5 unchanged sentences
The company’s cybersecurity program is designed to detect, contain and respond to cybersecurity threats and incidents in a prompt and effective manner with the primary goals of protecting information assets, preventing the misuse and loss of those assets, minimizing disruptions to the business, and establishing the basis for audits and risk assessments.
+Added: 2024 ANNUAL REPORT 21
Elements of the cybersecurity program include:
2 unchanged sentences
• Technical safeguards intended to protect the company’s information systems from cybersecurity threats, including data encryption, firewalls, threat monitoring, intrusion prevention and detection systems, anti-malware, access controls, privilege management, network segmentation, asset and end point management, and ongoing system security assessments.
−Removed: 2023 ANNUAL REPORT 21
• Annual training for personnel regarding cybersecurity threats based on their roles, responsibilities, and levels of system access.
21 unchanged sentences
The Incident Response Team also coordinates communications with internal and external stakeholders.
+Added: SNAP-ON INCORPORATED
The Incident Response Team leads the materiality assessment with input and guidance from senior management, including the Chief Executive Officer, Chief Financial Officer, and Chief Accounting Officer.
2 unchanged sentences
Management also facilitates external communications, as appropriate.
−Removed: SNAP-ON INCORPORATED
Management of cybersecurity risk is overseen by the company’s Board of Directors and is supported by the Audit Committee.
6 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.