4 unchanged sentences
These risks include, among other things:
−Removed: operational risks, harm to our employees, suppliers or industry partners, intellectual property theft, fraud, extortion, and violation of data
−Removed: privacy or security laws.
+Added: operational risks, harm to our employees, suppliers or industry partners, intellectual property theft, fraud, extortion, and violation of data privacy or security laws.
We use a risk management framework based on applicable laws and regulations and informed by industry standards and industry-recognized practices for identifying and managing cybersecurity risks within our operations, infrastructure and corporate resources.
26 unchanged sentences
Our Chief Information and Compliance Officer and our head of Internal Audit report directly to the Nominating and Corporate Governance Committee as well as the Audit Committee regarding these matters and are responsible for reporting to the Committees on our company-wide enterprise risk assessment, and that assessment also includes an evaluation of cyber risks and threats.
−Removed: The Chair of the Nominating and Corporate Governance Committee regularly reports to the Board of Director on cybersecurity risks and other matters reviewed by the
−Removed: Nominating and Corporate Governance Committee in conjunction with the management team.
+Added: The Chair of the Nominating and Corporate Governance Committee regularly reports to the Board of Director on cybersecurity risks and other matters reviewed by the Nominating and Corporate Governance Committee in conjunction with the management team.
All materials or presentations on cybersecurity provided to the Nominating and Corporate Governance Committee are provided to all Board members.
14 unchanged sentences
The Chief Information and Compliance Officer has over 12 years of experience in the information technology area and holds a Master of Business Administration with a focus in Technology from Oklahoma Christian University.
−Removed: Additionally, our Vice President of Technology and Analytics has 11 years of professional experience in the information security area.
+Added: Additionally, our Vice President of Technology has 12 years of professional experience in the information security area.
Additionally, our management team's internal cybersecurity risk management and strategy processes are supported with third party consultants with extensive work experience in various roles involving information technology, including security, auditing, compliance, systems and programming.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.