27 unchanged sentences
In the past, we have experienced targeted and non-targeted cybersecurity attacks and incidents, and we could in the future experience similar attacks.
−Removed: To date, no cybersecurity attack or incident, or any risk from cybersecurity
−Removed: threats, has materially affected or has been determined to be reasonably likely to materially affect the Company or our business strategy, results of operations, or financial condition.
−Removed: Our Director of Information Technology and our Manager of IT Security, having a combined 45 years of information technology experience 1 take the lead in protecting the organization’s digital assets and sensitive information from cyber threats and manage our partnerships with the external firm that specializes in around-the-clock threat monitoring, detection, and response services and other third-party providers.
+Added: To date, no cybersecurity attack or incident, or any risk from cybersecurity threats, has materially affected or has been determined to be reasonably likely to materially affect the Company or our business strategy, results of operations, or financial condition.
+Added: Our Director of Information Technology and our Manager of IT Security , having over 45 years of combined information technology experience 1 take the lead in protecting the organization’s digital assets and sensitive information from cyber threats and manage our partnerships with the external firm that specializes in around-the-clock threat monitoring, detection, and response services and other third-party providers.
+Added: Our Director of Information Technology and Manager of IT Security also report material risks from threats to our information systems to the ERM Committee.
In the event of a breach or incident, our Director of Information Technology leads our response to mitigate impact and initiate the recovery processes.
3 unchanged sentences
The Audit Committee of our Board of Directors is responsible for overseeing cybersecurity risk management.
−Removed: For each Audit Committee meeting, the Director of Information Technology prepares an updated cybersecurity dashboard, featuring key metrics such as threat detection rates and response times.
+Added: For each Audit Committee meeting, the Director of Information Technology prepares an updated cybersecurity report, featuring key metrics and threats.
Additionally, the Director of Information Technology provides an annual cybersecurity briefing to the Audit Committee .
External penetration tests and process audits, conducted at regular intervals, are reported directly to the Audit Committee by our third-party firm.
−Removed: These comprehensive measures help to ensure that the Committee remains well-informed and proactive in their oversight of cybersecurity risks.
+Added: These comprehensive measures help the Committee remain well-informed and proactive in their oversight of cybersecurity risks.
(1) Our Director of Information Technology has more than 25 years of IT experience.
9 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.