18 unchanged sentences
At least annually, we conduct a cybersecurity risk assessment that considers information from internal stakeholders, known information security vulnerabilities, and information from external sources (e.g., reported security incidents that have impacted other companies, industry trends, and evaluations of our environment by third parties and consultants).
−Removed: The results of the assessment are used to develop plans for, and prioritization of, initiatives to enhance our security controls, and to make recommendations to improve processes.
+Added: of the assessment are used to develop plans for, and prioritization of, initiatives to enhance our security controls, and to make recommendations to improve processes.
Technical Safeguards
3 unchanged sentences
We have established comprehensive incident response and recovery plans and continue to regularly test and evaluate the effectiveness of those plans.
−Removed: Our incident response and recovery plans address and guide our employees, management and the Audit Committee on our response to a cybersecurity incident.
+Added: These plans address the prevention, detection, mitigation, and remediation of incidents, and include appropriate timely incident escalations to be followed during an incident.
Third-Party Risk Management
25 unchanged sentences
Our current CISO has served in that position since 2018 and is a 28-year employee of Washington Trust.
−Removed: He has extensive experience and expertise in information technology risk management and information security policies and programs.
+Added: He has extensive experience and expertise in information technology risk management and
+Added: information security policies and programs.
He holds a Bachelor of Science in Computer Information Systems and several certifications, including Certified Information Systems Security Professional and Certified Information Security Auditor.
Our CTO has served in that position since 2021 and is a 13-year employee of Washington Trust.
−Removed: He has broad technical
−Removed: experience and expertise in information technology and holds a Bachelor of Science in Information Science and several certifications, including Cisco Certified Network Associate.
+Added: He has broad technical experience and expertise in information technology and holds a Bachelor of Science in Information Science and several certifications, including Cisco Certified Network Associate.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.