5 unchanged sentences
We have implemented an information security management system in accordance with our risk profile and business that is designed to protect the Company, our employees, and our customers from cybersecurity threats.
−Removed: This system, which is informed by the National Institute of Standards and Technology (NIST) Cybersecurity Framework, includes, among other things, written policies, technical controls, and employee training.
+Added: This system, which is
+Added: informed by the National Institute of Standards and Technology (NIST) Cybersecurity Framework, includes, among other things, written policies, technical controls, and employee training.
We have also developed an incident response policy and procedure designed to facilitate the handling of cybersecurity incidents.
11 unchanged sentences
Our vice president of information technology (“VP of IT”) is responsible for the strategic leadership and direction of the Company’s information security management system.
−Removed: Our VP of IT has 25 years experience managing IT teams, including 10 years managing IT security teams.
+Added: Our VP of IT has over 25 years experience managing IT teams, including 10 years managing IT security teams.
Led by the VP of IT, along with our Director of IT Security, the IT leadership team reviews the Company’s cybersecurity objectives at least annually, and more frequently as needed, and takes steps to further the suitability and effectiveness of the Company’s information security program.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.