7 unchanged sentences
We have an established bug bounty program and conduct penetration testing as needed to identify vulnerabilities for remediation.
−Removed: With respect to third party service providers, we obligate vendors to adhere to privacy and cybersecurity measures, perform risk assessments of vendors including their ability to protect data from unauthorized access.
+Added: With respect to third party service providers , we obligate vendors to adhere to privacy
+Added: and cybersecurity measures, perform risk assessments of vendors including their ability to protect data from unauthorized access.
As described in Item 1A “Risk Factors,” our operations rely on the secure processing, storage and transmission of confidential and other information in our computer systems and networks, as we provide content licensing to customers in more than 150 countries and license content from contributors located in over 100 countries.
17 unchanged sentences
• The Crisis Incident Management Team, which includes senior executives across the Company, is alerted as appropriate to cybersecurity incidents, natural disasters and business outages.
−Removed: Annually, this team assesses its communication plan
−Removed: to confirm that its members can be alerted quickly in the event of an actual crisis and meet as a team to discuss the event and response options.
+Added: Annually, this team assesses its communication plan to confirm that its members can be alerted quickly in the event of an actual crisis and meet as a team to discuss the event and response options.
Each of these committees provides summary reports on their activities, which the CISO communicates as appropriate to the Audit Committee.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.