16 unchanged sentences
We conduct monthly Cyber Risk Committee meetings with the participation of these teams to review risks in each of those functions and any cross-functional risks.
−Removed: As part of the above processes, we at least annually engage with assessors, consultants, and other third-parties, including by having an independent Qualified Security Assessor review our cybersecurity program quarterly to help identify areas for continued focus and enhancements regarding Payment Card Industry compliance.
+Added: The Cyber Risk Committee also reviews the industry landscape at these meetings to help ensure we are aware of global and industry cyber activities.
+Added: As part of the above processes, we at least annually engage with assessors, consultants, and other third parties to measure and assess our maturity level against standard frameworks.
+Added: Also, an independent Qualified Security Assessor review regarding Payment Card Industry compliance is performed on a quarterly basis to help ensure we maintain compliance with the PCI standards.
These third parties conduct penetration tests and scanning exercises to assess the performance of our cybersecurity controls, systems and processes and overall maturity by NIST categorization.
15 unchanged sentences
These sessions typically cover topics such as data security posture, results from third-party assessments, progress towards risk-mitigation-related goals, our incident response plan, and material short-, medium- and long-term risks from cybersecurity threats, incidents and developments, as well as the steps management has taken to respond to such risks.
+Added: In addition, these sessions include a review of the broader threat landscape and how our business may be affected.
Cybersecurity threats are also considered during meetings of our board of directors through discussions of enterprise risk management, operational budgeting, business continuity planning, mergers and acquisitions, brand management and other relevant matters.
11 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.