6 unchanged sentences
We engage external parties, such as consultants, to enhance our cybersecurity oversight as required.
−Removed: We conduct periodic risk assessments to evaluate our cybersecurity posture, including through annual third-party penetration tests performed by reputable service providers.
+Added: We conduct periodic risk assessments to evaluate our cybersecurity posture, including through annual third-party vulnerability assessment and penetration tests performed by reputable service providers.
We conduct risk assessments, as appropriate, on critical third parties who maintain material data or information to help assess and validate the information security capabilities of these third parties.
2 unchanged sentences
Governance Related to Cyber Security Risks
−Removed: The Audit Committee of the Board of Directors has oversight of management's efforts with respect to IT systems and cybersecurity.
+Added: The Audit Committee of the Board has oversight of management's efforts with respect to IT systems and cybersecurity.
As part of this oversight, our Chief Information Security Officer (“CISO”) shares quarterly updates regarding any changes around our cybersecurity defenses, ongoing IT initiatives, and emerging threats and plans to pro-actively address these threats with the Audit Committee.
During these meetings, the CISO provides the Audit Committee updates regarding any changes around our cyber defenses, ongoing IT initiatives, and emerging threats and plans to pro-actively address these threats.
−Removed: Our Board of Directors has delegated primary responsibility for the oversight of cybersecurity matters to the Audit Committee;
+Added: Our Board has delegated primary responsibility for the oversight of cybersecurity matters to the Audit Committee;
however, the full Board reviews significant cybersecurity matters as appropriate.
−Removed: The Audit Committee provides updates to the Board of Directors on a quarterly basis on the activities that the Audit Committee oversees, including Cybersecurity.
+Added: The Audit Committee provides updates to the Board on a quarterly basis on the activities that the Audit Committee oversees, including Cybersecurity .
Our Chief Information Security Officer is responsible for strengthening and continuously monitoring the effectiveness of our cybersecurity program.
2 unchanged sentences
In addition, our cybersecurity steering committee assists in managing certain technical aspects related to cybersecurity.
−Removed: Our cybersecurity steering committee is informed about and monitor the prevention, detection, mitigation, and remediation of cybersecurity incidents through monthly meetings and frequent communications.
−Removed: Regular members of the steering committee consists of participants from the IT infrastructure, Business Systems, AI and Modelling and Scientific Computing teams.
−Removed: Participants from other teams attends on a as-needed basis.
+Added: Our cybersecurity steering committee is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity incidents through monthly meetings and frequent communications.
+Added: Regular members of the steering committee consist of participants from the IT infrastructure, Business Systems, AI and Modelling and Scientific Computing teams.
+Added: Participants from other teams attend on an as-needed basis.
To date, we have not identified any indication of a cybersecurity incident that would have a material impact on our business and consolidated financial statements.
+Added: However, as discussed more fully under “Item 1A.
+Added: Risk Factors”, the sophistication of cyber threats continues to increase and we cannot assure that our systems and processes will be successful, that we will be able to anticipate or detect all cyberattacks or other breaches, that we will be able to react to cyberattacks or other breaches in a timely manner or that our remediation efforts will be successful.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.