13 unchanged sentences
We also maintain an incident response plan to guide our processes in the event of an incident.
−Removed: We also have a process to require corporate employees to undertake cybersecurity training and compliance programs annually.
+Added: We also have a process by which corporate employees undertake cybersecurity training and compliance program training annually.
We utilize third parties and consultants to assist in the identification and assessment of risks, including to support tabletop exercises and to conduct security testing.
7 unchanged sentences
Our Chief Product and Technology Officer works closely with our Head of Internal Audit, in furtherance of the management of risks to the Company.
−Removed: The Chief Product and Technology Officer has primary responsibility for assessing and managing our cybersecurity threat management program, informed by over fifteen years of experience leading cross-functional organizations in the development and operation of large-scale systems, primarily focused on e-commerce.
−Removed: The Head of Internal Audit reports to the Chair of the Audit Committee and has thirteen years of experience with internal audit oversight and risk management.
+Added: The Chief Product and Technology Officer has primary responsibility for assessing and managing our cybersecurity threat management program, informed by over sixteen years of experience leading cross-functional organizations in the development and operation of large-scale systems, primarily focused on e-commerce.
+Added: The Head of Internal Audit reports to the Chair of the Audit Committee and has fourteen years of experience with internal audit oversight and risk management.
The Head of Internal Audit and the Chief Operating Officer have overall responsibility for the Company-wide risk management program.
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.