5 unchanged sentences
In collaboration with the Company’s IT leadership, management has established structured processes for identifying, assessing, and mitigating cybersecurity risks that may impact our business operations including processes to identify cybersecurity risks associated with the use of third-party service providers.
−Removed: Senior leadership regularly provides updates to the Audit Committee of the Board of Directors on the status and outcomes of internal audits evaluating our cybersecurity systems, controls, and processes.
+Added: Senior leadership regularly provides updates to the Audit Committee of our Board on the status and outcomes of internal audits evaluating our cybersecurity systems, controls, and processes.
Our program is guided by the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework, which serves as a valuable resource in helping us identify, assess, and manage cybersecurity risks aligned with our business needs.
1 unchanged sentence
particular standards, specifications or requirements, only that we use NIST as a guide.
−Removed: Our cybersecurity risk management program is integrated into our overall risk management program, and shared common methodologies, reporting channels, and governance processes that apply across the risk management program to other legal, compliance, strategic, operational and financial risk areas.
+Added: Our cybersecurity risk management program is integrated into our overall risk management program, and shared common methodologies, reporting channels, and governance processes that apply across the risk management program to other
+Added: legal, compliance, strategic, operational, and financial risk areas.
Our overall strategy in protecting against cybersecurity risks includes the following preventative and detective measures:
14 unchanged sentences
Our cybersecurity management team consists of the following:
−Removed: • Chief Financial Officer – previously held roles associated with cybersecurity monitoring and reporting at bp plc, including being accountable for a global smart active monitoring implementation program focused on the North American Downstream business, as well as oversight for IT when serving as the CFO for the NA Fuels business for bp plc and while CFO at Renewable Energy Group.
+Added: • Chief Financial Officer – previously held roles associated with cybersecurity monitoring and reporting at bp plc, including being accountable for deployment of an active monitoring implementation program focused on the North American Downstream business, as well as oversight for IT when serving as the Chief Financial Officer for the NA Fuels business for bp plc and while Chief Financial Officer at Renewable Energy Group.
• Head of IT and Cyber – has over 20 years of IT leadership in cybersecurity, including risk management, incident response, and cybersecurity strategy across defense, education, and corporate sectors.
1 unchanged sentence
He holds certifications including CISSP, CCNP, and ITIL.
−Removed: • Head of Business Operations – a sea soned operations and technology leader with extensive experience in scaling IT and cybersecurity functions for high-growth companies.
−Removed: He served as Chief Operating Officer of a Series A startup where he oversaw all operations and IT.
−Removed: • Head of Legal – has extensive experience helping companies manage cybersecurity, privacy, and data protection related risks across the technology, e-commerce, and healthcare sectors.
+Added: • General Counsel and Corporate Secretary – has extensive experience helping companies manage cybersecurity, privacy, and data protection related risks across the technology, e-commerce, and healthcare sectors.
He has served as the global Data Protection Officer at four companies, including at Shopify Inc.
6 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.