8 unchanged sentences
• risk assessments designed to help identify cybersecurity risks to our critical systems, information, services, and our broader enterprise IT environment;
−Removed: • a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;
+Added: • a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) architecture, implementation and monitoring of our security controls and infrastructure, and (3) our response to cybersecurity incidents;
• the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security processes;
10 unchanged sentences
The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity, and the full Board also receives a periodic briefing from management on our cyber risk management program.
−Removed: Our Cybersecurity team, led by our Manager of Information Security, is responsible for assessing and managing our material risks from cybersecurity threats.
+Added: Our Cybersecurity team, led by our Vice President of Cyber Security, is responsible for assessing and managing our material risks from cybersecurity threats.
The team is led by individuals who, on a combined basis, have more than 30 years of IT and cybersecurity related experience across multiple industries.
−Removed: Our Manager of Information Security has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and any retained external cybersecurity consultants.
+Added: Our Vice President of Cyber Security has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and any retained external cybersecurity consultants.
Our Cybersecurity team is informed about and monitors the prevention, detection, mitigation, and remediation of cybersecurity risks and incidents through various means, which may include, among other things, briefings with internal security personnel, threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in our IT environment.
−Removed: We are headquartered and maintain our corporate administrative offices in Warren, Michigan.
+Added: Our headquarters, where we maintain our corporate administrative offices, are in Warren, Michigan.
We own our corporate administrative offices, as well as 24 terminal yards and other properties in the following locations:
25 unchanged sentences
and in Monterrey, Mexico;
−Removed: Saltillo, Mexico;
−Removed: and San Luis Potosí, Mexico.
+Added: San Luis Potosí, Mexico;
+Added: and Toluca, Mexico.
Generally, our facilities are utilized by our operating segments for various administrative, transportation-related or value-added services.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.