3 unchanged sentences
As cybersecurity threats rapidly evolve in sophistication and become more prevalent, especially with the increasing use of artificial intelligence technology, we have implemented a cybersecurity risk management program as part of our oversight, evaluation and mitigation of enterprise-level risks.
−Removed: We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to maintain the security, confidentiality, integrity, and availability of our business systems and confidential information, including personal information and intellectual property.
−Removed: Our cybersecurity risk management program leverages a combination of processes, technologies and personnel with expertise in cybersecurity to comply with applicable regulations and detect and respond to cyber-attacks, data breaches, security incidents, and compromises of personal information, as well as to regularly and promptly inform management and our Board of Directors of any significant cybersecurity risks and developments.
−Removed: Our company currently does not have a Chief Information Security Officer ("CISO") due to our size;
−Removed: our Director of Operations (“DO”), with assistance from our third-party information technology (“IT”) support firm, leads the Company’s effort in establishing cybersecurity strategies and structures and helps identify, assess, and manage the Company’s
−Removed: cybersecurity threats and risk.
−Removed: Our DO regularly meets with our third-party IT support firm to discuss cybersecurity threats and risk.
−Removed: This team helps identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods and tools, for example, phishing and social engineering tests.
+Added: We recognize the importance of developing, implementing, and maintaining cybersecurity measures that are designed to maintain the security, confidentiality, integrity, and availability of our business systems and confidential information, including personal information and intellectual property.
+Added: Our cybersecurity risk management program leverages a combination of processes, technologies and personnel with expertise in cybersecurity in an effort to comply with applicable regulations and detect and respond to cyber-attacks, data breaches, security incidents, and compromises of personal information, as well as to inform management and our Board of Directors of any significant cybersecurity risks and developments.
+Added: Our Senior Director of Operations (“DO”) , with assistance from our third-party information technology (“IT”) support firm, leads the Company’s effort in establishing cybersecurity strategies and structures that help to identify, assess, and manage the Company’s cybersecurity threats and risk.
+Added: Our DO working knowledge of end-user best practices and regularly meets with our third-party IT support firm to discuss potential cybersecurity threats and risk.
+Added: This team helps identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods and
+Added: tools, for example, phishing and social engineering tests.
+Added: Based on these meetings, our DO identifies additional end-user education and company security needs, which are supported through our IT support firm or other third-party IT experts.
We have worked, and expect to continue to work, with third-party service providers, as appropriate, to assess, identify and manage cybersecurity risks.
8 unchanged sentences
Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances.
−Removed: Our DO, with the appropriate members of management, will work with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of which they are notified.
−Removed: In addition, the Company’s incident response plan includes reporting to the Audit Committee of the board of directors for certain cybersecurity incidents.
−Removed: Cybersecurity risks are overseen by the Board of Directors and the Audit Committee.
+Added: Our DO, with the appropriate members of management, will work with the Company’s incident response team to help us mitigate and remediate cybersecurity incidents of which they are notified.
+Added: In addition, the Company’s incident response plan includes reporting to the Audit Committee of the Board of Directors ("Audit Committee") for certain cybersecurity incidents.
+Added: Cybersecurity risks are overseen by the Audit Committee.
The Audit Committee is central to the Board of Directors’ oversight of cybersecurity risks and bears the primary responsibility for overseeing cybersecurity risk.
1 unchanged sentence
This involvement ensures that cybersecurity considerations are integrated into our broader strategic objectives.
−Removed: Our DO provides comprehensive updates to the Audit Committee quarterly and the full Board of Directors at least annually.
+Added: Our DO provides comprehensive updates to the Audit Committee and the full Board of Directors at least annually.
These briefings have included a range of topics, such as:
4 unchanged sentences
• Regulatory changes impacting cybersecurity requirements and strategy.
−Removed: The Board of Directors is aware of the critical nature of managing risks associated with cybersecurity threats and is actively engaged in our cybersecurity risk management strategy.
+Added: The Board of Directors is aware of the importance of managing risks associated with cybersecurity threats and is actively engaged in our cybersecurity risk management strategy.
As of the date of this report, there have been no cybersecurity threats that have materially affected or are reasonably likely to materially affect our business, operations, or financial condition.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.