7 unchanged sentences
The ARC is informed of such risks through regular reviews with management regarding any specific cybersecurity issues that could affect the adequacy of internal controls over financial reporting.
−Removed: The Company’s Office of the Chief Information Security Officer (“Office of the CISO”), which is responsible for the daily direction and management of cybersecurity risk activities, consists of the Chief Information Security Officer, Chief Information and Digital Officer and other information technology and cybersecurity specialists.
+Added: The Company’s Office of the Chief Information Security Officer (“Office of the CISO”), which is responsible for the daily direction and management of cybersecurity risk activities, led by the Company's Chief Information Security Officer ("CISO"), and also consists of the Company's Vice President and Chief Information and Digital Officer and other information technology and cybersecurity specialists.
The Office of the CISO uses various data protection frameworks and conducts vulnerability assessments, cybersecurity monitoring and recovery software, employee, supplier and dealer training programs and monitoring of incidents and threats.
−Removed: Members of the Office of the CISO also engage with the Company’s internal audit department to review cybersecurity threats focusing on operational applications and databases through the course of their activities.
−Removed: The Chief Information Security Officer has extensive experience in information technology including roles in cybersecurity, privacy, software engineering, systems engineering, infrastructure and data center management, and is a Certified Information Security Manager and a Certified Data Privacy Solutions Engineer.
−Removed: The Company's Office of the CISO chairs the Company’s Cybersecurity Committee (the “CSC”), which oversees the establishment and operations of cybersecurity risk management processes and strategies and directs activities to identify, detect, assess and manage risks from cybersecurity threats, protect the Company’s assets and to respond and recover from cybersecurity incidents.
+Added: Members of the Office of the CISO also engage with the Company’s internal audit department to
+Added: review cybersecurity threats focusing on operational applications and databases through the course of their activities.
+Added: The Chief Information Security Officer has over 35 years of extensive experience in information technology including roles in cybersecurity, privacy, software engineering, systems engineering, infrastructure and data center management, and is a Certified Information Security Manager.
+Added: The CISO reports to the Vice President and Chief Information and Digital Officer.
+Added: The Vice President and Chief Information and Digital Officer, who reports to the Company’s Chief Executive Officer, has approximately 35 years of information technology experience, including roles or oversight of cybersecurity, software design and implementation, and related technology domains.
+Added: The Company's CISO chairs the Company’s Cybersecurity Committee (the “CSC”), which oversees and advises on various cybersecurity risk management processes and strategies and directs activities to identify, detect, assess and manage risks from cybersecurity threats, protect the Company’s assets and to respond and recover from cybersecurity incidents.
The CSC is responsible for coordination with the Company’s internal audit, risk management and/or crisis management teams to review and respond to cybersecurity threats.
−Removed: The CSC includes members of senior management
−Removed: from operations, finance and legal.
+Added: The CSC also advises on the implementation and performance of the National Institute of Standards and Technology Cybersecurity Framework.
+Added: The CSC includes members of senior management from operations, finance and legal.
The CSC is expected to meet quarterly.
8 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.