12 unchanged sentences
For example, the Information Security Team works with other members of management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.
−Removed: Additionally, our senior management evaluates material risks from cybersecurity threats against our overall business objectives and reports to the Cybersecurity and Data Privacy Oversight Subcommittee (the Privacy and Security Subcommittee) of the Nominating and Corporate Governance Committee, as well as our Board of Directors, the latter of which evaluates our overall enterprise risk.
+Added: Additionally, our senior management evaluates material risks from cybersecurity threats against our overall business objectives and reports to the Cybersecurity and Data Privacy Oversight Committee, as well as our Board of Directors, the latter of which evaluates our overall enterprise risk.
We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including professional services firms, including legal counsel;
10 unchanged sentences
Our Board of Directors addresses our cybersecurity risk management as part of its general oversight function.
−Removed: The Privacy and Security Subcommittee is responsible for overseeing our cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.
+Added: The Cybersecurity and Data Privacy Oversight Committee is responsible for overseeing our cybersecurity risk management processes, including oversight of mitigation of risks from cybersecurity threats.
Our cybersecurity management processes are implemented and maintained by our Information Security Team, in consultation with members of our cybersecurity incident management team.
−Removed: Our cybersecurity incident management team is led by our Vice President, Cybersecurity and includes our Chief Human Resources Officer, Vice President, Privacy, senior personnel from our legal, finance, and relevant business departments (the Incident Management Team).
+Added: Our cybersecurity incident management team is led by our Vice President, Cybersecurity and includes our Chief Human Resources Officer, our Vice President, Privacy, senior personnel from our legal, finance, and relevant business departments (the Incident Management Team).
Our Vice President, Cybersecurity brings extensive experience in software development, IT, and cyber security, gained in over two decades in the telecommunications, financial services, defense, and healthcare sectors.
−Removed: Notably, he spent four years at a medical device company focused on insulin delivery, where he successfully established the product security program and played a pivotal role in obtaining clearance for its flagship product line.
As the leader of our Information Security Team, our Vice President, Cybersecurity, is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into our overall risk management strategy, communicating key priorities to relevant personnel, requesting and allocating budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.
1 unchanged sentence
The Incident Management Team works to help mitigate and remediate cybersecurity incidents of which they are notified.
−Removed: In addition, the cybersecurity incident response policy and security incident handling procedure include escalating certain cybersecurity incidents to our disclosure committee and, if appropriate, to the Privacy and Security Subcommittee.
−Removed: The Privacy and Security Subcommittee meets periodically, and receives regular reports from our Vice President, Cybersecurity and, as appropriate, other members of the Information Security Team concerning any significant cybersecurity threats and risk and the processes we have implemented to address them.
−Removed: The Privacy and Security Subcommittee also receives various reports, summaries or presentations related to cybersecurity threats, risk and mitigation, generally.
−Removed: The Privacy and Security Subcommittee provides regular reports to the Nominating and Corporate Governance Committee of significant matters related to the Privacy and Security Subcommittee’s responsibilities, and the Nominating and Corporate Governance Committee together with the VP, Cybersecurity in turn provide regular reports to our Board of Directors on such significant matters.
+Added: In addition, the cybersecurity incident response policy and security incident handling procedure include escalating certain cybersecurity incidents to our disclosure committee and, if appropriate, to the Cybersecurity and Data Privacy Oversight Committee.
+Added: The Cybersecurity and Data Privacy Oversight Committee meets periodically, and receives regular reports from our Vice President, Cybersecurity and, as appropriate, other members of the Information Security Team concerning any significant cybersecurity threats and risk and the processes we have implemented to address them.
+Added: The Cybersecurity and Data Privacy Oversight Committee also receives various reports, summaries or presentations related to cybersecurity threats, risk and mitigation, generally.
+Added: The Cybersecurity and Data Privacy Oversight Committee provides regular reports to the Board of Directors of significant matters related to the Cybersecurity and Data Privacy Oversight Committee’s responsibilities, which in turn provides regular reports to our Board of Directors on such significant matters.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.