10 unchanged sentences
Through appropriate risk evaluation, security assessments, and financial due diligence, we seek to protect the security and confidentiality of information provided to our vendors under service provider cloud computing or other arrangements.
−Removed: We also employ contractual nondisclosure requirements and use limitations consistent with our published Privacy Policy, and typically reserve the right to review third-party compliance against the required standards, where we deem appropriate.
+Added: We also employ contractual nondisclosure requirements and use limitations consistent with our published Privacy Policy, and typically reserve the right to review third-party compliance against the required standards, where we consider it appropriate.
Our response to cybersecurity threats is triggered through various means.
2 unchanged sentences
Our Chief Security Officer (CSO) is ultimately responsible for cybersecurity at Progressive, with management oversight of the prevention, detection, mitigation, and remediation of cybersecurity incidents.
−Removed: The CSO reports directly to the Chief Financial Officer and provides regular cybersecurity updates to the CEO, other members of the executive team, and the Board of Directors’ Technology Committee.
+Added: The CSO reports directly to the Chief Financial Officer.
+Added: The CSO, or a senior member of his team, provides regular cybersecurity updates to the CEO, other members of the executive team, and the Board of Directors’ Technology Committee.
Assuming the role in 2012, our CSO has served in this capacity at Progressive for more than a decade and, prior to joining us in 2010, had over 10 years of cybersecurity experience in the banking industry in security and risk management leadership roles, primarily focused on cybersecurity and banking compliance, with additional experience in the areas of anti-money laundering and financial fraud.
Our CSO is also a member of our Management Risk Committee, which leads our Enterprise Risk Management program, and as a member ensures that cybersecurity risks remain a focus of the overall risk management process.
−Removed: The Technology Committee of the Board of Directors oversees our use of technology in business strategy as well as the major risks arising from our technology, digital and data strategies, legacy information systems, technology investments, data privacy, operational performance, cybersecurity programs, and technology-related business continuity and disaster recovery programs.
−Removed: The Technology Committee, which includes directors with technology experience, also oversees management’s effort to mitigate these risks.
+Added: The Technology Committee of the Board of Directors oversees our use of technology in executing the company’s business strategy as well as the major risks arising from our technology, digital and data strategies (including with respect to artificial intelligence), legacy systems, technology investments, data privacy, operational performance, cybersecurity programs, and technology-related business continuity and disaster recovery programs.
+Added: The Technology Committee, which includes directors with technology experience, also oversees management’s efforts to mitigate these risks.
Technology Committee meetings typically occur five times a year.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.