12 unchanged sentences
The Security Operations Center conducts daily briefings, identifies emerging cyber threats affecting the financial and education sectors, and reviews new tactics, techniques, and procedures utilized by cyber criminals and nation-state cyber actors.
−Removed: The Security Operations Center is also our incident response team, and ensures that the Company is prepared to detect, analyze, contain, eradicate, and recover from cyber incidents.
+Added: The Security Operations Center is also our incident response team, focused on detecting, analyzing, containing, eradicating, and recovering from cyber incidents.
While we have experienced cybersecurity incidents in the past, to date none have materially affected us, including our business strategy, results of operations, or financial condition.
−Removed: Our offensive security team conducts continuous threat-based and risk-based red team activities, and our application security team utilizes a combination of training, tools, code reviews, and awareness to ensure that our applications are developed with security at the forefront.
+Added: Our offensive security team conducts continuous threat-based and risk-based red team activities, and our application security team utilizes a combination of training, tools, code reviews, and awareness designed to ensure that our applications are developed with security at the forefront.
We also engage with professional cybersecurity firms to conduct penetration tests on specific systems and applications annually.
3 unchanged sentences
Based on the results of these scans, this team routinely patches or works with system and platform owners to resolve identified vulnerabilities.
−Removed: Our log operations team works closely as a bridge between the system owners and our Security Operations Center by ensuring that activities on our systems and applications are logged and monitored.
+Added: Our log operations team works closely as a bridge between the system owners and our Security Operations Center by logging and monitoring activities on our systems and applications.
Our architecture and engineering team manages security appliances and provides security architecture advice and consulting to our information technology and delivery teams throughout the enterprise.
When it comes to posture management, our goal is not just to reactively resolve potential vulnerabilities discovered through the vulnerability management process;
−Removed: we also look for ways to ensure that vulnerabilities don’t materialize through minimizing system ports, protocols, and services to only that which is necessary.
+Added: we also look for ways to prevent vulnerabilities through minimizing system ports, protocols, and services to only that which is necessary.
Governance, Risk, and Compliance includes the risk management and compliance management teams.
11 unchanged sentences
The Company’s Board of Directors and Board Risk and Finance Committee oversee our integrated enterprise risk management and cybersecurity programs.
−Removed: The Board Risk and Finance Committee receive regular reports from the Chief Risk Officer and Chief Security Officer on key company risks and emerging threats.
+Added: The Board Risk and Finance Committee receives regular reports from the Chief Risk Officer and Chief Security Officer on key company risks and emerging threats.
These reports also include cybersecurity monitoring and
threat response metrics, industry trends and educational materials, risk mitigation strategies, regulatory requirements, corporate policies, third-party risk metrics, cybersecurity tools and resources, incident response plans, and other areas of importance.
−Removed: The Company's headquarters are located in Lincoln, Nebraska.
+Added: The Company's headquarters is located in Lincoln, Nebraska.
The Company owns or leases office space facilities primarily in Nebraska, Wisconsin, and Colorado.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.