6 unchanged sentences
Jaffe Co-Chief Executive Officer and President 65
−Removed: Bessette Vice President, Chief Financial Officer and Treasurer 63
+Added: Bessette Vice President and Chief Financial Officer 64
Mark Sustana Vice President, General Counsel and Secretary 63
−Removed: Collins Vice President and Controller 54
−Removed: McCall Executive Vice President 52
+Added: David Collins Vice President and Controller 55
Miller has served as our Executive Chairman since April 2018 and as our Executive Chairman and Co-Chief Executive Officer since September 2023.
2 unchanged sentences
Miller held various executive positions with us.
−Removed: Miller also serves as non-employee Executive Chairman of the Board of Directors of Five Point Holdings, LLC and a member of the Board of Directors of Doma Holdings, Inc.
+Added: Miller also serves as non-employee Executive Chairman of the Board of Directors of Five Point Holdings, LLC and served as a member of the Board of Directors of Doma Holdings, Inc.
+Added: from 2019 to 2024.
Jaffe is one of our Directors and has served as our Co-Chief Executive Officer and President since September 2023.
3 unchanged sentences
Jaffe served as a Vice President from 1994 to April 2018 and prior to that, served as a Regional President in our Homebuilding operations.
−Removed: Bessette has served as our Chief Financial Officer since April 2018, our Treasurer since February 2008, and as a Vice President since 2000.
−Removed: Bessette initially joined us in 1995 and served as our Controller from 1997 to 2008.
+Added: Bessette has served as our Chief Financial Officer since April 2018 and as a Vice President since 2000.
+Added: Bessette initially joined us in 1995 and served as our Controller from 1997 to 2008 and as our Treasurer from February 2008 to April 2024.
Bessette is a member of the Board of the Miami Branch of the Federal Reserve Bank of Atlanta.
1 unchanged sentence
Collins joined us in 1998 and has served as a Vice President since January 2021, and as our Controller since February 2008.
−Removed: McCall has served as our Executive Vice President since January 2020.
−Removed: Prior to that, Mr.
−Removed: McCall served as our Senior Vice President from February 2018 to January 2020.
−Removed: From June 2011 to February 2018, Mr.
−Removed: McCall served as Executive Vice President and Chief Financial Officer of CalAtlantic Group, Inc., which we acquired in 2018, or a predecessor.
Cybersecurity.
−Removed: Not applicable.
+Added: Risk Management and Strategy
+Added: We rely extensively on information technology (“IT”) systems, including Internet sites, data hosting facilities and other hardware and software platforms, some of which are hosted by third parties, to assist in conducting our businesses.
+Added: These systems, like those used by most companies, may be vulnerable to a variety of disruptions, including, but not limited to, those caused by natural disasters, telecommunications failures, hackers, and other security issues.
+Added: Moreover, these IT systems, like those used by most companies, are subject to the possibility of computer viruses or other malicious codes, and to security breaches, cyber incidents, ransomware attack or phishing-attacks.
+Added: Cybersecurity is an integral part of risk management at our Company, and we maintain a comprehensive process for assessing, identifying and managing material risks from cybersecurity threats, which is part of our overall risk management system and processes.
+Added: We have installed and continually upgrade an array of protections against cyber-intrusions.
+Added: Our cybersecurity risk management processes are based upon the National Institute of Standards and Technology (NIST) Cybersecurity Framework, as well as various other regulatory requirements and industry-specific standards.
+Added: We implement risk-based controls to protect our information, the information of our customers, suppliers, and other third parties, our information systems, our business operations, and our products and related services.
+Added: These controls include multifactor authentication on all critical systems, firewalls, encryption, anti-virus protections, intrusion detection and prevention systems and identity management systems.
+Added: We provide mandatory cybersecurity awareness training of threats to associates at least annually and routinely deploy simulated phishing tests to increase security awareness.
+Added: Our IT team regularly tests our controls through penetration testing, vulnerability scanning, internal compliance assessments, threat-hunting operations and attack simulation.
+Added: Additionally, in connection with our cybersecurity risk management processes, from time to time, we engage independent third parties to assess our cybersecurity program and to assist us with defining our cybersecurity strategy, uplifting our processes and aligning our objectives.
+Added: Outside counsel has also advised the Board about legal obligations in managing cybersecurity issues and risks.
+Added: We maintain a cybersecurity incident response plan, which provides a framework for handling cybersecurity incidents based on, among other factors, the potential severity of the incident and facilitates cross-functional coordination across the Company.
+Added: We also conduct “tabletop” exercises, including exercises facilitated by third parties, during which we simulate cybersecurity incidents to ensure that we are prepared to respond to such an incident and to highlight any areas for potential improvement in our cybersecurity incident response plan.
+Added: These exercises are conducted at both the technical level and senior management level and have included participation by members of our Board.
+Added: Our cybersecurity risk management processes extend to the oversight and identification of threats associated with our use of third-party service providers, including through due diligence of such providers’ cybersecurity practices, contractual obligations to operate their IT systems in accordance with certain cybersecurity standards and ongoing monitoring.
+Added: Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, including as a result of previous cybersecurity incidents, but we cannot provide assurance that they will not be materially affected in the future by such risks and any future material incidents .
+Added: See “Risk Factors” in Item 1A of this Annual Report on Form 10-K for more information on risks from cybersecurity threats that are reasonably likely to materially affect our business strategy, results of operations and financial condition.
+Added: Our Chief Technology Officer (“CTO”) is responsible for assessing and managing our material risks from cybersecurity threats.
+Added: We have also established a cross-functional Cyber Steering Committee, which includes our CTO, Chief Information Security Officer (“CISO”), General Counsel, certain business leaders on a rotating basis and representatives of human resources and communications.
+Added: The CISO, supported by inputs from the CTO team leads, delivers quarterly updates to the Committee on key risks and overall security program posture, as well as monthly strategic updates to the CTO on high visibility and key action items.
+Added: Our CTO regularly reports to our Board and the Audit Committee.
+Added: Our CTO has served in this role since 2023 and has over 25 years of experience in the technology industry.
+Added: Prior to his current role, he served as the CTO of Tyson Foods and before arriving at Tyson, he was the Chief Information Officer at Hewlett Packard, and then CIO at Hewlett Packard Enterprise.
+Added: Board of Directors
+Added: Our Audit Committee is responsible for the oversight of cybersecurity risks and receives a cybersecurity report from
+Added: our CTO at least quarterly, and more often as needed, including in the event of a significant cybersecurity incident.
+Added: The report includes information regarding the nature of threats, defense and detection capabilities, incident response plans and associate training activities.
+Added: Our Board retains responsibility for the oversight of our overall risk management systems and processes and is briefed our CTO on cybersecurity risks on a quarterly basis.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.