5 unchanged sentences
Our approach to data privacy and cybersecurity is defined by our commitment to preserving the trust our employees and customers place in us and focuses on driving continuous improvement as the threat landscape evolves.
−Removed: Our Audit Committee and our management are actively involved in the oversight of our risk management program, of which cybersecurity represents an important component.
+Added: Our Audit Committee and our management are actively involved in the oversight of our cybersecurity program.
As described in more detail below, we have established policies, standards, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats.
−Removed: We have devoted significant financial and personnel resources to implement and maintain security programs to meet regulatory requirements and customer expectations, and we intend to continue to make significant investments to maintain the security of our data and infrastructure.
+Added: We have devoted meaningful financial and personnel resources to implement and
+Added: maintain security programs to meet regulatory requirements and customer expectations, and we intend to continue to make meaningful investments to maintain the security of our data and infrastructure.
However, there can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective.
3 unchanged sentences
Risk Management Strategy
−Removed: We are guided by our Cybersecurity Charter, which includes our philosophy of information security, identifies the motivation for security, describes information security principles and terms, and defines the scope of information security policies and responsibilities for various functions.
+Added: We are guided by our Written Information Security Program ("WISP"), which includes our focus areas, and defines procedures that govern our cybersecurity practices.
We continue to improve the maturity of our cybersecurity program, aligning with the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework.
Our Director of Cybersecurity leads our information security operations, with a focus on identifying, evaluating, mitigating, and reporting on IT and cybersecurity risks that have the potential to threaten Sensata’s enterprise information assets and systems.
−Removed: Our cybersecurity and global IT strategy is regularly aligned with business leaders across Sensata through our IT Excellence Committee meetings, conducted 8 times a year, to ensure cyber, IT, and business priorities are communicated and understood throughout the organization.
+Added: Our data protection, cybersecurity and global IT strategy is regularly aligned with business leaders across Sensata through our IT Excellence Committee meetings, conducted 8 times a year, to ensure data protection, cyber, IT, and business priorities are communicated and understood throughout the organization.
Our policies, standards, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats are integrated into our overall risk management program and are based on frameworks established by the NIST, the International Organization for Standardization, and other applicable industry standards.
20 unchanged sentences
• Training and Awareness :
−Removed: We have robust cybersecurity training programs with frequent touch points for all employees to empower them to act responsibly and keep cybersecurity top of mind.
+Added: We maintain cybersecurity training programs with frequent touch points for all employees to promote responsible practices and reinforce cybersecurity awareness.
We use monthly activities to keep employees engaged with cybersecurity, including newsletters, articles on the Sensata intranet, and mock phishing campaigns.
1 unchanged sentence
• Supplier Engagement :
−Removed: We require our suppliers to comply with our standard information security terms and conditions, in addition to any requirements from our customers, as a condition of doing business with us, and require them to complete information security questionnaires to review and assess any potential cyber-related risks depending on the nature of the services being provided.
+Added: We require our suppliers to comply with our standard information security terms and conditions, in addition to any requirements from our customers, as a condition of doing business with us, and require them to complete information security questionnaires to review and assess potential cyber-related risks depending on the nature of the services being provided.
• Risk Assessment :
19 unchanged sentences
We continue to invest in the cybersecurity and resiliency of our networks and to enhance our internal controls and processes, which are designed to help protect our systems and infrastructure, and the information they contain.
−Removed: For more information about cybersecurity risks relating to our business, refer to Item 1A:
−Removed: Risk Factors included elsewhere in this Report.
+Added: For more information about cybersecurity risks relating to our business and for information about our April 2025 cybersecurity incident, refer to Item 1A:
+Added: Risk Factors and Note 15:
+Added: Commitments and Contingencies of our Financial Statements, respectively, included elsewhere in this Report.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.