2 unchanged sentences
Our Board of Directors is responsible for the Company’s cyber risk oversight.
−Removed: We have established a risk committee (the “Risk Committee”) comprised of members of senior management whose responsibilities include identifying, assessing, and managing enterprise-level and material risks to the Company, including strategic, financial, credit, market, liquidity, security, property, information technology (“IT”), cyber, legal, regulatory, and reputational risks.
+Added: We have established a risk committee (the “Risk Committee”) comprised of members of senior management whose responsibilities include identifying, assessing, and
+Added: managing enterprise-level and material risks to the Company, including strategic, financial, credit, market, liquidity, security, property, information technology (“IT”), cyber, legal, regulatory, and reputational risks.
As described in greater detail below, the Risk Committee also assesses and makes the final determination as to whether a cybersecurity incident is material.
3 unchanged sentences
Company management, including members of the Risk Committee, provides regular updates to the Board of Directors regarding material matters with respect to the Company, including cyber matters.
−Removed: These updates include quarterly updates to the board with respect to material cyber events and a twice per annum cybersecurity program review covering topics such as cybersecurity strategy, assessment, risks, notable events and governance.
−Removed: We also conduct an annual enterprise risk assessment through which it identifies and assesses material risks to the Company, including both cyber and non-cyber risks.
+Added: These updates include quarterly updates to the board with respect to material cyber events and a semi-annual cybersecurity program review covering topics such as cybersecurity strategy, assessment, risks, notable events and governance.
+Added: We also conduct an annual enterprise risk assessment through which we identify and assess material risks to the Company, including both cyber and non-cyber risks.
This assessment is reviewed and discussed with the Board of Directors.
11 unchanged sentences
We utilize an independent external firm that provides services to detect cybersecurity risks and makes recommendations to us regarding ways the Company can better protect itself from threats and improve internal processes based on cyber threats and risks that are impacting other companies.
−Removed: Additionally, as part of its processes for assessing, identifying and managing risks from cybersecurity threats, we intend to periodically conduct maturity and other external cybersecurity assessments to evaluate its cybersecurity maturity and enhance its cybersecurity capabilities.
+Added: Additionally, as part of our processes for assessing, identifying and managing risks from cybersecurity threats, we intend to periodically conduct maturity and other external cybersecurity assessments to evaluate our cybersecurity maturity and enhance our cybersecurity capabilities.
Our internal auditors also perform annual inquiries and risk assessments into cybersecurity practices and potential incidents.
−Removed: We have processes to oversee and identify material risks from cybersecurity threats associated with its use of third-party service providers.
−Removed: Such processes include evaluating service providers to ensure coverage of key cybersecurity risks have appropriate mitigations.
−Removed: We also monitor for threats impacting key service providers and assesses identified threats for potential impacts to services, data, and systems.
+Added: We have processes to oversee and identify material risks from cybersecurity threats associated with our use of third-party service providers.
+Added: Such processes include evaluating service providers to ensure key cybersecurity risks have appropriate mitigations.
+Added: We also monitor for threats impacting key service providers and assess identified threats for potential impacts to services, data, and systems.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.