28 unchanged sentences
The Company manages risks from cybersecurity threats through the assessment and testing of the Company’s processes and practices focused on evaluating the effectiveness of our cybersecurity measures.
−Removed: The Company engages a third-party independent cybersecurity company that provides security testing and monitoring, including penetration testing, auditing, and security assessment, for the Company.
−Removed: The results of such assessments and reviews are reported as part of the technology and cyber security update to the Company’s executive leadership team and the Board, and the Company adjusts its cybersecurity policies, standards, processes and practices as necessary based on the information provided by the assessments, audits and reviews.
−Removed: The Board oversees the management of risks from cybersecurity threats, including the policies, standards, processes and practices that the Company’s management implements to address risks from cybersecurity threats.
+Added: The Company engages a third-party independent
+Added: cybersecurity company that provides security testing and monitoring, including penetration testing, auditing, and security assessment, for the Company.
+Added: The results of such assessments and reviews are reported as part of the technology and cybersecurity update to the Company’s executive leadership team and the Board, and the Company adjusts its cybersecurity policies, standards, processes and practices as necessary based on the information provided by the assessments, audits and reviews.
+Added: The Board oversees the effectiveness of the Company's management of risks from cybersecurity threats, including the policies, standards, processes and practices that the Company’s management implements to address risks from cybersecurity threats.
The Board receives reports on the Company’s technology and cybersecurity functions, including vulnerability assessments, any third-party and independent reviews, the threat environment, and other information security considerations.
−Removed: The Board also receives prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding such incident until it has been addressed.
−Removed: The cyber security Steering Committee meets multiple times throughout the year to discuss the Company’s cyber security programs and practices, risk management related to cyber security and a wide range of other related topics including, for example, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to the Company’s peers and third parties.
+Added: The Board also receives on a regular basis information and updates regarding cybersecurity matters.
+Added: The Cybersecurity Steering Committee meets multiple times throughout the year to discuss the Company’s cybersecurity programs and practices, risk management related to cybersecurity and a wide range of other related topics including, for example, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends and information security considerations arising with respect to the Company’s peers and third parties.
At least once each year, the Board and the Company’s executive leadership team discuss the Company’s approach to cybersecurity risk management with the Company’s VP of Information Technology.
1 unchanged sentence
The VP of Information Technology works in coordination with senior leadership, which includes our Chief Executive Officer and President, Chief Financial Officer and General Counsel.
−Removed: The Company’s VP of Information Technology has served in various roles in technology and is supported by a team of information technology and cyber security professionals with decades of relevant experience.
−Removed: Most notably, the Company’s Enterprise Manager of Cybersecurity and Network holds a Certified Information Systems Security Professional (CISSP) certification and has over 15 years of experience with managing risks arising from cybersecurity threats.
+Added: The Company’s VP of Information Technology has served in various roles in technology and is supported by a team of information technology and cybersecurity professionals with decades of relevant experience.
The Company has established a Cybersecurity Steering Committee that includes executives and senior leadership across all divisions and corporate services to implement and manage a program designed to protect the Company’s information systems from cybersecurity threats and to respond promptly to any cybersecurity incidents.
−Removed: To facilitate the success of this program, multidisciplinary teams throughout the Company are created and deployed to address cybersecurity threats and to respond to cybersecurity incidents in accordance with the Company’s Incident Response Plans (IRP).
−Removed: Through the ongoing communications from these teams, the Steering committee monitors the effectiveness of the prevention, detection, mitigation and remediation within the cybersecurity program.
−Removed: Company’s General Counsel, as part of the Incident Response Team, will report any credible threats or security concerns to the Board when appropriate.
−Removed: As of the date of this Annual Report on Form 10-K, we are not aware of any cybersecurity threats that have materially affected or are reasonably likely to affect the Company, including its business strategy, results of operations, or financial condition.
+Added: To facilitate the success of this program, multidisciplinary teams throughout the Company are created and deployed to address cybersecurity threats and to respond to cybersecurity incidents in accordance with the Company’s Incident Response Plan.
+Added: Through the ongoing communications from these teams, the Cybersecurity Steering Committee monitors effectiveness of the prevention, detection, mitigation and remediation within the cybersecurity program.
+Added: The Company’s General Counsel, as part of the Incident Response Team, will report any material cybersecurity incidents to the Board when appropriate.
+Added: As of the date of this Annual Report on Form 10-K, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to affect the Company, including its business strategy, results of operations, or financial condition.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.