2 unchanged sentences
Risk Management and Strategy
−Removed: Our information security program covers a range of cybersecurity activities with a primary objective of maintaining the confidentiality, integrity, and availability of information for our business and customers.
+Added: Our information security program covers a wide range of cybersecurity activities, with the primary objective of maintaining the confidentiality, integrity, and availability of information for both our business and customers.
The program and our systems are designed to identify and mitigate information security risks and data privacy breaches.
−Removed: Our risk mitigation processes include a cybersecurity incident response plan that is exercised regularly with tabletop exercises, security awareness training with attack simulations to reinforce the training, cybersecurity risk assessment integrated with technology acquisition processes and utilization of third-party partnerships for threat intelligence, incident response and escalation, and attack surface monitoring.
−Removed: We measure our security performance against the International Organization for Standardization 27001 Framework and Enterprise Risk Management strategies.
−Removed: We implement policies and practices to mitigate risks to organization data and operational processes.
−Removed: Our Global Data Privacy Program continues to align with environmental, social, and corporate governance standards and considers both risks and benefits of privacy-driven spending.
−Removed: The program operating model is based on the General Data Protection Regulation, which is adjusted for specific local requirements.
−Removed: The operating model is scalable to manage strategic, operational, legal, compliance, and financial risks and benefits, and uses technology to automate portions of the program, such as data subject access requests and consent and preference management.
−Removed: Our membership on the Data Privacy Board, a group comprised of some of the world’s largest companies with a mission to help members engage in confidential, leader-level discussion, presents opportunities using unbiased benchmarking and support from peers in various industries.
+Added: Our risk mitigation processes include a cybersecurity incident response plan, which is regularly exercised through tabletop exercises, security awareness training with attack simulations to reinforce the training, cybersecurity risk assessments integrated with technology acquisition processes , and the utilization of third-party partnerships for threat intelligence, incident response and escalation, and attack surface monitoring.
+Added: We measure our security performance using the International Organization for Standardization 27001 Framework and Enterprise Risk Management strategies.
+Added: We implement policies and practices to mitigate risks to organizational data and operational processes.
+Added: Our Global Data Privacy Program continues to align with environmental, social, and corporate governance standards, taking into account both the risks and benefits of privacy-driven spending.
+Added: The program’s operating model is based on the General Data Protection Regulation, adjusted to meet specific local requirements.
+Added: This scalable model manages strategic, operational, legal, compliance, and financial risks and benefits, and utilizes technology to automate portions of the program, such as data subject access requests and consent and preference management.
+Added: Our membership in the Data Privacy Board, a group comprised of some of the world’s largest companies with the mission of engaging in confidential, leader-level discussions, offers opportunities for unbiased benchmarking and support from peers across various industries.
We continue to build privacy resilience across international operating environments.
−Removed: We work with third-party vendors to enhance our processes against the occurrences and impact of unauthorized access to our network, computers, programs, and data.
−Removed: Risk is inherent in risk management and strategy for cybersecurity.
−Removed: See “Risk Factors” in Part I, Item 1A in this report for further discussion.
+Added: We collaborate with third-party vendors to enhance our processes against unauthorized access to our network, computers, programs, and data.
+Added: Risk is inherent in risk management and cybersecurity strategy.
+Added: See “Our operations could be adversely affected if our information technology systems and networks are compromised or targeted by cyberattacks” under Risk Factors in Part I, Item 1A of this report, which we incorporate here by reference.
The Board of Directors has oversight responsibility for cyber risks affecting the Company.
−Removed: The Board has delegated risk oversight with respect to operational, compliance, and financial matters, including cybersecurity and information technology risk, to the Audit Committee.
−Removed: Our Director of Security has extensive experience implementing and managing cybersecurity policies including oversight of investments in tools, resources, and processes that allows for the continued maturity of our cybersecurity program.
−Removed: Team members who support our information security program have relevant educational and industry experience.
−Removed: Our CEO, Chief Financial Officer, and Audit Committee receive regular reports provided by our Director of Security on the Company’s risk and compliance with respect to cybersecurity matters including data privacy, incidents, and industry trends, along with prevention, detection, mitigation, and remediation of cyber incidents.
+Added: The Board has delegated risk oversight of operational, compliance, and financial matters, including cybersecurity and information technology risk, to the Audit Committee .
+Added: Our Director of Security has extensive experience implementing and managing cybersecurity policies, including overseeing investments in tools, resources, and processes that enables the continued maturity of our cybersecurity program.
+Added: Team members supporting our information security program possess relevant educational backgrounds and industry experience.
+Added: Our CEO, Chief Financial Officer, and Audit Committee receive regular reports from our Director of Security on the Company’s risk and compliance with cybersecurity matters, including data privacy, incidents, industry trends, and the prevention, detection, mitigation, and remediation of cyber incidents.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.