12 unchanged sentences
Cyber incident response, IT disaster recovery, and business continuity plans;
+Added: T a b l e o f C o n t e n t s
+Added: Operational technology assessments, testing, and incident response;
+Added: Assessing and securing artificial intelligence (AI) enabled services and technologies;
Cybersecurity assessments and remediation planning as part of our M&A due diligence process;
15 unchanged sentences
At each quarterly meeting, the Audit Committee receives an update from our CISO and other members of management on relevant topics, including cybersecurity program maturity progress, new capabilities implemented, penetration testing results, key cyber risk metrics (e.g., simulated phishing testing and vulnerability management) and notable incidents or events should they occur.
−Removed: On an annual basis, our Board of Directors meets with our CISO and our third-party cybersecurity consultant to review our cybersecurity strategy and the results of our NIST CSF assessment.
+Added: On an annual basis, our Board of Directors meets with our CISO and our third-party cybersecurity consultant to review our cybersecurity strategy and the results of our consultant's NIST CSF assessment.
In accordance with our cybersecurity incident response plan, our Board is promptly informed of potentially material cybersecurity incidents, including with respect to our third-party service providers.
Although we have experienced cybersecurity incidents from time to time that have not had a material adverse effect on our business, financial condition, or results of operations, there can be no assurance that a cyber-attack, security breach, or other cybersecurity incident will not have a material adverse effect on us in the future.
−Removed: For a discussion regarding risks from cybersecurity threats that have or are reasonably likely to affect the company, see our risk factors, including the risk factors titled “Our strategy includes an increasing dependence on technology in our operations.
−Removed: If any of our key technology fails, our business could be adversely affected.” and “A cybersecurity incident could negatively impact our business and our relationships with customers.” in Item 1A of this Annual Report on Form 10-K.
+Added: For a discussion regarding risks from cybersecurity threats that have affected or are reasonably likely to affect the company, see our risk factors, including the risk factors titled “Our strategy includes an increasing dependence on technology, including the use of artificial intelligence (AI), in our operations.
+Added: If any of our key technology fails, our business could be adversely affected.” and “A significant cybersecurity incident could negatively impact our business and our relationships with employees, customers and vendors and expose us to increased liability." in Item 1A of this Annual Report on Form 10-K.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.