4 unchanged sentences
In the event of a material change to our systems or operations, we would conduct an assessment of the internal and external threats to the security, confidentiality, integrity, and availability of our data and systems, along with other material risks to our operations.
−Removed: We leverage third-party security services for audit, benchmarking, and improvement and use various tools and methodologies to manage cybersecurity risks that are tested regularly, including a cybersecurity assessment guided by the National Institute of Standards and Technology (NIST) cybersecurity framework and ongoing security awareness training.
+Added: We leverage third-party security services for audit, benchmarking, and improvement and use various tools and methodologies to manage cybersecurity risks that are tested regularly, including a cybersecurity assessment guided by the National Institute of Standards and Technology cybersecurity framework and ongoing security awareness training.
We oversee third-party service providers by conducting vendor diligence upon onboarding and ongoing monitoring.
−Removed: Vendors are assessed for risk based on the nature of their digital footprint, company profile, domain name services health, internet protocol reputation, external access threats and social engineering landscapes, based on that assessment, we conduct diligence that may include completing security questionnaires, onsite evaluation, and scans or other technical evaluations.
+Added: Vendors are assessed for risk based on the nature of their digital footprint, company profile, domain name services health, internet protocol reputation, external access threats and social engineering landscapes.
+Added: Based on that assessment, we conduct diligence that may include completing security questionnaires, onsite evaluation, and scans or other technical evaluations.
We also monitor and evaluate our cybersecurity posture and performance on an ongoing basis through regular vulnerability scans, simulated phishing tests, penetration tests, and threat intelligence feeds.
3 unchanged sentences
For more information on our cybersecurity-related risks, see Item 1A, Risk Factors , elsewhere in this Annual Report on Form 10-K.
−Removed: The Company’s Senior Vice President, Controller and Principal Accounting Officer is responsible for managerial oversight of our cybersecurity program and reporting on cybersecurity matters to the Audit Committee of the Board of Directors and management.
−Removed: Our Senior Vice President, Controller and Principal Accounting Officer oversees the cybersecurity team, which include members of our internal IT department and is also supported by third-party service providers.
+Added: The Company’s Senior Vice President, Corporate Controller & Chief Accounting Officer is responsible for managerial oversight of our cybersecurity program and reporting on cybersecurity matters to the Audit Committee of the Board of Directors and management.
+Added: Our Senior Vice President, Corporate Controller & Chief Accounting Officer oversees the cybersecurity team, which include members of our internal IT department and is also supported by third-party service providers.
Our Board of Directors is responsible for overseeing our enterprise risk management activities in general, and each of our Board committees assists the Board in the role of risk oversight.
−Removed: The Audit Committee of the Board of Directors oversees our cybersecurity risk and receives regular reports , with a minimum frequency of once per year, from our Senior Vice President, Controller and Principal Accounting Officer on various cybersecurity matters, including risk assessments, mitigation strategies, areas of emerging risks, incidents and industry trends, and other areas of importance.
+Added: The Audit Committee of the Board of Directors oversees our cybersecurity risk and receives regular reports , with a minimum frequency of once per year, from our Senior Vice President, Corporate Controller & Chief Accounting Officer on various cybersecurity matters, including risk assessments, mitigation strategies, areas of emerging risks, incidents and industry trends, and other areas of importance.
Promptly after becoming aware of a material cybersecurity incident affecting our IT systems or data, the Audit Committee would work with management to formulate a mitigation plan and review compliance with such plan, as well as to ensure compliance with any external regulatory or disclosure requirements, including any disclosures of material cybersecurity breaches.
2 unchanged sentences
We believe that our facilities are suitable and adequate for our needs for the foreseeable future.
−Removed: Legal Proceedings
−Removed: Mine Safety Disclosures
−Removed: Not applicable.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.