2 unchanged sentences
We, and our third-party service providers, use information technology to support our global business processes and activities, which exposes us to cybersecurity risks.
−Removed: KDP’s overall risk management system includes ongoing cybersecurity risk assessment and reporting, incident management, and a diligence and risk management process for third-party service providers.
+Added: Our overall risk management system includes ongoing cybersecurity risk assessment and reporting, incident management, and a diligence and risk management process for third-party service providers.
Employees with network access participate in ongoing phishing, social engineering, and cybersecurity awareness training efforts, and we also conduct periodic tabletop exercises led by external consultants.
11 unchanged sentences
The committee includes our CISO, our Chief Information Officer, our Chief Legal Officer, our Senior Vice President and Controller (Principal Accounting Officer), our head of Internal Audit, and other members of management with relevant subject matter expertise.
+Added: We also maintain cybersecurity insurance coverage that is intended to cover potential costs related to cybersecurity incidents and information systems failures, subject to customary limitations, exclusions, and deductibles.
Our CISO has more than 27 years of experience in cybersecurity and information technology, including, prior to joining KDP in 2019, more than 11 years as a principal in Ernst & Young's cybersecurity practice.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.