2 unchanged sentences
CYBERSECURITY
−Removed: Our Board recognizes the importance of maintaining the trust and confidence of our customers, consumers, employees and other stakeholders and oversees cybersecurity matters.
−Removed: Management plays a central role in our information security program, which is a critical component of our enterprise risk management and includes the implementation of controls generally aligned with industry best practices and applicable frameworks to identify threats, deter attacks and protect our Company assets.
+Added: Our Board recognizes the importance of maintaining the trust and confidence of our customers, consumers, employees, partners, and other stakeholders and oversees cybersecurity matters.
+Added: Management plays a central role in our cybersecurity program, which is a critical component of our enterprise risk management and includes the implementation of controls generally aligned with industry best practices and applicable frameworks to identify threats, deter attacks and protect our Company assets.
We also include cybersecurity training as part of our mandatory, periodic employee training program.
−Removed: In addition, we engage a range of cybersecurity experts, including cybersecurity auditors, assessors, and consultants, in evaluating and testing our risk management systems.
−Removed: These partnerships enable us to leverage specialized knowledge and insights to help ensure that our cybersecurity strategies and processes remain in line with industry best practices.
−Removed: Our collaboration with these third parties includes regular audits, threat assessments, and consultations on security enhancements.
+Added: In addition, we engage a range of cybersecurity experts, including cybersecurity auditors, assessors, and consultants, in evaluating and testing our security controls and processes.
+Added: These partnerships enable us to leverage specialized knowledge and insights to align our cybersecurity strategies and processes with industry best practices.
+Added: Our collaboration with these third parties includes regular audits, threat assessments, and consultations on potential security enhancements.
Our Chief Information Officer and his team are responsible for leading our cybersecurity strategy, policy, standards, architecture, and processes .
−Removed: Our information security leadership team has more than 20 years of combined experience in cyber and information security matters.
−Removed: Our information security program is also supported by our Chief Compliance Officer and other members of senior management.
+Added: Our cybersecurity leadership team has more than 40 years of combined experience in cyber and information security matters.
+Added: Our cybersecurity program is also supported by our Chief Compliance Officer and other members of senior management.
We conduct periodic reviews of our program by internal and external experts with the results of those reviews reported to senior management and the Board.
−Removed: Moreover, the Audit Committee of our Board (the “Audit Committee”) reviews our cybersecurity matters with our Chief Information Officer at each of its quarterly meetings.
−Removed: We have procedures in place for selecting and managing our relationships with third-party service providers and other business partners.
−Removed: For example, we require certain third-party service providers and other business partners to provide us with SOC II reports that demonstrate alignment with security standards.
+Added: Moreover, pursuant to our Audit Committee Charter, as amended and restated, the Audit Committee of our Board (the “Audit Committee”) reviews our cybersecurity matters with our Chief Information Officer at each of its quarterly meetings.
+Added: We have procedures in place for addressing potential cybersecurity risks when selecting and managing our relationships with third-party service providers and other business partners.
+Added: For example, we require certain third-party service providers and other business partners to provide us with SOC II reports that demonstrate alignment with data and cybersecurity standards.
We also actively engage with industry participants as part of our continuing efforts to evolve our cybersecurity governance.
−Removed: Our information security team promptly informs our Incident Response Team of potentially material cybersecurity incidents, including with respect to our third-party service providers.
−Removed: The Chief Information Officer briefs our Co-Chief Executive Officers and reports to the Audit Committee .
−Removed: The Audit Committee, in turn and if appropriate, briefs the Board on, among other matters, our cyber risks and threats, the status of projects to strengthen our information security systems (such as employee cybersecurity training), an assessment of the information security program, and the emerging threat landscape.
−Removed: The Cybersecurity and Compliance Steering Committee, comprised of senior members of management, convenes on a quarterly basis to review all matters related to strengthening our cybersecurity posture and providing governance.
−Removed: For a discussion regarding risks from cybersecurity threats that are reasonably likely to affect the Company, see “Part I, Item 1A – Risk Factors – Our use of information technology exposes us to cybersecurity attacks and other interruptions that could disrupt our business operations and adversely impact our reputation and results of operations,” “Cybersecurity attacks, business interruptions, and compliance issues experienced by third parties could materially and adversely affect our financial condition, results of operation and cash flows” and “If we fail to comply with data privacy and personal data protection laws, we could be subject to adverse publicity, government enforcement actions and/or private litigation, which may negatively impact our business and operating results .
+Added: Our cybersecurity team promptly informs our Incident Response Team of potentially material cybersecurity incidents, including with respect to such incidents involving our third-party service providers.
+Added: The Chief Information Officer briefs our Chief Executive Officer and reports to the Audit Committee .
+Added: The Audit Committee, in turn and if appropriate, briefs the Board on, among other matters, potentially material cybersecurity incidents, our cyber risks and threats, the status of projects to strengthen our enterprise systems (such as employee cybersecurity training), an assessment of the cybersecurity program, and the emerging threat landscape.
+Added: The Cybersecurity and Compliance Steering Committee, comprised of senior members of management, convenes on a quarterly basis to review matters related to strengthening our cybersecurity posture and providing cybersecurity governance.
+Added: As of the date of this filing, we have not identified any cybersecurity threats or incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition .
+Added: However, there can be no assurance that we, or our third-party service providers and other business partners, will not experience a cybersecurity threat or incident in the future that could materially adversely affect our business strategy, results of operations, or financial condition.
+Added: For additional discussion regarding cybersecurity risks and potential related impacts on us, see “Part I, Item 1A – Risk Factors – Our use of information technology exposes us to the risk of cybersecurity incidents and other interruptions that could disrupt our business operations and adversely impact our reputation and results of operations,” “Cybersecurity incidents, business interruptions, and compliance issues experienced by third parties could materially and adversely affect our financial condition, results of operation and cash flows” and “If we fail to comply with data privacy and personal data protection laws and emerging cybersecurity laws, we could be subject to adverse publicity, government enforcement actions and/or private litigation, which may negatively impact our business and operating results.”
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.