6 unchanged sentences
Our cybersecurity risk management program is integrated into our overall enterprise risk management program and shares common methodologies, reporting channels, and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.
−Removed: Our management team, including the Chief Information Officer (“CIO”) , is responsible for identifying and managing our material risks from cybersecurity threats.
−Removed: The CIO has primary responsibility for leading our overall cybersecurity risk management program and supervises both the PECO cybersecurity team and our retained external cybersecurity consultants.
+Added: Our Chief Information Officer (“CIO”) is a member of our management team and has primary responsibility for assessing and managing material risks from cybersecurity threats.
+Added: The CIO also has primary responsibility for leading our overall cybersecurity risk management program and supervises both the PECO cybersecurity team and our retained external cybersecurity consultants.
The management team, led by the CIO and cybersecurity team, stay informed about cybersecurity risk including prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include briefings from internal security personnel;
1 unchanged sentence
and alerts and reports produced by security tools deployed in the PECO environment.
−Removed: The CIO works closely with members of PECO's cybersecurity team, who have years of experience working in cybersecurity, possessing industry certifications such as Certified Information Systems Security Professional (“CISSP”) and Security+, and pursuing advanced degrees and studies in the field.
+Added: The CIO has over 20 years of experience in network engineering and administration, information technology operations, and infrastructure, and works closely with members of PECO's cybersecurity team, who have years of experience working in cybersecurity, with several members possessing industry certifications such as Certified Information Systems Security Professional (“CISSP”) and Security+, and having pursued advanced degrees and studies in the field.
Cybersecurity team members participate in recurring cybersecurity team meetings with the CIO and provide periodic executive leadership updates.
1 unchanged sentence
In addition, management updates the Board, through the Audit Committee , as necessary regarding any significant cybersecurity incidents.
+Added: PHILLIPS EDISON & COMPANY
+Added: DECEMBER 31, 2025 FORM 10-K
The cybersecurity team delivers cybersecurity training to associates, including security videos and informational tips, new hire training, out-of-band cybersecurity alerts, and simulated phishing campaigns with teachable moments and focused training, all designed to provide security specific knowledge to our associates.
−Removed: Positive reinforcement is utilized and encourages associates’ participation, in addition to required periodic training.
The PECO cybersecurity team participates in cybersecurity training, activities, and events to stay current with the evolution of security threats, security solutions, best practices, and the risks facing PECO.
−Removed: At PECO, we are committed to protecting the confidentiality and integrity of our data and systems.
+Added: At PECO, we are committed to protecting the availability, confidentiality, and integrity of our data and systems.
Among other things, our key contracts contain requirements that counterparties maintain standards of data security and privacy compliance.
PECO maintains, internally publishes, and annually reviews its cybersecurity policies and procedures, which includes an incident response plan.
−Removed: Additionally, PECO engages with external cybersecurity experts to conduct annual penetration testing, provide monitoring of the environment, conduct tabletop exercises, and for dedicated incident response and advanced forensics capabilities.
+Added: Additionally, PECO engages with external cybersecurity experts to conduct annual penetration testing, provide monitoring of the environment, conduct tabletop exercises, and provide dedicated incident response and advanced forensics capabilities.
In addition to internal audits and external reviews, assessments have included the NIST CSF, cybersecurity maturity assessment, and Center for Internet Security Benchmarks to identify opportunities for enhancement.
2 unchanged sentences
See “Item 1A.
−Removed: Risk Factors – Risks Related to Business Continuity”.
+Added: Risk Factors – Risks Related to Business Continuity and Cybersecurity”.
PHILLIPS EDISON & COMPANY
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.