17 unchanged sentences
These third parties provide security services, including regular reviews of our security environment to provide an independent, industry-recognized risk rating and internal audits of our technology and security controls.
−Removed: Further, we deploy technical safeguards that are we believe are designed to help protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, endpoint detection and response, logging, monitoring and alerting, anti-malware functionality, email security, network security monitoring and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.
+Added: Further, we deploy technical safeguards that we believe are designed to help protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, endpoint detection and response, logging, monitoring and alerting, anti-malware functionality, email security, network security monitoring and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence.
Our third-party risk management program includes processes for identifying and managing material cybersecurity risks arising from third-party providers.
12 unchanged sentences
26 TriCo Bancshares 2024 10-K
+Added: T a ble of Contents
years of experience in various technology and security leadership positions across multiple industries including banking, healthcare, automotive, mining, education, engineering, construction, and dairy product production.
Our board of directors has approved various management committees including the IT/Cybersecurity Committee, which provides oversight and governance of the technology program and the information security program, as well as oversight and governance of the Company’s data and its storage.
−Removed: This committee is chaired by the CIO and includes various employees within the enterprise information security department, including the CIO and CISO, and other key departmental managers from throughout the entire company, including information technology, risk, compliance, operations and human resources/training.
+Added: This committee is chaired by the CIO and includes various employees within the enterprise information security department, including the CISO, and other key departmental managers from throughout the entire company, including information technology, risk, compliance, operations and human resources/training.
This committee generally meets quarterly to provide oversight of the risk management strategy, standards, policies, practices, controls, and mitigation and prevention efforts employed to manage security, data risks and incidents.
6 unchanged sentences
The IT/Cybersecurity Committee meets at least quarterly (or more frequently as may be required), and receives updates from the CISO on topics with respect to the cybersecurity program.
−Removed: The IT/Cybersecurity Committee reviews and approves our information security and technology budgets and strategies annually.
+Added: The IT/Cybersecurity Committee reviews and approves our information security and technology strategies annually.
Additionally, the Risk Committee of our board of directors reviews our cyber security risk profile on a quarterly basis.
18 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.