8 unchanged sentences
The Company also utilizes an independent cybersecurity advisor to provide periodic objective assessments of the Company’s capabilities and to conduct advanced attack simulations.
−Removed: Further, as of part of the Company’s overall information security program, the Company conducts a security awareness program, which includes training that reinforces the Company’s security management policies, standards, and practices, as well as the
−Removed: expectation that employees comply with these policies, standards and practices.
−Removed: The Company’s security awareness program engages personnel through mandatory periodic training on identifying potential cybersecurity risks and protecting the Company’s resources and information.
+Added: Further, as part of the Company’s overall information security program, the Company conducts a security awareness program, which includes training that reinforces the Company’s security management policies, standards, and practices, as well as the expectation that employees comply with these policies, standards and practices, and facilitates identifying potential cybersecurity risks and protecting the Company’s resources and information.
The Company also annually engages third parties (as well as its internal audit department) to audit the Company’s information security programs.
The Company uses a variety of processes to address cybersecurity threats related to the use of third-party technology and services, including pre-acquisition diligence, imposition of contractual obligations, and ongoing monitoring.
−Removed: To date, there has not been any previous cybersecurity incident that has materially affected the Company's business strategy, results of operations or financial condition.
+Added: To date, there have not been any previous cybersecurity incidents that have materially affected the Company's business strategy, results of operations or financial condition.
Risk Factors under the heading of “The Company employs information technology systems to support its business, and any material breach, interruption or failure may adversely impact the Company’s business.” for additional information on cybersecurity threats that could have a material impact on the Company.
3 unchanged sentences
The Audit Committee is responsible for overseeing and reviewing the Company’s information security programs, including cybersecurity.
−Removed: The Director of Global Information Systems, who manages information security training and awareness program, updates the Audit Committee periodically regarding information security matters.
+Added: In addition to the Audit Committee’s oversight, the full Board of Directors receives periodic updates relating to information security and cybersecurity risks.
+Added: The Board of Directors receives an annual report from its independent cybersecurity advisor.
+Added: The Director of Global IT Infrastructure & Security, who manages information security training and awareness program, updates the Audit Committee periodically regarding information security matters.
The findings from the Company’s annual third-party and internal information security audits also are reported to the Audit Committee.
The Company also actively engages with key vendors and industry participants as part of its efforts, which are reported to the Audit Committee.
−Removed: In addition to the Audit Committee’s oversight, the full Board of Directors receives periodic updates relating to information security and cyber security risks.
−Removed: The Board of Directors receives an annual report from its independent cybersecurity advisor.
−Removed: Through October 2024, the Director of Global Information Systems had oversight responsibilities for PLP’s information systems and cyber security, a role he held for 15 years.
−Removed: He attended regular education programs regarding enterprise cybersecurity and supporting technologies.
+Added: From January 2025 to September 2025, the Director of Global Information Systems had oversight responsibilities for PLP's information systems and cybersecurity.
The Director of Global Information Systems reported to the CFO and coordinated with the IT resources across all subsidiary operations to discuss risk management initiatives, testing and training, recent trends and technological developments, and periodic reviews of third-party providers.
−Removed: In October 2024, the Director of Global Information Systems left the Company to pursue other opportunities.
−Removed: During the interim period before a replacement was appointed, the CFO provided more active oversight to address the Director of Global Information System's responsibilities, including reporting to the Audit Committee.
−Removed: The vacancy was filled on February 3, 2025 and the new Director of Global Information Systems joined the Company with over 30 years of professional IT experience where he held Director and Chief Information Officer roles at large global companies and provided technology consulting and cybersecurity services to companies across various industries.
+Added: In September 2025, the Director of Global Information Systems left the Company to pursue other opportunities.
+Added: During the interim period before a replacement was appointed, the CFO provided more active oversight to address the Director of Global Information System's responsibilities.
+Added: In December 2025, the Company reorganized its technology functions to align with evolving operational and cybersecurity requirements.
+Added: As part of this reorganization, the Company established the new role of Director of Global IT Infrastructure & Security which reports to the CFO, and the position was filled on December 1, 2025.
+Added: This role is responsible for leading the global team that manages and delivers all IT infrastructure services and security protocols, including network operations, servers and storage, database management, data center operations, messaging and collaboration services, service delivery, end‑user computing, telephony, and remote site support.
+Added: The Director, who will provide periodic strategic updates to the Audit Committee, is also charged with developing and implementing strategic and operational initiatives, establishing standards, policies, and procedures, overseeing daily operational activities, and providing direction to IT personnel.
+Added: The individual appointed to this role brings over 25 years of IT leadership experience, including serving in Director‑level and Chief Information Officer positions.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.