7 unchanged sentences
This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the ISO standards as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.
−Removed: Our information technology department with the assistance of third-party service providers help identify, assess and manage the Company’s cybersecurity threats and risks.
+Added: Our information technology department with the assistance of third-party service providers helps identify, assess and manage the Company’s cybersecurity threats and risks.
Our information technology department identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example:
10 unchanged sentences
The Board of Directors’ Audit Committee is responsible for overseeing the Company’s cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.
−Removed: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including our Vice President of Data Sciences and IT , who has prior work experience in information technology, and our Director of IT, who has experience in network security and systems administration, who are primarily responsible for assessing and managing our material risks from cybersecurity threats.
−Removed: The Vice President of Data Sciences and IT and Director of IT, who report to our Chief Financial Officer, have a combined 25 years of risk management experience.
+Added: Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including our Vice President of Data Sciences and IT , who has prior work experience in information technology and is primarily responsible for assessing and managing our material risks from cybersecurity threats.
+Added: The Vice President of Data Sciences and IT reports to our Chief Financial Officer and has over 10 years of risk management experience.
Our Vice President of Data Sciences and IT is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company’s overall risk management strategy, and communicating key priorities to relevant personnel.
Our IT security incident response plan is designed to escalate certain cybersecurity incidents to our IT Security Council depending on the circumstances.
−Removed: Our IT Security Council is made up of our Chief Executive Officer, Chief Financial Officer, Chief Legal Officer and Secretary, Vice President of Data Sciences and IT, and Director of IT.
+Added: Our IT Security Council is made up of our Chief Executive Officer, Chief Financial Officer, Chief Legal Officer and Secretary, and Vice President of Data Sciences and IT.
Based on the severity and materiality of the incident, the Company’s IT security incident response plan also includes reporting to the Audit Committee of the Board of Directors for cybersecurity incidents.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.