7 unchanged sentences
Our Company-wide approach is to be positioned as one security program, one posture and one roadmap for the enterprise.
−Removed: This platform is administered across our departments by our cybersecurity team led by our Senior Vice President of Information Technology.
+Added: This platform is administered across our departments by our cybersecurity team led by our Vice President of Information Technology.
Our information security programs and policies are aligned with those of the Center for Internet Security (CIS), Control Objectives for Information Technologies (COBIT), and National Institute of Standards Technology (NIST).
7 unchanged sentences
Our assessments and monitoring are designed to mitigate risks related to data breaches or other security incidents originating from third parties.
−Removed: Although no cybersecurity incidents during the year ended December 31, 2023 had a material impact on our business strategy, results of operations or financial condition, the scope and impact of any future incident cannot be predicted.
−Removed: See Item 1A Risk Factors for more information about our information security and cybersecurity risks.
+Added: Although no cybersecurity incidents during the year ended December 31, 2024 which had a material impact on our business strategy, results of operations or financial condition, the scope and impact of any future incident cannot be predicted.
+Added: - Risk Factors for more information about our information security and cybersecurity risks.
Our Board of Directors has established governance protocol over risk management, including general oversight of information technology security and cybersecurity risk.
5 unchanged sentences
These individuals possess relevant experience and expertise in cybersecurity and risk management.
−Removed: Our Senior Vice President of Information Technology leads our information security, data privacy and protection, and information technology compliance programs.
+Added: Our Director, IT Infrastructure & Security leads our information security, data privacy and protection, and information technology compliance programs.
+Added: The Director stays current with security related topics by either webinars, training classes or cybersecurity conferences.
Guided by management, our information technology teams maintain a detailed Cyber Incident Response Plan ("CIRP") and hold frequent meetings to ensure the proper communication and execution of our security controls and procedures.
−Removed: The Senior Vice President of Information Technology regularly reports to and maintains ongoing dialog with our CEO, CFO and COO, and Board of Directors regarding our information security programs.
+Added: The Cybersecurity team has various expertise ranging in Associate of ISC2-CISSP certification and extensive training on current security products.
+Added: The Director, IT Infrastructure & Security regularly reports to the Vice President of Information Technology and maintains ongoing dialog with the reporting structure to our CEO, CFO and COO, and Board of Directors regarding our information security programs.
This reporting includes updates on matters evaluated under our CIRP, the current threat landscape, cybersecurity initiatives, and the effectiveness of our cybersecurity programs.
−Removed: Our Senior Vice President of Information Technology has more than 20 years of cybersecurity experience, is an active Certified Information Systems Security Professional, and trained in assessing and managing cyber risks.
+Added: Our Vice President of Information Technology has more than 35 years working as an IT professional, 13 years of which has been at the Company in various roles such as, Programming, Business Analysis, Systems Analysis, Operations, EDI Manager, and Applications Director.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.