7 unchanged sentences
We have a cybersecurity awareness program which covers topics such as phishing, social networking safety, password security, and mobile device usage.
−Removed: We have an information security training program, including an annual program of general
−Removed: security awareness for all employees and developer training throughout the year.
+Added: We have an information security training program, including an annual program of general security awareness for all employees and developer training throughout the year.
We also conduct regular phishing simulations, with follow-up training as needed, for employees and contractors.
2 unchanged sentences
TSLDC includes vulnerability scanning, intrusion prevention, tracking of security metrics, and code analysis vulnerability tools.
−Removed: Over 100 of our products are certified to ISO/IEC 27001:2013, which addresses secure information, resilience to cyber-attacks, existence of a centrally managed framework, organization-wide protection, responses to evolving security threats, and protection of data.
+Added: Over 100 of our products are certified to ISO/IEC
+Added: 27001:2013, which addresses secure information, resilience to cyber-attacks, existence of a centrally managed framework, organization-wide protection, responses to evolving security threats, and protection of data.
Core information technology systems supporting our business operations are backed up and stored outside of our network infrastructure.
6 unchanged sentences
Each year, our team of cybersecurity specialists builds a strategic vision of shared outcomes, which provides the basis for how cybersecurity risks are factored into the Company’s risk management initiatives.
−Removed: Along with the rest of the Company, the cybersecurity team, led by the CISO, sets goals for cybersecurity risk management that are then periodically tracked and reported back to the cybersecurity team and to our CEO and Audit Committee.
+Added: Along with the rest of the Company, the cybersecurity team, led by the CISO, sets goals for cybersecurity risk management that are periodically tracked and reported back to the cybersecurity team and to our CEO and Audit Committee.
We utilize a set of third parties for technical and non-technical evaluation of our security posture, including regular assessment of our products for vulnerabilities.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.