4 unchanged sentences
Our cybersecurity strategy prioritizes detection, analysis and response to known, anticipated or unexpected threats, effective management of security risks, and resiliency against incidents.
−Removed: Our cybersecurity risk management processes include accessing security controls, monitoring systems, tools and related services from third-party providers, and management oversight to assess, identify and manage material risks from cybersecurity threats.
−Removed: We engage a third-party information security officer who maintains, monitors, and ensures the security of our digital assets.
+Added: Our cybersecurity risk management processes include assessing and monitoring security controls, monitoring systems, tools and related services provided by third-party providers, and management oversight to assess, identify and manage material risks from cybersecurity threats.
+Added: In 2025, we established a dedicated internal leadership role by hiring a Managing Director of Information Technology to oversee the security and maintenance of our digital assets and infrastructure.
+Added: The Managing Director of Information Technology is responsible for coordinating cybersecurity risk management activities across the Company, including oversight of third-party service providers engaged to support cybersecurity functions.
We implement risk-based controls to protect our information, the information of our customers, suppliers, and other third parties, our information systems, our business operations, and our products.
We maintain security programs that include physical and technical safeguards.
−Removed: We monitor cybersecurity vulnerabilities and potential attacks, and we evaluate the potential operational and financial effects of any threat and of cybersecurity countermeasures made to defend against such threats.
+Added: We monitor cybersecurity vulnerabilities and potential attacks, and we evaluate the potential operational and financial effects
+Added: of any threat and of cybersecurity countermeasures made to defend against such threats, including consideration of the potential materiality of such threats to our business, results of operations, or financial condition.
We continue to integrate our cyber practices into our enterprise risk management practices, which is overseen by our Board of Directors.
−Removed: In addition, we assess the risks from cybersecurity threats, periodically engage third-party tools to assist us in enhancing and monitoring our cybersecurity risks, primarily spam and suspicious email filters, and regularly back up company information.
+Added: In addition, we assess the risks from cybersecurity threats, periodically engage third-party tools to assist us in enhancing and monitoring our cybersecurity risks, including tools designed to detect and mitigate phishing and suspicious email activity, and regularly back up company information.
We have experienced cybersecurity incidents, primarily related to phishing emails, and may in the future experience, whether directly or indirectly, cybersecurity incidents.
1 unchanged sentence
See risks related to cybersecurity and business disruptions in “Risk Factors” in this Form 10-K.
−Removed: Our Board of Directors is responsible for risk oversight.
−Removed: Our chief executive officer and chief financial officer, with input from and potentially attendance by our third-party information security officer, provide presentations to the Board of Directors on cybersecurity risks or threats as necessary.
−Removed: In the event of a potentially material cybersecurity event, the Chairman of the Board is notified and briefed, and a meeting of the full Board of Directors would be held, as appropriate.
−Removed: Management and the Company’s third-party information security officer discuss information technology needs and activity and assess and manage material cybersecurity risks and the Company’s practices for the prevention, detection, mitigation, and remediation of cybersecurity incidents, as necessary and appropriate.
−Removed: Our third-party information security officer has 30 years of experience in the IT management field and has consulted with large and mid-size corporations on proper IT processes and security.
+Added: Our Board of Directors is responsible for risk oversight, including oversight of risks related to cybersecurity.
+Added: Our chief executive officer and chief financial officer, with input from and participation by, as appropriate, our Managing Director of Information Technology , provide presentations to the Board of Directors regarding cybersecurity risks, incidents, and risk management practices periodically and as circumstances warrant.
+Added: In the event of a potentially material cybersecurity event, the Chairman of the Board is notified and briefed, and a meeting of the full Board of Directors would be convened, as appropriate, to review the incident, management’s response, and any required disclosures.
+Added: Management, including the Managing Director of Information Technology discuss information technology needs and activity and assess and manage material cybersecurity risks and the Company’s practices for the prevention, detection, mitigation, and remediation of cybersecurity incidents, as necessary and appropriate.
+Added: The Managing Director of Information Technology reports to executive management and is responsible for day-to-day oversight of the Company’s cybersecurity risk management processes, including coordination with third-party service providers.
+Added: Our Managing Director of Information Technology has approximately 20 years of experience in information technology leadership roles, including serving as Director of IT at four previous companies.
Our CEO and CFO have managed information technology departments during their careers.
−Removed: Our CFO was trained as an auditor and an information technology auditor at the public accounting firm of Ernst & Young LLP and audited the internal controls, including IT controls, of public companies, information technology departments, and third-party information technology service providers for 12 years.
+Added: Our CFO was trained as an auditor and an information technology auditor at the public accounting firm of Ernst & Young LLP and audited internal controls, including IT controls, of public companies, information technology departments, and third-party information technology service providers for approximately 12 years.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.