1 unchanged sentence
CYBERSECURITY
−Removed: Our cybersecurity program is managed by a dedicated Global Chief Information Officer whose team, including the head of Information Technology Security, is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture and processes.
−Removed: Our Global Chief Information Officer has over 35 years of relevant industry experience, including over 29 years at our Company.
−Removed: Our Senior Director of Information Security functions as our Chief Information Security Officer and has over 20 years of relevant industry experience.
+Added: Our cybersecurity program is managed by a dedicated Global Chief Information Officer ("CIO") whose team, including the head of Information Technology Security, is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture and processes.
+Added: Our CIO has over 35 years of relevant industry experience, including over 30 years at our Company.
+Added: Our Vice President of Information Technology Security and Chief Information Security Officer ("CISO") has over 20 years of relevant industry experience.
Further, team members who support our cybersecurity program have relevant educational and industry experience through various roles involving information technology, security, auditing, compliance, systems and programming, as well as cybersecurity certifications such as a Certified Information Systems Security Professional or Certified Information Security Manager .
−Removed: Our Board, Audit Committee and senior management receive periodic briefings from the Global Chief Information Officer and the Senior Director of Information Security, concerning cybersecurity, information security and technology risks, and our related risk mitigation programs.
+Added: Our Board, Audit Committee and its Technology Subcommittee and senior management receive periodic briefings from the CIO and the CISO, concerning cybersecurity, information security and technology risks, and our related risk mitigation programs.
In general, the Board is responsible for overseeing our enterprise risk management program ("ERM Program").
1 unchanged sentence
The Board has tasked the Audit Committee with overseeing, reviewing and discussing with management, the internal audit team and the independent auditors, our ERM Program, policies and procedures with respect to, among other things, the assessment and management of risks related to our cybersecurity and information security and the steps management has taken to monitor and control such risks.
−Removed: The Audit Committee is also responsible for overseeing risks related to our cybersecurity, technology and information security programs and reviewing emerging cybersecurity, technology and information security developments and threats and our strategy to mitigate such risks.
−Removed: The Audit Committee provides another level of cybersecurity oversight through engagements at each Audit Committee meeting with senior management, including our Global Chief Information Officer and the Senior Director of Information Security.
+Added: The Audit Committee and its Technology Subcommittee are also responsible for overseeing risks related to our cybersecurity, technology and information security programs and reviewing emerging cybersecurity, technology and information security developments and threats and our strategy to mitigate such risks.
+Added: The Audit Committee and its Technology Subcommittee provides another level of cybersecurity oversight through engagements at each Technology Subcommittee meeting with senior management, including our CIO and CISO.
These reports include updates on our cybersecurity risks, threats, and incidents;
3 unchanged sentences
and periodic updates on our cybersecurity staffing and related matters.
−Removed: The Audit Committee regularly reports to the Board regarding these matters.
+Added: The Technology Subcommittee regularly reports to the Audit Committee regarding these matters.
+Added: Further, the Audit Committee regularly reports to the Board regarding these matters, including the matters discussed at the Technology Subcommittee.
We engage in the ERM Program process semi-annually, which addresses, among other matters, emerging cybersecurity threats and models our exposure to the threat landscape against the overall strategic objectives of our Company.
4 unchanged sentences
Regular reviews are conducted to assess our information security programs and practices, including incident management, service continuity, information security compliance programs and related achievements.
+Added: Additionally, we operate an Artificial Intelligence ("AI") governance program to ensure proper risk management and regulatory compliance where applicable with this expanding capability;
+Added: managing ethical, legal, cyber, data privacy and other technology risks associated with the use of AI and Generative AI technologies.
+Added: Table of Content s
In addition, we operate a third-party cyber risk management capability which monitors the exposure of significant IT suppliers, significant software as a service suppliers and major vendors with access to our IT systems.
8 unchanged sentences
Cybersecurity incidents impacting our information systems, and violations of data privacy laws and regulations could disrupt our business operations and adversely impact our reputation and results of operations.
+Added: Table of Content s
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.