2 unchanged sentences
We maintain a comprehensive cybersecurity program and process for identifying, assessing and managing risks from cybersecurity threats as part of our broader risk management system.
−Removed: Our cybersecurity program is run by a dedicated team of cybersecurity professionals with deep expertise in incident prevention, detection and remediation, led by our Vice President, Information Security (a certified information systems security professional with a degree in computer science and more than 30 years of relevant work experience) and our Chief Information Officer (a seasoned executive with a degree in management information systems and decades of product and technology experience, including more than 20 years with the Company).
+Added: Our cybersecurity program is run by a dedicated team of cybersecurity professionals with deep expertise in incident prevention, detection and remediation, led by our Vice President, Information Security (a certified information systems security professional with a degree in computer science and more than 30 years of relevant work experience) and our Chief Operating Officer (a seasoned executive with a degree in industrial systems and decades of product and technology experience, including more than 19 years with the Company).
The Information Security team is responsible for identifying, assessing and mitigating cybersecurity vulnerabilities, threats and risks;
1 unchanged sentence
and operating a 24x7 security operations center to promptly detect, remediate and prevent security incidents.
−Removed: The team maintains a comprehensive incident response policy that includes prompt reporting of security incidents to a cross-functional working group (including our Chief Information Officer, General Counsel, Chief Compliance Officer and other security and privacy personnel) in order to ensure that information required to be disclosed by the Company with respect to security incidents is timely identified and reported.
+Added: The team maintains a comprehensive incident response policy that includes prompt reporting of security incidents to a cross-functional working group (including our Chief Operating Officer, General Counsel, Chief Compliance Officer and other security and privacy personnel) in order to ensure that information required to be disclosed by the Company with respect to security incidents is timely identified and reported.
We have aligned our information security management system to the International Organization for Standardization ("ISO") 27001 standard and our privacy management system to the ISO 27701 standard.
3 unchanged sentences
Our Board of Directors has an active role, as a whole and at the committee level, in overseeing management of our material risks from cybersecurity threats.
−Removed: The Board's Audit Committee oversees management of financial, regulatory, compliance and security risks and receives reports at least quarterly from our Chief Information Officer regarding our cybersecurity programs, vulnerabilities, threats and risks.
+Added: The Board's Audit Committee oversees management of financial, regulatory, compliance and security risks and receives reports at least quarterly from our Chief Operating Officer regarding our cybersecurity programs, vulnerabilities, threats and risks.
The full Board is regularly informed about such risks through committee reports, attendance at committee meetings and other communications.
−Removed: Our executive leadership team is responsible for designing and implementing our enterprise risk management program, with input from our Chief Information Officer, General Counsel and other security and privacy personnel regarding material risks from cybersecurity threats.
+Added: Our executive leadership team is responsible for designing and implementing our enterprise risk management program, with input from our Chief Product Officer, Chief Operating Officer, General Counsel and other security and privacy personnel regarding material risks from cybersecurity threats.
The executive leadership team regularly discusses security threat trends;
5 unchanged sentences
We have experienced, and may in the future experience, cybersecurity incidents.
−Removed: While prior incidents have not materially affected our business strategy, results of operations or financial condition to date, and although our processes are designed to help prevent, detect and mitigate the impact of such incidents, we cannot guarantee that a future security incident would not materially affect our strategy,
−Removed: Table of Conte nt s
−Removed: results of operations or financial condition.
+Added: While prior incidents have not materially affected our business strategy, results of operations or financial condition to date, and although our processes are designed to help prevent, detect and mitigate the impact of such incidents, we cannot guarantee that a future security incident would not materially affect our strategy, results of operations or financial condition.
For more information on our cybersecurity related risks, see Item 1A , "Risk Factors" of this 10-K.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.