2 unchanged sentences
We have a cybersecurity program to assess and manage risks to the confidentiality, integrity, and availability of our data, networks and technology assets across WBD.
−Removed: Our board of directors oversees risk management at WBD and has delegated functional oversight of cybersecurity and information technology risks to the Audit Committee.
+Added: Our board of directors oversees risk management at WBD and has delegated functional oversight of cybersecurity and information technology risks to our board of directors’ audit committee (the “Audit Committee”).
Our Chief Information Security Officer (“CISO”) is responsible for the management of such risks and oversees a global organization whose responsibilities include proactively managing and monitoring information and content security, cybersecurity risk, and processes to enable secure and resilient access to, and use of, WBD products and services.
−Removed: Our cybersecurity risk management processes are aligned and integrated into our overall enterprise risk management approach.
Risk Management and Strategy
We have a cybersecurity risk management strategy for safeguarding our digital assets that includes both technical and non-technical cybersecurity controls.
−Removed: Our multi-layered technical defense involves a series of protective measures across various levels of our technology environment.
+Added: Our cybersecurity risk management processes are designed to evolve in response to changes in our business, technological environment, and the broader threat landscape and are aligned and integrated into our overall enterprise risk management approach.
+Added: Our multi-layered technical defense involves a series of protective measures across various levels of our technological environment.
This includes fortifying our network perimeter through intrusion detection and prevention systems, securing individual devices with antivirus solutions and endpoint detection, implementing network security measures, and ensuring the resilience of applications.
5 unchanged sentences
We have a Cybersecurity Incident Response Plan that establishes procedures, roles, responsibilities, and communication protocols for WBD executive management and technical staff in the event of a cybersecurity incident.
+Added: We periodically review and enhance our cybersecurity incident response processes and conduct exercises involving relevant stakeholders to assess preparedness and response effectiveness.
We test the efficacy of the Cybersecurity Incident Response Plan and assess our response capabilities by conducting annual tabletop exercises that simulate cybersecurity threat scenarios.
We have ongoing processes to identify and assess cybersecurity risks associated with current and prospective third-party service providers.
+Added: Our third-party cybersecurity risk management processes are risk-based and ongoing and are designed to assess cybersecurity considerations throughout the vendor relationship lifecycle.
These processes include a vendor cybersecurity compliance assessment at the time of onboarding, contract renewal and/or as needed in the event of a cybersecurity incident affecting such third-party vendor.
1 unchanged sentence
We have established cybersecurity information sharing and collaboration practices with both government agencies and industry partners, which we believe enhances our overall cybersecurity resilience.
−Removed: We have established a cybersecurity governance structure to engage appropriate stakeholders.
−Removed: Our CISO is informed about and monitors our prevention, detection, mitigation and remediation efforts related to cyber threats through regular communication and reporting from our information security team.
−Removed: Our Chief Financial Officer, our Chief Legal Officer, our Chief Audit and Risk Officer and our Chief Information Officer also have input and involvement in our cybersecurity program.
−Removed: Our board of directors has an active role, as a whole and at the committee level, in overseeing the Company’s overall risk management, including cybersecurity risks.
−Removed: Our board of directors has delegated responsibility for cybersecurity and information technology risks to our Audit Committee and is regularly informed about such risks through committee reports and other presentations.
−Removed: Our Audit Committee regularly reviews and discusses our cybersecurity risks and is updated quarterly by our CISO on how we identify, assess and mitigate those risks.
−Removed: Our Audit Committee receives quarterly updates from our CISO on our cybersecurity risk posture, the status of projects to strengthen and enhance our cybersecurity program, the evolving threat landscape, and cybersecurity incident reports and learnings.
−Removed: The Audit Committee also periodically devotes additional meeting time, as needed, to in-depth discussions on a particularly relevant cybersecurity topic or to education on developments in the realm of cybersecurity.
−Removed: In addition to the quarterly incident reports, cybersecurity incidents meeting pre-determined criteria are reported to the Audit Committee outside of regularly scheduled quarterly updates and to WBD executive management as needed.
−Removed: Our CISO has over 30 years of expertise in global digital and information security, cybersecurity risk management, data privacy and compliance across diverse industries including media and entertainment, biotechnology, pharmaceuticals, financial services, and government defense sectors and holds multiple industry-recognized certifications including, among others, a Certificate of Cybersecurity Oversight from the National Association of Corporate Directors and a Certified Information Systems Security Professional certification.
We periodically experience cybersecurity incidents, but, as of December 31, 2025, we are not aware of any such incidents that have materially impacted or are reasonably likely to materially impact our business, financial condition or results of operations.
1 unchanged sentence
See Item 1A, “Risk Factors” for details on the risks from cybersecurity threats that we face.
+Added: We have established a cybersecurity governance framework designed to provide effective oversight, clear accountability and appropriate escalation across WBD.
+Added: Our cybersecurity program is led by our CISO, who is responsible for the design, implementation and operation of controls to prevent, detect, mitigate and remediate cybersecurity threats.
+Added: The CISO assesses and monitors our cybersecurity posture through ongoing engagement with our content and information security team and provides regular reporting to WBD executive management and the Audit Committee in accordance with established governance and escalation protocols.
+Added: WBD executive management is engaged in the governance of our cybersecurity program through defined oversight, reporting and escalation mechanisms.
+Added: Our Chief Financial Officer, Chief Legal Officer, Chief Audit and Risk Officer and Chief Information Officer receive regular updates regarding cybersecurity risks, incidents and program initiatives and participate in governance, prioritization and escalation decisions as appropriate to their respective enterprise responsibilities.
+Added: Our board of directors oversees our overall enterprise risk management approach, including risks related to cybersecurity and information technology.
+Added: Our board of directors has delegated primary oversight responsibility for cybersecurity and information technology risks to the Audit Committee.
+Added: The Audit Committee receives regular reports from our CISO, at least quarterly, regarding our cybersecurity risk posture, significant developments in the threat landscape, the effectiveness of controls, and progress on initiatives to strengthen and enhance our cybersecurity program.
+Added: The Audit Committee also receives updates outside of the regular reporting cadence when warranted by significant events, emerging risks or regulatory developments and may devote additional meeting time to in-depth review of cybersecurity matters or education on relevant topics.
+Added: The Chair of the Audit Committee provides readouts to our board of directors on matters, including cybersecurity matters, reviewed at meetings of the Audit Committee.
+Added: We maintain a Cybersecurity Incident Response Plan that defines incident severity thresholds, escalation protocols and reporting requirements and facilitating coordination across multiple parts of the Company.
+Added: We also have processes in place designed to ensure that decisions regarding public disclosure and reporting of cybersecurity incidents can be made in a timely manner.
+Added: Cybersecurity incidents that meet established escalation criteria are reported to WBD executive management and as appropriate, to the Audit Committee, to support timely oversight and response.
+Added: Our cybersecurity governance framework also includes ongoing assessment and testing of controls and response capabilities, including tabletop exercises, penetration testing and third-party assessments, to help evaluate program effectiveness and inform continuous improvement.
+Added: Our CISO brings extensive experience leading global cybersecurity and information security programs across complex public- and private-sector organizations, with expertise in cybersecurity risk management, data protection and regulatory compliance, and holds industry-recognized cybersecurity certifications.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.