6 unchanged sentences
To identify, assess and manage material risks from cybersecurity threats, our enterprise risk management program considers cybersecurity threat risks alongside other company risks as part of our overall risk assessment process.
−Removed: Our enterprise risk management committee, a multidisciplinary committee that includes our Chief Financial & Operating Officer and Chief Revenue Officer and is chaired by our Chief Legal Officer, collaborates with internal subject matter specialists in an effort to gather information for identifying, assessing and managing material cybersecurity risks, such as information related to their severity, likelihood of occurrence and potential mitigation strategies.
+Added: Our enterprise risk management committee, a multidisciplinary committee that includes our Chief Financial & Operating Officer and Chief Business & Customer Officer and is chaired by our Chief Legal Officer, collaborates with internal subject matter specialists in an effort to gather information for identifying, assessing and managing material cybersecurity risks, such as information related to their severity, likelihood of occurrence and potential mitigation strategies.
At least quarterly, our Chief Information Officer and Senior Director, Information Security, meet with our enterprise risk management committee to present and discuss a cybersecurity risk assessment.
16 unchanged sentences
Our processes are designed to address cybersecurity threat risks associated with our use of service providers, including those in our supply chain or who have access to our customer and employee data or our information systems.
−Removed: Certain risks associated with our use of service providers are included within our enterprise risk management assessment program, as well as our processes designed to identify, assess and manage cybersecurity-specific risks, both of which are discussed above.
+Added: Certain risks associated with our use of service providers are included within our enterprise risk management assessment program, as well as our processes designed to identify, assess and manage cybersecurity-specific risks, both of which are
+Added: discussed above.
In addition, cybersecurity considerations may affect the selection and oversight of our service providers.
8 unchanged sentences
The audit committee of our board of directors is responsible for overseeing the adequacy and effectiveness of the Company’s information security policies and practices, as well as risks related to information security and cybersecurity.
−Removed: At least semiannually, and more frequently depending upon applicable facts and circumstances, our audit committee receives an overview of our cybersecurity threat risk management and strategy processes, which covers topics such as our incident response plan, results from third-party assessments, our cybersecurity risk roadmap and any threat risks, cybersecurity incidents or developments, and our progress towards risk-mitigation-related goals.
+Added: At least semiannually, and more frequently depending upon applicable facts and circumstances, our audit committee receives a presentation on our cybersecurity threat risk management and strategy processes, which covers topics such as our incident response plan, results from third-party assessments, our cybersecurity risk roadmap and any threat risks, cybersecurity incidents or developments, and our progress towards risk-mitigation-related goals.
The audit committee receives information related to the foregoing matters from our Chief Information Officer and Senior Director, Information Security, as well as with representatives from our enterprise risk management committee.
−Removed: audit committee also receives an annual information security report, which contains information regarding, among other things, the data security processes and procedures that have been implemented across company business units.
+Added: Our audit committee also receives an annual information security report, which contains information regarding, among other things, the data security processes and procedures that have been implemented across company business units.
In addition, our full board of directors is presented with updates on our cybersecurity threat risk management and strategy processes at least annually.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.