1 unchanged sentence
Cybersecurity
−Removed: In the ordinary course of our business, we collect, use, store, and transmit digitally large amounts of confidential, financial, sensitive, propr ietary, personal, and health-related information.
+Added: In the ordinary course of our business, we collect, use, store, and transmit digitally large amounts of confidential, financial, sensitive, proprietary, personal, and health-related information.
The secure maintenance of this information and our information technology systems is important to our operations and business strategy.
To this end, we have implemented processes designed to assess, identify, and manage risks from potential unauthorized occurrences on or through our information technology systems that may result in adverse effects on the confidentiality, integrity, and availability of these systems and the data residing therein.
−Removed: Our cybersecurity program is informed in part by industry standards and best practices, such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework.
−Removed: This program is managed and monitored by a dedicated information technology team, including a Senior Director of Information Security, and is led by our Senior Vice President, Chief Information Officer, or CIO.
+Added: Our cybersecurity program is informed by industry standards and best practices, such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework.
+Added: This program is managed and monitored by a dedicated information technology team, including an Executive Director of IT Infrastructure and Cybersecurity, and is led by our Senior Vice President, Chief Information Officer, or CIO.
Our processes include mechanisms, controls, technologies, and systems designed to prevent or mitigate data loss, theft, misuse, or other security incidents or vulnerabilities affecting the data and maintain a stable information technology environment.
5 unchanged sentences
• A third-party risk management process for service providers, suppliers, and vendors including due diligence prior to engagement and ongoing periodic review of our key technology vendors, and other contractors and suppliers.
−Removed: Our CIO, together with our Senior Director of Information Security and other members of the IT leadership team, are responsible for assessing and managing cybersecurity risks.
+Added: Our CIO, together with our Executive Director of IT Infrastructure and Cybersecurity and other members of the IT leadership team, are responsible for assessing and managing cybersecurity risks.
Our CIO has over ten years of experience managing information technology and cybersecurity.
−Removed: Our Senior Director of Information Security has over 25 years of experience managing information technology and cybersecurity matters and is certified as a Certified Information Systems Security Professional (CISSP).
+Added: Our Executive Director of IT Infrastructure and Cybersecurity has over 25 years of experience managing information technology and cybersecurity matters and is certified as a Certified Information Security Manager.
We consider cybersecurity, along with other significant risks that we face, within our overall enterprise risk management framework.
3 unchanged sentences
The Audit Committee, which is comprised solely of independent directors, has been designated by our Board to oversee cybersecurity risks.
−Removed: The Audit Committee receives regular updates on cybersecurity and information technology matters and related risk exposures from our CIO.
+Added: The Audit Committee receives updates on cybersecurity and information technology matters and related risk exposures from our CIO on at least an annual basis.
The Board also receives updates from the Audit Committee on cybersecurity risks on a regular basis.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.