6 unchanged sentences
Our processes have been integrated into our overall risk management system, consistent with our commitment to safeguarding our operations and data on a Company-wide basis.
−Removed: Our cybersecurity risk management efforts are overseen by our Audit Committee in collaboration with individual members of our management team, specifically our Chief Information Officer, Chief Legal Officer, and Vice President of Risk Management.
+Added: Our cybersecurity risk management efforts are overseen by our Audit Committee in collaboration with individual members of our management team, specifically our Information Technology Leadership Team, Chief Legal Officer, and Vice President of Risk Management.
Generally, our cybersecurity risk management efforts seek to address cybersecurity risks and incident response through a comprehensive, cross-functional approach that is focused on preserving the confidentiality, security and availability of the information we collect by identifying, preventing and mitigating cybersecurity threats and effectively responding to incidents when they occur.
3 unchanged sentences
As part of the Company’s overall approach to cybersecurity, the Company’s cybersecurity risk management processes are focused on the following key areas.
−Removed: As discussed in more detail under the “Governance” heading, the Audit Committee provides oversight of the Company’s cybersecurity risk management processes in collaboration with our Chief Information Officer, Chief Legal Officer, Vice President of Risk Management, information technology team and other internal and external experts.
+Added: As discussed in more detail under the “Governance” heading, the Audit Committee provides oversight of the Company’s cybersecurity risk management processes in collaboration with our Information Technology Leadership Team, Chief Legal Officer, Vice President of Risk Management and other internal and external experts.
Collaborative Approach :
14 unchanged sentences
We conduct periodic assessments of these threats, and we have developed action plans that are already implemented, or are currently underway to be implemented, based on the results of our periodic assessments.
−Removed: In accordance with our internal policies, our Chief Information Officer, Chief Legal Officer and Vice President of Risk Management, are tasked with certain oversight and management responsibilities related to the monitoring, prevention, mitigation and remediation of cybersecurity threats and incidents.
−Removed: These management members report to the Audit Committee, and the Audit Committee reports to the full Board of Directors, as appropriate.
+Added: In accordance with our internal policies, o ur Information Technology Leadership Team, Chief Legal Officer, and Vice President of Risk Management are tasked with certain oversight and management responsibilities related to the monitoring, prevention, mitigation and remediation of cybersecurity threats and incidents.
+Added: These management members report to the Audit
+Added: Committee, and the Audit Committee reports to the full Board of Directors , as appropriate.
These reports include updates on the Company’s cybersecurity risks and threats, the status of efforts to strengthen our information security systems, assessments of our cybersecurity risk management processes, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the emerging threat landscape, technological trends and information security considerations arising with respect to the Company’s peers and third parties.
4 unchanged sentences
Our cybersecurity risk management efforts are designed to protect the Company’s information systems from cybersecurity threats and to appropriately respond to any threats or incidents.
−Removed: Through ongoing communications, management and other applicable personnel monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and report such threats and incidents to the Audit Committee and the Board, as appropriate.
−Removed: The Company’s Chief Information Officer has served in various roles in information technology and information security for over 29 years and holds degrees in Business Information Systems and Accounting.
+Added: Through ongoing communications, management and other applicable personnel monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and report such threats and incidents to the Audit Committee and the Board of Directors, as appropriate.
+Added: Members of the Information Technology Leadership Team have experience managing risks arising from cybersecurity threats and hold security certifications including Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).
+Added: The Company’s Vice President of Infrastructure and Information Technology Operations has served in various information technology security, infrastructure, and application roles for over 27 years and is supported by a team of information technology and cyber security professionals with decades of relevant experience.
The Vice President of Risk Management has served in various roles in information technology and information security for over 18 years, holds an undergraduate degree in Accounting and a Master of Business Administration degree, and is a Certified Public Accountant.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.