5 unchanged sentences
The Board of Directors retains risk oversight of significant risks from cybersecurity threats that might arise from the Company’s operations.
−Removed: An important aspect of the Board’s oversight role is the enterprise risk management process, under which enterprise-wide risks have been identified and assessed, which the Board is
−Removed: briefed on quarterly at the Audit Committee meetings.
+Added: An important aspect of the Board’s oversight role is the enterprise risk management process, under which enterprise-wide risks have been identified and assessed, which the Board is briefed on quarterly at the Audit Committee meetings.
Information security risks are identified and assessed as part of the Company’s enterprise risk management process.
24 unchanged sentences
The Company also annually performs the NYPSC review of third-party attestation as it relates to Case 13-M-0178 (protection of personally identifiable customer information).
−Removed: To date, the Company does not believe risks from cybersecurity threats, including as a result of previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company’s business strategy, results of operations or financial condition.
+Added: To date, the Company does not believe risks from cybersecurity threats, including those threats resulting from previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company’s business strategy, results of operations or financial condition.
However, because the Company operates in the area of critical infrastructure, as defined under federal law and by the Transportation Security Administration, the Company has been and will continue to be the target of cybersecurity attacks from time to time.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.