5 unchanged sentences
These policies and related standards require identification of all Information Technology (IT) and Operational Technology (OT) critical systems, assets and networks, and sufficient controls for IT and OT asset inventory, including responsibilities for assets, information owners, and asset disposition processes.
−Removed: From a security perspective, our Information Technology and Safety teams are responsible for protecting
−Removed: physical processes, safety, production, efficiency, and protection of employees.
−Removed: Our Information Security group is directed at protecting all aspects of data and how information is stored, transmitted, processed, and used in business processes.
+Added: From a security perspective, our Information Technology and Safety teams are responsible for protecting physical processes, safety, production, efficiency, and protection of employees.
+Added: Our Information Security team is directed at protecting all aspects of data and how information is stored, transmitted, processed and used in business processes.
Our Information Security team of the Information Technology department has the direct responsibility for developing, monitoring and enforcing information security standards and procedures;
4 unchanged sentences
The Senior Vice President – Chief Information Officer, or CIO , who reports to the Executive Vice President and Chief Operating Officer, oversees this group and is responsible for managing the program, in collaboration with our business and functions.
−Removed: Our CIO has been in that role at the Company since 2004 and has extensive experience with cybersecurity and information technology at the Company.
+Added: Our CIO has served in that role with us since 2004 and has extensive experience with cybersecurity and information technology at the Company.
Our vendor risk management process includes conducting risk assessments to identify and monitor cybersecurity risks associated with third-party service providers , including threat detection and security event notifications.
4 unchanged sentences
We have established a cyber incident response team to prepare for, mitigate and remediate cybersecurity incidents, which is integrated within our enterprise crisis management framework.
−Removed: Cybersecurity risks are integrated into our overall risk management process through the collaboration of the cybersecurity professionals and our risk management functions to assess threat levels on at the subsidiary and parent company level and identify steps and resources appropriate to manage such risks.
+Added: Cybersecurity risks are integrated into our overall risk management process through the collaboration of the cybersecurity professionals and our risk management functions to assess threat levels at the subsidiary and parent company level and identify steps and resources appropriate to manage such risks.
The Board of Directors oversees the management of risks from cybersecurity threats through regular reports received from the CIO, which include updates on our performance with preparing, preventing, detecting, responding to, mitigating and recovering from cybersecurity incidents.
2 unchanged sentences
Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats.
−Removed: Risk Factors, “We are increasingly dependent on technology in our operations and a failure of our technology could impact our ability to service our customers and adversely affect our financial results, damage our reputation, and expose us to litigation risk.”
+Added: Risk Factors, “We are increasingly dependent on technology, including through the use of Artificial Intelligence (AI), in our operations and a failure of our technology could impact our ability to service our customers and adversely affect our financial results, damage our reputation, and expose us to litigation risk.”
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.