16 unchanged sentences
The Company’s Global Director, Information Security (Security Director) directs the Company’s cybersecurity team.
−Removed: He reports to the Company’s Global Director of Information Technologies (IT Director), who reports to the Chief Executive Officer of the Company.
+Added: He reports to the Company’s Global Director of Information Technologies (IT Senior Director), who reports to the Senior Vice President, Global Operations.
The Security Director is responsible for assessing and managing the Company’s cyber risk management program, informing senior management, as appropriate, regarding the prevention, detection, mitigation and remediation of cybersecurity incidents and supervising such efforts generally by the cybersecurity team.
Our Security Director is a Certified Information Systems Security Professional (CISSP) and has over 20 years of experience in cybersecurity in a broad range of industries.
−Removed: Our IT Director has a master’s degree in information systems and has prior experience managing global security efforts.
+Added: Our IT Senior Director has a master’s degree in information systems and has prior experience managing global security efforts.
Our Security Director manages a team of cybersecurity professionals with relevant experience and expertise, including in cybersecurity threat assessments and detection, mitigation technologies, cybersecurity training, incident response, cyber forensics, insider threats and regulatory compliance.
1 unchanged sentence
The ITSC is comprised of certain members of the Company’s senior management.
−Removed: The IT Director and Security Director attend each ITSC meeting.
−Removed: The ITSC generally meets quarterly during the year with the IT Director and Security Director to review risk mitigation activities as well as updated status of global security operations and metrics, including the prevention, detection, mitigation and remediation of cyber incidents.
−Removed: The IT Director, Security Director and ITSC monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in the cybersecurity risk management and strategy processes, including the operation of the Company’s incident response plan.
+Added: The IT Senior Director and Security Director attend each ITSC meeting.
+Added: The ITSC generally meets quarterly during the year with the IT Senior Director and Security Director to review risk mitigation activities as well as updated status of global security operations and metrics, including the prevention, detection, mitigation and remediation of cyber incidents.
+Added: The IT Senior Director, Security Director and ITSC monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in the cybersecurity risk management and strategy processes, including the operation of the Company’s incident response plan.
The Company has an established process led by our Security Director governing our assessment, response and notifications internally and externally upon the occurrence of a cybersecurity incident.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.