9 unchanged sentences
We plan for, implement, and improve safeguards that are designed to reduce unacceptable risks to any foreseeably harmed party.
−Removed: We engage third-party service providers (including contractors and vendors) as part of our normal business operations, including collaborating with third-party experts to assist with evaluating, identifying, and managing our cybersecurity risks.
+Added: We engage third-party service
+Added: providers (including contractors and vendors) as part of our normal business operations, including collaborating with third-party experts to assist with evaluating, identifying, and managing our cybersecurity risks.
Our cybersecurity risk management program includes:
16 unchanged sentences
As part of the third-party risk management process, we request and review annual penetration test reports for the third-party service providers designed to assess whether all high and medium risk findings are addressed.
−Removed: The control environments for third-party service providers are reviewed annually.
+Added: The control environments for third-party service providers are reviewed annually based on risk.
Our cybersecurity risk mitigation strategy includes the use of cybersecurity insurance that provides protection against certain potential losses arising from certain cybersecurity incidents.
8 unchanged sentences
Our Security Operations Center verifies and validates the threat information and modifies our detection and preventative controls as appropriate.
−Removed: Our CISO works closely with our Chief Global Ethics and Compliance Officer and Chief Legal and Corporate Affairs Officer to oversee compliance with legal, regulatory, and contractual security requirements.
+Added: Our CISO works closely with our Chief Global Ethics and Compliance Officer and Global General Counsel and Corporate Affairs Officer to oversee compliance with legal, regulatory,
+Added: and contractual security requirements.
The CISO’s team evaluates third-party service providers to a degree commensurate with the risk their services pose to us.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.