12 unchanged sentences
• Vulnerability Management – continuous scanning of the technology environment to identify and remediate potential vulnerabilities.
−Removed: • Attack Surface Management – actively monitor and prevent external attack attempts.
+Added: • Attack Surface Management – actively monitor technology assets to reduce asset exposure or attack efficacy.
• Security Monitoring and Operations – collection and aggregation of security alerts that are reviewed, analyzed and managed by the security operations team.
13 unchanged sentences
Our CISO manages the Company’s cybersecurity compliance program, including prevention, mitigation, detection and remediation of cybersecurity incidents.
−Removed: Our CISO, who reports directly into the CIO, has over 30 years of experience in information technology and cybersecurity and holds multiple industry certifications.
+Added: Our CISO, who reports directly into the CIO, has over 30 years of experience in security studies and cybersecurity, and holds multiple industry certifications.
The Company has an Information Governance, Privacy & Security Committee responsible for management oversight of cybersecurity risk, which includes the CISO and key members of management and meets quarterly.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.