14 unchanged sentences
For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part 1.
−Removed: Risk Factors in this Annual Report on Form 10-K, Cyber security breaches or other systems and information technology interruptions could result in liability, harm our reputation and impact our ability to operate .
+Added: Risk Factors in this Annual Report on Form 10-K, Cyber security breaches or other systems and information technology interruptions could result in liability, harm our reputation, impact our ability to operate, and other material adverse consequences .
The Company engages third-party cybersecurity consultants and auditors who help the cybersecurity team in identifying, assessing, and managing material risks from cybersecurity threats, including by evaluating and enhancing the Company’s cybersecurity posture.
The Company also engages third-party service providers to perform a variety of functions throughout its business.
−Removed: The Company performs due diligence before engaging with certain third-party service providers designed to evaluate the service providers’ cybersecurity practices, including their security policies, incident response capabilities, and data protection measures (as evidenced by third party certifications including ISO 27001 and SOC II reports);
+Added: The Company performs due diligence before engaging with certain third-party service providers designed to evaluate the service providers’ cybersecurity practices, including their security policies, incident response capabilities, and data protection measures;
including specific cybersecurity requirements in contracts with certain third-party service providers, such as regarding security standards, data protection, and incident reporting as applicable;
and monitoring and auditing certain third-party service providers’ cybersecurity practices and compliance with contractual obligations.
−Removed: Depending on the nature of the services provided, the sensitivity of the information systems and data at issue, and the identity of the provider, the Company’s vendor management process may involve different levels of assessment designed to help
−Removed: identify cybersecurity risks associated with a provider and impose contractual obligations related to cybersecurity on the provider.
+Added: Depending on the nature of the services provided, the sensitivity of the information systems and data at issue, and the identity of the provider, the Company’s vendor management process may involve different
+Added: levels of assessment designed to help identify cybersecurity risks associated with a provider and impose contractual obligations related to cybersecurity on the provider.
The Board addresses the Company’s cybersecurity risk management as part of its general oversight function.
2 unchanged sentences
The Company’s cybersecurity team is comprised of individuals with expertise in cybersecurity, information technology, risk management, and Company operations.
−Removed: Our cybersecurity team has decades-long experience in cybersecurity and holds industry-standard certifications including Certified Information Systems Security Professional (“CISSP”), Certified Cloud Security Professional (“CCSP”), among others.
+Added: Our cybersecurity team has decades-long experience in cybersecurity and holds industry-standard certifications including Certified Information Systems Security Professional (“CISSP”), and Certified Cloud Security Professional (“CCSP”), among others.
Management is responsible for hiring appropriate personnel, helping to integrate cybersecurity risk considerations into the Company’s overall risk management strategy, and communicating key priorities to relevant personnel.
7 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.