Financial Officer, Chief Legal and Administrative Officer, Chief Ethics and Compliance Officer, Senior Vice President - Internal Audit Services and others on our risk management committee, which develops and coordinates enterprise cybersecurity and information security policy and strategy, and provides guidance to senior management.
We utilize cross-functional teams and risk assessment tools and technologies to identify potential cybersecurity and information security threats and risks.
10 unchanged sentences
the use of contractual agreements that outline certain cybersecurity requirements;
−Removed: and using outside services to perform ongoing monitoring of select suppliers and third-party service providers.
+Added: and use of outside services to perform ongoing monitoring of select suppliers and third-party service providers.
We also collaborate with select third-party suppliers to develop and align incident response plans.
−Removed: No risks from cybersecurity threats or previous cybersecurity incidents have materially affected our business strategy, results of operations, or financial condition.
+Added: To date, no risks from cybersecurity threats or previous cybersecurity incidents have materially affected our business strategy, results of operations, or financial condition.
However, there can be no assurance that our controls and procedures in place to monitor and mitigate the risks of cybersecurity threats, including the remediation of critical information security and software vulnerabilities, will be sufficient and/or timely and that we will not suffer material losses or consequences in the future.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.