16 unchanged sentences
Audit & Risk Committee Primary oversight responsibility for information security, cybersecurity, and data privacy, including internal controls designed to identify, assess, and manage risks related to these topics
−Removed: Management Our Chief Information and Product Officer, Chief Information Security Officer, Chief Legal & Compliance Officer, Chief Corporate Affairs Officer, and other senior members of our cybersecurity, risk, and compliance and ethics teams are responsible for identifying, assessing, and managing risks related to these topics, and reporting to the Audit & Risk Committee and/or the full Board of Directors
+Added: Management Our Chief Information and Product Officer, Chief Information Security Officer, and other senior members of our cybersecurity, risk, and compliance and ethics teams are responsible for identifying, assessing, and managing risks related to these topics, and reporting to the Audit & Risk Committee and/or the full Board of Directors
Our program and practices regarding information security, cybersecurity, and data privacy include the following:
10 unchanged sentences
He has developed significant knowledge and skills regarding enterprise technology systems, including cybersecurity.
−Removed: Our Chief Information Security Officer has a strong background in technology, information security, cybersecurity, risk management, audit, and compliance and held executive roles in information security prior to joining Target.
−Removed: He contributes to the broader cybersecurity community by serving in several board and advisory roles and promoting collaboration, best practice sharing, and talent development.
−Removed: Our Chief Legal & Compliance Officer and Chief Corporate Affairs Officer have extensive experience, and have developed critical knowledge and skills, in the areas of risk oversight and compliance, including as such areas relate to cybersecurity.
+Added: Our Chief Information Security Officer has a strong background in technology, information security, cybersecurity, threat intelligence, incident response, data protection, compliance, and risk management.
+Added: She champions a strong security culture both internally and externally and contributes to the broader cybersecurity community by serving in several advisory roles and promoting industry collaboration, best-practice sharing, and talent development.
TARGET CORPORATION
14 unchanged sentences
• Investment, training, and development of our cybersecurity and data privacy teams.
−Removed: We invest in building and developing cybersecurity talent and engineering expertise in-house rather than relying solely on third-party providers.
−Removed: We also offer in-house training and educational courses through our Cyber Plus Institute, which is a security training curriculum leveraging internal subject matter expertise along with curated resources.
−Removed: Our data privacy team has industry certifications, works to understand changing technologies that impact consumer privacy, and regularly participates in training and conferences.
+Added: We invest in building and developing cybersecurity talent and engineering expertise, using both in-house and external resources rather than relying solely on third-party providers.
+Added: Our training model combines internal subject matter expertise with curated external resources.
+Added: Our cybersecurity and data privacy team members hold industry certifications, stay current on emerging technologies, and regularly participate in training and conferences.
• Regular training and compliance activities for our team members.
−Removed: Our team members receive annual training on information security, cybersecurity, and data privacy topics to understand the behaviors and technical requirements necessary to protect company and guest information, and appropriately collect, use, and share personal information.
+Added: Our team members receive annual mandatory training on information security, cybersecurity, and data privacy topics to understand the behaviors and technical requirements necessary to protect company and guest information, and appropriately collect, use, and share personal information.
We also offer ongoing practice and education for team members to recognize and report suspicious activity.
9 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.