3 unchanged sentences
Our IT systems and digital technology has been an important part of our operations and our ability to compete successfully.
+Added: We rely on IT systems, cloud-based enterprise resource planning (“ERP”) platforms and mobile applications to support our operations, including financial systems and field service tools in support of compression services.
We continue to invest in technology solutions to improve inefficient systems, to streamline and automate workflows and to provide digital and mobile applications for our field service personnel.
We are committed to maintaining robust cybersecurity measures, continuously evaluating and updating our cybersecurity practices, and being prepared to respond to and recover from cybersecurity incidents.
−Removed: We face ongoing risk from cybersecurity threats.
+Added: Similar to other companies in the energy services industry, we are exposed to cybersecurity risks, including unauthorized access, phishing attempts, malware, ransomware and other incidents that could disrupt our operations.
There can be no assurance that our efforts will prevent or mitigate all cybersecurity events, which, if realized, could have a material impact on our operations and financial results.
3 unchanged sentences
Management of Cybersecurity Risk
−Removed: We maintain a Cybersecurity Event Plan (“Cybersecurity Plan”) which outlines how we identify and manage our cybersecurity risk.
−Removed: The Cybersecurity Plan contains the following elements:
−Removed: • Incident Identification and Reporting – outlines the steps used to promptly identify cybersecurity risks and report those through appropriate means;
−Removed: • Incident Assessment – after collecting information about a potential risk or threat, a protocol has been developed and outlined that will allow a cross-functional team to assess the threat;
−Removed: • Incident Containment – provides for action to be taken to isolate and attempt to contain and minimize any potential threat;
+Added: To manage these risks, we maintain a cybersecurity program designed to help identify, assess and respond to cybersecurity threats.
+Added: The program includes monitoring of information systems, access controls, endpoint protection, vulnerability management and specific incident procedures as described below.
+Added: We utilize artificial intelligence-driven cybersecurity technologies to monitor and detect potential threats across our systems.
+Added: These tools include email security and threat detection capabilities designed to identify phishing and other malicious email activity.
+Added: In addition, we have mobile device management controls for company-issued mobile devices.
+Added: We also maintain policies and procedures intended to address cybersecurity risks associated with third-party service providers and vendors that support our operations.
+Added: These processes include evaluating security practices when onboarding certain vendors and monitoring technology environments used by the Company.
+Added: Furthermore, our employees participate in mandatory cybersecurity awareness and training activities intended to reduce risks associated with phishing and other forms of social engineering.
+Added: As referenced above, we also maintain a Cybersecurity Incident Response Plan (“Incident Response Plan”) which outlines how we identify, manage and respond to cybersecurity risks and incidents.
+Added: The Incident Response Plan contains the following elements:
+Added: • Incident Identification and Reporting – outlines the steps used to promptly identify cybersecurity risks and incidents and report those through appropriate means;
+Added: • Incident Assessment – after collecting information about a potential risk, threat or incident, a protocol has been developed and outlined that will allow a cross-functional team to complete an assessment;
+Added: • Incident Containment – provides for actions to be taken to isolate and attempt to contain and minimize any potential threat;
• Resolution and Recovery – outlines the steps to be taken, based upon the incident and the systems potentially impacted, to mitigate the potential impact of the threat and restore system access and functionality in the minimum amount of time;
• Training and Awareness – development of training and awareness programs to allow employees to understand how to promptly respond in the event of a perceived threat.
−Removed: Our Board of Directors has an active role in oversight of our risks and is assisted by our management in the exercise of these responsibilities.
−Removed: Our Manager of Information Technology (“IT Manager”) prepares and provides a presentation to the Board of Directors at each of its quarterly meetings, which includes updates on cybersecurity.
−Removed: Our IT Manager is responsible for assessing and managing risks from cybersecurity threats and carrying out our formal cybersecurity event plan.
−Removed: Our IT Manager is also responsible for reporting material incidents to our Chief Executive Officer, who in turn will report to the Lead Independent Director.
−Removed: Our IT Manager has over 20 years of IT experience in the energy industry.
+Added: Cybersecurity risk management is overseen by our senior leadership as part of its broader enterprise risk management processes.
+Added: Our Vice President, Information Technology (“VP-IT”) is responsible for overseeing cybersecurity operations, including monitoring security risks, maintaining security technologies and coordinating responses to cybersecurity incidents.
+Added: Our VP-IT is responsible for reporting material incidents to our Chief Executive Officer, who in turn will report to the Chairman of the Board of Directors.
+Added: Our VP-IT has over 25 years of experience spanning programming, architecture, applications development and IT management.
+Added: Our Board of Directors provides oversight of our risks and is assisted by our senior leadership in the exercise of these responsibilities.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.