34 unchanged sentences
Cybersecurity is an important part of our risk management processes and an area of increasing focus for our Board and management.
−Removed: Our Board Enterprise Risk Management Committee ("ERMC") is responsible for the oversight of risks from cybersecurity threats.
+Added: Our Boa rd Enterprise Risk Management Committee ("ERMC") is responsible for the oversight of risks from cybersecurity threats.
At least quarterly, the ERMC receives an overview from management and the management steering committee of our cybersecurity threat risk management and strategy processes covering topics such as data security posture, results from third-party assessments, progress towards pre-determined risk-mitigation-related goals, our incident response plan, and cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to such risks .
−Removed: In such sessions, the ERMC generally receives materials including a cybersecurity scorecard and other materials indicating current and emerging cybersecurity threat risks, and describing the company’s ability to mitigate those risks, and discusses such matters with our Chief Information Security Officer and Chief Information Officer.
+Added: In such sessions, the ERMC generally receives materials including a cybersecurity scorecard and other materials indicating current and emerging cybersecurity threat risks, describing the company’s ability to mitigate those risks, and discussing such matters with our Chief Information Security Officer and Chief Information Officer.
Members of the ERMC are also encouraged to regularly engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs .
3 unchanged sentences
Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by our Chief Information Security Officer, Chief Information Officer, and our management technology steering committee .
−Removed: Such individuals have collectively over 30 years of prior work experience in various roles involving managing information security, developing cybersecurity strategy, and implementing effective information and cybersecurity programs, as well as several relevant certifications, including Certified Information Security Manager and Certified Information Systems Security Professional.
+Added: Such individuals have collectively over 30 years of prior work experience in various roles involving managing information security, developing cybersecurity strategy, and implementing effective information and cybersecurity programs, as well as several relevant certifications, including Certified Information Security Manager, Cisco Certified Network Administrator-Security, CompTIA Secure Infrastructure Specialist, and many others.
These members of management and the management technology steering committee are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan .
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.