1 unchanged sentence
Cybersecurity.
−Removed: Our information security program is managed by our Chief Information Officer (“CIO”) and Chief Information Security Officer (“CISO”), who are responsible for assessing, monitoring and managing our cybersecurity risks.
−Removed: Our CIO has over 30 years of experience in the technology field, and our CISO has over 20 years of experience in the technology and cybersecurity fields, including over 10 years of experience as a CISO or Head of Information Security for various organizations.
+Added: Our information security program is managed by our Head of Information Security (“HIS”) , who is responsible for assessing, monitoring and managing our cybersecurity risks.
+Added: Our Chief Financial Officer (“CFO”) provides oversight of our information security program.
+Added: Our HIS has more than 30 years of experience in the technology and cybersecurity fields, including 20 years of cybersecurity experience in the U.S.
+Added: defense industrial base.
+Added: Our CFO has over 35 years of experience, inclusive of roles with direct oversight of information technology.
Our cybersecurity risk management and identification has been integrated into our broader enterprise risk management framework which is regularly reported on to the Audit Committee of our Board of Directors.
−Removed: Additionally, our CIO and CISO provide periodic reports to our Board of Directors, as well as to our Chief Executive Officer and other members of our senior management as appropriate.
+Added: Additionally, our HIS provides periodic reports to our Board of Directors, as well as to our Chief Executive Officer and other members of our senior management as appropriate.
These reports include updates on our cybersecurity risks and threats, the status of activities to strengthen our information security systems, assessments of the information security program, and the emerging threat landscape.
+Added: We have implemented robust incident monitoring and response processes, which are overseen by our HIS.
+Added: Security events are evaluated, ranked by severity and prioritized for response and remediation by the information technology team.
+Added: Incidents are evaluated to determine materiality as well as operational, business and privacy impacts and are reported to management as appropriate.
We also engage with various external experts, including cybersecurity assessors and consultants, to conduct cybersecurity program and threat assessments and to advise management on ways to enhance our cybersecurity program as part of our continuing efforts to evaluate the effectiveness of our information security program.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.