17 unchanged sentences
• Third-Party Risk Management:
−Removed: We maintain a risk-based approach to identifying and overseeing cybersecurity threats presented by third parties, including vendors, service providers, and other external users of our systems, as well as the systems of third parties that could adversely impact our business in the event of a cybersecurity incident affecting those third-party systems, including any outside auditors or consultants who advise on our cybersecurity systems.
+Added: We use a risk‑based approach to identify, assess, and oversee cybersecurity threats associated with third parties, including vendors, service providers, external system users, and other organizations whose systems could impact our business.
+Added: This oversight also includes outside auditors and consultants who may access or advise on our cybersecurity systems.
• Education and Awareness:
4 unchanged sentences
Our board of directors, in coordination with the audit committee of our board of directors, oversees our risk management program, including the management of cybersecurity threats.
−Removed: Our board of directors and our audit committee receive prompt and timely information regarding cybersecurity risks, as well as ongoing updates regarding any such risk, from senior management.
−Removed: Our Vice President of Information Technology and Facilities, who has over 20 years’ experience with cybersecurity at public companies, in coordination with senior management including our Executive Vice President, Chief Business and Financial Officer, works collaboratively across our company to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to cybersecurity incidents in accordance with our incident response and recovery plans.
+Added: Our board of directors and our audit committee receive prompt
+Added: Table o f Contents
+Added: and timely information regarding cybersecurity risks, as well as ongoing updates regarding any such risk, from senior management.
+Added: Our Director of Information Technology , who has over 18 years’ experience with cybersecurity at public and private companies, in coordination with senior management, works collaboratively across our company to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to cybersecurity incidents in accordance with our incident response and recovery plans.
To facilitate the success of our cybersecurity program, a cross-functional team throughout our company addresses cybersecurity threats and responds to cybersecurity incidents.
−Removed: Through ongoing communications with this team, the Vice President of Information Technology and Facilities and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and report such threats and incidents to the Audit Committee when appropriate.
+Added: Through ongoing communications with this team, the Director of Information Technology and senior management are informed about and monitor the prevention, detection, mitigation and remediation of cybersecurity threats and incidents in real time and report such threats and incidents to the Audit Committee when appropriate.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.