31 unchanged sentences
In addition, the full Board may review and assess cybersecurity risks as part of its responsibilities for our risk management oversight.
−Removed: In addition, we have an IT Security Committee comprised of our top executives from across the Company, including our Chief Executive Officer, Chief Financial Officer, General Counsel, and our VP of Information Technology and Security.
+Added: In addition, we have an IT Security Committee comprised of our top executives from across the Company, including our Chief Executive Officer, Chief Financial Officer, Vice President, Legal and Commercial Operations, and our Vice President, IT Transformation and AI.
The IT Security Committee meets quarterly to discuss and address management of the risks facing our business.
Technological risk is a regular component analyzed by our IT Security Committee to identify and assess potential cybersecurity risks across our business operations.
−Removed: Our information security team is led by our VP of Information Technology and Security , who has decades of experience in information technology and cybersecurity.
−Removed: Furthermore, our VP of Information Technology and Security holds several certifications, including CISSP (Certified Information Systems Security Professional), ACCISO (Associate Certified Chief Information Security Officer) and CISM (Certified Information Security Manager).
+Added: Our information security team is led by our Vice President, IT Transformation and AI, who has multiple years of experience in information technology and cybersecurity.
The information security team conducts periodic assessment and testing of our policies, standards, processes, and practices that are designed to address a multitude of potential cybersecurity threats and incidents.
−Removed: These efforts include a wide range of activities, including penetration testing, adoption and regular evaluation of incident response plans and procedures, regular team member email phishing test campaigns, email security monitoring, real-time vulnerability scanning and intrusion detection, team member cybersecurity awareness programming, regular audits & evaluations of internal and third-party systems, and continuous improvement of the information security management system.
+Added: These efforts include a wide range of activities, including penetration testing, adoption and regular evaluation of incident response plans and procedures, regular team member email phishing test campaigns, email security monitoring, real-time vulnerability scanning and intrusion detection, team member cybersecurity awareness training, regular audits & evaluations of internal and third-party systems, and continuous improvement of the information security management system.
Impact of cybersecurity risks on business strategy, results of operations or financial condition
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.