4 unchanged sentences
As a technology forward financial institution offering products through multiple digital delivery channels, cybersecurity incidents could have a material effect on the Company, its results of operations and its reputation.
−Removed: To date, the Company has not experienced any cybersecurity incident which has had a material effect on the Company’s business strategy, results of operations or financial condition.
−Removed: See “Item 1A- Risk Factors – The Company cannot predict how changes in technology will impact its business”;
−Removed: as increased use of technology may expose us to service interruptions or breaches in security.
+Added: To date, the Company has not experienced any cybersecurity incident which has had a material effect on the Company’s business strategy, results of operations or financial condition, although increased use of technology will expose us to greater risk of breaches in security and or service disruptions.
Cybersecurity risk is initially overseen by the management Information Technology Steering Committee (the “ITSC”).
−Removed: The members of this committee include the Company’s Chief Technology Officer, Chief Compliance Officer (who is also the Information Security Officer), Chief Executive Officer, Chief Financial officer and other critical executive management members.
+Added: The members of this committee include the Company’s Chief Information Officer, Chief Compliance Officer (who is also the Information Security Officer), Chief Executive Officer, Chief Financial officer and other critical executive management members.
The ITSC also includes a non-voting member that is an outsourced cybersecurity expert.
−Removed: The ITSC includes multiple members, including the Chief Technology Officer and an outsourced consultant, who serves as the Company’s Virtual Information Security Officer.
−Removed: Over his 16-year career, the Company’s Chief Technology Officer has served in multiple Information Technology and Cybersecurity roles, such as Senior Engineer, responsible for implementing hardened infrastructure for both physical and cloud applications;
+Added: Over his 17-year career, the Company’s Chief Information Officer has served in multiple Information Technology and Cybersecurity roles, such as Senior Engineer, responsible for implementing hardened infrastructure for both physical and
+Added: cloud applications;
Solutions Architect, designing infrastructures for highly regulated industries including Financial Services, Local/State Government and Healthcare;
−Removed: Director of Service Delivery, overseeing engineering, solutions architecture and maintains the System and Organization Controls (SOC) program prior to joining Unity Bank.
+Added: Director of Service Delivery, overseeing engineering, solutions architecture and maintaining the System and Organization Controls (SOC) program prior to joining Unity Bank.
During his tenure at Unity Bank, he is a member of various Risk and Cybersecurity Committees of the New Jersey Bankers Association, is a member of FS-ISAC, The Independent Community Bankers of America and our primary banking vendors advisory and risk management committees.
The Company’s Chief Compliance Officer was appointed as the Company’s Information Security Officer in 2016.
−Removed: The Virtual Information Security Officer (vISO) has an over 18-year career in Information Technology, Cybersecurity and both Internal/External Audit experience.
+Added: The Virtual Information Security Officer (vISO), an outsourced consultant, has an over 19-year career in Information Technology, Cybersecurity and both Internal/External Audit experience.
He presently holds a position of Partner of Herbein, COA Advisor & Audit, where he’s held multiple positions within Information Technology and Cybersecurity.
−Removed: The Company’s Information Technology Manager has an over 25-year career in Information Technology, during which the prior 13-years have been in Information Technology, Security and Cybersecurity, working primarily in regulated industries.
−Removed: In order to ensure that cybersecurity risk management is integrated into the Company’s overall risk management plans, systems and processes, the ITSC and Chief Technology Officer provide reports and updates to the Board of Directors, or a Committee thereof on a quarterly basis.
+Added: The Company’s Information Technology Manager has an over 26-year career in Information Technology, the prior 13-years of which have been in Information Technology, Security and Cybersecurity, working primarily in regulated industries.
+Added: In order to ensure that cybersecurity risk management is integrated into the Company’s overall risk management plans, systems and processes, the ITSC and Chief Information Officer provide reports and updates to the Board of Directors , or a Committee thereof on a quarterly basis.
The Company’s cybersecurity risk mitigation program involves a combination of internal resources and the use of third parties.
7 unchanged sentences
The Company also maintains insurance which may provide coverage for expenses and certain losses incurred in connection with a cybersecurity incident.
+Added: Cybersecurity Incident Response Planning
+Added: The Company has established a comprehensive cybersecurity incident response plan to ensure the swift and effective handling of any potential security breaches.
+Added: This plan includes detailed procedures for identifying, assessing, and mitigating cybersecurity threats, as well as protocols for communication and coordination with relevant stakeholders.
+Added: Regular training and simulations are conducted to keep the Company’s response team prepared for various scenarios, ensuring minimal disruption to its operations and safeguarding the Company’s customers’ data.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.