7 unchanged sentences
The Company's cybersecurity program focuses on the following areas:
−Removed: Technological safeguards that are designed to protect the Company's information systems from cybersecurity threats, including the prevention and detection of system applications, access controls, and firewalls, which the Company assesses the vulnerability and severity of potential cybersecurity threats and makes necessary improvements.
+Added: Technological safeguards that are designed to protect the Company's information systems from cybersecurity threats, including the prevention and detection of system applications, access controls, and firewalls, which the Company assesses the vulnerability and severity of potential information security threats and makes necessary improvements.
Utilization of third parties as part of the Company's risk-based approach in identifying and overseeing cybersecurity risks.
−Removed: The Company maintains an incident plan that addresses the Company's response to a cybersecurity event, which is periodically reviewed and updated.
−Removed: While the Company is working to adopt the National Institute of Standards and Technology ("NIST") cybersecurity framework, the Company's on-going investment in information systems and utilization of external 3rd parties represents the best means for extensively testing both the design and operational effectiveness of cybersecurity controls, and to ensure continuity and functionality of the Company's operating systems.
+Added: The Company maintains an incident plan that addresses the Company's response to an cybersecurity event, which is periodically reviewed and updated.
+Added: The Company's on-going investment in information systems and utilization of external 3rd parties represents the best means for extensively testing both the design and operational effectiveness of cybersecurity controls, and to ensure continuity and functionality of the Company's operating systems.
As of the date of this report, the Company has not experienced any material cybersecurity events.
7 unchanged sentences
restricted firewall settings;
−Removed: network monitoring, email phishing tests, and enhancing the Company's backup recovery strategy, among others.
+Added: security and network monitoring, security awareness training, email phishing tests, and enhancing the Company's backup recovery strategy, among others.
The Director of Information Technology is responsible for assessing, monitoring, and managing the Company's cybersecurity risks.
−Removed: The Director of Information Technology has extensive experience in leading the Company's information systems and has previously led cybersecurity teams for several large global organizations prior to joining the Company.
+Added: The Director of Information Technology has extensive experience in leading the Company's information systems and has previously led information security teams for several large global organizations prior to joining the Company.
The Director of Information Technology, along with members of management, inform the Audit Committee on cybersecurity risks by providing periodic updates regarding (i) Status of ongoing cybersecurity initiatives and strategies, (ii) The overall state of the Company's security program and potential exposure to risks, and (iii) Incident reports and learning from any cybersecurity events.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.