5 unchanged sentences
Cybersecurity risks are identified and addressed through coordinated efforts of our internal information technology security audit teams, internal governance and compliance reviews.
−Removed: We also engage external consultants to assist us with the review of our assessment and risk mitigation strategies for cybersecurity threats and the development of new approaches as needed.
−Removed: To protect our information technology systems from cyber threats, we use various tools that help us prevent, detect, investigate, resolve and recover from cybersecurity incidents, including proactive cybersecurity reviews of systems and applications, annual risk assessments that identify and evaluate new and recurring cyber threats, tabletop exercises and infiltration testing.
−Removed: Cybersecurity events, including those identified and communicated to us by our third-party service providers, are evaluated for severity and materiality to our business, based on both quantitative and qualitative factors, and prioritized accordingly for response and remediation.
+Added: Our security program also involves the engagement of external consultants to assist us with the review of our assessment and risk mitigation strategies for cybersecurity threats and the development of new approaches as needed.
+Added: To safeguard our information technology systems against cyber threats, we conduct regular risk assessments to identify and address both new and recurring vulnerabilities.
+Added: These efforts include tabletop exercises and penetration testing, which provide valuable insights to enhance our cybersecurity posture.
+Added: We also utilize advanced tools that continuously monitor and evaluate our systems, enabling proactive prevention, detection, investigation, resolution and recovery from cybersecurity incidents.
+Added: Cybersecurity events, including those reported to us by third-party service providers , are assessed for their severity and potential impact on our business using both quantitative and qualitative criteria, ensuring appropriate prioritization for response and remediation.
Our information technology systems have been, and we expect will continue to be, subject to cyber intrusion attempts.
1 unchanged sentence
Our Audit Committee is responsible for the oversight of risk from cybersecurity threats and includes one committee member with significant cybersecurity consulting experience.
−Removed: On a quarterly basis, the Audit Committee receives reports from senior management on our cybersecurity program covering our strategies and processes for the identification, assessment and mitigation of the material cybersecurity risks that we face, existing and emerging cybersecurity trends and threat landscapes and the status of projects in process that are intended to strengthen our information security systems and improve our cyber readiness.
−Removed: Under the oversight of our Audit Committee, our CEO-chaired Enterprise Risk Management team and our Cybersecurity Governance Committee, each comprised of a cross-functional team of executives and key functional leads and subject matter experts, convene at least quarterly to assess the identification and mitigation of cybersecurity risks, ensure the effective execution of our cybersecurity strategy and verify that our cybersecurity processes are adequately strengthened.
+Added: On a quarterly basis, the Audit Committee receives reports from senior management on our cybersecurity program covering our strategies and processes for the identification, assessment and mitigation of material cybersecurity risks.
+Added: These reports also include updates on existing and emerging cybersecurity trends and threat landscapes, along with the status of ongoing projects aimed at strengthening our information security systems and improving our cyber readiness.
+Added: To ensure clarity and accountability, these reports are segmented into key areas of focus, including incident response updates, emerging threat analyses and project progress metrics.
+Added: Under the oversight of our Audit Committee, our CEO-chaired Enterprise Risk Management team and our chartered Cybersecurity Governance Committee convene at least quarterly to assess the identification and mitigation of cybersecurity risks, ensure the effective execution of our cybersecurity strategy and verify that our cybersecurity processes are adequately strengthened.
The Cybersecurity Governance Committee is also responsible for evaluating findings and proposals presented by external consultants and developing the appropriate remediation actions.
These teams are informed of cybersecurity threats and incidents through their management of the cybersecurity risk management and strategy processes described above, and report any such items to the Audit Committee as deemed appropriate.
+Added: The individuals responsible for the day-to-day management and assessment of cybersecurity risks include our Vice President of Information Technology and our Senior Director of IT Cybersecurity and Infrastructure, both of whom bring extensive expertise in cybersecurity risk management.
+Added: The Vice President of IT has over 30 years of experience in enterprise IT strategy and governance, with a strong background in project management and ERP implementations.
+Added: The Senior Director of IT Cybersecurity and Infrastructure has over 25 years of experience in manufacturing IT, specializing in enterprise infrastructure, process control and cybersecurity.
+Added: Additionally, our internal security and risk management teams consist of professionals with specialized expertise in intrusion detection and prevention, network security and endpoint defense, thereby ensuring a comprehensive approach to cybersecurity risk assessment and mitigation.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.