9 unchanged sentences
Our SIRP was established to reduce or minimize the impact of cybersecurity incidents on our networks, IT systems, users or business processes.
−Removed: The execution of our SIRP is led by the Chief Information Officer (“CIO”) in conjunction with our Security Incident Response Team, comprised of network, system administrators and cybersecurity experts, who, in the event of incident, together perform a damage assessment, deliver impact notifications and implement containment procedures depending upon the incident.
+Added: The execution of our SIRP is led by the Head of Corporate IT in conjunction with our Security Incident Response Team, comprised of network, system administrators and cybersecurity experts, who, in the event of incident, together perform a damage assessment, deliver impact notifications and implement containment procedures depending upon the incident.
In addition, we also engage third parties on an as needed basis to assess our cybersecurity practices and procedures.
14 unchanged sentences
The Audit Committee has appointed a member of the Audit Committee to receive certified cybersecurity training so he can provide specialized guidance to the Board and Company.
−Removed: Periodically throughout the year, the CIO briefs the Audit Committee and Board on cybersecurity activities and long-term cybersecurity strategies, as well as general cybersecurity trends that could have a material impact on the Company.
+Added: Periodically throughout the year, the Head of Corporate IT briefs the Audit Committee and Board on cybersecurity activities and long-term cybersecurity strategies, as well as general cybersecurity trends that could have a material impact on the Company.
At any time, the Company Board members may raise concerns regarding the Company’s cybersecurity posture and recommend future changes to controls or procedures.
Our Audit Committee is also responsible for the oversight of risks from cybersecurity threats.
−Removed: Our CIO, Chief Financial Officer, and Security Incident Response Team provide regular updates to the Audit Committee of the Company Board on cybersecurity risks.
+Added: Our Head of Corporate IT, Chief Financial Officer, and Security Incident Response Team provide regular updates to the Audit Committee of the Company Board on cybersecurity risks.
Through these updates, the Audit Committee receives information on the status of key cybersecurity activities such as email phishing, event logging and data encryption, among others.
Information regarding relevant cybersecurity training is provided as well.
−Removed: Our CIO leads our management team in assessing and managing our response to cybersecurity threats and incidents.
−Removed: Our CIO has a Bachelor of Technology degree in Computer Science with over 30 years of experience in IT, with over five years managing IT Infrastructure and Security.
+Added: Our Head of Corporate IT leads our management team in assessing and managing our response to cybersecurity threats and incidents.
+Added: The Head of Corporate IT has a Bachelor of Science degree in Electrical Engineering with over 30 years of experience in IT and 9 years managing IT Infrastructure and Security at Utz.
The primary responsibility of the management team with respect to cybersecurity risk is managing our overall cybersecurity risk management program and supervising both our internal cybersecurity personnel and our retained external cybersecurity consultants, and working with all divisional, manufacturing, and functional teams on cybersecurity issues.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.