20 unchanged sentences
Risk factors” in this Annual Report, including the risk factor entitled “Cyber-attacks or acts of cyber-terrorism could disrupt our or our third-party providers' business operations and information technology systems or result in the loss or exposure of confidential or sensitive customer, employee or Company information”, for additional discussion about cybersecurity-related risks.
−Removed: The Board is focused on the critical nature of managing risks associated with cybersecurity threats.
−Removed: The Board has delegated to its Audit Committee oversight of management's processes for identifying and mitigating risks, including cybersecurity-related risks, to help align our risk exposure with our strategic objectives.
+Added: The Board is focused on the critical nature of managing risks associated with cybersecurity threats as well as challenges to our business from evolving information technology systems.
+Added: The Board has delegated to its Audit Committee oversight of management's processes for identifying and mitigating risks, including cybersecurity risks such as network security, information and digital security, data privacy and protection, and risks related to emerging technologies such as generative artificial intelligence and machine learning, to help align our risk exposure with our strategic objectives.
Board of Directors Oversight
8 unchanged sentences
Monitor Cybersecurity Incidents
−Removed: The Senior Vice President of Information Technology ("SVP IT") is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques.
+Added: The Senior Vice President of Technology ("SVP Technology") is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques.
This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation, and remediation of cybersecurity incidents.
−Removed: The SVP IT implements and oversees processes for the regular monitoring of our information systems.
+Added: The SVP Technology implements and oversees processes for the regular monitoring of our information systems.
This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities.
1 unchanged sentence
Depending on the nature and severity of an incident, this process provides for evaluation by an executive management group to determine if the incident is material to us by evaluating the impact on our financial condition, reputation and potential litigation risk and regulatory impact.
−Removed: The management group is comprised of the Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, General Counsel, Chief Accounting Officer and the SVP IT to determine if escalation is necessary by the Chief Executive Officer to the Board (specifically our Lead Independent Director and the Audit Committee Chair).
+Added: The management group is comprised of the Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, General Counsel, Chief Accounting Officer and the SVP Technology to determine if escalation is necessary by the Chief Executive Officer to the Board (specifically our Lead Independent Director and the Audit Committee Chair).
Reporting to Board of Directors
−Removed: The SVP IT plays a pivotal role in informing the Audit Committee on cybersecurity-related risks.
−Removed: The Audit Committee holds quarterly meetings and the SVP IT provides periodic reports, on at least a quarterly basis, to the Audit Committee.
+Added: The SVP Technology plays a pivotal role in informing the Audit Committee on cybersecurity-related risks.
+Added: The Audit Committee holds quarterly meetings and the SVP Technology provides periodic reports, on at least a quarterly basis, to the Audit Committee.
These reports cover a broad range of topics, including:
2 unchanged sentences
• Compliance with regulatory requirements and industry standards
−Removed: The SVP IT regularly informs our executive management group of all aspects related to cybersecurity risks and incidents.
+Added: The SVP Technology regularly informs our executive management group of all aspects related to cybersecurity risks and incidents.
This ensures that the highest levels of management are kept abreast of the cybersecurity environment and potential risks facing us.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.