17 unchanged sentences
We continue to evaluate and enhance our systems, controls, and processes where possible, including in response to actual or perceived threats specific to us or experienced by other companies.
−Removed: Although risks from cybersecurity threats have to date not materially affected us, our business strategy, results of operations or financial condition, we have, from time to time, experienced threats to and breaches of our and our third-party vendors’ data and systems.
−Removed: For more information, please see Item 1A.
−Removed: Risk Factors the section titled “Risk Factors—Risks Relating to Information Technology, Intellectual Property, Data Security and Privacy— Compromises of our data security could cause us to incur unexpected expenses and may materially harm our reputation and results of operations .”
+Added: Although risks from cybersecurity threats have to date not materially affected us, our business strategy, results of operations or financial condition, we have, from time to time, experienced threats to and exploit attempts of our and our third-party vendors’ data and systems.
+Added: For more information, please see the section titled “Risk Factors—Risks Relating to Information Technology, Intellectual Property, Data Security and Privacy— Compromises of our data security could cause us to incur unexpected expenses and may materially harm our reputation and results of operations .”
Risk Management Oversight and Governance
The Board of Directors has oversight of the Company’s cybersecurity program and has delegated the quarterly assessments and management of cybersecurity risks to the Audit Committee.
−Removed: Our Vice President of Engineering, Product and Platform oversees our information security program and leads our information security team.
−Removed: Our Vice President of Engineering, Product and Platform works closely with our Head of Internal Audit, in furtherance of the management of risks to the Company.
−Removed: The Vice President of Engineering, Product and Platform has primary responsibility for assessing and managing our cybersecurity threat management program, informed by over twenty years of experience leading cross-functional organizations in the development and operation of large-scale systems, primarily focused on e-commerce.
−Removed: The Head of Internal Audit reports to the Chair of the Audit Committee and has twelve years of experience with internal audit oversight and risk management.
+Added: Our Chief Product and Technology Officer oversees our information security program and leads our information security team.
+Added: Our Chief Product and Technology Officer works closely with our Head of Internal Audit, in furtherance of the management of risks to the Company.
+Added: The Chief Product and Technology Officer has primary responsibility for assessing and managing our cybersecurity threat management program, informed by over fifteen years of experience leading cross-functional organizations in the development and operation of large-scale systems, primarily focused on e-commerce.
+Added: The Head of Internal Audit reports to the Chair of the Audit Committee and has thirteen years of experience with internal audit oversight and risk management.
The Head of Internal Audit and the Chief Operating Officer have overall responsibility for the Company-wide risk management program.
−Removed: Our Vice President of Engineering, Product and Platform reports quarterly to the Audit Committee of the Board of Directors on the information security program and related cyber risks.
+Added: Our Chief Product and Technology Officer reports quarterly to the Audit Committee of the Board of Directors on the information security program and related cyber risks.
The Head of Internal Audit and the Chief Operating Officer provide an annual update to the Board of Directors on the Company’s overall risk management strategy, which includes addressing cybersecurity risks.
We have also established a Cyber Incident Disclosure Committee, which is responsible for assessing the impact and materiality on the Company and its stakeholders of any significant cybersecurity incidents and any disclosure obligations arising from any such incidents, as applicable.
−Removed: The findings of any incidents by the Cyber Incident Disclosure Committee are reported to the Audit Committee by the Vice President of Engineering, Product and Platform.
+Added: The findings of any incidents by the Cyber Incident Disclosure Committee are reported to the Audit Committee by the Chief Product and Technology Officer.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.