UNRESOLVED STAFF COMMENTS
+Added: Table o f Contents
CYBERSECURITY
−Removed: Our cybersecurity program is managed by a dedicated Global Chief Information Officer ("CIO") whose team, including the head of Information Technology Security, is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture and processes.
+Added: Our cybersecurity program is managed by a dedicated Chief Information Officer ("CIO") whose team, including the head of Information Technology Security, is responsible for leading enterprise-wide cybersecurity strategy, policy, standards, architecture and processes.
Our CIO has over 35 years of relevant industry experience, including over 30 years at our Company.
4 unchanged sentences
The ERM Program is a proactive and ongoing process led by our legal and risk professionals and senior management, to identify, assess and manage risks and to build out and track mitigation and reduction efforts.
−Removed: The Board has tasked the Audit Committee with overseeing, reviewing and discussing with management, the internal audit team and the independent auditors, our ERM Program, policies and procedures with respect to, among other things, the assessment and management of risks related to our cybersecurity and information security and the steps management has taken to monitor and control such risks.
+Added: The Board has tasked the Audit Committee with overseeing, reviewing and discussing with management, the internal audit team and the independent auditors, our ERM Program, policies and procedures with respect to, among other things, the assessment and management of risks related to our cybersecurity and information security and the steps management has taken to monitor and mitigate such risks.
The Audit Committee and its Technology Subcommittee are also responsible for overseeing risks related to our cybersecurity, technology and information security programs and reviewing emerging cybersecurity, technology and information security developments and threats and our strategy to mitigate such risks.
15 unchanged sentences
managing ethical, legal, cyber, data privacy and other technology risks associated with the use of AI and Generative AI technologies.
−Removed: Table of Content s
In addition, we operate a third-party cyber risk management capability which monitors the exposure of significant IT suppliers, significant software as a service suppliers and major vendors with access to our IT systems.
8 unchanged sentences
Cybersecurity incidents impacting our information systems and violations of data privacy laws and regulations could disrupt our business operations and adversely impact our reputation and results of operations.
−Removed: Table of Content s
+Added: Table o f Contents
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.