2 unchanged sentences
Risk Management and Strategy
−Removed: We implement and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical comp uter networks, third party hosted services, communications systems, hardware and software, products and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature (collectively, “Information Systems and Data”).
−Removed: Our Senior Director of Information Technology (“IT”), internal IT, information security and legal functions, and third-party service providers (collectively, “Cybersecurity Team”) help identify, assess and manage the Company’s
−Removed: cybersecurity threats and risks.
+Added: We implement and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware and software, products and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature (collectively, Information Systems and Data) .
+Added: Our Senior Director of Information Technology (IT), internal IT, information security and legal functions, and third-party service providers (collectively, Cybersecurity Team) help identify, assess and manage our cybersecurity threats and risks.
Our Cybersecurity Team identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment.
3 unchanged sentences
an incident response strategy, incident detection and response measures, a vulnerability management policy, risk assessments, encryption of certain data, network security controls, data segregation, access controls, physical security controls, systems monitoring controls, personnel training, penetration testing, cybersecurity insurance, dedicated cybersecurity personnel, background checks for certain personnel, vendor management strategies, and asset management strategy (such as tracking and disposal of Company information systems).
−Removed: Our assessment and management of material risks from cybersecurity threats are integrated into the Company’s overall risk management processes.
+Added: Our assessment and management of material risks from cybersecurity threats are integrated into our overall risk management processes.
For example, the Senior Director of IT works with management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.
5 unchanged sentences
Depending on the nature of the services provided, the sensitivity of the Information Systems and Data at issue, and the identity of the provider, our vendor management strategy may involve different levels of assessment designed to help identify, mitigating and manage cybersecurity risks associated with a particular provider.
−Removed: For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1.
+Added: For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Part 1.
Risk Factors in this Annual Report on Form 10-K, including “Interruptions in or other compromises of our information technology systems or data or that of third parties upon whom we rely could adversely affect our business.”
−Removed: Our board of directors addresses the Company’s cybersecurity risk management as part of its general oversight function.
−Removed: The board of directors is responsible for overseeing Company’s cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.
−Removed: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including our Senior Director of IT, the Chief Executive Officer, and the Chief Financial Officer.
+Added: Our board of directors addresses our cybersecurity risk management as part of its general oversight function.
+Added: The board of directors is responsible for overseeing our cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.
+Added: Our cybersecurity risk assessment and management processes are implemented and maintained by certain members of our management , including our Senior Director of IT, the Chief Executive Officer, and the Chief Financial Officer .
Our Senior Director of IT has approximately 25 years of experience in IT and cybersecurity.
Our cybersecurity incident response and vulnerability management policies are designed to escalate certain cybersecurity incidents and threats to management members depending on the circumstances, including the Chief Executive Officer and Chief Financial Officer.
−Removed: The Chief Executive Officer and Chief Financial Officer work with the Company’s incident response team in an effort to help the Company mitigate and remediate cybersecurity incidents of which they are notified.
−Removed: In addition, the Company’s management and its designees report to the board of directors for certain cybersecurity incidents.
−Removed: The board of directors receives periodic reports from management and its designees concerning the Company’s significant cybersecurity threats and risks, and the processes the Company has implemented in an effort to address them.
+Added: The Chief Executive Officer and Chief Financial Officer work with our incident response team in an effort to help us mitigate and remediate cybersecurity incidents of which they are notified.
+Added: In addition, our management and its designees report to the board of directors for certain cybersecurity incidents.
+Added: The board of directors receives periodic reports from management and its designees concerning our significant cybersecurity threats and risks, and the processes we have implemented in an effort to address them.
The board of directors also has access to various reports, summaries or presentations related to cybersecurity threats, risk, and mitigation.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.