3 unchanged sentences
Cybersecurity is an integral part of the Board of Trustees’, Audit Committee’s and Corporate Governance and Nominating Committee’s risk analysis and discussions with management.
−Removed: In February 2023, the Board of Trustees assigned cybersecurity oversight responsibility to the Corporate Governance and Nominating Committee via an amendment to the Committee’s Charter.
+Added: The Board of Trustees has assigned cybersecurity oversight responsibility to the Corporate Governance and Nominating Committee as outlined in the Committee’s Charter, which is publicly available on the Company’s website.
We also have a Cyber Steering Committee which works in conjunction with the Computer Incident Response Team (“CIRT”) to develop strategies to mitigate risks and to address any cyber issues that may arise.
7 unchanged sentences
Cyber threats identified are communicated to all members of the Company via email to promote awareness and assist with protecting us from potential risks or breaches.
−Removed: All employees are required to undergo quarterly security awareness trainings and we routinely conduct internal phishing and other exercises to gauge the effectiveness of the trainings and assess the need for continued education and/or areas where improvement may be needed.
+Added: All employees are required to undergo regular security awareness trainings and we routinely conduct internal phishing and other exercises to gauge the effectiveness of the trainings and assess the need for continued education and/or areas where improvement may be needed.
Risk Management and Strategy
−Removed: As we see increased reliance on information technology in the workplace and our business operations, and an ongoing shift to remote and hybrid work schedules, Urban Edge has employed several measures to mitigate cyber risks.
+Added: As we see increased reliance on information technology in the workplace and our business operations, and more companies offering hybrid work schedules, Urban Edge has employed several measures to mitigate cyber risks.
The Cyber Steering Committee is responsible for the risk management program which includes, but is not limited to, identifying cyber risks, the risk severity, risk response, and tracking risk remediation.
2 unchanged sentences
The third-party firm evaluates our preparedness based on several factors including cyber risk assessment, vulnerability management, disaster recovery, and penetration testing.
−Removed: They also simulate attacks on the Company as part of their audit procedures to gauge if our incident response is repeatable and effective and provide recommendations for areas of improvement.
−Removed: We are in process of implementing a thorough vendor selection criteria and employing ongoing monitoring of our third-party service providers to ensure compliance with cybersecurity standards.
+Added: They also simulate attacks on the Company as part of their audit procedures to gauge if our incident response is repeatable and effective and provide recommendations for areas of
+Added: Our vendor management program requires that critical and/or significant third-party service providers furnish information about their cyber policies to ensure compliance with cybersecurity standards.
We utilize a risk-based approach that aligns with the National Institute of Standards and Technology Cybersecurity Framework, and Microsoft best practices.
3 unchanged sentences
In addition, our Information Technology team conducts disaster recovery tests annually and reports results to the Cyber Steering Committee.
−Removed: A cybersecurity breach may
−Removed: result in disruption of our operations, damage to our reputation and cause us to lose revenue or incur significant expenses to remediate which could have a material adverse effect on our results of operations or consolidated financial position.
+Added: A cybersecurity breach may result in disruption of our operations, damage to our reputation and cause us to lose revenue or incur significant expenses to remediate which could have a material adverse effect on our results of operations or consolidated financial position.
As of the date of this report, we have not experienced any material cyber breaches and are periodically reviewing our policies and procedures to respond to, and mitigate the impact of, emerging trends and technologies affecting our industry.
1 unchanged sentence
These audits, which are conducted by our independent public accounting firm, assess key information security and cybersecurity risks in the environment that may affect the confidentiality, integrity and availability of systems and data.
−Removed: Any control deficiencies that represent cybersecurity risks, as well as any recommended changes to our processes, if appropriate, would be reported to senior management and the Board.
+Added: Any control deficiencies that represent cybersecurity risks, as well as any recommended changes to our processes, if appropriate, would be reported to senior management and the Board of Trustees.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.