12 unchanged sentences
• the use of external cybersecurity service providers, where appropriate, to assess, test or otherwise assist with aspects of our security processes;
−Removed: • cybersecurity awareness training of employees with access to our IT systems and designated security champions throughout the Company’s departments;
+Added: • cybersecurity awareness, including annual mandatory training for all employees and contractors in addition to monthly phishing simulations and the use of designated security champions throughout the Company’s departments;
• a cybersecurity incident response plan and Security Operations Center (SOC) to respond to cybersecurity incidents;
−Removed: • a third-party risk management process for service providers .
+Added: • insurance coverage for cybersecurity matters;
+Added: • a comprehensive third-party risk management process for service providers which requires critical vendors to provide security certifications such as SOC 2 Type II and includes continuous monitoring of vendor security postures and annual security audits to ensure ongoing compliance with our standards.
There can be no assurance that our cybersecurity risk management program, including our controls, procedures and processes, will be fully complied with or that our program will be fully effective in protecting the confidentiality, integrity and availability of our information systems, product and network.
6 unchanged sentences
The Audit Committee oversees management’s design, implementation and enforcement of our cybersecurity risk management program.
−Removed: Our Chief Information Security Officer periodically reports to the Board and leads the Company’s overall cybersecurity function.
+Added: Our Chief Information Security Officer (CISO) periodically reports to the Board and leads the Company’s overall cybersecurity function.
The Audit Committee receives regular reports from our CISO on our cybersecurity risks, including briefings on our cyber risk management program and any cybersecurity incidents.
−Removed: Board members also receive periodic presentations on cybersecurity topics from our CISO or our Chief Technology Officer.
−Removed: Our CISO supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which include briefings from internal security personnel;
−Removed: threat intelligence and other information obtained from governmental, public or private sources, including external cybersecurity service providers;
−Removed: and alerts and reports produced by security tools deployed in the IT environment.
−Removed: Our CISO is responsible for assessing and managing our material risks from cybersecurity threats.
−Removed: Our CISO has primary responsibility for leading our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our external cybersecurity service providers.
−Removed: Our CISO has significant experience in managing and leading IT and cybersecurity teams.
−Removed: Prior to joining the Company, he served as the chief technology officer and cofounder of a company specializing in cybersecurity services and software.
+Added: Board members also receive periodic presentations on cybersecurity topics from our CISO or our Chief Technology Officer (CTO).
+Added: Our CISO supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which include briefings from internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external cybersecurity service providers, and alerts and reports produced by security tools deployed in the IT environment.
+Added: Our CISO oversees our internal cybersecurity personnel and external cybersecurity service providers.
+Added: Our CISO has over twenty years of experience in managing and leading IT and cybersecurity teams, including approximately ten years in senior security leadership roles at a global fintech company prior to joining the Company.
Our CISO reports directly to our CTO who has over twenty years of experience in technology and IT including roles at large global companies.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.