6 unchanged sentences
We conduct an annual gap assessment against the NIST Cybersecurity Framework, the results of which are used to establish goals and measure progress against our cybersecurity roadmap.
−Removed: Based on the gap assessment, for example, we have taken a number of actions intended to reduce our cybersecurity risk, including implementing network segmentation, enhancing our email and end-point security programs and improving our web application filtering programs.
−Removed: We are focused on the continuous improvement of key processes such as asset management, access control, vulnerability management, incident response, and third-party risk management.
+Added: Based on the gap assessment, for example, we have taken a number of actions intended to reduce our cybersecurity risk, including enhancing our email and end-point security programs, implementing a single dashboard for security monitoring and improving our web application filtering programs.
+Added: We are focused on the continuous improvement of key processes such as data security, asset management, access control, vulnerability management, incident response, and third-party risk management.
We also maintain business continuity management certification to ensure the ongoing review of our business continuity, disaster recovery and incident management processes, including as a result of a cybersecurity breach.
13 unchanged sentences
Key cybersecurity topics are presented regularly to the Audit Committee.
−Removed: In addition, if any cybersecurity incident is determined under our incident response policy to pose a risk in excess of an identified threshold (as set forth in the policy), our Chief Legal Officer will promptly notify the Audit Committee regarding the incident.
+Added: In addition, if any cybersecurity incident is determined under our incident response policy to pose a risk in excess of an identified threshold (as set forth in the policy), our
+Added: Chief Legal Officer will promptly notify the Audit Committee regarding the incident.
The notification to the Audit Committee will include management’s determination regarding whether or not the incident is material to us.
2 unchanged sentences
Prior to Ericsson, she held cybersecurity positions at Walgreens, Fortunes Brands Home & Security, and W.W.
−Removed: She is a Certified Information Security Manager, has operated her own security firm, and has over 19 years of
−Removed: cybersecurity experience, including her time as a US Navy Operations and Training Manager.
−Removed: Our CIO has held that position (or Head of IT) at Ribbon for over 6 years.
−Removed: He has over 25 years of experience in the IT area including over eight years overseeing IT cybersecurity, cybersecurity roadmaps and IT general controls.
+Added: She is a Certified Information Security Manager, has operated her own security firm, and has over 20 years of cybersecurity experience, including her time as a US Navy Operations and Training Manager.
+Added: Our CIO has held that position (or Head of IT) at Ribbon for over seven years.
+Added: He has over 25 years of experience in the IT area including over nine years overseeing IT cybersecurity, cybersecurity roadmaps and IT general controls.
During his career he has overseen initial ISO 27001 certifications, as well as the implementation of over 30 cybersecurity platforms.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.