5 unchanged sentences
operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.
−Removed: The Company is committed to protecting its information system and data from cyber threats.We utilize third party technical tools to control system access and filter, restrict and regulate content that may pose a material risk to the Company.
+Added: The Company is committed to protecting its information system and data from cyber threats.
+Added: We utilize third party technical tools to control system access and filter, restrict and regulate content that may pose a material risk to the Company.
Employees are required to use multi-factor authentication to access Company systems and undergo annual security training.
Management is responsible for identifying, monitoring and mitigating the material risks facing the Company, including cybersecurity risks.
−Removed: Management provides regular reports to the Board at every meeting to review our top risks, identify trends and help manage risk.
−Removed: Our cybersecurity risk management and strategy is overseen by our Chief Information Officer as well as other members of the senior leadership team at Lovesac.
+Added: Management provides regular reports to the Board to review our top risks, identify trends and help manage risk.
+Added: Our cybersecurity risk management and strategy is overseen by our Chief Technology and Digital Transformation Officer as well as other members of the senior leadership team at Lovesac.
These individuals are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents and report to the Board on any appropriate items.
−Removed: Our Chief Information Officer has over 35 years of experience managing information technology and cybersecurity matters and is responsible for assessing and managing these cybersecurity risks.
+Added: Our Chief Technology and Digital Transformation Officer has over 25 years of experience managing information technology and cybersecurity matters and is responsible for assessing and managing these cybersecurity risks.
Team members who support our information security program have relevant educational and industry experience.
2 unchanged sentences
Our Board of Directors is responsible for the risk oversight of the Company, including cybersecurity risks.
−Removed: The Board receives updates on a quarterly basis from senior management, including leaders from our Information Technology and Security, Risk Management.
−Removed: Finance, and Legal teams and our Chief Information Officer regarding matters of cybersecurity.
+Added: The Board receives updates on a quarterly basis from senior management, including leaders from our Information Technology and Security, Risk Management, Finance, and Legal teams and our Chief Technology and Digital Transformation Officer regarding matters of cybersecurity.
This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information security initiatives.
3 unchanged sentences
The Audit Committee is informed of material risks from cybersecurity threats pursuant to the escalation criteria as set forth in the Company’s disclosure controls and procedures.
−Removed: The Audit Committee receives reports, briefings and presentations from senior management, including our Chief Information Officer, at periodic committee meetings, including, more in-depth presentations on specific areas of risk and regular enterprise risk management updates.
+Added: The Audit Committee receives reports, briefings and presentations from senior management, including our Chief Technology and Digital Transformation Officer, at periodic committee meetings, including, more in-depth presentations on specific areas of risk and regular enterprise risk management updates.
Although the Company endeavors to mitigate cybersecurity risks, the nature of our business exposes us to cybersecurity threats and attacks that can lead to the unauthorized acquisition or access, compromise, loss, misuse or theft of our data, including personal information, confidential information or intellectual property.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.