NHTC · All filings · Read this filing
What changed 10-K
Item 1B. Unresolved Staff Comments
2025-02-21 compared with 2024-02-28 · 2 added, 0 removed, 24 unchanged (8% of the section changed)
15 unchanged sentences
Our incident response plan sets forth our response protocol to coordinate the activities that we take to respond and recover from cybersecurity incidents, which include processes to triage, assess severity, investigate, escalate, contain, and remediate an incident, as well as to comply with potentially applicable legal and reporting obligations and mitigate brand and reputational damage.
+Added: We also maintain a third-party risk management process to mitigate vulnerabilities associated with external service providers and vendors.
+Added: This includes reviewing service-level agreements and third-party security certifications, such as PCI DSS and SOC reports, on an annual basis or as-needed to ensure vendors adhere to our security and compliance standards.
We have adopted an IT Policies and Procedures Policy that requires all employees to acknowledge on an annual basis their responsibilities in abiding with company policies regarding safeguard our network environment.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.