4 unchanged sentences
is integrated into the overall risk management framework, including risk identification, assessment, and mitigation across all business
−Removed: We have collaborated with third-party consultants and built a cybersecurity program designed to protect and safeguard the integrity
−Removed: of our information systems, which aligns with industry standards and regulatory requirements.
−Removed: Key components of our cybersecurity risk
−Removed: management and strategy include:
+Added: We have collaborated with third-party consultants and built a cybersecurity program designed to protect and safeguard the confidentiality,
+Added: integrity and availability of our information systems, which aligns with industry standards and regulatory requirements.
+Added: Key components
+Added: of our cybersecurity risk management and strategy include:
◾ Risk assessments, including vulnerability scans
and penetration testing to identify potential system weaknesses.
−Removed: These are performed internally and supported by third-party consultants;
+Added: These assessments are performed internally and supported by third-party
◾ Alignment of our cybersecurity framework with
6 unchanged sentences
◾ Continuous monitoring and threat detection:
−Removed: IT security team uses advanced tools for real-time network and system monitoring, enabling rapid detection and response to potential threats;
+Added: IT security team utilizes advanced tools for real-time network and system monitoring, enabling rapid detection and response to potential
◾ Comprehensive cyber insurance coverage, including
2 unchanged sentences
cyber-attacks on our information systems or networks;
−Removed: however, none of these incidents had a material impact on our operations or financial
−Removed: For additional information on the impact of cyber risks, refer to Part I, Item 1A.
+Added: to date, none of these incidents had a material impact on our operations or financial
+Added: However, cybersecurity threats continue to evolve, and future incidents could have a material impact.
+Added: For additional information
+Added: on the impact of cyber risks, refer to Part I, Item 1A.
Risk Factors on page 14.
5 unchanged sentences
risk, including the steps management has taken to monitor and manage such exposures.
−Removed: The Company’s VP of enterprise systems and
−Removed: applications leads the overall cybersecurity strategy and risk management program.
−Removed: This role oversees development and execution of risk
−Removed: assessments, implementation of security policies and procedures, regular cybersecurity training for our employees, and leadership of the
−Removed: IT security team and coordination with third-party consultants.
+Added: Management is responsible for the day-to-day oversight
+Added: and management of cybersecurity risks.
+Added: The Company’s VP of Enterprise Systems and Applications leads the overall cybersecurity strategy
+Added: and risk management program.
+Added: This role oversees development and execution of risk assessments, implementation of security policies and
+Added: procedures, regular cybersecurity training for our employees, and leadership of the IT security team and coordination with third-party
+Added: The VP of Enterprise Systems and Applications
+Added: has over 30 years of experience in information technology, enterprise systems, and operational risk management, including responsibility
+Added: for infrastructure and operations in complex, multi-site environments.
+Added: This experience includes the implementation and oversight of IT
+Added: governance and control frameworks aligned with recognized standards, including ITIL and ISO/IEC 20000, as well as the establishment of
+Added: processes related to service continuity, supplier management, configuration management, and operational controls.
+Added: In addition, the VP’s
+Added: experience also includes leading enterprise technology initiatives, including system implementations, data center migrations, business
+Added: continuity planning, and vendor and third-party risk management.
Senior executives, including the Company’s
1 unchanged sentence
The VP and IT security team provide
−Removed: regular reports to senior management on the Company’s identified vulnerabilities, progress on cybersecurity initiatives and remediation
+Added: regular updates to senior management on the Company’s identified vulnerabilities, progress on cybersecurity initiatives and remediation
efforts, and details of ongoing incidents.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.