5 unchanged sentences
These risks include, among other things, operational risks,
−Removed: intellectual property theft;
−Removed: harm to employees or customers;
−Removed: violation of privacy or security laws and other litigation and legal risk;
−Removed: and reputational risks.
+Added: intellectual property theft, fraud, extortion, harm to employees or customers, violation of privacy or security laws and other litigation and legal risk and reputational risks.
We have implemented several cybersecurity processes, technologies and controls to aid in our efforts to assess, identify and manage such material risks.
3 unchanged sentences
As part of this process, and our processes to provide for the availability of critical data and systems, maintain regulatory compliance, identify and manage our risks from cybersecurity threats and to protect against, detect and respond to cybersecurity incidents, as such term is defined in Item 106(a) of Regulation S-K, we undertake the below listed activities, among others:
−Removed: • comparing our processes to benchmark standards, such as those set by the National Institute of Standards and Technology (NIST);
+Added: • compare our processes to benchmark standards, such as those set by the National Institute of Standards and Technology (NIST);
• closely monitor emerging data protection laws and implement changes to our processes designed to comply;
4 unchanged sentences
• conduct regular network and endpoint monitoring, vulnerability assessments, and penetration testing to improve our information systems, as such term is defined in Item 106(a) of Regulation S-K;
−Removed: • leverage the NIST incident handling framework to help us identify, protect, detect, respond, and recover when there is an actual or potential cybersecurity incident;
+Added: • leverage the NIST incident handling framework to help us govern, identify, protect, detect, respond and recover when there is an actual or potential cybersecurity incident;
• carry information security risk insurance that provides protection against the potential losses arising from a cybersecurity incident.
18 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.