28 unchanged sentences
The Company manages risks from cybersecurity threats through the assessment and testing of the Company’s processes and practices focused on evaluating the effectiveness of our cybersecurity measures.
−Removed: The Company engages a third-party independent
−Removed: cybersecurity company that provides security testing and monitoring, including penetration testing, auditing, and security assessment, for the Company.
+Added: The Company engages a third-party independent cybersecurity company that provides security testing and monitoring, including penetration testing, auditing, and security assessment, for the Company.
The results of such assessments and reviews are reported as part of the technology and cybersecurity update to the Company’s executive leadership team and the Board, and the Company adjusts its cybersecurity policies, standards, processes and practices as necessary based on the information provided by the assessments, audits and reviews.
5 unchanged sentences
The Company’s VP of Information Technology is the member of the Company’s management who is principally responsible for overseeing the Company’s cybersecurity risk management program, in partnership with other business leaders across the Company.
−Removed: The VP of Information Technology works in coordination with senior leadership, which includes our Chief Executive Officer and President, Chief Financial Officer and General Counsel.
−Removed: The Company’s VP of Information Technology has served in various roles in technology and is supported by a team of information technology and cybersecurity professionals with decades of relevant experience.
+Added: The VP of Information Technology works in coordination with senior leadership, which includes our President and Chief Executive Officer, Chief Financial Officer and Chief Legal Officer.
+Added: The Company’s VP of Information Technology has served in various roles in technology and is supported by a team of information technology and cybersecurity professionals with decades of relevant experience and education including professional cybersecurity risk management certifications such as Certified Information Systems Security Professional ("CISSP").
The Company has established a Cybersecurity Steering Committee that includes executives and senior leadership across all divisions and corporate services to implement and manage a program designed to protect the Company’s information systems from cybersecurity threats and to respond promptly to any cybersecurity incidents.
1 unchanged sentence
Through the ongoing communications from these teams, the Cybersecurity Steering Committee monitors effectiveness of the prevention, detection, mitigation and remediation within the cybersecurity program.
−Removed: The Company’s General Counsel, as part of the Incident Response Team, will report any material cybersecurity incidents to the Board when appropriate.
+Added: The Company’s Chief Legal Officer, as part of the Incident Response Team, will report any material cybersecurity incidents to the Board when appropriate.
As of the date of this Annual Report on Form 10-K, we are not aware of any cybersecurity incidents that have materially affected or are reasonably likely to affect the Company, including its business strategy, results of operations, or financial condition.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.