8 unchanged sentences
The Company uses a combination of internal and external resources to assess, identify, and manage material risks from cybersecurity threats.
−Removed: Internally, the Company leverages its global information security organization, the Information Technology function, privacy and compliance departments, operating segments, functional areas, and its internal audit function.
+Added: Internally, the Company leverages its global information security organization, the IT function, privacy and compliance departments, operating segments, functional areas, and its internal audit function.
Given the complexity and evolving nature of cybersecurity threats, the Company also utilizes the following external resources:
15 unchanged sentences
The Newell Brands Information Security program is led by the Company’s Chief Information Security Officer , a Certified Information Systems Security Professional (CISSP) with over 20 years of experience in cybersecurity gained at four global Fortune 500 companies, and the Company’s Chief Information Officer who has overseen the Company’s security function for the past 12 years.
−Removed: The Newell Brands Information Security program is governed by the Information Security Governance Committee (the “ISG Committee”), comprised of the Chief Information Security Officer (its Chair), Chief Financial Officer, Chief Legal and Administrative Officer, Chief Human Resources Officer, Chief Information Officer, and Vice President of Internal Audit.
+Added: The Newell Brands Information Security program is governed by the Information Security Governance Committee (the “ISG Committee”), comprised of the Chief Information Security Officer (its Chair), Chief Financial Officer, Chief Legal and Administrative Officer, Chief Human Resources Officer, Chief Information Officer, and Vice President of Internal Audit and SOX.
The ISG Committee meets quarterly to discuss material risks, material risk related metrics, and material risk mitigating strategies and conducts tabletop exercises.
2 unchanged sentences
• Periodic Information Security program presentations to leadership;
−Removed: • Chief Information Security Officer material incident notifications to Company management, including the President and Chief Executive Officer.
+Added: • Chief Information Security Officer material incident notifications to Company management, including the President and CEO.
The outputs from the management processes above are synthesized into the above-mentioned reporting to the Audit Committee of the Board of Directors .
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.