5 unchanged sentences
The Company’s CIEC is managed by its Chief Information Officer (the “CIO”) whose team (the Incident Response Team, or “IRT”) is responsible for leading company-wide cybersecurity strategy, policy, standards, architecture, and processes.
−Removed: The purpose of the IRP is to define procedures for reporting and responding to cybersecurity incidents.
+Added: The purpose of the IRT is to define procedures for reporting and responding to cybersecurity incidents.
It creates objectives for actionable procedures that can be measured, evaluated, scaled and revised as necessary for each specific cybersecurity incident.
5 unchanged sentences
The Company regularly assesses and updates its processes, procedures and management techniques in light of ongoing cybersecurity developments.
−Removed: Recognizing the complexity and evolving nature of cybersecurity threats, the Company also engages with a range of external experts, including cybersecurity assessors and consultants in evaluating and testing its cybersecurity management systems and IRP.
+Added: Recognizing the complexity and evolving nature of cybersecurity threats, the Company also engages with a range of external experts, including cybersecurity assessors and consultants in evaluating and testing its cybersecurity management systems and IRT.
These partnerships enable the Company to leverage specialized knowledge and insights, to assist in updating its cybersecurity strategies and processes to align with industry best practices.
5 unchanged sentences
The Board oversees management’s implementation of our cybersecurity risk management program.
−Removed: The Board receives regular reports from the CIEC on our cybersecurity risks.
+Added: The Board receives periodic reports from the CIEC on our cybersecurity risks and cyber risk management program.
In addition, CIEC updates the Board, as necessary, regarding any material cybersecurity incidents, as well as any incidents with lesser impact potential.
−Removed: The Board also receives briefings from IRT on our cyber risk management program.
−Removed: Board members receive presentations on cybersecurity topics from our CIO,
−Removed: internal security staff or external experts as part of the Board’s continuing education on topics that impact public companies.
+Added: Board members receive presentations on cybersecurity topics from our CIO, internal security staff or external experts as part of the Board’s continuing education on topics that impact public companies.
The CIEC is responsible for assessing and managing our material risks from cybersecurity threats.
6 unchanged sentences
and alerts and reports produced by security tools deployed in the IT environment.
+Added: As of March 31, 2026, our headquarters were located in Centennial, Colorado.
+Added: We lease facilities in North America, Europe, and Asia Pacific.
+Added: We believe that our facilities are adequate to meet our needs for the immediate future, and that, should it be needed, suitable additional space will be available to accommodate expansion of our operations.
+Added: LEGAL PROCEEDINGS
+Added: From time to time, we are involved in legal proceedings and claims arising in the ordinary course of business.
+Added: See Item 8 of Part II, “Financial Statements and Supplementary Data—Note 10:
+Added: Commitments and Contingencies.”
+Added: MINE SAFETY DISCLOSURE
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.