6 unchanged sentences
managing and improving the effectiveness of our operations;
−Removed: researching, developing, manufacturing and distributing our products;
+Added: researching, developing, manufacturing and distributing our operating companies’ products;
collecting and storing sensitive data and confidential information;
−Removed: and communicating with employees, investors, suppliers, trade customers, adult tobacco consumers and others.
−Removed: Recognizing the critical importance of cybersecurity in today’s digital landscape, we are committed to safeguarding our information assets, protecting consumer data and maintaining the integrity and availability of our systems.
+Added: and communicating with employees, investors, suppliers, trade customers, adult nicotine consumers and others.
+Added: Recognizing the critical importance of cybersecurity in today’s digital landscape, we are committed to safeguarding our information
+Added: assets, protecting consumer data and maintaining the integrity and availability of our systems.
Accordingly, we have implemented an extensive cybersecurity risk management framework designed to identify, assess, mitigate and prevent potential cybersecurity risks and to align with industry best practices and all applicable regulatory requirements.
15 unchanged sentences
We regularly engage third-party consulting services to conduct audits and assessments of the effectiveness of our cybersecurity controls and processes and identify areas for improvement based on developments in industry best practices.
−Removed: We typically engage these services
−Removed: annually, though the cadence can differ based on the results of the audits and assessments.
+Added: We typically engage these services annually, though the cadence can differ based on the results of the audits and assessments.
We also leverage third parties to evaluate our cybersecurity and risk management strategy, review policies and procedures to address new risks and maintain ongoing compliance with evolving legal and regulatory requirements.
42 unchanged sentences
The Risk Oversight Committee also receives the quarterly IT Risk Dashboard.
−Removed: Our CISO is responsible for assessing and managing cybersecurity risks and maintaining our cybersecurity program.
−Removed: Our CISO has over 25 years of experience, including five years as our CISO, managing technology risks across multiple industries, including financial services, technology and manufacturing.
+Added: Our CISO, who reports directly to our Vice President, Enterprise Technology and Chief Information Officer, is responsible for assessing and managing cybersecurity risks and maintaining our cybersecurity program.
+Added: Our CISO has over 25 years of experience, including six years as our CISO, managing technology risks across multiple industries, including financial services, technology and manufacturing.
Through strategic hiring and internal development, our CISO enhances the levels of skill and experience on our IT Risk Management team to stay ahead of evolving cybersecurity threats.
4 unchanged sentences
From time-to-time, we and our third-party service providers, suppliers and trade customers experience attempts to infiltrate and interrupt information systems.
−Removed: To date, we have not experienced any interruptions of these information systems as a result of infiltration attempts .
+Added: We have not experienced an information security breach within the past three years, and to date, we have not experienced any interruptions of information systems as a result of infiltration attempts .
For further discussion of the risks related to cybersecurity, see Risks Relating to Our Business - Information Technology and Data Privacy Risks in Item 1A .
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.