6 unchanged sentences
Our Audit Committee directly oversees our processes for identifying and mitigating risks, including cybersecurity risks, to help align our risk exposure with our strategic objectives.
−Removed: Our Vice President (“VP”) of Security and Controls, who has over 16 years of experience in information technology and security and who holds Certified Information Systems Security Professional and IT Infrastructure Library certifications, has primary responsibility for overseeing our management of cybersecurity risks.
−Removed: Reporting to the Chief Technology Officer (“CTO”), our VP of Security and Controls meets regularly with the CTO, and works cross-functionally with other department leaders, including legal, business, policy, and technical functions, as appropriate, to exchange information related to cybersecurity.
−Removed: Our VP of Security and Controls provides quarterly updates to our Audit Committee on our cybersecurity status, risks, and strategies.
−Removed: These quarterly updates address a range of cybersecurity-related topics, such as recent developments related to the threat landscape, security controls, vulnerability assessments, third-party reviews, technological trends, and information security considerations arising with respect to our peers and third parties.
+Added: Our Chief Information Officer (“CIO”) , who has over 25 years of experience in information technology and security and held pivotal leadership roles in Security at several Fortune 100 companies, has primary responsibility for overseeing our management of cybersecurity risks.
+Added: Reporting to the Chief Technology Officer (“CTO”), our CIO meets regularly with the CTO, and works cross-functionally with other department leaders, including legal, business, policy, and technical functions, as appropriate, to exchange information related to cybersecurity.
+Added: Our CIO provides quarterly updates to our Audit Committee on our cybersecurity status, risks, and strategies.
+Added: These quarterly updates address a range of cybersecurity-related topics, such
+Added: as recent developments related to the threat landscape, security controls, vulnerability assessments, third-party reviews, technological trends, and information security considerations arising with respect to our peers and third parties.
Our cybersecurity programs and procedures are designed to identify and address threats that are subject to ongoing compliance assessments, certifications, and testing.
2 unchanged sentences
As applicable, in certain circumstances, we also collaborate with industry partners in the security community, our peers and law enforcement agencies, to support our cybersecurity threat intelligence capabilities.
−Removed: This information is collected, categorized,
−Removed: and assessed to identify, prioritize, and manage significant cybersecurity risks.
+Added: This information is collected, categorized, and assessed to identify, prioritize, and manage significant cybersecurity risks.
As a result, our process is continually evaluated and evolves as the threat landscape changes.
7 unchanged sentences
In addition, we have a cybersecurity disclosure committee (“Cybersecurity Disclosure Committee”) which receives updates on an as needed basis from our security organization regarding cybersecurity incidents.
−Removed: The Cybersecurity Disclosure Committee includes our VP of Security and Controls and senior representatives from finance, controllership, internal audit, investor relations, and legal teams.
+Added: The Cybersecurity Disclosure Committee includes our CIO and senior representatives from finance, controllership, internal audit, investor relations, and legal teams.
In the event of a cybersecurity incident, the Cybersecurity Disclosure Committee meets to assess the incident for materiality and required disclosure.
−Removed: While we have experienced cybersecurity incidents in the past, as of the date hereof, none have materially affected us or our business strategy, financial condition, results of operations, and/or cash flows.
+Added: While we have experienced a cybersecurity incident in the past, as of the date hereof, none have materially affected us or our business strategy, financial condition, results of operations, and/or cash flows.
We continue to invest in cybersecurity and resiliency of our networks to enhance our internal controls and processes, which are designed to help protect our systems and infrastructure, and the information which they contain.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.