16 unchanged sentences
We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, and/or financial condition.
−Removed: “Risk Factors – OPERATIONAL RISKS – We depend on secure information technology and a breach of those systems or those of third-party vendors could result in significant losses, unauthorized disclosure of confidential customer information, and reputational damage, which could materially adversely affect our business, financial condition, and/or results of operations and could lead to significant financial, legal, and reputational exposure” in this Form 10-K.
+Added: “Risk Factors – TECHNOLOGICAL RISKS – We depend on secure information technology and a breach of those systems or those of third-party vendors could result in significant losses, unauthorized disclosure of confidential customer information, and reputational damage, which could materially adversely affect our business, financial condition, and/or results of operations and could lead to significant financial, legal, and reputational exposure” in this Form 10-K.
Cybersecurity Governance
1 unchanged sentence
The Operational and Compliance Risk Committee of our Board of Directors oversees management’s design, implementation, and enforcement of our cybersecurity risk management program.
−Removed: Our Chief Security Officer (“CSO”) reports to our Chief Operational Officer and President of the Bank and leads the Company’s overall cybersecurity function.
+Added: Our Chief Security Officer (“CSO”) reports to our Executive Vice President, Chief Technology and Enablement Officer and leads the Company’s overall cybersecurity function.
Our CSO provides periodic updates on our cybersecurity risk management program to the management-level Operational and Compliance Risk Committee (“OCRC”) and Executive Committee (“EC”).
3 unchanged sentences
threat intelligence and other
−Removed: 2024 Form 10-K — SLM CORPORATION 40
+Added: 42 SLM CORPORATION — 2025 Form 10-K
information obtained from governmental, public, or private sources, including external cybersecurity service providers;
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.