12 unchanged sentences
Our systems and those of third parties with which we do business have experienced and may continue to experience directed attacks intended to lead to interruptions and delays in our service and operations as well as loss, misuse or theft of personal information (of third parties, employees, and our members) and other data, confidential information or intellectual property, and we have experienced unauthorized releases of certain digital content assets and unintended disclosure of personal information due to incidents related to third parties.
+Added: Generative AI could intensify these cybersecurity risks.
However, to date these incidents have not had a material impact on our service, systems or business.
2 unchanged sentences
See “Risk Factors - Any significant disruption in or unauthorized access to our computer systems or those of third parties that we utilize in our operations, including those relating to cybersecurity or arising from cyber-attacks, could result in a loss or degradation of service, unauthorized access, disclosure or destruction of data, including member and corporate information, or theft of intellectual property, including digital content assets, which could adversely impact our business.”
−Removed: The Vice President of Security and Privacy Engineering leads our global information security organization responsible for overseeing the Netflix information security program.
−Removed: Our VP of Security and Privacy Engineering has over 30 years of industry experience, including serving in similar roles leading and overseeing cybersecurity programs at other public companies.
+Added: The Senior Director, Security, Privacy & Assurance leads our global information security organization responsible for overseeing the Netflix information security program.
+Added: Our Senior Director, Security, Privacy & Assurance has over 20 years of experience in information security and held senior leadership roles overseeing cybersecurity programs at other companies.
Team members who support our information security program have relevant educational and industry experience, including holding similar positions at large technology companies.
1 unchanged sentence
The Board oversees our annual enterprise risk assessment, where we assess key risks within the company, including security and technology risks and cybersecurity threats.
−Removed: The Audit Committee of the Board oversees our cybersecurity risk and receives regular reports from our VP of Security and Privacy Engineering on various cybersecurity matters, including risk assessments, mitigation strategies, areas of emerging risks, incidents and industry trends, and other areas of importance.
+Added: The Audit Committee of the Board oversees our cybersecurity risk and receives regular reports from our Senior Director, Security, Privacy & Assurance on various cybersecurity matters, including risk assessments, mitigation strategies, areas of emerging risks, incidents and industry trends, and other areas of importance.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.