7 unchanged sentences
Our Audit Committee comprises members of our board of directors with extensive experience in the technology sector who have held leadership positions at other publicly listed companies and have expertise in various aspects of our business.
−Removed: Cybersecurity matters are formally raised to our Chief Executive Officer, Chief Financial Officer, and Chief Legal Officer through their attendance of Audit Committee meetings.
+Added: Cybersecurity matters are formally raised to our co-Chief Executive Officers, Chief Financial Officer, and Chief Legal Officer through their attendance of Audit Committee meetings.
These individuals are also informed of significant events and updates through direct communication from our CISO as needed.
1 unchanged sentence
Our CISO leads our cybersecurity initiatives and is primarily responsible for the assessing, managing, and monitoring of the Company’s cybersecurity risks.
−Removed: Our CISO has over 25 years of experience in the technology sector, including as CISO of other publicly listed technology companies.
+Added: Our CISO is a seasoned cybersecurity expert with over 20 years of experience and deep knowledge about our platform.
His knowledge of cybersecurity, compliance, and risk assessment has been leveraged to develop our cybersecurity governance and risk strategy.
5 unchanged sentences
These processes are conducted periodically by both internal and external resources.
−Removed: For example, independent third-party experts and assessors assist with our SOC 2 Type 2 examinations and penetration testing.
+Added: For example, independent third-party experts and assessors perform our SOC 2 Type 2 examinations and
+Added: penetration testing.
Our internal audit function also periodically conducts an assessment of different systems to provide our Audit Committee with information on our cybersecurity risk management processes.
−Removed: We have implemented a process to address identified risks from cybersecurity threats in which our Security Operations and Trust team works in consultation with management and other key stakeholders, as appropriate, to determine the associated risks, potential impact, and the recommended course of action to address those risks.
+Added: We have implemented a process to address identified risks from cybersecurity threats in which our Security Risk team works in consultation with management and other key stakeholders, as appropriate, to determine the associated risks, potential impact, and the recommended course of action to address those risks.
We have an incident response plan that includes escalation procedures for informing management and other key stakeholders.
−Removed: Our process calls for significant incidents and significant cyber risks to be raised to our Audit Committee followed by notification to our board of directors.
+Added: Our process calls for significant incidents and significant cybersecurity risks to be raised to our Audit Committee followed by notification to our board of directors.
We engage third-party service providers in the operation of our business.
1 unchanged sentence
These security reviews may include, as appropriate, security questionnaires and vendor due diligence assessments.
−Removed: To monitor and manage third-party risk, we have a dedicated Security Operations and Trust team that reviews service providers’ independent attestation reports and third-party certifications.
+Added: To monitor and manage third-party risk, we have a dedicated Security Risk team that reviews service providers’ independent attestation reports and third-party certifications.
While we have been the target and victim of cyberattacks by third parties, as of the date of this Annual Report on Form 10-K, we are not aware of any cybersecurity incidents that may have materially affected or are reasonably likely to materially affect the Company, including our business strategy, results of operations, or financial condition.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.