26 unchanged sentences
The Audit and Finance Committee reviews and discusses our information security and technology risks (such as cybersecurity), including our information security and risk management programs.
−Removed: Our cybersecurity program is contracted through and led by Harley-Davidson’s Chief Information Security Officer (CISO) who is responsible for assessing and managing the Company’s information security and technology risks (including cybersecurity).
−Removed: On December 15, 2023, the Harley-Davidson CISO announced his retirement from Harley-Davidson, and since that time, Harley-Davidson's Chief Digital and Operations Officer is serving as the acting Harley-Davidson CISO, executing all of the responsibilities of the CISO while Harley-Davidson conducts a search to fill the position.
−Removed: Harley-Davidson’s Chief Digital and Operations Officer has extensive experience in leading information systems management, strategy and operational execution, including information security and incident management, prevention and response.
−Removed: The Harley-Davidson CISO meets regularly with our Head of Digital to review and discuss our cybersecurity and other information technology risks and opportunities.
+Added: Our cybersecurity program is contracted through and led by Harley-Davidson’s Chief Information Security and Privacy Officer (CISO) who is responsible for assessing and managing the Company’s data privacy function and information security and technology risks (including cybersecurity).
+Added: The CISO has over 20 years of cyber industry and compliance experience, serving in a CISO capacity for over ten of those years.
+Added: The CISO reports to Harley Davidson’s Chief Digital and Operations Officer, who has extensive experience in leading information systems management, strategy and operational execution, including information security and incident management, prevention and response.
+Added: The Harley-Davidson CISO meets regularly with the appropriate management to review and discuss our cybersecurity and other information technology risks and opportunities.
Our cybersecurity incident response plan sets forth a security incident management and reporting protocol, with escalation timelines and responsibilities.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.