14 unchanged sentences
We have also implemented comprehensive processes designed to identify and oversee risks from cybersecurity threats associated with our third-party service providers, which include security assessments on our suppliers and vendors and continuous monitoring of cyber threats.
−Removed: Our cybersecurity program is based on recognized best practices and standards for cybersecurity, such as the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework.
+Added: Our cybersecurity program is informed by recognized best practices and standards for cybersecurity, such as the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework.
We conduct regular third-party assessments of our cyber risk management program, and also conduct a periodic assessment of cybersecurity risk as part of broader enterprise risk management (ERM).
3 unchanged sentences
We also maintain controls and procedures that are designed to evaluate cyber risks on an ongoing basis.
−Removed: These processes include prompt communication of certain cybersecurity incidents to the Company’s executives, internal committees and the Board as needed, so that any needed external reporting can be made by management and the Board in a timely manner.
+Added: These processes include prompt communication of certain cybersecurity incidents to the Company’s executives, internal committees and the Board as needed, so that any needed disclosures can be made by management and the Board in a timely manner.
Our policies require each of our employees and crew members to contribute to our data security efforts.
2 unchanged sentences
For additional description of cybersecurity risks and potential related impacts on the Company, refer to Item 1A.
−Removed: Risk Factors - "We are exposed to cyber security attacks and data breaches and the risks and costs associated with protecting our systems and maintaining data integrity and security."
+Added: Risk Factors - " We are exposed to cybersecurity attacks and data breaches and the risks and costs associated with protecting our systems and maintaining data integrity and security ."
Our cybersecurity program is led by our Chief Information Officer (CIO) and the Chief Information Security Officer (CISO ).
4 unchanged sentences
He regularly engages with peer CISOs, cybersecurity experts and organizations, including the Cloud Security Alliance (CSA) and the NIST, to stay informed on the latest industry developments.
−Removed: The CISO regularly informs our internal Disclosure Committee, Chief Financial Officer, and our President and Chief Executive Officer of cybersecurity risks and incidents as per our internal cyber risk
+Added: The CISO regularly informs our internal Disclosure Committee, Chief Financial Officer, and our Chairman and Chief Executive Officer of cybersecurity risks and incidents as per our internal cyber risk
This also helps ensure that the highest levels of management are kept abreast of our cybersecurity posture and potential risks.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.