16 unchanged sentences
In addition to antivirus endpoint protection on Company devices, our IT MSP also, for example, monitors IT system metadata around suspicious events, evidence of tactics, tools, or procedures used by attackers, and monitors remote privileged activity.
−Removed: We engaged a third party to perform a cybersecurity audits in 2021 and in the fourth quarter of 2024.
+Added: We engaged a third party to perform cybersecurity audits in 2021 and in the fourth quarter of 2024.
To date, we have not identified any risks from cybersecurity threats, including as a result of previous cybersecurity incidents, that have materially affected us, our business strategy, results of operation, or financial condition.
3 unchanged sentences
Our Audit Committee discusses risks related to cybersecurity quarterly, and reports to the Board quarterly on such risks and events.
−Removed: Our Senior Director of Information Systems presents information to the Audit Committee regarding cybersecurity risks and events quarterly.
+Added: Our Vice President Information Technology presents information to the Audit Committee regarding cybersecurity risks and events quarterly.
The full Board also discusses cybersecurity risks and events annually.
If there are direct risks rising to the level of potential materiality, the management team reports such risks and events to the Board.
−Removed: Our Senior Director of Information Systems and our Director of Information Systems are responsible for day-to-day oversight of cybersecurity risk.
−Removed: The individual currently holding the position of Senior Director of Information Systems has held the role for two years, has sixteen years of experience in IT and software development (with eight of those years in management roles), and holds certification from MIT Sloan School of Management in cybersecurity risk management.
−Removed: The individual currently holding the position of Director of Information Systems—who reports directly to the Senior Director of Information Systems—was formerly an IT Audit Senior Associate at PricewaterhouseCoopers, performed security assessments as a consultant at PricewaterhouseCoopers, and passed his CISA exam (though certification is currently pending).
−Removed: These individuals are responsible for coordinating resources internally and externally regarding cybersecurity risk management and incident response, and they report directly to our Chief Administrative Officer.
−Removed: Our management team has also established a Cybersecurity Incident Response Team (the “CSIRT”), which is comprised of our Chief Executive Officer, the Chair of the Audit Committee of our Board, our General Counsel, our Chief Administrative Officer, and our Senior Vice President of Human Resources.
−Removed: The CSIRT is also responsible for responding to cybersecurity incidents.
+Added: Our Vice President of Information Technology is responsible for day-to-day oversight of cybersecurity risk.
+Added: The individual currently holding the position of Vice President of Information Technology has held the role for four years, has eighteen years of experience in IT and software development (with eight of those years in management roles), and holds certification from MIT Sloan School of Management in cybersecurity risk management.
+Added: This individual is responsible for coordinating resources internally and externally regarding cybersecurity risk management and incident response, and reports directly to our Chief Executive Officer.
+Added: Our management team has also established a Cybersecurity Incident Response Team (the “CSIRT”), which is comprised of our Chief Executive Officer, the Chair of the Audit Committee of our Board, our Vice-President, Legal and our Senior Vice President, Human Resources.
+Added: The CSIRT is responsible for responding to cybersecurity incidents.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.