MRBK · All filings · Read this filing
What changed 10-K
Item 1B. Unresolved Staff Comments
2025-03-17 compared with 2024-03-15 · 2 added, 1 removed, 33 unchanged (8% of the section changed)
22 unchanged sentences
The internal business owners of the hosted applications are required to document user access reviews at least annually and provide from the vendor a System and Organization Controls (SOC) 1 or SOC 2 report.
−Removed: If a third-party vendor is not able to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis.
+Added: If a third-party vendor is not able
+Added: to provide a SOC 1 or SOC 2 report, we take additional steps to assess their cybersecurity preparedness and assess our relationship on that basis.
Our assessment of risks associated with use of third-party providers is part of our overall cybersecurity risk management framework.
9 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.