2 unchanged sentences
Risk Management and Strategy.
−Removed: We depend on information systems and related technologies for internal purposes, including secure data storage, processing, and transmission, as well as in our interactions with our business associates, such as customers and suppliers.
+Added: We depend on information systems and related technologies for internal purposes, including secure data storage, processing, and transmission, as well as in our interactions with our business associates, customers, and suppliers.
We also rely on third-party business associates, with whom we may share data and services, to defend their digital technologies and services against attack.
13 unchanged sentences
Risks from Cybersecurity Incidents
−Removed: While we have experienced and will likely continue to experience varying degrees of cyber incidents in the normal conduct of our business, including attacks resulting from phishing emails and ransomware infections, those incidents have not materially affected the Company’s business strategy, results of operations, or financial condition.
−Removed: There can be no assurance that the systems we have designed to prevent or limit the effects of cyber incidents or attacks will be sufficient to prevent or detect future material consequences arising from incidents or attacks, or to avoid a material adverse impact on our systems after such incidents or attacks do occur.
+Added: While we have experienced and will likely continue to experience varying degrees of cyber incidents in the normal conduct of our business, including attacks resulting from phishing emails and malware infections, those incidents have not materially affected the Company’s business strategy, results of operations, or financial condition.
+Added: There can be no assurance that the systems we have designed to prevent or limit the effects of cyber incidents or attacks will be sufficient to prevent or detect future material consequences arising from incidents or attacks, or to avoid a material adverse impact on our systems after
+Added: such incidents or attacks do occur.
However, the Company does not currently anticipate that risks from cybersecurity threats are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.
Risk Management Personnel
−Removed: Our Director of Cybersecurity and Networking has direct responsibility for assessing, monitoring and managing risks related to cybersecurity threats in conjunction with the Vice President of Information Technology.
+Added: Our Information Technology ("IT") Director of Cybersecurity and Networking has direct responsibility for assessing, monitoring and managing risks related to cybersecurity threats in conjunction with the Senior Vice President of IT and Chief Information Officer.
Third party experts and/or consultants are retained to help identify, assess and monitor cybersecurity incidents and related risks.
−Removed: Our Director of Cybersecurity and Networking has been in that position with the Company since 2019 and, including prior experience, has over 13 years’ experience in managing IT infrastructure, architecture and security.
−Removed: Our Vice President of Information Technology has been with the Company in his current position and similar roles since its inception in 2011.
−Removed: Prior to joining the Company, he had over 20 years’ experience in oversight of Information Technology systems including ERP systems, infrastructure, and networking.
+Added: Our IT Director of Cybersecurity and Networking has been in that position with the Company since 2019 and, including prior experience, has significant experience in managing IT infrastructure, architecture and security.
+Added: Our Senior Vice President of IT and Chief Information Officer joined the Company in 2025.
+Added: Over his extensive career, he has developed substantial expertise in enterprise resource planning, infrastructure, applications, IT architecture and cyber security, including experience in areas closely aligned with the Company’s operations.
Monitoring Cybersecurity Risks and Incidents
−Removed: Our Director of IT Cybersecurity and Networking meets regularly with members of our executive team to discuss and review risks related to cybersecurity.
+Added: Our IT Director of Cybersecurity and Networking meets regularly with members of our executive team to discuss and review risks related to cybersecurity.
The reviews may include evaluations of risks and incidents identified by third-party providers retained to review our cyber risk as well as cybersecurity threat scenario planning.
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.