4 unchanged sentences
Our Board of Directors (the “Board”) is responsible for the oversight of cybersecurity risks, including through the delegation of certain cybersecurity oversight authority to the Audit Committee of the Board.
−Removed: The Company’s information security function and management team is led by our Vice President of Information Technology and Cybersecurity, who has approximately 38 years of experience in the information technology area and holds the CISM certification, and our Senior Director of Information Technology Infrastructure and Cybersecurity, who has approximately 25 years of experience in the information technology area and holds CISSP, CCSP, CISM, and OSCP certifications.
+Added: The Company’s i nformation security function and management team is led by our Vice President of Information Technology and Cybersecurity, who has approximately 39 years of experience in the information technology area and holds the CISM certification, and our Senior Director of Information Technology Infrastructure and Cybersecurity, who has approximately 26 years of experience in the information technology area and holds CISSP, CCSP, CISM, and OSCP certifications .
The information security team is responsible for monitoring, managing and assessing cybersecurity risks and threats on a day-to-day basis.
1 unchanged sentence
As discussed below, the information security team works with nationally recognized third parties and licenses various cybersecurity tools and products to assist with assessing and managing cybersecurity risks.
−Removed: The information security team regularly interacts and discusses cybersecurity matters with our Chief Executive Officer, Chief Financial Officer, Chief Operating Officer and General Counsel as part of our company-wide risk management system.
+Added: The information security team regularly interacts and discusses cybersecurity matters with our Chief Executive Officer, Chief Financial Officer and Chief Operating Officer a s part of our company-wide risk management system.
The information security team has plans and processes in place to escalate certain cybersecurity issues to senior management and the Board or the Audit Committee, including for consideration of whether, when and how to publicly disclose any material cybersecurity event.
18 unchanged sentences
• best practices for continued compliance and training.
−Removed: We also have engaged a nationally recognized third party to assist with a tabletop exercise to test our readiness in respect to certain of the preceding events and risks.
+Added: We have engaged in a tabletop exercise with a nationally recognized third party to test our readiness in respect to certain of the preceding events and risks .
When risks or threats are identified to the Company by a third party, the information security team is responsible for assessing the risk or threat and determining a course of action to mitigate the risk or neutralize the threat.
10 unchanged sentences
Member(s) of the information security team have the opportunity to present at the Risk Assessment Committee meetings and raise issues and concerns regarding cybersecurity.
−Removed: The minutes of Risk Assessment Committee meetings are provided to the Board and the General Counsel discusses with the Board the matters addressed at the applicable Risk Assessment Committee meeting.
+Added: The minutes of Risk Assessment Committee meetings are provided to the Board and senior management discusses with the Board the matters addressed at the applicable Risk Assessment Committee meeting.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.