13 unchanged sentences
Technical Safeguards
−Removed: The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.
+Added: The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality
+Added: and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.
Incident Response and Recovery Planning
4 unchanged sentences
The Company launched a security awareness campaign, Be Cyber Smart, that helps employees make sure valuable data remains private, keep physical and digital workspaces secure with good security hygiene, spot potential phishing and malware threats, and avoid risky behaviors.
−Removed: The Be Cyber Smart campaign provides employees with tools and tips for proactive protection measures such as password management, the importance of computer restarts and software updates, security measures when working from home, recognizing and avoiding phishing and maintaining data privacy.
+Added: The Be Cyber Smart campaign provides employees with tools and tips for proactive protection measures such as password management, the importance of software updates and computer restarts, security measures when working remote, recognizing and avoiding phishing and maintaining data privacy.
In addition, annual compliance, security awareness and acceptable use training, as well as regular phish testing, is delivered to all employees.
9 unchanged sentences
To facilitate the success of the Company’s cybersecurity risk management program, multidisciplinary teams throughout the Company are deployed to address cybersecurity threats and to respond to cybersecurity incidents.
−Removed: Through ongoing communications with these teams, the Executive Director of Information Security & Compliance monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and reports such threats and incidents to the Audit Committee and Board when appropriate.
+Added: Through ongoing communications with these teams, the Executive Director of Information Security & Compliance monitors the prevention, detection, mitigation and remediation of cybersecurity
+Added: threats and incidents in real time and reports such threats and incidents to the Audit Committee and Board when appropriate.
The Executive Director of Information Security & Compliance has served in various roles in information technology and information security for over 30 years, including serving as the Vice President of Information Technology and Executive Director of Information Security & Compliance for two large companies.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.