10 unchanged sentences
Our cybersecurity program provides (among other things) a framework for handling cybersecurity threats and incidents, which includes steps for identifying the nature of a cybersecurity threat (including whether the threat is associated with a third-party provider), assessing the severity of a cybersecurity threat (including advancing to key members of management where appropriate for determination of potential materiality) and implementing cybersecurity processes and procedures.
+Added: MASTERCARD 2025 FORM 10-K 41
+Added: CYBERSECURITY
Program highlights
• We are committed to the responsible handling of personal information, and we balance our product development activities with a commitment to transparency and control, fairness and non-discrimination, as well as accountability
−Removed: • Our multi-layered privacy, data protection and information security programs and practices are designed to ensure the safety, security and responsible use of the information and data our stakeholders entrust to us
−Removed: • We work with our customers, governments, policymakers and others to help develop and implement standards for safe and secure transactions, as well as privacy-centric data practices
+Added: • Our multi-layered privacy, data protection and information security programs and practices are designed to ensure the security and responsible use of the information and data our stakeholders entrust to us
+Added: • We work with our customers, governments, policymakers and others to help develop and implement standards for secure transactions, as well as privacy-centric data practices
• Our programs are informed by third-party assessments and advice regarding best practices from consultants, peer companies and advisors
6 unchanged sentences
Our Board and Risk Committee have specific oversight responsibilities with respect to cybersecurity and privacy risk:
−Removed: MASTERCARD 2024 FORM 10-K 39
−Removed: CYBERSECURITY
Understanding the issues and risks that are central to the Company’s success, including cybersecurity matters
12 unchanged sentences
Each individual currently serving in these roles meets the applicable expertise requirements.
+Added: 42 MASTERCARD 2025 FORM 10-K
+Added: CYBERSECURITY
How management is informed of and monitors incidents
7 unchanged sentences
The Risk Committee Chairperson provides reports to the Board on such topics.
−Removed: Our Board and the Risk Committee also receive information about these topics as part of regular business and legal and regulatory updates.
+Added: Our Board and the Risk Committee also receive information about these topics as part of regular business, legal and regulatory updates.
In addition, we engage directors as part of cybersecurity and data breach incident simulations.
−Removed: Further, the Audit Committee would be informed of a material cybersecurity incident that could have a potential impact on our financial statements.
Despite our efforts to identify and respond to cybersecurity threats, we cannot eliminate all risks from cybersecurity threats, or provide assurances that we have not experienced an undetected cybersecurity incident.
See “Risk Factors – Information Security and Operational Resilience” in Part I, Item 1A for more information about these and other risks related to information security.
−Removed: 40 MASTERCARD 2024 FORM 10-K
−Removed: CYBERSECURITY
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.