4 unchanged sentences
Identifying, assessing and managing material risks from cybersecurity threats are activities integrated into our overall risk management system.
−Removed: Cybersecurity risks are identified and addressed through coordinated efforts of our internal information technology security audit teams, internal governance and compliance reviews.
+Added: Cybersecurity risks are identified and addressed through coordinated efforts of our internal information technology security teams, internal governance and compliance reviews.
Our security program also involves the engagement of external consultants to assist us with the review of our assessment and risk mitigation strategies for cybersecurity threats and the development of new approaches as needed.
2 unchanged sentences
We also utilize advanced tools that continuously monitor and evaluate our systems, enabling proactive prevention, detection, investigation, resolution and recovery from cybersecurity incidents.
+Added: We maintain processes to oversee and identify cybersecurity risks associated with third-party service providers, including formalized security reviews during onboarding, contract requirements addressing cybersecurity and expanded monitoring for providers with system access or data exchange.
Cybersecurity events, including those reported to us by third-party service providers , are assessed for their severity and potential impact on our business using both quantitative and qualitative criteria, ensuring appropriate prioritization for response and remediation.
8 unchanged sentences
These teams are informed of cybersecurity threats and incidents through their management of the cybersecurity risk management and strategy processes described above and report any such items to the Audit Committee as deemed appropriate.
−Removed: The individuals responsible for the day-to-day management and assessment of cybersecurity risks include our Vice President of Information Technology and our Senior Director of IT Cybersecurity and Infrastructure, both of whom bring extensive expertise in cybersecurity risk management.
+Added: The individuals responsible for the day-to-day management and assessment of cybersecurity risks include our Vice President of Information Technology and our Director of IT Cybersecurity and Infrastructure, both of whom bring extensive expertise in cybersecurity risk management.
The Vice President of IT has over 30 years of experience in enterprise IT strategy and governance, with a strong background in project management and ERP implementations.
−Removed: The Senior Director of IT Cybersecurity and Infrastructure has over 25 years of experience in manufacturing IT, specializing in enterprise infrastructure, process control and cybersecurity.
+Added: The Director of IT Cybersecurity and Infrastructure has over 25 years of experience in manufacturing IT, specializing in enterprise infrastructure, process control and cybersecurity.
Additionally, our internal security and risk management teams consist of professionals with specialized expertise in intrusion detection and prevention, network security and endpoint defense, thereby ensuring a comprehensive approach to cybersecurity risk assessment and mitigation.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.