4 unchanged sentences
Our information security framework leverages information and guidance from external sources and is managed by an internal team, led by the Cybersecurity Manager.
−Removed: This team provides updates on the overall effectiveness of the cybersecurity framework, including information on cyber threats and incidents, to the Information Services leadership team consisting of the Executive Vice President ("EVP") - Global Business & Information Services, Vice President ("VP") Information Services, and Senior Director of Information Technology Operations and Governance.
−Removed: We take a multi-layered, risk-based approach to our security controls to prevent, detect, and respond to cybersecurity threats.
+Added: This team provides updates on the overall effectiveness of the cybersecurity framework, including information on cyber threats and incidents, to the Information Services leadership team consisting of the Executive Vice President ("EVP") – Global Business & Information Services, Vice President ("VP") – Global Business Systems, VP – Global Information Technology Operations and Governance, and Senior Director – Data Insights and Innovation.
+Added: We utilize a multi-layered, risk-based approach to our security controls to prevent, detect, and respond to cybersecurity threats.
Our capabilities, processes, and security measures include, and are not limited to:
4 unchanged sentences
• logical access controls, including multi-factor authentication,
−Removed: • incident response procedures;
+Added: • incident response procedures, and
• disaster recovery protocols.
3 unchanged sentences
Annual penetration tests are conducted by a third party to evaluate existing security measures and identify improvements.
−Removed: Additionally, the Company engages a managed detection and response service to monitor our information systems environment, identify suspicious activity, and perform actions to prevent or stop attacks.
+Added: Additionally, the Company engages a managed detection and response service to monitor our end points, identify suspicious activity, and perform actions to prevent or stop attacks.
The Company maintains a cybersecurity insurance policy that provides coverage for potential losses arising from a cybersecurity incident.
3 unchanged sentences
The Audit Committee regularly reviews the results from the Company's ERM program with management.
−Removed: Company's Board of Directors receive updates from the EVP – Global Business & Information Services regarding cybersecurity framework developments and information that may impact the Company’s cybersecurity posture.
+Added: The Board of Directors receives updates from the EVP – Global Business & Information Services regarding cybersecurity framework developments and information that may impact the Company’s cybersecurity posture.
The Company’s EVP – Global Business & Information Services reports to the Chief Executive Officer and has 36 years of experience leading information technology functions, which includes information security and incident management prevention and response.
−Removed: Under the direction of the EVP – Global Business & Information Services and the Chief Executive Officer, the internal team within the Company's Information Services department analyzes cybersecurity risks, considers industry trends, and implements controls, as appropriate, to mitigate these risks.
+Added: Under the direction of the EVP – Global Business & Information Services and the Chief Executive Officer, an internal team within the Company's Information Services department analyzes cybersecurity risks, considers industry trends, and implements controls, as appropriate, to mitigate these risks.
Impact of Cybersecurity Risks and Threats
1 unchanged sentence
However, there can be no assurance that a material cybersecurity incident will not occur in the future.
−Removed: Additional information on cybersecurity risks are discussed in " Item 1A.
+Added: Additional information on cybersecurity risks is discussed in " Item 1A.
Risk Factors ," which should be read in conjunction with the foregoing information.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.