8 unchanged sentences
The Audit Committee receives periodic updates from management regarding cybersecurity matters, and is notified between such updates regarding significant new cybersecurity threats or incidents.
−Removed: Table of Content s
−Removed: Our Vice President, Information Technology and Facilities, or the VP of IT , leads the operational oversight of company-wide cybersecurity strategy, policy, standards and processes and works across relevant departments to assess and help prepare us and our employees to address cybersecurity risks.
−Removed: Our VP of IT has worked in the information technology field for over 20 years at both biotechnology companies and management consulting firms, and holds a Bachelor of Science in Management and a Masters of Business Administration.
+Added: Our Senior Director, Technology Services, referred to herein as the Head of Cybersecurity , leads the operational oversight of company-wide cybersecurity strategy, policy, standards and processes and works across relevant departments to assess and help prepare us and our employees to address cybersecurity risks.
+Added: Our Head of Cybersecurity has worked in the information technology field for over 30 years at both biotechnology companies and internet service providers, and holds a Bachelor of Science in Mathematics.
We also maintain a team of experienced senior level engineers who design, implement and operate our information technology ecosystem, helping to implement cybersecurity best practices throughout our information technology infrastructure and governance processes.
−Removed: We periodically assess our processes against cybersecurity frameworks, such as the National Institute of Standards and Technology, or NIST, Cybersecurity Framework, Center for Internet Security, or CIS, Controls, and International Organization for Standardization, or ISO, 27001.
+Added: We periodically assess our processes against cybersecurity frameworks, such as the National Institute of Standards and Technology, or NIST, Cybersecurity Framework, Center for Internet Security, or CIS, Controls, International Organization for Standardization, or ISO, 27001 and the MITRE ATT&CK framework.
In an effort to deter and detect cyber threats, we annually provide all employees, including part-time and temporary employees, with a data protection, cybersecurity and incident response and prevention training and compliance program, which covers timely and relevant topics, including social engineering, phishing, password protection, confidential data protection, asset use and mobile security, and educates employees on the importance of reporting all incidents immediately.
We also use technology-based tools that are designed to mitigate cybersecurity risks and to bolster our employee-based cybersecurity programs.
+Added: Table of Content s
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.