12 unchanged sentences
We employ a range of tools and services, including regular network and endpoint monitoring, audits, vulnerability assessments, and penetration testing to inform our risk identification and assessment.
−Removed: As discussed in more detail under “Cybersecurity Governance” below, our Audit Committee provides oversight of our cybersecurity risk management and strategy processes, which are led by our Vice President of Information Services.
+Added: As discussed in more detail under “Cybersecurity Governance” below, our Nominating and Corporate Governance Committee provides oversight of our cybersecurity risk management and strategy processes, which are led by our Vice President of Information Services.
We also identify our cybersecurity threat risks by comparing our processes to standards set by NIST, as well as performing intrusion detection and prevention.
17 unchanged sentences
In general, our board of directors oversees risk management activities designed and implemented by our management, and considers specific risks, including, for example, risks associated with our strategic plan, business operations, and capital structure.
−Removed: Our board of directors executes its oversight responsibility for risk management both directly and through delegating oversight of certain of these risks to its committees, and our board of directors has authorized our Audit Committee to oversee risks from cybersecurity threats.
−Removed: Upon detection of a material cybersecurity threat, our Audit Committee receives an update from management of the cybersecurity threat, risk management and strategy processes, as well as the steps management has taken to respond to such risks.
−Removed: In such sessions, our Audit Committee generally receives materials that include cybersecurity materials discussing current material cybersecurity threat risks, and describing our ability to mitigate those risks, and discusses such matters with our Chief Executive Officer.
−Removed: Our Audit Committee and board of directors receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds.
+Added: Our board of directors executes its oversight responsibility for risk management both directly and through delegating oversight of certain of these risks to its committees, and our board of directors has authorized our Nominating and Corporate Governance Committee to oversee risks from cybersecurity threats.
+Added: Upon detection of a material cybersecurity threat, our Nominating and Corporate Governance Committee receives an update from management of the cybersecurity threat, risk management and strategy processes, as well as the steps management has taken to respond to such risks.
+Added: In such sessions, our Nominating and Corporate Governance Committee generally receives materials that include cybersecurity materials discussing current material cybersecurity threat risks, and describing our ability to mitigate those risks, and discusses such matters with our Chief Executive Officer.
+Added: Our Nominating and Corporate Governance Committee and board of directors receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds.
Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by our Vice President of Information Services, with support from our entire Information Services department.
1 unchanged sentence
These Information Services team members are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan.
−Removed: As discussed above, these Information Services team members report to our Chief Executive Officer, and ultimately to the Audit Committee of our board of directors about material cybersecurity threats.
+Added: As discussed above, these Information Services team members report to our Chief Executive Officer, and ultimately to the Nominating and Corporate Governance Committee of our board of directors about material cybersecurity threats.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.