1 unchanged sentence
CYBERSECURITY
−Removed: Cybersecurity Risk
−Removed: Management and Strategy
+Added: Cybersecurity
+Added: Risk Management and Strategy
cybersecurity risk management program, processes and strategy described in this section are limited to the personal and business information
1 unchanged sentence
and services supporting or used by the Company (collectively, “Critical Systems”), and service providers.
−Removed: will develop and implement a company-wide cybersecurity risk management program intended to protect the confidentiality, integrity,
−Removed: and availability of our Confidential Information and Critical Systems.
−Removed: Our cybersecurity risk management program will be integrated
−Removed: into our overall enterprise risk management program and includes a cybersecurity incident response plan.
−Removed: cybersecurity risk management program shall include :
−Removed: risk assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader enterprise IT environment;
−Removed: a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;
−Removed: cybersecurity awareness and spear-phishing resistance training of our employees, and senior management;
−Removed: a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents;
−Removed: a vendor management policy for service providers.
+Added: We have established cybersecurity risk management practices designed to protect the confidentiality, integrity , and availability of our
+Added: information and systems.
+Added: These practices are part of our broader risk management framework and include procedures for responding to cybersecurity
+Added: cybersecurity risk management program includes:
+Added: assessments designed to help identify material cybersecurity risks to our Confidential Information, Critical Systems and the broader
+Added: enterprise IT environment;
+Added: security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and
+Added: (3) our response to cybersecurity incidents;
+Added: cybersecurity
+Added: awareness and spear-phishing resistance training of our employees, and senior management;
+Added: cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents;
+Added: vendor management policy for service providers.
have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially
affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial
−Removed: We face risks from cybersecurity threats that, if realized, could have a material adverse effect on us including
−Removed: an adverse effect on our business, financial condition and results of operations.
−Removed: Cybersecurity Governance
−Removed: executive management team, along with our managed information technology service provider, is responsible for assessing and managing risks
−Removed: from cybersecurity threats to the Company, including our Confidential Information and Critical Systems.
+Added: We face risks from cybersecurity threats that, if realized, could have a material adverse effect on us including an adverse
+Added: effect on our business, financial condition and results of operations.
+Added: Cybersecurity
+Added: executive management team, along with our managed information technology service provider, is responsible for assessing and managing
+Added: risks from cybersecurity threats to the Company, including our Confidential Information and Critical Systems.
The team has primary responsibility
9 unchanged sentences
for updating the Board, as necessary, regarding significant cybersecurity incidents.
−Removed: Board shall also receive period reports from management on our cybersecurity risks and cybersecurity risk management program.
+Added: Board shall also receive periodic reports from management on our cybersecurity risks and cybersecurity risk management program.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.