23 unchanged sentences
• The Company maintains an enterprise monitoring and reporting program, which identifies key risk indicators for tracking and identifying trends.
−Removed: The key risk indicators are presented to the Company’s IT Committee and th e Board on a monthly basis.
+Added: The key risk indicators are presented to the Company’s IT Committee monthly and th e Board on a quarterly basis.
The IS Program is monitored each year through various internal and external audits, as well as OCC regulatory exams.
24 unchanged sentences
Cisco Certified Internetwork Expert, Cisco Certified Network Professional, Cisco Certified Voice Professional, Cisco Certified Design Professional, and Microsoft Certified Systems Engineer.
−Removed: The information security analyst has over five years of experience and holds ISC2’s “Certified in Cybersecurity” certification.
+Added: The information security analyst has over five years of experience and holds ISC2’s “Certified in Cybersecurity” and CompTIA’s Security+ certification.
Information technology staff are generally subject to professional education, experience, and certification requirements, and receive education and mentoring from the CISO and CIO.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.