7 unchanged sentences
When an incident occurs, the Corporation responds by remediating the incident while complying with regulatory obligations, and then evaluates the remediation’s effectiveness.
−Removed: Communication about risk management matters is conducted through documented policies and procedures, management and Board
−Removed: committee reporting, and employee training and communications.
+Added: Communication about risk management matters is conducted through documented policies and procedures, management and Board committee reporting, and employee training and communications.
For a detailed description of how cybersecurity risks may materially affect the Corporation’s business strategy or results, see "Item 1A.
1 unchanged sentence
The Corporation’s information technology risk management department consists of professionals with experience and expertise in cybersecurity, including specialists in identity and access management, cyber defense operations, security engineering, and information technology governance, risk, and compliance.
−Removed: This department is led by the Chief Information Officer (“CIO”), who has over 27 years of experience in technology risk management, and the Information Security Officer (“ISO”), who has a bachelor in computer science and has over 18 years of experience in cybersecurity risk management.
+Added: This department is led by the Chief Information Officer (“CIO”), who has a bachelor of science in information technology and many certifications such as Certified Information Systems Security Professional, Certified Cloud Security Professional and Certified Information Privacy Professional, and the Information Security Officer (“ISO”) , who has a bachelor of science in computer science and has over 19 years of experience in cybersecurity risk management.
The ISO reports to the CIO, and the CIO reports directly to the President and Chief Executive Officer.
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.