What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2026-02-24 compared with 2025-03-03 · 24 added, 31 removed, 38 unchanged (59% of the section changed)

6 unchanged sentences

information systems.

Any of these systems are susceptible to compromise, whether by employees, clients, or other authorized individuals,

Any of these systems is susceptible to compromise, whether by employees, clients, or other authorized individuals,

as well as by malicious actors employing sophisticated and continuously evolving software, tools, and strategies.

7 unchanged sentences

to assessing, identifying, and managing cybersecurity risks and threats, including:

· Maintaining policies and procedures

regarding security operations and governance through the implementation of an Information Security Program;

· Establishing a committee responsible

for security administration, including regular assessments of our systems, existing controls, vulnerabilities, and potential improvements;

· Implementing multi-layered controls

to avoid reliance on single controls;

· Utilizing both preventative and

detective tools to monitor and block suspicious activity and to alert of potential threats;

· Keeping abreast of new technology

and evaluating tools to help respond to threats to cybersecurity in real time;

· Managing and maintaining cybersecurity

controls utilizing available people, processes and technology;

· Utilizing a third-party risk

management program for purposes of identifying, assessing and managing risks involved with external service providers;

· Conducting thorough due diligence

concerning our third-party service providers, including evaluating their cybersecurity practices;

· Collaborating with third-party

cybersecurity consultants, who perform regular penetration testing, vulnerability assessments, and other procedures to identify potential

weaknesses in our systems and processes;

· Providing regular cybersecurity

training for both our employees and Board of Directors.

The Information Security Program, overseen by our Executive

Project and Technology Risk Committee (“EPTRC”), plays a vital role in our overall risk management system.

Maintaining policies and procedures regarding security operations and governance through the implementation of an Information Security Program;

Establishing a committee responsible for security administration, including regular assessments of our systems, existing controls, vulnerabilities, and potential improvements;

Implementing multi-layered controls to avoid reliance on single controls;

Utilizing both preventative and detective tools to monitor and block suspicious activity and to alert of potential threats;

Keeping abreast of new technology and evaluating tools to help respond to threats to cybersecurity in real time;

Managing and maintaining cybersecurity controls utilizing available people, processes and technology;

Utilizing a third-party risk management program for purposes of identifying, assessing and managing risks involved with external service providers;

Conducting thorough due diligence concerning our third-party service providers, including evaluating their cybersecurity practices;

Collaborating with third-party cybersecurity consultants, who perform regular penetration testing, vulnerability assessments, and other procedures to identify potential weaknesses in our systems and processes;

Providing regular cybersecurity training for both our employees and Board of Directors.

The Information Security Program, overseen by our

Executive Project and Technology Risk Committee (“EPTRC”), plays a vital role in our overall risk management system.

It encompasses

5 unchanged sentences

events that may warrant Board notification and a Form 8-K cybersecurity notice.

Occasionally, we have encountered cybersecurity threats

necessitating adjustments to our procedures and the integration of extra safeguards.

Although these specific threats or incidents haven't

significantly impacted us thus far, it is possible that future threats and incidents we detect could potentially have a material adverse

effect on our business strategy, results of operations, and financial condition.

From time to time, we have experienced cybersecurity

threats and incidents and have made adjustments to our processes and implemented additional safeguards in response.

To date, these threats

and incidents have not materially affected the Company, including our business strategy, results of operations, or financial condition.

However, future cybersecurity incidents or threats could materially affect us, including our business strategy, results of operations,

or financial condition.

Our management team is tasked with the daily management

1 unchanged sentence

Our EPTRC, in turn, oversees the assessment of information security,

the creation of policies, standards, and procedures, as well as testing, training, and security reporting processes for our Company.

EPTRC is comprised of management with the appropriate expertise and authority to ensure effective oversight of the Information Security

the development of policies, standards, and procedures, as well as testing, training, and security reporting processes for our Company.

The EPTRC is comprised of management with the appropriate expertise and authority to ensure effective oversight of the Information Security

Members of the EPTRC and other members of management with responsibility for cybersecurity risk management possess relevant expertise,

which may include prior experience in information security, risk management, information technology operations, incident response, and

vendor oversight, as well as relevant education and/or industry certifications.

Furthermore, our Board of Directors, both collectively

11 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments