3 unchanged sentences
Our overall information security program applies an enterprise-wide, risk-based approach to information security that enables us to assess, identify, and manage risk exposures, including material risks from cybersecurity threats, in a timely manner.
−Removed: Our information security operations and procedures provide a comprehensive Information Security Management System (‘‘ISMS’’) that enable us to maintain the confidentiality, integrity, and availability of information and systems in our environment.
−Removed: Our information security policies are based on National Institute of Standards and Technology (“NIST”) Special Publication (“SP”) 800-171 framework and apply to the entire enterprise.
+Added: Our information security operations and procedures provide a comprehensive Information Security Management System (“ISMS”) enabling us to maintain the confidentiality, integrity, and availability of information and systems in our environment.
+Added: Our information security policies are based on National Institute of Standards and Technology Special Publication 800-171 framework and apply to the entire enterprise.
We have a dedicated Information Security and Compliance organization (“ISC”) that owns and operates the ISMS.
−Removed: The ISC organization reports directly to Keysight’s Chief Information Security Officer (“CISO”) and includes functions such as information security policy management, risk management, vulnerability management, compliance assurance, identify and access management, incident management, security awareness and education and information technology (“IT’’) disaster recovery.
+Added: The ISC organization reports directly to Keysight’s Chief Information Security Officer (“CISO”) and includes functions such as information security policy management, risk management, vulnerability management, compliance assurance, identity and access management, incident management, security awareness and education, and information technology (“IT”) disaster recovery.
Our management team has relevant expertise and experience in understanding risks from cybersecurity threats and overseeing risk management processes.
13 unchanged sentences
• Third Party Risk:
−Removed: Keysight’s Third Party Cyber Risk Management (“TPCRM”) is a systematic process for managing exposure to cybersecurity risks throughout the supply chain and developing appropriate response strategies, policies, processes, and procedures.
−Removed: In addition, Keysight maintains information security risk insurance to offset the costs of an information security breach.
+Added: Keysight’s Third Party Cyber Risk Management is a systematic process for managing exposure to cybersecurity risks throughout the supply chain and developing appropriate response strategies, policies, processes, and procedures.
+Added: In addition, Keysight maintains information security risk insurance, which may help to offset the costs of an information security breach.
The policy is reviewed annually and updated as needed.
14 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.