30 unchanged sentences
Our management team is responsible for the day-to-day oversight and management of cybersecurity risks, supported by our dedicated professionals responsible for cybersecurity, fraud, and compliance.
−Removed: Our Division Vice President for Information Security (DVP, Information Security) reports to our Chief Information Officer (CIO) and has primary responsibility for the day-to-day management of cybersecurity risks by leading the Information Security department and operationalizing our Information Security Management System.
−Removed: The CIO and DVP, Information Security meet regularly with the Audit Committee to review the company’s management of information security risks, and the Audit Committee evaluates the adequacy of the Company’s IT security program, compliance and controls with our CIO.
−Removed: Additionally, our Enterprise Risk Management Committee, which is composed of certain of our senior management, legal and operations teammates, provides senior management with sponsorship and guidance to ensure that overall risk management objectives are achieved and regularly reports to the board of directors on matters within its purview.
−Removed: Our current DVP, Information Security has led the information security program at TaskUs for nine years, and has over a decade of prior experience in cybersecurity operations, risk assurance and internal audit.
−Removed: Additionally, he holds an MBA degree and multiple professional certifications including CISSP (certified information systems security professional), CISA (certified information systems auditor), CIA (certified internal auditor), CCSP (certified cloud security professional) and CRMA (certification in risk management assurance).
−Removed: The DVP, Information Security also leads our Information Security Council, which is composed of IT functional leads and is responsible for the quarterly review of cybersecurity risks and operations of the information security management system.
+Added: In 2026, we enhanced our cybersecurity governance structure with the addition of a Chief Information Security Officer (CISO) who reports directly to our Chief Executive Officer.
+Added: Our CISO has primary responsibility for the day-to-day management of cybersecurity risks, leads the Information Security department, and operationalizes our Information Security Management System.
+Added: Our CISO also leads our Information Security Council, which is composed of IT functional leads and is responsible for the periodic review of cybersecurity risks and operations of the information security management system.
+Added: The CIO and CISO meet regularly with the Audit Committee to review the company’s management of information security risks, and the Audit Committee evaluates the adequacy of the Company’s IT security program, compliance and controls with our CIO.
+Added: Additionally, our Enterprise Risk Management Committee, which is composed of certain of our senior management, legal and operations teammates, provides senior management with sponsorship and guidance to ensure that overall risk management objectives are achieved, and our Enterprise Risk Management Committee regularly reports to the Board of Directors on matters within its purview.
+Added: Our current CISO has 38 years of management experience which includes 24 years of IT service delivery and global Cyber Operations and has an established track record for managing multi-shore, global information security teams that align and certify to the industry best practices as prescribed by the NIST Cyber Security Framework, NIST 800-53, and the International Standard Organization (ISO).
+Added: We also have a Division Vice President of Information Security (DVP, Information Security) with substantial experience in cybersecurity operations, risk assurance and internal audit.
+Added: Additionally, he holds multiple professional certifications including CISSP (certified information systems security professional), CISA (certified information systems auditor), CIA (certified internal auditor), CCSP (certified cloud security professional) and CRMA (certification in risk management assurance).
We have also developed an incident response plan, designed to identify suspected or confirmed information security or cybersecurity events based on the expected risk an event presents, and expediently move such information through the appropriate personnel and channels.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.