2 unchanged sentences
We have a cybersecurity program to assess and manage risks to the confidentiality, integrity, and availability of our data, networks and technology assets across WBD.
−Removed: Our Chief Information Security Officer (“CISO”) is responsible for cybersecurity risk oversight and oversees a global organization whose responsibilities include proactively managing and monitoring information and content security, cybersecurity risk, and processes to enable secure and resilient access to, and use of, WBD products and services.
−Removed: Since the closing of the Merger in 2022, we have continued to strengthen and enhance our cybersecurity program and integrate it into our overall risk management processes.
+Added: Our board of directors oversees risk management at WBD and has delegated functional oversight of cybersecurity and information technology risks to the Audit Committee.
+Added: Our Chief Information Security Officer (“CISO”) is responsible for the management of such risks and oversees a global organization whose responsibilities include proactively managing and monitoring information and content security, cybersecurity risk, and processes to enable secure and resilient access to, and use of, WBD products and services.
+Added: Our cybersecurity risk management processes are aligned and integrated into our overall enterprise risk management approach.
Risk Management and Strategy
18 unchanged sentences
Our board of directors has delegated responsibility for cybersecurity and information technology risks to our Audit Committee and is regularly informed about such risks through committee reports and other presentations.
−Removed: Our Audit Committee regularly reviews and discusses our cybersecurity risks and is updated by our CISO on how we identify, assess and mitigate those risks.
+Added: Our Audit Committee regularly reviews and discusses our cybersecurity risks and is updated quarterly by our CISO on how we identify, assess and mitigate those risks.
Our Audit Committee receives quarterly updates from our CISO on our cybersecurity risk posture, the status of projects to strengthen and enhance our cybersecurity program, the evolving threat landscape, and cybersecurity incident reports and learnings.
1 unchanged sentence
In addition to the quarterly incident reports, cybersecurity incidents meeting pre-determined criteria are reported to the Audit Committee outside of regularly scheduled quarterly updates and to WBD executive management as needed.
−Removed: See Item 1A, “Risk Factors” for details on the risks from cybersecurity threats that we face.
Our CISO has over 30 years of expertise in global digital and information security, cybersecurity risk management, data privacy and compliance across diverse industries including media and entertainment, biotechnology, pharmaceuticals, financial services, and government defense sectors and holds multiple industry-recognized certifications including, among others, a Certificate of Cybersecurity Oversight from the National Association of Corporate Directors and a Certified Information Systems Security Professional certification.
+Added: We periodically experience cybersecurity incidents, but, as of December 31, 2024, we are not aware of any such incidents that have materially impacted or are reasonably likely to materially impact our business, financial condition or results of operations.
+Added: However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or provide assurances that we have not experienced undetected cybersecurity incidents or will not discover additional information about previously detected events.
+Added: See Item 1A, “Risk Factors” for details on the risks from cybersecurity threats that we face.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.