21 unchanged sentences
BlackRock deploys a range of people, process and technical controls that are designed to protect BlackRock’s information systems from cybersecurity threats, which may include, among others:
−Removed: physical security controls;
−Removed: perimeter controls, including technical assessments, firewalls, network segregation, intrusion detection and prevention;
−Removed: tabletop exercises, ongoing vulnerability and patch management;
−Removed: vendor due diligence;
−Removed: multi‑factor authentication;
−Removed: device encryption;
−Removed: application security, code testing and penetration testing;
−Removed: endpoint security, including anti‑malware protection, threat intel and response, managed detection and response, security configuration management, portable storage device lockdown, restricted administrative privileges;
−Removed: employee awareness, training, and phishing testing;
−Removed: data loss prevention program and monitoring;
−Removed: information security incident reporting and monitoring;
−Removed: and layered and comprehensive access controls.
+Added: physical security controls; perimeter controls, including technical assessments, firewalls, network segregation, intrusion detection and prevention; tabletop exercises, ongoing vulnerability and patch management; vendor due diligence; multi-factor authentication; device encryption; application security, code testing and penetration testing; endpoint security, including anti‑malware protection, threat intel and response, managed detection and response, security configuration management, portable storage device lockdown, restricted administrative privileges; employee awareness, training, and phishing testing; data loss prevention program and monitoring; information security incident reporting and monitoring; and layered and comprehensive access controls.
Incident Response and Recovery Planning:
32 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.