1 unchanged sentence
CYBERSECURITY
−Removed: Cybersecurity
−Removed: Cybersecurity
−Removed: Risk Management and Strategy
+Added: Cybersecurity Risk
+Added: Management and Strategy
cybersecurity risk management program, processes and strategy described in this section are limited to the personal and business information
1 unchanged sentence
and services supporting or used by the Company (collectively, “Critical Systems”), and service providers.
−Removed: will develop and implement a company-wide cybersecurity risk management program intended to protect the confidentiality,
−Removed: integrity, and availability of our Confidential Information and Critical Systems.
−Removed: Our cybersecurity risk management program will be
−Removed: integrated into our overall enterprise risk management program and includes a cybersecurity incident response plan.
+Added: will develop and implement a company-wide cybersecurity risk management program intended to protect the confidentiality, integrity,
+Added: and availability of our Confidential Information and Critical Systems.
+Added: Our cybersecurity risk management program will be integrated
+Added: into our overall enterprise risk management program and includes a cybersecurity incident response plan.
cybersecurity risk management program shall include :
−Removed: assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader
−Removed: enterprise IT environment;
−Removed: security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and
−Removed: (3) our response to cybersecurity incidents;
−Removed: cybersecurity
−Removed: awareness and spear-phishing resistance training of our employees, and senior management;
−Removed: cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents;
−Removed: vendor management policy for service providers.
+Added: risk assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader enterprise IT environment;
+Added: a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;
+Added: cybersecurity awareness and spear-phishing resistance training of our employees, and senior management;
+Added: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents;
+Added: a vendor management policy for service providers.
have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially
2 unchanged sentences
an adverse effect on our business, financial condition and results of operations.
−Removed: Cybersecurity
−Removed: executive management team, along with our managed information technology service provider, is responsible for assessing and managing
−Removed: risks from cybersecurity threats to the Company, including our Confidential Information and Critical Systems.
+Added: Cybersecurity Governance
+Added: executive management team, along with our managed information technology service provider, is responsible for assessing and managing risks
+Added: from cybersecurity threats to the Company, including our Confidential Information and Critical Systems.
The team has primary responsibility
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.