4 unchanged sentences
InterDigital evaluates cybersecurity risks as part of our overall enterprise risk management .
−Removed: A steering committee of senior executives meets quarterly to evaluate any changes to the Company’s exposure to cybersecurity risks, discuss potential mitigation plans and provide updates on mitigation efforts already underway.
−Removed: Our cybersecurity team keeps up to date on the latest threats and risks through multiple channels and is also involved in evaluating risks associated with any new proposed service providers.
−Removed: The Company employs a Director of Cybersecurity & Networks, reporting directly to our CIO, who manages our cybersecurity team that is comprised entirely of security professionals with industry recognized top tier certifications.
−Removed: The cybersecurity team within IS is responsible for assessing and managing risks and informing/gaining feedback from the cybersecurity steering committee.
−Removed: Additionally, InterDigital's team of dedicated cybersecurity experts/professionals maintain a comprehensive set of cybersecurity policies and standards, including a security incident response framework.
−Removed: The framework is a set of coordinated procedures and tasks that the InterDigital incident response team executes to ensure timely and accurate reporting and resolution of computer security incidents.
−Removed: The framework details who, how and when appropriate persons or committees, including the Audit Committee are kept informed on the status of potential cybersecurity incidents.
−Removed: A summary of recent incidents is also presented by the Chief Information Officer (“CIO”) at each regular Audit Committee meeting.
−Removed: Our policies and standards were developed in collaboration with a wide range of disciplines, such as information technology, cybersecurity, legal, compliance and business.
−Removed: Our cybersecurity strategy and policies are continually reassessed to ensure they attempt to identify and proactively address the constant changes in the global threatscape, including through the use of tabletop exercises.
−Removed: Decision makers such as the CIO, executive team, and Audit Committee are regularly kept up to date on cybersecurity trends.
−Removed: Ongoing collaboration with stakeholders throughout the business also helps to build continued awareness and visibility of future needs.
−Removed: We engage external vendors to assess the cybersecurity program as needed.
−Removed: An independent third party, never used consecutively, performs annual multi-stage penetration testing of our IT environment.
−Removed: Our cybersecurity program is governed by the Audit Committee of our Board.
+Added: A cybersecurity steering committee of senior executives is responsible for assessing and managing cybersecurity risks.
+Added: The steering committee meets annually to evaluate any changes to the Company’s exposure to cybersecurity risks, discuss potential mitigation plans and provide updates on mitigation efforts already underway.
+Added: The steering committee is led by the Director of Cybersecurity & Networks, a cybersecurity professional with 20 years of experience and industry-recognized certifications.
+Added: The Director of Cybersecurity & Networks reports directly to the Chief Information Officer ("CIO") and manages our cybersecurity team, which uses multiple internal and external sources to keep up to date on the latest threats and risks and manages a process to evaluate cybersecurity risks associated with third-party service providers.
+Added: Our cybersecurity team also maintains a comprehensive set of cybersecurity policies and standards.
+Added: We continually reassess and review our cybersecurity strategy and policies, including through tabletop exercises, to identify and proactively address the constant changes in the global threat landscape.
+Added: We also engage external vendors to assess the cybersecurity program as needed, including annual multi-stage penetration testing of our IT environment by independent third parties.
+Added: The Audit Committee of our Board oversees risk from cybersecurity threats.
The Audit Committee of the Board and the full Board each receive quarterly updates on cybersecurity risks identified through the enterprise risk management processes described above.
+Added: The comprehensive set of cybersecurity policies and standards maintained by the cybersecurity team includes a security incident response framework.
+Added: The framework is a set of coordinated procedures and tasks that the InterDigital incident response team executes to ensure timely and accurate reporting and resolution of computer security incidents.
+Added: The framework details who, how and when appropriate persons or committees, including the CIO, cybersecurity steering committee, and Audit Committee are kept informed on the status of potential cybersecurity incidents.
+Added: The CIO also presents a summary of recent incidents at each regular Audit Committee meeting.
Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us.
−Removed: We identify nation state-sponsored threat actors and the rise in sophistication and proliferation of ransomware campaigns as top reasonable material risks to the business.
+Added: However, to date, cybersecurity threats have not materially affected us , including our business strategy, results of operations, or financial condition.
+Added: We identify nation state-sponsored threat actors and the rise in sophistication and proliferation of criminal cyber threat actors and ransomware campaigns as top reasonable material risks to the business.
The theft, unauthorized use or publication of our intellectual property and/or confidential business or personal information (whether through a breach of our own systems or the breach of a system of a third party that provides services to us) could harm our competitive or negotiating positions, reduce the value of our investment in research and development and other strategic initiatives, compromise our patent enforcement strategies or outlook, damage our reputation or otherwise adversely affect our business.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.