10 unchanged sentences
As part of its annual assessment, the Audit Committee evaluates significant risks related to our business including cybersecurity risks, and provides such information to our Board of Directors.
−Removed: Our Internal Audit team also reviews our cybersecurity governance and controls annually.
+Added: Our Internal Audit team also reviews our cybersecurity governance and controls periodically.
Our cybersecurity risk management program encompasses periodic risk assessments, designed to help identify cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment.
More specifically, an independent third-party performs a regular penetration test of our IT infrastructure.
−Removed: In addition to our penetration testing, an independent t hird-party security firm is engaged to perform additional security controls testing and provide an independent report to our executive team.
+Added: In addition to our penetration testing, an independent third-party security firm is engaged to perform additional security controls testing and provide an independent report to our executive team.
This external assessment provides us and our Audit Committee with a comprehensive evaluation of our security posture.
8 unchanged sentences
This ongoing compliance program reinforces best practices and helps to foster a security-conscious culture.
−Removed: To safeguard our systems, we regularly install and update anti-malware and endpoint detection and response software across all IT-managed systems and workstations.
+Added: To safeguard our systems, we regularly install and update anti-malware and endpoint detection and response software across IT-managed systems and workstations.
These measures help detect and prevent malicious code from compromising our infrastructure.
−Removed: We also engage third-party providers to bolster our cybersecurity risk management and strategy.
−Removed: Some provide ongoing assistance, including threat monitoring, mitigation strategies, and updates on emerging trends.
−Removed: Others provide targeted expertise, such as security assessments and forensic analysis.
+Added: We operate an internal Security Operations Center (SOC) responsible for continuous threat monitoring, detection, and response.
+Added: To augment our capabilities, we engage select third-party providers to enhance our cybersecurity risk management and strategy.
+Added: These partners provide specialized expertise, including advanced threat intelligence, security assessments, and forensic support as needed.
Cybersecurity Governance
2 unchanged sentences
Our cybersecurity team, led by our CSO, who reports directly to our Executive Vice President and Chief Operations Officer, is responsible for assessing and managing risks from cybersecurity threats.
−Removed: T he CSO and his team have primary responsibility for our overall cybersecurity risk management program and supervise both our internal cybersecurity personnel and any retained external cybersecurity experts.
+Added: The CSO and his team have primary responsibility for our overall cybersecurity risk management program and supervise both our internal cybersecurity personnel and any retained external cybersecurity experts.
Our CSO has over 20 years of security experience managing global security organizations including architecture, operations, strategy, applications, infrastructure, support and execution.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.