5 unchanged sentences
The teams employ numerous security tools such as for threat detection, alerting and monitoring, data loss prevention, vulnerability remediation, and including end-point protections, webproxy, anti-malware, and email security protections.
−Removed: Park uses multi-factor authentication for computer and mobile devices, encryption technology, and requires virtual private network access to Park’s network for all remote employees.
+Added: Park uses multi-factor authentication for computer and mobile devices, encryption
+Added: technology, and requires virtual private network access to Park’s network for all remote employees.
Park engages in annual recovery and information security tabletop exercises to simulate threats and events.
14 unchanged sentences
Park's Board of Directors is regularly apprised of cybersecurity risks.
−Removed: Park’s information security team prepares and issues a quarterly report to the full Board of Directors on the status of incidents, health of program, penetration testing results, and risk assessments.
−Removed: cybersecurity operations team also prepares and issues a quarterly report to the full Board of Directors identifying cybersecurity trends, internal data, issues, events, and key-risk indicator metrics.
+Added: Park’s information security team and cybersecurity operations team jointly prepare and issue a quarterly report to the full Board of Directors on the status of incidents, health of program, penetration testing results, risk assessments, identifying cybersecurity trends, internal data, issues, events, and key-risk indicator metrics.
Park’s information security and cybersecurity operations teams have defined escalation paths for issues and events, which include engaging Park’s Incident Response Plan, and working issues and events through Park’s Cybersecurity Response Playbook.
2 unchanged sentences
Events that leadership determines may be material are shared with the Board of Director’s Executive Committee for final review and evaluation.
−Removed: Park engages teams, including but not limited to information security, information technology, and fraud and security, to address and remediate cybersecurity events and issues as they arise.
+Added: Park engages teams, including but not limited to information security, information technology, corporate fraud and security, and fraud prevention, to address and remediate cybersecurity events and issues as they arise.
Park engages outside legal counsel for assistance in evaluating and remediating cybersecurity issues and events.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.