12 unchanged sentences
Our chief financial officer (CFO) facilitates the Company’s ERM program, which includes a formal assessment of the Company’s risk environment at least once per year.
−Removed: The ERM program also facilitates the incorporation of risk assessment and evaluation into the strategic planning process and the provision of regular reports to senior management, including our CEO.
+Added: The ERM program also facilitates the incorporation of risk assessment and evaluation into the strategic
+Added: planning process and the provision of regular reports to senior management, including our CEO.
The Audit Committee assists the Board with its oversight of both the ERM program and cybersecurity risk, providing regular reports to the Board.
3 unchanged sentences
Our CISO reports to our CFO.
−Removed: Our CISO has served in that position since 2022 and has relevant
−Removed: experience in cybersecurity leadership positions, including prior experience as CISO of a public company.
+Added: Our CISO has served in that position since 2022 and has relevant experience in cybersecurity leadership positions, including prior experience as CISO of a public company.
The Audit Committee regularly reviews our risk exposures relating to cybersecurity with our CISO and CFO, including review of the state of the Company’s cybersecurity and emerging cybersecurity developments and threats and the steps management has taken to monitor and mitigate such exposures.
5 unchanged sentences
Disruptions to these systems may impair our ability to conduct business and have a material adverse effect on our business, results of operations and financial condition.
−Removed: Despite the security measures we have in place, our facilities and systems and those of third parties we rely on or do business with, may be vulnerable to cyber attacks, security breaches, malware (including ransomware and other programs that operate with malicious intent), power outages, system failures, acts of vandalism, human or technical errors, or other similar events or disruptions.
+Added: Despite the security measures we have in place, our facilities and systems and those of third parties we rely on or do business with, may be vulnerable to cybersecurity issues, including cyber attacks (including cyberattacks powered by AI), security breaches, fraud (including through phishing or social engineering attempts), malware (including ransomware and other programs that operate with malicious intent), power outages, system failures, acts of vandalism, human or technical errors, or other similar events or disruptions.
Any such event involving the misappropriation, loss or other unauthorized disclosure of information, whether impacting us or third parties we rely on or do business with, could result in losses, damage our reputation or relationships with customers and suppliers, expose us to the risks of litigation, regulatory action and liability, disrupt our operations and have a material adverse effect on our business, results of operations and financial condition.
1 unchanged sentence
We, and third parties we do business with, have experienced cybersecurity attacks and incidents in the past, some of which have resulted in unauthorized access to our information and systems, and other disruptions to our business operations, and we could in the future experience similar incidents.
−Removed: See Risk Factors in Item 1A for additional information on cybersecurity risks.
+Added: See Risk Factors in Item 1A for further information on cybersecurity risks.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.