4 unchanged sentences
We manufacture and operate highly sophisticated spaceflight systems that depend on complex technology and face a multitude of cybersecurity threats.
−Removed: Threat actors (such as ransomware groups) are becoming increasingly sophisticated and using tools and techniques that are designed to circumvent security controls, to evade detection and to remove or obfuscate forensic
+Added: Threat actors (such as ransomware groups) are becoming increasingly sophisticated and using tools and techniques that are designed to circumvent security controls, to evade detection and to remove or obfuscate forensic evidence.
Our information technology systems and networks may be damaged, disrupted, or compromised by malicious events, such as cyberattacks (including computer viruses, ransomware, and other malicious and destructive code, phishing attacks, and denial of service attacks), physical or electronic security breaches, natural disasters, fire, power loss, telecommunications failures, personnel misconduct, and human error.
14 unchanged sentences
If there is a security vulnerability, error, or other bug in one of ours or our critical third-party systems or if there is a security exploit targeting them, we could face increased costs, claims, liability, reduced revenue, and harm to our reputation or competitive position.
+Added: For a description of possible risks associated with a cybersecurity incident, refer to Part I, Item 1A Risk Factors of this Annual Report, “ If any of our systems, the systems of any critical Third Parties upon which we rely or our customers’ systems are, or appear to be, breached or if unauthorized processing of customer or third-party data is otherwise performed, public perception of our products services may be harmed, and we may lose business and incur losses or liabilities.”
The Board oversees management’s processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives, senior leadership regularly briefs the Board of Directors on our cybersecurity and information security posture and the Board of Directors is apprised of cybersecurity threats.
−Removed: Our information technology organization, led by our VP of Production & Operations, and our Information Technology Director are responsible for our overall information security strategy, policy and cyber threat detection and response.
−Removed: The current Information Technology Director has 27 years of IT industry experience in operations and cybersecurity planning and implementations for organizations internal to NASA, Jacobs Engineering, and Lockheed Martin.
+Added: Our information technology organization, led by our Senior Vice President of Production & Operations, and our Senior Director of IT & Cybersecurity, are responsible for our overall information security strategy, policy and cyber threat detection and response.
+Added: The current Senior Director of IT and Cybersecurity is a Certified Information Systems Security Professional (“CISSP”) and has 28 years of IT industry experience in operations and cybersecurity planning and implementations for organizations internal to NASA, Jacobs Engineering, and Lockheed Martin.
The Information Technology team includes full-time cybersecurity professionals that work routinely with third party security firms along with government and civilian agencies for malware remediation, threat intelligence sharing, and cyber risk analysis exercises.
8 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.