30 unchanged sentences
Our Board of Directors has delegated risk management oversight responsibility for information security, which includes data privacy and cybersecurity, to the Governance and Nominating Committee.
−Removed: Certain of our board members, including certain members of our Governance and Nominating Committee, have backgrounds or experience in risk management and/or information technology.
−Removed: On at least an annual basis, the Governance and Nominating Committee receives updates from our CISO, Chief Information & Technology Officer (“CITO”) and other members of management on risks related to information systems, information security, data privacy and cybersecurity.
−Removed: The Board of Directors also receives regular reports from the Governance and Nominating Committee on these and other risk-related matters as necessary.
−Removed: Our CISO provides information to the Governance and Nominating Committee pursuant to risk-based escalation protocols for cybersecurity incidents that exceed designated thresholds.
+Added: In addition, beginning in fiscal 2025, the Company’s Board of Directors appointed a special committee of the Board of Directors (the “Technology Committee”) to oversee and advise on technology-related strategies, investments, risks and innovations to enable alignment with the Company’s strategy, operational priorities and cybersecurity protections.
+Added: Among other responsibilities, the Technology Committee oversees the Company’s cybersecurity framework, data privacy practices, and information security programs and scorecards.
+Added: Certain of our board members, including certain members of our Governance and Nominating Committee and the Technology Committee have backgrounds or experience in risk management and/or information technology.
+Added: On at least an annual basis, the Governance and Nominating Committee receives updates from our CISO, Chief Technology Officer (“CTO”) and other members of management on risks related to information systems, information security, data privacy and cybersecurity.
+Added: The Board of Directors also receives regular reports from the Governance and Nominating Committee and the Technology Committee on these and other risk-related matters as necessary.
+Added: Our CISO provides information to the Technology Committee pursuant to risk-based escalation protocols for cybersecurity incidents that exceed designated thresholds.
MANAGEMENT'S ROLE IN CYBERSECURITY RISK MANAGEMENT
9 unchanged sentences
Our CISO has been with the Company since 1997, has held numerous roles in information technology and has led the information security program since 2016.
−Removed: Our CITO, to whom the CISO reports, has been with the company since 2017 and has served as the Company’s CITO since 2023.
+Added: Our CTO, to whom the CISO reports, has been with the Company since 2013 and has served as the Company’s CTO since 2025.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.