6 unchanged sentences
Refer to the “Risk Factors” section, which appears in Item 1A of this Report for more information regarding these risks.
+Added: In response to these risks, we have implemented cybersecurity processes, technologies, and controls detailed below to aid in our efforts to assess, identify, and manage cybersecurity risks.
+Added: Our Global Cyber Security team works to identify, assess and manage cybersecurity threat risks, their severity, and potential mitigations.
As of the date of this report, we are not aware of any risks from cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition, individually or in the aggregate.
1 unchanged sentence
Management provides cybersecurity updates to the Audit Committee, at least quarterly, and material cybersecurity incidents are reported to the Board.
−Removed: Quaker Houghton has a dedicated Global Cyber Security team led by the Director, Global Security that is responsible for identifying, assessing, monitoring, managing and communicating the Company’s cybersecurity risks.
−Removed: Collectively this team has decades of dedicated cybersecurity experience with personnel experienced and certified in various disciplines, including data privacy, enterprise risk management, cloud security and ethical hacking.
+Added: Quaker Houghton has a dedicated Global Cyber Security team led by the Senior Director, Cybersecurity and Compliance that is responsible for identifying, assessing, monitoring, managing and communicating the Company’s cybersecurity risks.
+Added: Collectively this team has decades of dedicated cybersecurity experience with personnel experienced and certified in various disciplines, including data security and privacy, enterprise risk management, cloud security and ethical hacking.
The Global Cyber Security team reports to the Chief Digital Information Officer (“CDIO”), who in turn reports to the Chief Executive Officer (“CEO”).
2 unchanged sentences
Key cybersecurity risks are incorporated into our enterprise risk management framework.
−Removed: Our cybersecurity risk management program leverages the National Institute of Standards and Technology (“NIST”) framework, which organizes cybersecurity risk management actions into five categories:
−Removed: identify, protect, detect, respond, and recover.
+Added: Our cybersecurity risk management program leverages the National Institute of Standards and Technology (“NIST”) framework, which organizes cybersecurity risk management actions into six categories:
+Added: govern, identify, protect, detect, respond, and recover.
The Company’s cybersecurity risk management program and strategy includes the following:
• Cybersecurity Operations Centers - We, along with certain third-parties, operate several global cybersecurity operations centers, which provide 24/7 monitoring and incident response capabilities.
−Removed: In the event of an alert, our cybersecurity operations centers coordinates the investigation and remediation of such alerts.
+Added: In the event of an alert, our cybersecurity operations centers coordinate the investigation and remediation of such alerts.
• Partnerships with Cybersecurity Companies - We partner with specialized cybersecurity companies and organizations, leveraging third-party technology and expertise.
−Removed: These partnerships help monitor and maintain the performance and effectiveness of our cybersecurity products.
−Removed: • Annual and Periodic Assessments by Third Parties - Our cyber risk management program undergoes periodic assessments by third parties and including annual penetration and disaster recovery tests.
+Added: These partnerships help monitor and maintain the performance and effectiveness of our cybersecurity tools and program.
+Added: • Annual and Periodic Assessments by Third Parties - Our cyber risk management program undergoes periodic assessments by third parties including annual penetration and disaster recovery tests.
• Policies and Training - We maintain company-wide policies and procedures concerning cybersecurity, which are reviewed and approved by appropriate management members.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.