3 unchanged sentences
We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K.
−Removed: Accordingly, the company takes a comprehensive approach to identifying and managing cybersecurity risks that involves the company's Information Security functional team, senior management, and our board of directors in coordination with the Technology and Information Security (“T&IS”) Committee and the Audit Committee of our board of directors.
+Added: Accordingly, the company takes a comprehensive approach to identifying and managing cybersecurity risks that involves the company's Information Security functional team, senior management, the Technology and Information Security (“T&IS”) Committee, and the Audit Committee, all in coordination with of our board of directors.
Our cybersecurity risk management function is a component of our overall approach to risk management, including coordination with our Enterprise Risk Management Committee.
5 unchanged sentences
We have a cybersecurity program that focuses on implementing risk-based controls, technologies, and other processes.
−Removed: We aim to incorporate industry best practices throughout our cybersecurity program, including the frameworks established by the National Institute of Standards and Technology (“NIST”), the Cybersecurity and Infrastructure Security Agency (“CISA”), and other applicable industry standards.
+Added: We aim to incorporate certain industry best practices throughout our cybersecurity program, including the frameworks established by the National Institute of Standards and Technology (“NIST”), the Cybersecurity and Infrastructure Security Agency (“CISA”), and other applicable industry standards.
To augment our in-house capabilities, we leverage expertise from professional services firms and/or outside counsel, as needed, to assess our cybersecurity controls, and collaborate on an ever-changing landscape.
11 unchanged sentences
Prior to joining Huron in 2018, our CIO served in various information security and information technology roles in the professional services industry for several large, public companies and executed large-scale, global implementations of business applications and infrastructure technologies in a manner designed to mitigate cybersecurity risks.
−Removed: Our CIO reports on a quarterly basis to Huron's internal Information Security Management System (“ISMS”) Committee, which has the primary responsibility for assessing and managing material cybersecurity risks.
+Added: Huron's internal Information Security Management System (“ISMS”) Committee, which has the primary responsibility for assessing and managing material cybersecurity risks, meets quarterly.
The ISMS Committee, which includes members of our executive and senior leadership teams, our CIO and other functional team leaders , reviews, approves and establishes ISMS specific goals and objectives, reviews policy updates and approves the annual IT risk assessment, which identifies impacts, threats and controls related to IT assets utilized across the enterprise.
Our board of directors, in coordination with its T&IS Committee, oversees the governance of the Company’s technology-related risks, including information security, data protection, cybersecurity, vendor, fraud, and business continuity risks, and technology-related strategies.
+Added: The T&IS Committee also oversees the company's AI strategy, including with respect to risk management.
The T&IS Committee receives quarterly updates from the CIO, including existing and new cybersecurity risks, the management and/or mitigation of such risks, material cybersecurity incidents (if any), and status on key cybersecurity initiatives.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.