13 unchanged sentences
The substantial level of harm that could occur to us were we to suffer impacts of a material cybersecurity
−Removed: incident requires us to maintain robust governance and oversight of these risks and to implement mechanisms, controls, technologies, and
−Removed: processes designed to help us assess, identify, and manage these risks.
+Added: incident requires us to maintain robust governance and oversight of these risks and to implement mechanisms, controls, technologies,
+Added: and processes designed to help us assess, identify, and manage these risks.
While we have not, as of the date of this annual
11 unchanged sentences
can be unaware of a threat or incident or its magnitude and effects.
−Removed: Further, there are increasing regulation requirements regarding responses
−Removed: to cybersecurity incidents, including reporting to regulators, which could subject us to additional liability and reputational harm.
+Added: Further, there are increasing regulation requirements regarding
+Added: responses to cybersecurity incidents, including reporting to regulators, which could subject us to additional liability and reputational
We apply NIST 800-53, which is a standardized
26 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.