3 unchanged sentences
We have strategically integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management.
−Removed: Our cybersecurity program is aligned with industry standards and best practices, such as the National Institute of Standards and Technology ("NIST") Cybersecurity Framework.
−Removed: Our measures to prevent, detect and mitigate cyber threats include training for employees, multi-factor
−Removed: authentication, backup servers, threat monitoring, periodic strategy review and penetration testing performed by a third-party advisory firm, and coverage under an information security risk insurance policy.
+Added: Our cybersecurity program is aligned with industry standards and best practices, such as the National Institute of Standards and Technology Cybersecurity Framework.
+Added: Our measures to prevent, detect and mitigate cyber threats include training for employees, multi-factor authentication, backup servers, threat monitoring, periodic strategy review and penetration testing performed by a third-party advisory firm, and coverage under an information security risk insurance policy.
Third-party suppliers are pre-screened as part of our vendor onboarding process to evaluate their cybersecurity programs and assess risk.
−Removed: As a part of our pre-screening process, we evaluate each vendor's overall cybersecurity risk profile relative to the services they provide for Biohaven, including questions relating to cybersecurity insurance, security operations and access and management of our data.
+Added: As a part of our pre-screening process, we evaluate each vendor's overall cybersecurity risk profile relative to the services they provide for the Company, including questions relating to cybersecurity insurance, security operations and access and management of our data.
Cybersecurity incidents involving third-party supplier systems are evaluated for their impact on the Company and managed through our cyber incident management process.
4 unchanged sentences
Our CTO provides comprehensive briefings to our Audit Committee on a quarterly basis regarding our strategy for managing and mitigating cybersecurity and technology-related risks.
−Removed: Beginning in 2024, our CTO will also provide such comprehensive briefings to the Board on an annual basis.
−Removed: Our CTO has been in the position for over three years and has over 35 years of industry experience focusing on large scale business transformations leveraging technology, cybersecurity, and technical operations excellence.
+Added: Our CTO also provides such comprehensive briefings to the Board on an annual basis.
+Added: Our CTO has been in the position for over four years and has over three decades of industry experience focusing on large scale business transformations leveraging technology, cybersecurity, and technical operations excellence.
Our CTO has held various senior technology leadership roles at other companies prior to joining the Company.
1 unchanged sentence
Although cybersecurity risks have not materially affected us, including our business strategy, results of operations or financial condition, to date, we are subject to various cybersecurity risks, which could, in the future, be material.
−Removed: For more information about the cybersecurity risks we face, see risk factor entitled "Our business and operations may be materially adversely affected in the event of computer system failures or security breaches" in Item 1A, "Risk Factors."
+Added: For more information about the cybersecurity risks we face, see the risk factor entitled "Our business and operations may be materially adversely affected in the event of computer system failures or security breaches" in Item 1A, "Risk Factors."
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.