14 unchanged sentences
For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1.
−Removed: Risk Factors in this Annual Report on Form 10-K, including “Risks Related to Our Business and Operations – If our information technology systems or those of third parties with whom we work of our data, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions;
+Added: Risk Factors in this Annual Report on Form 10-K, including “Risks Related to Our Business and Operations – If our information technology systems or those of third parties with whom we work or our data, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions;
fines and penalties;
5 unchanged sentences
Our board of directors addresses the Company’s cybersecurity risk management as part of its general oversight function.
−Removed: The board of directors’ audit committee is responsible for overseeing Company’s cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.
+Added: The board of directors’ audit committee is responsible for overseeing the Company’s cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.
+Added: The audit committee reports to the full board of directors regarding its oversight of the Company’s cybersecurity risk management processes, and cybersecurity is addressed with the full board of directors at least annually.
Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including our CIO , who is a Certified Information Systems Security Professional (“CISSP”) with more than 20 years of experience leading IT and cybersecurity projects in a variety of industries.
5 unchanged sentences
In addition, the Company’s incident response plan includes reporting to the audit committee of the board of directors for certain cybersecurity incidents.
−Removed: The audit committee receives periodic reports from our CIO concerning the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.
+Added: The audit committee receives periodic reports from our CIO no less frequently than semi-annually concerning the Company’s cybersecurity strategy, the status of the Company’s cybersecurity roadmap and related initiatives, key cybersecurity program metrics and performance indicators, the Company’s significant cybersecurity threats and risks and, and the processes the Company has implemented to identify, assess and address them.
+Added: The audit committee also receives reports regarding cybersecurity incidents in accordance with the Company’s incident response plan, as described above.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.