7 unchanged sentences
Our Chief Financial Officer has overall responsibility for our cybersecurity and has over 30 years of experience managing information technology, or IT, departments at biotechnology and pharmaceutical companies.
−Removed: Our Senior Director of Information Technology is responsible for the development and implementation of IT department controls, policies, infrastructure, and day-to-day operations, in addition to managing security risk, evaluating safeguards and recommending security improvements, and has over seven years of experience managing IT departments for a biotechnology company.
+Added: Our Senior Director of Information Technology is responsible for the development and implementation of IT department controls, policies, infrastructure, and day-to-day operations, in addition to managing security risk, evaluating safeguards and recommending security improvements, and has over eight years of experience managing IT departments for a biotechnology company.
We utilize third-party vendors to help strengthen our information security risk management by conducting evaluations of our security controls on at least a quarterly basis.
6 unchanged sentences
● Retaining of third parties to periodically assess our cybersecurity management program , provide cybersecurity training, perform phishing tests, gap analysis and penetration tests, advise on business continuity plans, and to provide additional support in the event of a cybersecurity incident.
−Removed: The Chief Financial Officer and Senior Director of Information Technology work with other groups in the Company to understand the severity of the potential consequences of a cybersecurity incident and to make decisions about how to prioritize mitigation and other initiatives based on, among other things, materiality to the business.
−Removed: All employees and contractors receive cybersecurity training, and we plan to implement additional annual training for all employees and
+Added: The Chief Financial Officer and Senior Director of Information Technology work with other groups in the Company to understand the severity of the potential consequences of a cybersecurity incident and to make decisions about
+Added: how to prioritize mitigation and other initiatives based on, among other things, materiality to the business.
+Added: All employees and contractors receive cybersecurity training, and we plan to implement additional annual training for all employees and contractors.
All trainings are intended to raise awareness of cybersecurity threats in order to reduce our vulnerability as well as to encourage consideration of cybersecurity risks across functions.
Our principal executive offices are located in Gaithersburg, Maryland, where we occupy approximately 19,699 square feet of laboratory and office space.
−Removed: For additional information, see Note 5 to our consolidated financial statements.
+Added: For additional information, see Note 5.
+Added: Leases to our consolidated financial statements.
Management believes that these facilities are suitable and adequate to meet our anticipated needs.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.