2 unchanged sentences
We maintain a cybersecurity program that is reasonably designed to protect our information, and that of our customers, against cybersecurity threats that could have material adverse effects on the integrity and effectiveness of our information systems.
−Removed: The Audit Committee of our Board of Directors oversees the Company’s enterprise risk management process, including the management of risks arising from cybersecurity threats.
−Removed: The Audit Committee typically reviews the measures implemented by the Company to identify and mitigate these risks on a quarterly basis.
−Removed: As part of such reviews, the Audit Committee receives reports and presentations from the Company’s Chief Information Officer (CIO) that address a wide range of topics, including recent developments, evolving standards, oversight of third-party vendors, and technological trends related to cybersecurity.
+Added: The Information Technology (“IT”) committee of our Board of Directors, together with the Audit committee, oversees the Company’s enterprise risk management process, including the management of risks arising from cybersecurity threats.
+Added: The IT committee typically reviews the measures implemented by the Company to identify and mitigate cybersecurity risks on a quarterly basis.
+Added: As part of such reviews, the IT committee receives reports and presentations from the Company’s Chief Information Officer (CIO) that address a wide range of topics, including recent developments, evolving standards, oversight of third-party vendors, and technological trends related to cybersecurity.
The full Board of Directors often attends these presentations .
−Removed: Additionally, at least once each year the CIO briefs the Audit Committee on the results of an independent third-party assessment of the Company’s cybersecurity and the Company’s Information Technology (“IT”) incident response and recovery plan.
At the management level, our cybersecurity strategy is managed by the CIO.
−Removed: The CIO’s extensive experience in technology and risk management, including prior work experience in cybersecurity, complemented by other members of our IT department and third-party vendors, form the backbone of our cybersecurity capability.
−Removed: Our cybersecurity program is based on
−Removed: recognized best practices and standards for cybersecurity and IT, including the National Institute of Standards and Technology Cybersecurity Framework.
−Removed: Cybersecurity incidents that meet established reporting thresholds are escalated within the Company to the CIO and the Company’s executive leadership team and, where appropriate, reported to Audit Committee and Board of Directors.
+Added: The CIO’s extensive experience in technology and risk management, including prior work experience at organizations of similar complexity, complemented by other members of our IT department and third-party vendors, form the backbone of our cybersecurity capability.
+Added: Our cybersecurity program is based on recognized best practices and standards for cybersecurity and IT, including the National Institute of Standards and Technology Cybersecurity Framework.
+Added: Cybersecurity incidents that meet established reporting thresholds are escalated within the Company to the CIO and the Company’s executive leadership team and, where appropriate, reported to the IT committee and Board of Directors.
Cybersecurity threats and related incidents have not had a material impact on the company to date, but future cybersecurity incidents could have a material effect on our business, financial condition, and results of operations.
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.