6 unchanged sentences
designed to help us assess, identify, and manage these risks.
−Removed: While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, there
−Removed: can be no guarantee that we will not experience such an incident in the future.
+Added: While we have not, as of the date of this Form 10-K, experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations, there can be no guarantee that we will not experience such an incident in the future.
Such incidents, whether or not successful, could result in us incurring significant costs related to, for example, rebuilding our internal systems, writing down
1 unchanged sentence
or taking other remedial steps with respect to third parties, as well as incurring significant reputational harm.
−Removed: In addition, these threats are constantly evolving, thereby increasing the difficulty of successfully defending against them or
−Removed: implementing adequate preventative measures.
−Removed: Based on media reports and other surveys, we believe there is a general increase in cyberattack volume, frequency, and sophistication.
+Added: In addition, these threats are constantly evolving,
+Added: thereby increasing the difficulty of successfully defending against them or implementing adequate preventative measures.
+Added: Based on media reports and other surveys, we believe there is a general increase in cyberattack volume, frequency, and
+Added: sophistication.
We have experienced the same in our own business.
−Removed: detect and investigate unauthorized attempts and attacks against our network and to prevent their occurrence and recurrence where practicable through changes or updates to our internal processes and tools;
−Removed: however, we remain potentially
−Removed: vulnerable to known or unknown threats.
+Added: We seek to detect and investigate unauthorized attempts and attacks against our network and to prevent their occurrence and recurrence where practicable through changes or
+Added: updates to our internal processes and tools;
+Added: however, we remain potentially vulnerable to known or unknown threats.
In some instances, we, our suppliers, and our customers can be unaware of a threat or incident or its magnitude and effects.
−Removed: Further, there is increasing regulation regarding responses to cybersecurity
−Removed: incidents, including reporting to regulators, which could subject us to additional liability and reputational harm.
−Removed: See "Risk Factors" for more information on our cybersecurity risks.
+Added: Further, there is increasing regulation regarding responses to cybersecurity incidents, including reporting to regulators, which could subject us to additional liability and reputational harm.
+Added: See "Risk Factors" for more information on our
+Added: cybersecurity risks.
We aim to incorporate industry best practices throughout our cybersecurity program.
−Removed: Identifying and assessing cybersecurity risk is integrated into
−Removed: our overall risk management program.
−Removed: Our cybersecurity strategy focuses on implementing effective and efficient controls, technologies, and other processes to assess, identify, and manage material cybersecurity risks.
−Removed: Our cybersecurity program
−Removed: is designed to be aligned with applicable industry standards and is tested annually by independent third-party consultants.
+Added: Identifying and assessing cybersecurity risk is integrated into our overall risk management program.
+Added: Our cybersecurity strategy focuses on implementing effective and efficient controls,
+Added: technologies, and other processes to assess, identify, and manage material cybersecurity risks.
+Added: Our cybersecurity program is designed to be aligned with applicable industry standards and is tested annually by independent third-party consultants.
We have processes in place to assess, identify, manage, and address material cybersecurity threats and incidents.
−Removed: include, among other things:
+Added: These include, among other things:
annual and ongoing security awareness training for employees;
1 unchanged sentence
and containment and incident response tools.
−Removed: We monitor issues that are internally discovered
−Removed: or externally reported that may affect us, and have processes to assess those issues for potential cybersecurity impact or risk.
+Added: We monitor issues that are internally discovered or externally reported that may affect us, and have processes to assess those issues for potential cybersecurity impact or risk.
Cybersecurity is an important part of our risk management processes and an area of focus for our Board and management.
−Removed: Our Audit Committee is
−Removed: responsible for the oversight of risks from cybersecurity threats.
−Removed: Members of the Audit Committee receive updates on at least an annual basis from senior management, including leaders from our Information Technology, Internal Audit, and Legal
−Removed: teams regarding matters of cybersecurity.
−Removed: This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key information
−Removed: security initiatives.
−Removed: Our Board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.
+Added: Our Audit Committee is responsible for the oversight of risks from cybersecurity threats.
+Added: Members of the Audit Committee receive updates on at least an annual basis from senior management, including leaders from our Information Technology, Internal Audit, and Legal teams regarding matters of cybersecurity.
+Added: This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents (if any) and status on key
+Added: information security initiatives.
+Added: Our Board members also engage in ad hoc conversations with management on cybersecurity-related news events and discuss any
+Added: updates to our cybersecurity risk management and strategy programs.
Our cybersecurity risk management and strategy processes are overseen by leaders from our Information Technology, Internal Audit, and Legal teams.
−Removed: Such individuals have an average of over 20 years of prior work experience in various roles involving information technology, security, auditing, legal, compliance, systems and programming.
+Added: Such individuals have an average of over 20 years of prior work experience in various roles involving information technology, security, auditing, legal, compliance, systems and
These individuals are informed about, and monitor the
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.