7 unchanged sentences
● Preventive Controls and Monitoring :
−Removed: We employ multiple layers of technical controls (firewalls, intrusion detection systems, encryption, and multi-factor authentication) to proactively monitor IT controls to ensure compliance with security policies, legal regulations, contractual obligations and industry best practices.
+Added: We employ multiple layers of technical controls (firewalls, intrusion detection systems, encryption, and multi-factor authentication) and proactively monitor these controls to ensure compliance with security policies, legal regulations, contractual obligations and industry best practices.
Our Global Security Operations Center operates 24/7 with real-time monitoring capabilities to rapidly investigate alerts and trigger containment measures, which helps us minimize exposure or damage if a cybersecurity incident occurs.
11 unchanged sentences
Our procurement and legal teams work together to incorporate robust cybersecurity requirements into contracts with vendors (for example, data protection standards and incident notification obligations).
−Removed: Where appropriate, we require suppliers to adhere to our security policies or industry standards, and we conduct
−Removed: ongoing monitoring or audits of their security controls.
+Added: Where appropriate, we require suppliers to adhere to our security policies or industry standards, and we conduct ongoing monitoring or audits of their security controls.
These steps help reduce the risk that a weakness in a partner’s systems could compromise our data or operations.
22 unchanged sentences
The knowledge and experience of our CIO and ISO, along with the Board’s active engagement, provides a strong oversight of our cybersecurity strategy.
−Removed: The Board and management also receive regular briefings and training sessions regarding emerging cybersecurity threats and regulatory developments in order to be positioned to adapt to new challenges in the cybersecurity landscape.
+Added: The Board and management also receive regular briefings and training sessions regarding emerging cybersecurity threats and regulatory developments to be positioned to adapt to new challenges in the cybersecurity landscape.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.