14 unchanged sentences
The Company deploys technical safeguards that are designed to protect the Company’s information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality and access controls, which are evaluated and improved through vulnerability assessments and cybersecurity threat intelligence .
−Removed: • Incident Response and Recovery Planning:
−Removed: The Company has established and maintains comprehensive incident response and recovery plans that fully address the Company’s response to a cybersecurity incident, and such plans are tested and evaluated on a regular basis.
+Added: • Incident Response:
+Added: The Company has established and maintains a comprehensive incident response plan that fully address the Company’s response to a cybersecurity incident, and this plan is tested and evaluated on a regular basis.
• Third-Party Risk Management :
2 unchanged sentences
• Education and Awareness:
−Removed: The Company provides regular, mandatory training for personnel regarding cybersecurity threats as a means to equip the Company’s personnel with effective tools to address cybersecurity threats, and to communicate the Company’s evolving information security policies, standards, processes and practices.
+Added: The Company provides regular, mandatory training for the Company's personnel regarding cybersecurity threats as a means to equip them with effective tools to address cybersecurity threats, and to communicate the Company’s evolving information security policies, standards, processes and practices.
The Company engages in the periodic assessment and testing of the Company’s policies, standards, processes and practices that are designed to address cybersecurity threats and incidents.
9 unchanged sentences
Our CISO's extensive experience includes a period of 12 years during which he was employed by the Government of Israel, where he managed classified information systems and teams, a role that demands the highest levels of diligence and expertise in information security.
−Removed: Through third party service providers and attendance at seminars, Vice President of IT and Digital and CISO are regularly informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques.
+Added: Through third-party service providers and attendance at seminars, the Vice President of IT and Digital and CISO are regularly informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques.
This ongoing knowledge acquisition enhances our processes to identify, prevent, mitigate and remediate of cybersecurity threats and cybersecurity incidents.
4 unchanged sentences
Their involvement at this level ensures that cybersecurity is integrated into every aspect of our operations, aligning with our broader strategic objectives.
−Removed: To date, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and are not reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition.
+Added: To date, cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected and, to the best of our knowledge, are not reasonably likely to materially affect the Company, including its business strategy, results of operations or financial condition.
Corporate Governance and Oversight
4 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.