5 unchanged sentences
operational risks, intellectual property theft, fraud, extortion, harm to employees or customers and violation of data privacy or security laws.
−Removed: have implemented cybersecurity processes, technologies, and controls to aid in our efforts to assess, identify, and manage such material risks.
+Added: We have implemented cybersecurity processes, technologies, and controls to aid in our efforts to assess, identify, and manage such material risks.
Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other risk areas.
We have also implemented a specific cybersecurity program which adopts a risk management approach to information security, requiring the identification, assessment, and appropriate mitigation of vulnerabilities and threats that can adversely impact our information assets.
+Added: Our cybersecurity program is aligned with recognized industry standards and frameworks such as NIST SP 800-53, NIST SP 800-82, and the NIST Cybersecurity Framework 2.0.
Our cybersecurity program includes:
+Added: • An Information Security Charter and supporting policies outline governance, define responsibilities, and help enforce our cybersecurity program;
• A risk assessment process designed to help identify material cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;
11 unchanged sentences
The team is responsible for assessing and managing the cybersecurity incident response process, as outlined within the incident response plan, and taking necessary corrective actions to mitigate and eliminate the issue.
−Removed: As of the date of this report, the Company is not aware of any cybersecurity incidents that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition that are required to be reported in this Form 10-K.
+Added: As of the date of this report, the Company is not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition that are required to be reported in this Form 10-K.
For further discussion of the risks associated with cybersecurity incidents and potential impact to the Company, see the cybersecurity risk factors within “Item 1A.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.