11 unchanged sentences
▪ The use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls and designed to anticipate cyber-attacks and prevent breaches;
−Removed: Shake Shack Inc.
−Removed: Form 10-K | 45
▪ Cybersecurity awareness training of our employees, incident response personnel, and senior management;
1 unchanged sentence
▪ A structured third-party risk management program that includes due diligence, contractual security requirements, and continuous monitoring for service providers, suppliers, and vendors to mitigate risks associated with external partnerships.
−Removed: Cybersecurity risks are actively monitored through continuous security assessments, real-time threat intelligence, and adaptive security controls, enable proactive adjustments to our security program as threats evolve.
+Added: Cybersecurity risks are actively monitored through continuous security assessments, real-time threat intelligence, and adaptive security controls, which enable proactive adjustments to our security program as threats evolve.
As part of our ongoing cybersecurity risk management program, we have from time-to-time identified risks or threats to our digital and corporate systems, including attempts to obtain team member credentials through bot and phishing attacks or through social engineering.
−Removed: While these risks and threats, as well as others we identify, require active and ongoing efforts to mitigate, we have not currently identified any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.
+Added: While these risks and threats, as well as others we identify, require active and ongoing efforts to mitigate, we have not currently
+Added: Shake Shack Inc.
+Added: Form 10-K | 38
+Added: identified any prior cybersecurity incidents that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.
Cybersecurity Governance
16 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.