4 unchanged sentences
We aim to adhere to the best practices outlined in the National Institute of Standards and Technology and International Organization for Standardization frameworks, and our policies and procedures in managing personally identifiable information are in compliance with General Data Protection Regulation requirements.
−Removed: As part of our processes for assessing, identifying and managing material risks from cybersecurity threats, we maintain an ongoing process to enhance security and optimize our IT systems, and regularly conduct security assessments and testing of our systems to verify our systems’ integrity to protect them against being compromised from both internal and external sources.
+Added: As part of our processes for assessing, identifying and managing material risks from cybersecurity threats, we maintain a process to enhance security and optimize our IT systems, and regularly conduct security assessments and testing of our systems to verify our systems’ integrity to protect them against being compromised from both internal and external sources.
We regularly assess risks from cybersecurity threats, monitor our information systems for potential vulnerabilities and test those systems pursuant to our cybersecurity processes and practices.
6 unchanged sentences
This in-depth approach applies to all vendors with access to our sensitive systems or data.
−Removed: Ongoing assessments are customized based on each provider’s risk profile, with heightened scrutiny applied to new engagements and high-risk relationships.
+Added: Our assessments are customized based on each provider’s risk profile, with heightened scrutiny applied to new engagements and high-risk relationships.
Existing vendors are subject to periodic reevaluations according to a predetermined schedule, with increased frequency for those deemed higher risk.
20 unchanged sentences
The team routinely collects and processes information from a variety of sources, including from media reporting, commercial threat intelligence providers (FSARC, FS-ISAC), the Federal Bureau of Investigation and other government and law enforcement agencies.
−Removed: The team provides ongoing global mitigation of known cybersecurity threats to help ensure that our data and systems are protected.
+Added: The team provides global mitigation of known cybersecurity threats to help ensure that our data and systems are protected.
Our principal executive offices are located in leased office space at 767 Fifth Avenue, New York, NY, 10153.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.