5 unchanged sentences
As part of these proactive measures, we maintain a Cybersecurity Incident Response and Escalation Process with defined roles, responsibilities, and reporting protocols that is periodically reviewed, tested, and updated.
−Removed: The Company has an Executive Cyber Response and Disclosure Committee (consisting of senior executives from the business, finance, operations and legal functions), which is responsible for determining what actions are necessary to respond to cybersecurity events, with input from the Chief Information Security Officer and other subject matter experts directly participating in incident response efforts.
+Added: The Company has an Executive Cyber Response and Disclosure Committee (consisting of senior executives from the business, finance, operations and legal functions), which is responsible for determining what actions are necessary to respond to cybersecurity events, with input from the Chief Security Officer (“CSO”) and other subject matter experts directly participating in incident response efforts.
+Added: Furthermore, we conduct an annual full board briefing on cybersecurity, ensuring that our Board of Directors is regularly informed of the evolving landscape of cybersecurity risks and mitigation strategies.
Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes.
−Removed: Additionally, on a quarterly basis, our Audit Committee receives reports from the Chief Information Officer, Chief Information Security Officer, and other members of management.
+Added: Additionally, on a quarterly basis, our Audit Committee receives reports from the Chief Information Officer, CSO, and other members of management.
As part of its annual assessment, the Audit Committee evaluates significant risks related to our business including cybersecurity risks, and provides such information to our Board of Directors.
−Removed: Our Internal Audit Group also reviews our cybersecurity governance and controls annually.
+Added: Our Internal Audit team also reviews our cybersecurity governance and controls annually.
Our cybersecurity risk management program encompasses periodic risk assessments, designed to help identify cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment.
−Removed: More specifically, an independent third-party performs a regular penetration test of Marvell’s IT infrastructure.
−Removed: In addition to our penetration testing, an independent third-party security firm is engaged to perform additional security controls testing and provide an independent report to our executive team.
+Added: More specifically, an independent third-party performs a regular penetration test of our IT infrastructure.
+Added: In addition to our penetration testing, an independent t hird-party security firm is engaged to perform additional security controls testing and provide an independent report to our executive team.
This external assessment provides us and our Audit Committee with a comprehensive evaluation of our security posture.
3 unchanged sentences
Furthermore, we conduct tabletop exercises periodically.
−Removed: These simulations allow us to test our response strategies across various business functions, allowing preparedness for real-world incidents.
+Added: These simulations allow us to test our response strategies across various business functions, increasing preparedness for real-world incidents.
When risks are identified through our processes, we analyze their potential impact on the Company and assess the likelihood of occurrence.
9 unchanged sentences
Our Board of Directors considers cybersecurity and other information technology risk as part of its risk oversight function.
−Removed: The Audit Committee receives quarterly reports from our Chief Information Security Officer (“CISO”) on our cybersecurity risks and risk management program.
−Removed: Our cybersecurity team, led by our CISO, who reports directly to our Executive Vice President and Chief Operations Officer, is responsible for assessing and managing risks from cybersecurity threats.
−Removed: The CISO and his team have primary responsibility for our overall cybersecurity risk management program and supervise both our internal cybersecurity personnel and any retained external cybersecurity experts.
−Removed: Our CISO has over 20 years of security experience managing global security organizations including architecture, operations, strategy, applications, infrastructure, support and execution.
+Added: The Board of Directors receives an annual briefing, and the Audit Committee receives quarterly reports from our CSO on our cybersecurity risks and risk management program.
+Added: Our cybersecurity team, led by our CSO, who reports directly to our Executive Vice President and Chief Operations Officer, is responsible for assessing and managing risks from cybersecurity threats.
+Added: T he CSO and his team have primary responsibility for our overall cybersecurity risk management program and supervise both our internal cybersecurity personnel and any retained external cybersecurity experts.
+Added: Our CSO has over 20 years of security experience managing global security organizations including architecture, operations, strategy, applications, infrastructure, support and execution.
The information security team collectively have decades of relevant experience in the industry and many hold various cybersecurity certifications such as a Certified Information Systems Security Professional or Certified Information Security Manager.
Further, we invest in regular, ongoing cybersecurity training for our team.
−Removed: The CISO reports such cybersecurity threats and incidents to the Audit Committee.
+Added: The CSO reports cybersecurity threats and incidents to the Audit Committee.
These reports may be included in, or in addition to, his regular quarterly reports to the Audit Committee.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.