2 unchanged sentences
Information about cybersecurity risks and Innventure’s risk management processes is collected, analyzed and considered as part of Innventure’s overall enterprise risk management program.
−Removed: In connection with Innventure’s
−Removed: risk management process, the Audit Committee of the Board (the “Audit Committee”) discusses with management and the independent auditors the Company’s underlying policies and guidelines with respect to risk assessment and risk management, including with respect to cybersecurity.
−Removed: Innventure is in the process of implementing measures to mitigate potential risks associated with information technology disruptions and cybersecurity threats, and Innventure plans to periodically assesses these risks, implements controls, and performs business continuity and disaster recovery planning.
+Added: In connection with Innventure’s risk management process, the Audit Committee of the Board (the “Audit Committee”) discusses with management and independent auditors the Company’s underlying policies and guidelines with respect to risk assessment and risk management, including with respect to cybersecurity.
+Added: Measures are in place to mitigate potential risks associated with information technology disruptions and cybersecurity threats.
+Added: Innventure periodically reassesses risks, implements controls, and performs business continuity and disaster recovery planning.
Innventure’s current risk management efforts include threat intelligence gathering, vulnerability assessments, and the integration of cybersecurity technologies.
−Removed: These measures are designed to help protect Innventure’s proprietary systems and customer data from both internal and external cybersecurity threats.
−Removed: Innventure engages third parties to perform various cybersecurity services and risk assessments.
−Removed: In order to oversee and identify risks from cybersecurity threats associated with our use of third-party service providers, Innventure performs diligence on third-party service providers that provide critical data.
−Removed: As of the date of this Form 10-K, Innventure has not identified risks as a result of prior cybersecurity incidents that have materially affected, or are reasonably likely to materially affect, Innventure’s operations, business strategy, results of operations, or financial condition.
−Removed: Innventure faces certain ongoing risks from cybersecurity threats and interruptions that, if realized, are reasonably likely to have a material adverse effect on Innventure’s business, financial condition, results of operation, and prospects.
+Added: These measures are designed to help protect Innventure’s proprietary systems and customer data from internal and external cybersecurity threats, including third-party systems and services.
+Added: Innventure requires mandatory cybersecurity training for employees and periodically initiates phishing simulations to educate employees on potential threats.
+Added: Innventure also engages with third-party security experts to conduct periodic cybersecurity services and risk assessments.
+Added: All findings are reviewed by Innventure, and mitigation steps are taken.
+Added: As of the date of this Form 10-K, Innventure has had no risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect Innventure’s business strategy, results of operations, or financial condition.
+Added: However, there can be no assurances that the policies and processes in place will mitigate all future threats.
See “Risk Factors—Cyber-attacks or a failure in Innventure’s information technology and data security infrastructure could adversely affect Innventure’s business and operations.”
2 unchanged sentences
The Audit Committee periodically reviews and discusses with management the Company’s policies with respect to risk assessment and risk management, including but not limited to cybersecurity and enterprise risk, and steps management has taken to monitor and control such exposures.
−Removed: Our Vice President, Finance is responsible for assessing and managing risks from cybersecurity threats.
−Removed: Innventure’s Vice President, Finance has a Bachelor’s degree in Accounting and a Master of Business Administration degree.
−Removed: Our Vice President, Finance is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through reports from an external consultant.
+Added: Our Senior Director of Information Technology (“IT”) is responsible for assessing and managing risks from cybersecurity threats.
+Added: Innventure’s Senior Director of IT has a Bachelor’s degree in Accounting and a Master of Business Administration degree.
+Added: Our Senior Director of IT is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through reports from an external consultant.
The external consultant has 20 years of cybersecurity experience.
1 unchanged sentence
The external consultant also maintains the industry-recognized CompTIA Security+ certification.
−Removed: The Vice President, Finance reports any exposure to risks from cybersecurity threats to our CFO.
−Removed: The Company intends for the CFO to regularly provide updates on risks related to cybersecurity to the Audit Committee.
−Removed: Our principal executive offices are located at 6900 Tavistock Lakes Blvd, Suite 400 Orlando, FL 32827.
−Removed: We believe these facilities are adequate for our current needs and that suitable additional space will be available as needed.
+Added: The Senior Director of IT reports any exposure to risks from cybersecurity threats to our CFO.
+Added: The CFO is expected to ensure that regular updates are provided to the Audit Committee on risks related to cybersecurity.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.