OMF · All filings · Read this filing
What changed 10-K
Item 1B. Unresolved Staff Comments
2025-02-07 compared with 2024-02-13 · 1 added, 1 removed, 30 unchanged (6% of the section changed)
9 unchanged sentences
We also have a Cyber Incident Response Policy and detailed plans which are updated and exercised annually.
−Removed: Our cyber defenses are reviewed annually by third-party penetration testers using the Adversarial Tactics, Techniques and Common Knowledge (“MITRE ATT&CK”) framework and the incident response is reviewed by experienced counsel.
+Added: Our cyber defenses are reviewed annually by third-party penetration testers using the Adversarial Tactics, Techniques and Common Knowledge (“MITRE ATT&CK”) framework and the incident response plan is reviewed by experienced counsel.
We incorporate cybersecurity risk reviews of third-party service providers within our Enterprise Third Party Risk Management Program.
19 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.