14 unchanged sentences
As part of our overall enterprise risk management processes and to better evaluate our cybersecurity risks, we have conducted a business impact analysis by leveraging our annual company-wide enterprise risk management assessment to understand the relationship between our critical business operations and our information technology systems.
−Removed: We partner with a
−Removed: third party service provider to assist us on a real-time basis with detecting advanced threats, streamline and collaborate on investigations and recommend actions to further strengthen our systems and, if and when necessary, respond to incidents.
+Added: We partner with a third party service provider to assist us on a real-time basis with detecting advanced threats, streamline and collaborate on investigations and recommend actions to further strengthen our systems and, if and when necessary, respond to incidents.
In addition, we regularly engage independent third parties to test our cybersecurity processes and systems through consulting, independent audits and penetration testing.
2 unchanged sentences
For example, all employees are required to successfully complete a cybersecurity risk module and assessment on a quarterly basis.
−Removed: As part of this program, we also take reasonable steps to ensure any employee who may come into possession of confidential financial or health information has received appropriate cybersecurity awareness training and, if applicable, payment card industry (PCI) training.
+Added: As part of this program, we also take reasonable steps to ensure any employee who may
+Added: come into possession of confidential financial or health information has received appropriate cybersecurity awareness training and, if applicable, payment card industry (PCI) training.
The audit committee of the Company’s Board of Directors is responsible for overseeing management’s information technology steering committee as well as management’s risk assessment and risk management processes designed to monitor and control cybersecurity threats.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.