26 unchanged sentences
We also provide a forum for employees to report cyber “near misses” to elevate cyber threat awareness across our organization.
−Removed: In the past, we have experienced targeted and non-targeted cybersecurity attacks and incidents, and we could in the future experience similar attacks.
+Added: In the past, we have experienced targeted and non-targeted cybersecurity attacks and incidents, and we could experience similar attacks in the future.
To date, no cybersecurity attack or incident, or any risk from cybersecurity threats, has materially affected or has been determined to be reasonably likely to materially affect the Company or our business strategy, results of operations, or financial condition.
−Removed: Our Director of Information Technology and our Manager of IT Security , having over 45 years of combined information technology experience 1 take the lead in protecting the organization’s digital assets and sensitive information from cyber threats and manage our partnerships with the external firm that specializes in around-the-clock threat monitoring, detection, and response services and other third-party providers.
−Removed: Our Director of Information Technology and Manager of IT Security also report material risks from threats to our information systems to the ERM Committee.
−Removed: In the event of a breach or incident, our Director of Information Technology leads our response to mitigate impact and initiate the recovery processes.
−Removed: Following the identification of a breach or incident, the Director of Information Technology reports incidents of a medium or high severity level 2 to our senior leadership team.
+Added: As of December 31, 2025, the position of Director of Information Technology was vacant.
+Added: During this period of vacancy, our Manager of IT Security , who has over 20 years of information technology experience, 1 assumed primary responsibility for protecting the organization’s digital assets and sensitive information from cyber threats.
+Added: The Manager of IT Security managed our partnerships with the external firm specializing in around-the-clock threat monitoring, detection, and response services, as well as other third-party providers.
+Added: Material risks from threats to our information systems are reported by the Manager of IT Security to the ERM Committee.
+Added: In the event of a breach or incident, our Manager of IT Security assumed primary responsibility for leading our response to mitigate impact and initiate the recovery processes, given the vacancy in the Director of Information Technology position.
+Added: Following the identification of a breach or incident, the Manager of IT Security reports incidents of a medium or high severity level 2 to our senior leadership team.
Incidents of a high severity level are also reviewed by our Disclosure Committee to assess materiality and any disclosure obligations.
−Removed: All incidents are reported to the Audit Committee at the next scheduled Board meeting, and incidents of high severity level are immediately reported to the Audit Committee.
+Added: All incidents are reported to the Audit Committee at the next scheduled meeting, and incidents of high severity level are immediately reported to the Audit Committee.
+Added: In the event of a significant incident, the matter is reported to the full Board of Directors.
The Audit Committee of our Board of Directors is responsible for overseeing cybersecurity risk management.
−Removed: For each Audit Committee meeting, the Director of Information Technology prepares an updated cybersecurity report, featuring key metrics and threats.
−Removed: Additionally, the Director of Information Technology provides an annual cybersecurity briefing to the Audit Committee .
+Added: For each Audit Committee meeting, the Manager of IT Security prepares an updated cybersecurity report, featuring key metrics and threats.
+Added: Additionally, the Manager of IT Security provides an annual cybersecurity briefing to the Audit Committee.
External penetration tests and process audits, conducted at regular intervals, are reported directly to the Audit Committee by our third-party firm.
These comprehensive measures help the Committee remain well-informed and proactive in their oversight of cybersecurity risks.
−Removed: (1) Our Director of Information Technology has more than 25 years of IT experience.
−Removed: He joined the company in 2000 as an application developer and has held multiple positions of authority including project management and IT operations management.
−Removed: He holds a bachelor’s degree and MBA from the University of South Carolina.
+Added: Subsequent to December 31, 2025, following the completion of our merger, we appointed a Vice President & Chief Information Officer (CIO) to oversee our information technology and cybersecurity functions.
+Added: The CIO’s responsibilities and governance structure will be reflected in future disclosures.
(1) Our Manager of IT Security has more than 20 years of IT experience.
6 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.