6 unchanged sentences
We are focused on detecting, preventing and responding to cyber threats, maintaining the privacy and protection of sensitive information, and maintaining the durability and resiliency of our information and data processing systems.
−Removed: Our approach to designing, operating and measuring the effectiveness of our program leverages experienced internal resources, industry-recognized cybersecurity consultants, assessors, healthcare and industry-specific cybersecurity working groups and threat-intelligence platforms, federal law enforcement and CISA partnerships.
−Removed: We use these resources and
−Removed: partnerships, along with our internal expertise, to develop specialized insights pertinent to our business’s cyber-risk, and tailor our cybersecurity strategy to best safeguard our systems and data.
+Added: Our approach to designing, operating and measuring the effectiveness of our program leverages experienced internal resources, industry-recognized cybersecurity consultants, assessors, healthcare and industry-specific cybersecurity working groups and threat-intelligence platforms, federal law enforcement and the Cybersecurity and Infrastructure Security Agency (“CISA”) partnerships.
+Added: We use these resources and partnerships, along with our internal expertise, to develop specialized insights pertinent to our business’s cyber-risk, and tailor our cybersecurity strategy to best safeguard our systems and data.
We staff an internal cybersecurity team and maintain a third-party managed security operations center which in-concert provide 24x7x365 real-time detection and response.
2 unchanged sentences
Cyber-awareness training and testing is a key component of RadNet’s Cybersecurity and Data Protection Program.
−Removed: Every employee is required to complete cyber-related training (including third-parties who access our systems) and successfully complete testing throughout the year in addition to monthly phishing tests.
+Added: Every employee is required to complete cyber-related training (including third-parties who access our systems) and successfully
+Added: complete testing throughout the year in addition to monthly phishing tests.
Furthermore, we require all system users to complete annual Patient Privacy and Patient Data Breach training and testing to meet RadNet compliance standards.
−Removed: We benchmark and evaluate our Cybersecurity and Data Protection Program and data protection maturity against the NIST Cybersecurity Framework and the HIPAA Security Rule.
+Added: We benchmark and evaluate our Cybersecurity and Data Protection Program and data protection maturity against the National Institute of Standards & Technology ("NIST") Cybersecurity Framework and the HIPAA Security Rule.
Consistent with these frameworks, our program includes recurring third-party assessments and a vendor risk management program.
10 unchanged sentences
RadNet is committed to appropriate cybersecurity governance and oversight.
−Removed: Our Cybersecurity and Data Protection Program is the principal responsibility of our Chief Information Officer and Chief Information Security Officer , each of whom have over 20 years of experience in information systems, including cybersecurity training and experience.
+Added: Our Cybersecurity and Data Protection Program is the principal responsibility of our Chief Information Officer ("CIO") and Chief Information Security Officer ("CISO") , each of whom have over 20 years of experience in information systems, including cybersecurity training and experience.
Additionally, RadNet’s CIO and CISO work closely with our executive management, legal and compliance leaders, and meet regularly to discuss cybersecurity matters and risks.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.