1 unchanged sentence
Cybersecurity
−Removed: Company’s processes to assess, identify, and manage material cybersecurity risks
−Removed: We have developed an ISO/IEC 27001-certified Information Security Management System (“ISMS”) designed to enhance our corporate security measures, identify and mitigate information security risks, and protect and preserve the confidentiality, integrity, and continued availability of all information owned by the Company and that of its customers and suppliers in our control.
+Added: The Company’s processes to assess, identify, and manage material cybersecurity risks
+Added: We developed an ISO/IEC 27001-certified Information Security Management System (“ISMS”) designed to enhance our corporate security measures, identify and mitigate information security risks, and protect and preserve the confidentiality, integrity, and continued availability of all information owned by the Company and that of its customers and suppliers in our control.
Our ISO certification can be verified on the BSI Group website using certificate number IS 649202.
10 unchanged sentences
Our Information Security organization also leverages third-party advisors, as appropriate, for various tasks, such as conducting annual third-party penetration testing.
−Removed: In 2023, we conducted an enterprise risk assessment that included an assessment of cybersecurity risk in context with other enterprise-level risks.
+Added: We conduct an enterprise risk assessment that includes an assessment of cybersecurity risk in context with other enterprise-level risks.
Furthermore, our CISO and our General Counsel regularly discuss cybersecurity risk mitigation.
3 unchanged sentences
Management’s role and expertise in assessing and managing material cybersecurity risks
−Removed: Our Information Security team is charged with the responsibility for assessing and managing material cybersecurity risks.
−Removed: That team is led by our CISO.
−Removed: Certifications held by the Information Security team include CompTIA A+, Network+, Security+, Project+, & CyberSecurity Analyst+, eLearnSecurity Junior Penetration Tester, EC-Council Certified Ethical Hacker ("CEH"), Certified Encryption Specialist, Certified Security Analyst, & Computer Hacking Forensic Investigator ("CHFI"), CMMC-AB Registered Practitioner ("RP"), and ISC2 Certified Information Systems Security Professional ("CISSP").
+Added: Our Information Security team, led by our CISO, is responsible for assessing and managing material cybersecurity risks.
+Added: Certifications held by the Information Security team include CompTIA A+, Network+, Security+, CyberSecurity Analyst+ ("CYSA+"), Pentest+, Advanced Security Practitioner ("CASP"), EC-Council Certified Ethical Hacker ("CEH"), Certified Security Analyst ("ECSA"), Computer Hacking Forensic Investigator ("CHFI"), Associate Chief Information Security Officer ("ACCISO"), CMMC-AB Registered Practitioner ("RP"), ISC2 Certified Information Systems Security Professional ("CISSP"), Systems Security Certified Practitioner ("SSCP"), ISACA Certified Information Security Manager ("CISM"), PCAP – Certified Associate Python Programmer, & eLearnSecurity Junior Penetration Tester ("eJPT").
Our CISO’s background includes over 18 years of experience in IT and Information Security.
His formal education includes a Master’s degree in Cybersecurity and Information Assurance and a Bachelor’s degree in Computer Forensics.
−Removed: Certifications held by the CISO include CompTIA A+, Network+, & Security+, Microsoft Technology Associate ("MTA"), CMMC-AB RP, ISO 27001 Certified Lead Implementer Professional, EC-Council CEH & CHFI, ISACA Certified Data Privacy Solutions Engineer & Certified Information Security Manager, ISC2 CISSP, and Offensive Security Certified Professional.
+Added: Certifications held by the CISO include CompTIA A+, Network+, & Security+, Microsoft Technology Associate ("MTA"), CMMC-AB RP, ISO 27001 Certified Lead Implementer Professional, EC-Council CEH & CHFI, ISACA Certified Data Privacy Solutions Engineer ("CDPSE") & Certified Information Security Manager ("CISM"), ISC2 CISSP, and Offensive Security Certified Professional ("OSCP").
Our CISO reports to our Chief Information Technology Officer ("CITO"), who in turn reports to our Chief Executive Officer ("CEO").
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.