14 unchanged sentences
managing our security controls, and informing our response to cybersecurity incidents.
−Removed: This team is composed of professionals with deep cybersecurity expertise, including our chief security officer, who has twenty plus years of military, public, and private sector cybersecurity experience.
+Added: This team is composed of professionals, each with deep cybersecurity expertise ranging from ten to twenty years, including our Chief Security Officer, who has twenty-plus years of military, public, and private sector cybersecurity experience.
+Added: Our Chief Security Officer regularly reports to our audit committee, risk management committee, and the board of directors.
Additionally, our internal auditors independently test our IT and cybersecurity controls.
−Removed: Our executive leadership team, along with
−Removed: input from the above teams, are responsible for our overall risk management system and processes and regularly consider cybersecurity risks in the context of other material risks to the company.
−Removed: Our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, including as a result of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially affected in the future by such risks or any future material incidents, particularly considering that cybersecurity threat actors are often highly sophisticated and nimble in their attacks.
−Removed: For more information on our cybersecurity related risks, see Item 1A Risk Factors of this Annual Report on Form 10-K.
+Added: Our executive leadership team, using input from the above teams, is responsible for our overall risk management system and processes and regularly considers cybersecurity risks in the context of other material risks to the company.
+Added: To date, o ur business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats, including as a result of previously identified cybersecurity incidents, but we cannot provide assurance that they will not be materially affected in the future by such risks or any material incidents that occur or are discovered in the future, particularly considering that cybersecurity threat actors are often highly sophisticated and nimble in their attacks.
+Added: For more information on our cybersecurity risks, see Item 1A, “Risk Factors” of this Annual Report on Form 10-K.
Governance and oversight related to our cybersecurity risk management policies and processes are conducted at both our board level and our management levels.
4 unchanged sentences
The audit committee reports to the full board of directors regarding its activities, including those related to cybersecurity.
−Removed: Board members receive presentations on cybersecurity matters from our legal, security team or external experts as part of the board of director’s continuing education on topics that impact our operations and risks.
−Removed: At the management level, our management risk committee, which includes members of our executive leadership and is led by our chief legal & administrative officer and chief financial officer, is responsible for assessing and managing IT and cybersecurity risks, in the context of other material risks to the company.
+Added: Board members receive presentations on cybersecurity matters from our legal, security team or external experts as part of the board of directors’ continuing education on topics that impact our operations and risks.
+Added: At the management level, our management risk committee, which includes our Chief Security Officer and other members of our executive leadership and is led by our General Counsel and Chief Financial Officer, is responsible for assessing and managing IT and cybersecurity risks, in the context of other material risks to the company.
Our management risk committee is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include, among other things, briefings with internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us.
−Removed: We believe our dedicated security team and our management risk committee each play important roles in facilitating our cross-functional approach to identifying, preventing, mitigating and reporting cybersecurity threats and incidents and in ensuring our audit committee and board of directors are able to fulfill its oversight function in a timely manner.
−Removed: Additional information about the risks related to our cyber security appears in the “Risk Factors” section of this report.
+Added: We believe our dedicated security team and our management risk committee each play important roles in facilitating our cross-functional approach to identifying, preventing, mitigating and reporting cybersecurity threats and incidents and in working to ensure our audit committee and board of directors are able to fulfill their oversight function in a timely manner.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.