11 unchanged sentences
Keeping abreast of new technology and evaluating tools to help respond to threats to cybersecurity in an efficient and effective manner;
−Removed: Collaborating with third-party cybersecurity consultants that perform regular penetration testing, vulnerability assessments, and other
−Removed: procedures to identify potential weaknesses in our systems and processes;
−Removed: Utilizing a third-party risk management program for purposes of identifying, assessing, and managing risks involved with external service
+Added: Collaborating with third-party cybersecurity consultants that perform regular penetration testing, vulnerability assessments, and other procedures to identify potential weaknesses in our systems and processes;
+Added: Utilizing a third-party risk management program for purposes of identifying, assessing, and managing risks involved with external service providers;
Conducting thorough due diligence concerning our third-party service providers, including evaluating their cybersecurity practices;
Providing regular cybersecurity training for both our employees and our Board of Directors.
−Removed: The Board, through the Information Technology Steering Committee, works with senior management and other employee committees to oversee the development, implementation, maintenance, and
−Removed: administration of the Information Security Program, which is aligned and integrated into Ohio Valley’s overall risk management system and processes.
−Removed: The Information Technology Steering Committee itself is comprised of diverse directors and officers
−Removed: of the Bank with vast knowledge and years of banking experience.
−Removed: The Information Security Officer of the committee has 25 years of banking experience including 24 IT related years as well as continuing education including a BA in Management
−Removed: Information Systems and Network+ and A+ certifications.
−Removed: The purpose of the Information Security Program is to:
+Added: The Board, through the Information Technology Steering Committee, works with senior management and other employee committees to oversee the development, implementation, maintenance, and administration of the Information Security Program, which is aligned and integrated into Ohio Valley’s overall risk management system and processes.
+Added: The Information Technology Steering Committee itself is comprised of diverse directors and officers of the Bank with vast knowledge and years of banking experience.
+Added: The Information Security Officer of the committee has 26 years of banking
+Added: experience including 25 IT related years as well as continuing education including a BA in Management Information Systems and Network+ and A+ certifications.
+Added: The purpose of the Information Security
+Added: Program is to:
Identify and analyze cybersecurity risks;
5 unchanged sentences
ever-changing threat landscape.
−Removed: The purpose of the Incident Response Plan is to provide long-term strategies for the remediation and prevention of, and resiliency to, cybersecurity threats and incidents.
−Removed: Our Incident Response Plan is executed
−Removed: through the incident response team comprised of both cybersecurity experts and select members of management, including one or more Information Security Officers, who are responsible for monitoring potential threats and identifying events that may
−Removed: warrant Board notification and/or public disclosure.
−Removed: Additionally, our Information Security Officers are responsible for responding to security events by ordering emergency actions to protect the Company and its customers;
−Removed: managing negative effects
−Removed: on the confidentiality, integrity, and availability of information;
+Added: The purpose of the Incident Response Plan is to provide long-term strategies for the remediation and prevention of, and resiliency to, cybersecurity
+Added: threats and incidents.
+Added: Our Incident Response Plan is executed through the incident response team comprised of both cybersecurity experts and select members of management, including one or more Information Security Officers, who are responsible for monitoring potential threats and identifying events that may warrant Board notification and/or public disclosure.
+Added: Additionally, our Information Security Officers are responsible for responding to security events by ordering emergency actions to protect the Company and its
+Added: managing negative effects on the confidentiality, integrity, and availability of information;
and minimizing the disruption and degradation of critical services.
1 unchanged sentence
and increasing in volume, and attackers respond rapidly to changes in defensive measures.
−Removed: While to date, Ohio Valley has not detected a significant compromise, significant data loss, or any material financial losses related to cybersecurity
−Removed: attacks, Ohio Valley’s systems and those of its customers and third-party service providers are under constant threat, and it is possible that Ohio Valley could experience a significant event in the future.
−Removed: Risks and exposures related to
−Removed: cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking, and other technology-based
−Removed: products and services by us and our customers.
+Added: While to date, Ohio Valley has not detected a significant compromise, significant data loss, or any material financial losses related to cybersecurity attacks , Ohio Valley’s systems and those of its
+Added: customers and third-party service providers are under constant threat, and it is possible that Ohio Valley could experience a significant event in the future.
+Added: Risks and exposures related to cybersecurity attacks are expected to remain high for the
+Added: foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking, and other technology-based products and services by us and our customers.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.