11 unchanged sentences
We generally require that third-party service providers that access, host our data, or could otherwise introduce cybersecurity risk to us, enter into contracts that obligate them to manage their cybersecurity risks in certain ways and report any cybersecurity incidents to us.
−Removed: We engage third-party advisory firms to conduct assessments of the maturity of our security program and, among other measures, work to be Payment Card Industry (“PCI”) compliant where required.
+Added: We engage third-party advisory firms to conduct assessments of the maturity of our security program and, among other measures, work to be Payment Card Industry compliant where required.
We also maintain incident response procedures and business continuity and contingency plans and periodically hire third parties to conduct vulnerability analyses.
−Removed: We also compare our processes to standards set by the National Institute of Standards and Technology (“NIST”) and/or International Organization for Standardization (“ISO”), as appropriate.
−Removed: The Technology, Environmental, Safety and Security (“TESS”) Committee of our Board of Directors oversees our programs and policies related to data protection and cybersecurity and receives updates on related risks from our Chief Information Security Officer on at least an annual basis, and more often as the circumstances require.
+Added: We also compare our processes to standards set by the National Institute of Standards and Technology and/or International Organization for Standardization, as appropriate.
+Added: The Technology, Environmental, Safety and Security Committee of our Board of Directors oversees our programs and policies related to data protection and cybersecurity and receives updates on related risks from our Chief Information Security Officer on at least an annual basis, and more often as the circumstances require.
The Audit Committee of our Board of Directors also receives updates, at least annually, from our Chief Information Officer and/or Chief Information Security Officer regarding cybersecurity and other information system compliance matters that may pose risks to our financial reporting or operations.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.