12 unchanged sentences
Our current SVP-ITS has decades of experience overseeing leading systems and software development efforts with critical cybersecurity components.
−Removed: The SVP-ITS is supported by dedicated information technology and security personnel and resources, including team members that have numerous cybersecurity certifications.
+Added: The SVP-ITS is supported by dedicated information technology and security personnel and resources, including team members that have numerous cybersecurity certifications, including a vice president of cybersecurity and risk management who holds a Ph.D.
+Added: in information systems and a variety of security certifications, including CISSP.
Collectively, these personnel and resources allow us to strategically integrate cybersecurity into our broader risk management framework and decision-making process.
3 unchanged sentences
In addition to the formal annual review, members of the ERM Steering Committee review and provide periodic updates as appropriate regarding our overall risk profile and any significant identified risks to both the FRMA Committee and the entire Board.
+Added: In addition, the SVP-ITS periodically meets with the FRMA Committee (including in executive session) and with the entire Board.
We have processes in place that we believe are designed to allow our information security team and management to be informed of and monitor the prevention, detection, mitigation, and remediation of cybersecurity risks.
−Removed: These processes include establishing a formal incident response team, penetration testing, system vulnerability scanning, phishing simulations, tabletop exercises, employee security and compliance training, disaster recovery planning, and other exercises to evaluate the effectiveness of our information security program and improve our security measures and planning.
+Added: These processes include establishing a formal incident response team, penetration testing, system vulnerability scanning, phishing simulations, tabletop exercises, employee security and compliance training, disaster recovery planning, and other
2025 Form 10-K
OTHER INFORMATION
+Added: exercises to evaluate the effectiveness of our information security program and improve our security measures and planning.
Engagement of Third Parties on Risk Management
12 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.