6 unchanged sentences
and reputational risk.
−Removed: We have implemented a risk-based approach to identify and assess the cybersecurity threats
−Removed: that could affect our business and information systems and partner with a third-party hosted provider.
+Added: We have implemented a risk-based approach to identify and assess the cybersecurity threats that could affect our business and information systems and partner with a third-party hosted provider .
Our cybersecurity program is aligned with industry standards, such as the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework.
3 unchanged sentences
Our VP of Information Technology has expertise in the following areas which assist in assessing and managing applicable cybersecurity risk:
−Removed: 36 years of IT experience including endpoint detection, security, incident management and response, vulnerability management and response, event management and response, and network security segmentation.
+Added: extensive IT experience including endpoint detection, security, incident management and response, vulnerability management and response, event management and response, and network security segmentation.
The VP of Information Technology provides regular reports on ongoing risk and mitigation practices to our COO and CFO, who then reports to the Board.
1 unchanged sentence
The Board considers cybersecurity risks in business strategy by getting updates on cybersecurity risk assessment.
−Removed: It assesses the experience of management personnel responsible for preventing, mitigating, detecting, and remediating any cyber incidents, including the VP of Information Technology as well as third-party providers.
+Added: It assesses the experience of management personnel responsible for preventing, mitigating, detecting, and remediating any cyber incidents, including the VP of Information Technology as well as third-party
The Company has not experienced any cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected the Company, including its business strategy, results of operations or financial condition.
−Removed: In 2023, we upgraded our enterprise resource planning system to enhance operating efficiencies and provide more effective management of our business operations.
−Removed: The upgrade was substantially completed in the third quarter of 2023.
−Removed: The upgrade included training of personnel, migration of data, and maintaining effective internal controls.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.