3 unchanged sentences
The ERM process, administered by management with input from business leaders and our global and corporate functions, monitors material risks facing Mercury, including cybersecurity threats.
−Removed: Our CIO works directly with our CFO and other members of senior management to assess cybersecurity threats as part of the ERM process.
+Added: Our CIO works directly with our CFO, CLO, and other members of senior management to assess cybersecurity threats as part of the ERM process.
Our CIO oversees the internal cybersecurity organization headed by our Chief Information Security Officer (our “Cybersecurity Team”).
4 unchanged sentences
Our Cybersecurity Team also routinely engages with third parties, including government agencies focused on cyber resiliency, to manage risks from cybersecurity threats.
−Removed: For example, we are members of the DoD Defense Industrial Base Collaborative Information Sharing Environment, the National Defense Information Sharing and Analysis Center, and the National Security Agency Enduring Security Framework as well as Infragard, a partnership between the FBI and members of the private sector for the protection of U.S.
+Added: For example, we are members of the DoW Defense Industrial Base Collaborative Information Sharing Environment, the National Defense Information Sharing and Analysis Center, and the National Security Agency Enduring Security Framework as well as Infragard, a partnership between the FBI and members of the private sector for the protection of U.S.
critical infrastructure.
2 unchanged sentences
Our program evaluates potential risks consistent with industry practices, customer requirements and applicable law, including privacy and other considerations.
−Removed: As a government contractor, we must comply with extensive cybersecurity regulations, including the Defense Federal Acquisition Regulation Supplement related to adequately safeguarding controlled unclassified information and reporting cybersecurity incidents to the DoD.
+Added: As a government contractor, we must comply with extensive cybersecurity regulations, including the Defense Federal Acquisition Regulation Supplement related to adequately safeguarding controlled unclassified information and reporting cybersecurity incidents to the DoW.
Our policies and implemented controls reflect our adherence to these requirements.
3 unchanged sentences
Our Board of Directors provides oversight of our ERM process and other guidelines and policies governing the processes by which our CEO and senior management assess our exposure to risk, including risk from cybersecurity threats.
−Removed: Our management Compliance Committee receives briefings from our CIO, Chief Information Security Officer, and other members of senior management on cybersecurity threats and related matters and assists the Board in its oversight and review of our ERM process.
+Added: Our management Compliance Committee receives briefings from our CIO, Chief Information Security Officer, and other members
+Added: of senior management on cybersecurity threats and related matters and assists the Board in its oversight and review of our ERM process.
Our management Compliance Committee reviews our cybersecurity risk across the enterprise and our cybersecurity strategy framework and operational posture.
−Removed: The Compliance Committee also reviews our IT, data security and other systems,
−Removed: processes, policies, procedures and controls to (a) identify, assess, monitor, and mitigate cybersecurity risks;
+Added: The Compliance Committee also reviews our IT, data security and other systems, processes, policies, procedures and controls to (a) identify, assess, monitor, and mitigate cybersecurity risks;
(b) identify measures to protect and safeguard against cybersecurity threats and breaches of confidential information and data and IT infrastructure and our other assets or assets of our customers or other third parties in our possession or custody;
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.