3 unchanged sentences
We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and sensitive data and applications of our customers (“Information Systems and Data”).
−Removed: 2025 Form 10-K 56
Our Chief Information Security Officer (“CISO”) and the direct reports to the CISO (including the Senior Director of Information Security and the Senior Director for Governance, Risk and Compliance, collectively, the “CISO Team”) help identify, assess and manage the Company’s cybersecurity threats and risks, including through the use of a risk register.
2 unchanged sentences
an incident response plan and/or incident response policy, incident detection and response, a vulnerability management policy, disaster recovery/business continuity plans, risk assessments, implementation of security standards/certifications, encryption of data, network security controls, access controls, physical security, vendor risk management program, employee training, penetration testing, cybersecurity insurance, dedicated cybersecurity staff/officer, and systems monitoring.
+Added: 2026 Form 10-K 58
Our assessment and management of material risks from cybersecurity threats are integrated into the Company’s overall risk management processes.
10 unchanged sentences
Our board of directors addresses the Company’s cybersecurity risk management as part of its general oversight function.
−Removed: The board of directors is responsible for overseeing Company’s cybersecurity risk management processes, including oversight and mitigation of risks from cybersecurity threats.
+Added: The board of directors has established a Cybersecurity committee to assist it in fulfilling its oversight responsibilities with respect to the management of cybersecurity risks related to the Company’s products and services as well as its information technology and network systems, including overseeing the Company’s implementation and maintenance of cybersecurity measures, data governance, and compliance with security laws.
Our cybersecurity risk assessment and management processes are implemented and maintained by certain Company management, including the CISO Team, along with other members of management.
4 unchanged sentences
In addition, the Company’s incident response processes include reporting to the board of directors for certain cybersecurity incidents.
−Removed: The board of directors receives periodic reports from the CISO team concerning the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.
−Removed: The board of directors also receives various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.
+Added: The Cybersecurity Committee and the board of directors receive periodic reports from the CISO team concerning the Company’s significant cybersecurity threats and risk and the processes the Company has implemented to address them.
+Added: The Cybersecurity Committee and the board of directors also receive various reports, summaries or presentations related to cybersecurity threats, risk and mitigation.
2026 Form 10-K 59
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.