14 unchanged sentences
and a program to accomplish cybersecurity event detection alerting.
−Removed: These programs are based on principles from the National Institute of Standards and Technology and certain regulatory standards that are designed to protect against cybersecurity incidents, including the North American Electric Reliability Corporation Critical Infrastructure Protection Standards and Nuclear Regulatory Commission cybersecurity standards, and are periodically assessed by third-party experts.
+Added: These programs are based on principles from the National Institute of Standards and Technology and certain regulatory standards that are designed to protect against cybersecurity incidents, including the North
+Added: American Electric Reliability Corporation Critical Infrastructure Protection Standards and Nuclear Regulatory Commission cybersecurity standards, and are periodically assessed by third-party experts.
In the last three fiscal years, TVA has not experienced any material cybersecurity incidents.
5 unchanged sentences
The Audit Committee meets at least quarterly.
−Removed: Reporting to the Audit Committee and the TVA Board is the risk counsel comprised of TVA’s top leaders and the Chief Risk Officer (“CRO”), which is responsible for the highest level of management oversight of risk at TVA.
−Removed: The risk committee’s primary purpose is to oversee TVA’s management of enterprise-wide risks with policy implications reported to the TVA Board or a designated TVA Board committee.
−Removed: The risk committee oversees a subordinate committee that provides comprehensive risk oversight of TVA’s security, artificial intelligence, privacy, and technology risks consistent with TVA’s mission, strategic imperatives, and approved financial and operational plans.
+Added: Reporting to the Audit Committee and the TVA Board is the risk council comprised of TVA’s top leaders and the Chief Risk Officer (“CRO”), which is responsible for the highest level of management oversight of risk at TVA.
+Added: The risk council’s primary purpose is to oversee TVA’s management of enterprise-wide risks with policy implications reported to the TVA Board or a designated TVA Board committee.
+Added: The risk council oversees a subordinate committee that provides comprehensive risk oversight of TVA’s security, artificial intelligence, privacy, and technology risks consistent with TVA’s mission, strategic imperatives, and approved financial and operational plans.
TVA’s governance, oversight, execution, and support activities include quarterly Enterprise Risk and Assurance updates to the Audit Committee , an annual alignment with TVA’s broader risk management framework and business planning initiatives, and tactical and intentional initiatives focused on reducing risk, increasing maturity, and helping ensure regulatory compliance and adherence.
10 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.