7 unchanged sentences
Our enterprise risk management program includes management of material risks from cybersecurity threats alongside other Company risks as part of our overall risk assessment process.
−Removed: In 2023, our Internal Audit team completed an Enterprise Risk Assessment to identify and prioritize the most critical risks that could impact our ability to achieve our business priorities and make risk-informed strategic decisions.
+Added: In 2024, as part of our Enterprise Risk Management Program, our Internal Audit team identified and prioritized the most critical risks that could impact our ability to achieve our business priorities and make risk-informed strategic decisions.
With management’s input, our Board and Internal Audit team have identified cybersecurity as one of the risks that merits the highest level of prioritization.
20 unchanged sentences
In addition, the Cybersecurity Task Force reviews the business impact and severity of potential cybersecurity incidents, as reported by our automated systems, utilization of the bug bounty program, and public reports on the threat landscape.
−Removed: Table of C ontents
For a discussion of whether and how any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company, including our business strategy and results of operations, see “Risk Factors – Risks Related to Data Security, Privacy and Fraud,” which are incorporated by reference into this Item 1C.
14 unchanged sentences
To the extent a material cybersecurity incident occurs, our CTPO and broader management team would inform the chair of our Audit Committee of the nature, scope and impact of the incident, and involve the other members of the Audit Committee or the full Board as necessary to evaluate the risks and determine next steps.
−Removed: Our CTPO has served in this role since 2023 and has more than 20 years of experience in various senior leadership roles involving managing cybersecurity and compliance teams, including as Head of Tech and Digital at Lovevery and as Chief Technology and Product Officer at Zulilly.
+Added: Our CTPO and CISO have served in these roles since 2023.
+Added: Our CTPO has more than 20 years of experience in various senior leadership roles involving managing cybersecurity and compliance teams, including as Head of Tech and Digital at Lovevery and as Chief Technology and Product Officer at Zulilly.
+Added: O ur CISO has more than 20 years of experience in leadership roles focused on cybersecurity, cloud engineering, infrastructure, and technical operations, including as CISO and Head of Cloud and Infrastructure Engineering at AutoZone and as Principal Executive Advisory Consultant at Amazon Web Services.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.