7 unchanged sentences
Collaborative Approach:
−Removed: We have implemented a cross-functional approach to identifying, preventing, and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.
+Added: We have implemented a cross-functional approach to identifying, preventing, and mitigating cybersecurity threats and incidents, while also implementing controls and procedures that provide for the prompt
+Added: escalation of certain cybersecurity incidents so that decisions regarding the public disclosure and reporting of such incidents can be made by management in a timely manner.
Technical Safeguards:
2 unchanged sentences
We have established and maintain incident response and recovery plans to address our response to a cybersecurity incident.
+Added: We use a manage, detection, and response (MDR) partner to provide threat detection and response capabilities.
+Added: We also utilize security consultants including a vCISO to assess and continuously improve our cybersecurity program.
Third Party Risk Management:
We strive to proactively manage third party risks to minimize any adverse effects on our business that may arise due to a cybersecurity incident affecting third party systems and vendors.
−Removed: While we rely on third-party vendors to manage and maintain their own cybersecurity defense programs, we are developing a vendor risk management program to assess our exposure to these external cybersecurity risks.
+Added: Although we rely on third party vendors to manage and maintain their own cybersecurity defense programs, we continue to improve on our vendor risk management program to assess our exposure to these external cybersecurity risks, including the use of external security rating services and by evaluating vendor responses to our cybersecurity questionnaire.
Education and Awareness:
5 unchanged sentences
The Board and the Audit Committee also receive prompt and timely information regarding any cybersecurity incident that meets established reporting thresholds, as well as ongoing updates regarding any such incident until it has been addressed.
−Removed: On an annual basis, the Audit Committee discuss our approach to cybersecurity risk management with the Head of IT.
+Added: On a quarterly basis, the Audit Committee discuss our approach to cybersecurity risk management with the Head of IT.
Our Head of IT , in coordination with our executive management team, works collaboratively across the company to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents in accordance with our incident response and recovery plans.
4 unchanged sentences
For more information on our cybersecurity risks , see Item 1A “Risk Factors.”
−Removed: Our principal executive office is located at 10770 Wateridge Circle in San Diego, California, and consists of approximately 45,000 square feet of leased office and laboratory space under a lease for a term of 124 months, beginning on April 5, 2021.
−Removed: We use these facilities for our administrative, research and development and other activities.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.