5 unchanged sentences
We conduct periodic risk assessments to identify cybersecurity threats, as well as assessments in the event of a material change in our business practices that may affect information systems that are vulnerable to such cybersecurity threats.
−Removed: These risk assessments include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
+Added: These risk assessments
+Added: include identification of reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks.
Following these risk assessments, we evaluate whether and how to re-design, implement, and maintain reasonable safeguards to minimize identified risks;
1 unchanged sentence
and regularly monitor the effectiveness of our safeguards.
−Removed: We devote significant resources and designate high-level personnel, including our Head of IT, who reports to our Chief Financial Officer, to manage the risk assessment and mitigation process.
+Added: We devote significant resources and designate high-level personnel, including our Head of IT, to manage the risk assessment and mitigation process.
As part of our overall risk management system, we monitor our safeguards and train our employees on these safeguards, in collaboration with human resources, IT, and management.
16 unchanged sentences
◦ escalation to the Company’s audit committee and board of directors as warranted based upon the nature of the identified issue.
−Removed: Our Head of IT and/or representatives from our management committee on cybersecurity provide periodic briefings to the audit committee regarding our company’s cybersecurity risks and activities, including any recent cybersecurity incidents and related responses, cybersecurity systems testing, activities of third parties, and the like.
+Added: Our Head of IT and/or representatives from our management committee on cybersecurity provide periodic briefings to the audit committee regarding our company’s cybersecurity risks and activities, including any recent cybersecurity incidents and related
+Added: responses, cybersecurity systems testing, activities of third parties, and the like.
Our audit committee provides regular updates to the board of directors on such reports.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.