10 unchanged sentences
• Risk assessments designed to identify risks to our systems and information;
−Removed: • An internal security team principally responsible for managing our cybersecurity risk assessment processes, response to cybersecurity incidents, and information technology security controls;
+Added: • An internal security team principally responsible for managing our cybersecurity risk assessment processes, response to cybersecurity events, and information technology security controls;
• Engaging third-party service providers to assist with network, endpoint and cloud system monitoring;
9 unchanged sentences
The Audit Committee receives quarterly reports from management on cybersecurity risks, risk assessment and risk management, and discusses those matters with management.
−Removed: In addition, management updates the Audit Committee on cybersecurity incidents.
+Added: In addition, management updates the Audit Committee on cybersecurity incidents, if any.
The Audit Committee also receives and discusses quarterly reports from management on the effectiveness of our information technology security controls.
−Removed: Risks from Cybersecurity Threats
−Removed: Cybersecurity threats and attacks are becoming more sophisticated and pose a risk to our systems and information.
−Removed: While, to date, we have not been subject to cybersecurity incidents that, individually or in the aggregate, have been material to our operations or financial condition, there can be no guarantee that we will not experience such an incident in the future.
−Removed: For more information regarding the cybersecurity-related risks we face, see “Risk Factors - Risks Related to Data Privacy and Cybersecurity.”
Our information security team, including our Chief Technology Officer and our Senior Vice President Information Security, is responsible for day-to-day identification, assessment and management of the cybersecurity risks we face.
−Removed: The information security team also has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.
+Added: The information security team also has primary responsibility for our overall cybersecurity risk management program and
+Added: supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants.
The leaders of our information security team have over 40 years of combined experience in managing information security, developing cybersecurity strategy and implementing cybersecurity programs.
The Chief Technology Officer is informed of and monitors the prevention, detection, mitigation and remediation of cybersecurity incidents through management of the cybersecurity risk management program described above, including our cybersecurity incident response plan.
−Removed: Our incident response plan is also designed, depending on the circumstances, to escalate cybersecurity incidents to other members of management, report cybersecurity incidents to the Audit Committee, and support public disclosure and reporting of material incidents.
+Added: Our incident response plan is also designed, depending on the circumstances, to escalate cybersecurity incidents to other members of management, report cybersecurity incidents to the Audit Committee.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.