8 unchanged sentences
• Annual internal/external penetration testing conducted by a third-party offensive security vendor.
−Removed: A significant cybersecurity incident may result from actions by our employees, suppliers, third-party administrators, or unknown third parties or through cyber-attacks and could affect our data framework or cause a failure to protect the personal information of our customers, suppliers or employees, or sensitive and confidential information regarding our business and could give rise to legal liability and regulatory action under data protection and privacy laws.
+Added: A significant cybersecurity incident may result from actions by our employees, suppliers, third-party administrators, or unknown third parties or through cyber-attacks and could affect our data framework or cause a failure to protect the personal information of our customers, suppliers or employees, or sensitive and confidential information regarding our business and
+Added: could give rise to legal liability and regulatory action under data protection and privacy laws.
The Company describes whether and how risks from identified cybersecurity threats have materially affected or are reasonably likely to materially affect the Company under the heading “ We rely on technology in our business and any cybersecurity incident, other technology disruption or delay in implementing new technology could negatively affect our business and our relationships with customers ,” in Item 1A of this Annual Report on Form 10-K.
1 unchanged sentence
Our Board of Directors oversees our overall risk management strategy.
−Removed: Our information security program is managed by a dedicated Head of Information Technology, who has over twenty years of experience in IT application management, infrastructure and security across a variety of industries including Financial Services, Defense Contracting, Manufacturing and Distribution, whose team is responsible for maintaining our enterprise-wide cybersecurity strategy, policies, standards, architecture and processes.
+Added: Our information security program is managed by our Senior Vice President of People and Technology , who has twenty-five years of experience in IT leadership across a variety of industries including manufacturing, distribution, defense, and financial services, whose team is responsible for maintaining our enterprise-wide cybersecurity strategy, policies, standards, architecture and processes.
Our program is assessed both internally and externally by third parties, including our virtual Chief Information Security Officer (“vCISO”) partner.
−Removed: Our Head of Information Technology provides reports at least quarterly to our Audit Committee, as well as our Disclosure Committee, which comprises senior management and key stakeholders, as appropriate.
−Removed: The reports provided include updates on our cyber risks and threats, key updates to our information security systems and programs as well as the current threat environment.
+Added: Our Senior Vice President of People and Technology provides reports at least quarterly to our Audit Committee, as well as our Disclosure Committee, which comprises senior management and key stakeholders, as appropriate.
+Added: The reports provided include updates on our cyber risks and threats, and key updates to our information security systems and programs as well as the current threat environment.
+Added: We also have processes in place to stay informed of and monitor prevention, detection, mitigation, and remediation of cybersecurity risks, including:
+Added: • Any cybersecurity breach, unauthorized access, data loss, or ransomware attack must be immediately escalated to the Disclosure Committee, General Counsel, Internal Audit, and Audit Committee.
+Added: • On a quarterly basis, the Disclosure Committee, in coordination with the SVP of People and Technology, Internal Audit, and vCISO, shall assess the Company’s cybersecurity risk exposure, including potential vulnerabilities in IT systems and data security.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.