19 unchanged sentences
We have not experienced a material cybersecurity breach, but risks from cybersecurity threats may impact our business strategy, results of operations, and financial condition .
−Removed: No risks from any current or previous cybersecurity threats have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition, except to the extent that such strategy, operations, and conditions are affected by our employment of the cybersecurity risk assessment programs and procedures discussed in
+Added: No risks from any current or previous cybersecurity threats have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition, except to the extent that such strategy, operations, and conditions are affected by our employment of the cybersecurity risk assessment programs and procedures discussed in this Item.
We have not, as of the date of this filing, experienced a cybersecurity breach that has materially affected our business or financial condition.
6 unchanged sentences
Rather than designate one specific board committee to cybersecurity risk management, our entire Board of Directors is responsible for overseeing our risk management.
−Removed: Our Chief Risk Officer is responsible for overseeing our risk management generally, working closely with our internal audit department.
+Added: Our Chief Risk Officer is responsible for overseeing our risk management
+Added: generally, working closely with our internal audit department.
Our Chief Risk Officer regularly reports directly to the Board of Directors with respect to all areas of risk management.
−Removed: With regard to cybersecurity specifically, we have a Cyber Information Security Officer who reports to our Chief Information Officer, with a dotted-line reporting relationship to our Chief Executive Officer, and collaborates regularly with our Chief Risk Officer and Risk Team.
−Removed: Our Cyber Information Security Officer meets with the Chief Executive Officer on a standard cadence and chairs a committee focused on cybersecurity with monthly reports made to our Risk Committee.
−Removed: Minutes from these meetings as well as select materials are shared with the full Board of Directors, and our Cyber Information Security Officer delivers an annual report to our Board of Directors.
+Added: With regard to cybersecurity specifically, we have a Chief Information Security Officer who reports to our Chief Information Officer, with a dotted-line reporting relationship to our Chief Executive Officer, and collaborates regularly with our Chief Risk Officer and Risk Team.
+Added: Our Chief Information Security Officer meets with the Chief Executive Officer on a standard cadence and chairs a committee focused on cybersecurity with monthly reports made to our Risk Committee.
+Added: Minutes from these meetings as well as select materials are shared with the full Board of Directors, and our Chief Information Security Officer delivers an annual report to our Board of Directors .
In addition, our entire management team is actively engaged in assessing and managing material risks from cybersecurity threats.
1 unchanged sentence
We have an extensive and experienced team responsible for cybersecurity risk management.
−Removed: Our current Cyber Information Security Officer has a comprehensive information technology background with over 20 years of experience in managing or assisting in managing cybersecurity risks.
−Removed: To support the Cyber Information Security Officer in managing cybersecurity and our Chief Risk Officer in managing cybersecurity risks, we have established a cross-functional cybersecurity team that includes experts in various aspects of information security.
+Added: Our current Chief Information Security Officer has a comprehensive information security background with over 20 years of experience in managing or assisting in managing cybersecurity risks across multiple industries with the majority of that experience at community banking institutions.
+Added: Our Chief Information Security Officer holds multiple industry certifications from groups such as ISC2 and GIAC.
+Added: To support the Chief Information Security Officer in managing cybersecurity and our Chief Risk Officer in managing cybersecurity risks, we have established a cross-functional cybersecurity team that includes experts in various aspects of information security.
This team of employees includes individuals with many years of prior combined work experience in cybersecurity and data protection.
−Removed: These individuals are responsible for the day-to-day implementation of our cybersecurity program, including providing immediate notice to our Cyber Information Security Officer and our Chief Risk Officer of any potential cybersecurity incidents.
+Added: These individuals are responsible for the day-to-day implementation of our cybersecurity program, including providing immediate notice to our Chief Information Security Officer and our Chief Risk Officer of any potential cybersecurity incidents.
We employ robust and comprehensive processes to respond to cybersecurity risks.
11 unchanged sentences
Our cybersecurity personnel provide regular reports to the Board of Directors.
−Removed: As noted above, our Chief Risk Officer, Cyber Information Security Officer, and cybersecurity team provide regular reports to the Board regarding cybersecurity risks, as well as a review of the processes described above.
+Added: As noted above, our Chief Risk Officer, Chief Information Security Officer, and cybersecurity team provide regular reports to the Board regarding cybersecurity risks, as well as a review of the processes described above.
In particular, our Chief Risk Officer provides reports at every regularly scheduled Board meeting regarding our most material risks and the degree of exposure to these risks.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.