1 unchanged sentence
Cybersecurity.
−Removed: At Rapid7, cybersecurity risk management is integrated into our overall enterprise risk management program and is one of the pillars of our broader cybersecurity program.
+Added: At Rapid7, cybersecurity risk management is integrated into our overall enterprise risk management program and one pillar of our broader cybersecurity program.
Our cybersecurity risk management program is designed based on prevailing security standards and controls, such as NIST-800 and ISO 27001, and to continuously evaluate cybersecurity risks in alignment with our business objectives and operational needs.
2 unchanged sentences
Recognizing the complexity and evolving nature of cybersecurity threats, incidents and risks, we engage with a range of third-party experts, including cybersecurity penetration testers, consultants, and auditors in evaluating and supporting our risk management systems.
−Removed: Our collaboration with these third parties includes regular audits, threat assessments, and consultation on security enhancements.
+Added: Our collaboration with these third parties includes regular independent audits, threat assessments, and consultation on security enhancements.
Our cybersecurity program, which is managed by our information security team, includes:
• efforts to comply with prevailing cybersecurity standards;
−Removed: • regular risk assessments and annual penetration tests designed to help identify potential cybersecurity risks to our critical systems, networks, products, services, and our broader enterprise information technology environment;
+Added: • regular risk assessments, security assessments and penetration tests designed to help identify potential cybersecurity risks to our critical systems, networks, products, services, and our broader enterprise information technology environment;
• a cybersecurity incident response plan and procedures for responding to cybersecurity threats and incidents;
8 unchanged sentences
Our cybersecurity programs are under the
−Removed: Ta ble of Contents
direction of our Chief Security Officer (“CSO”) , who receives reports from our information security team and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents.
6 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.