3 unchanged sentences
In the normal course of business, we may collect and store personal information and other sensitive information, including proprietary and confidential business information, financial information, trade secrets, intellectual property, information regarding trial participants in connection with clinical trials, sensitive third-party information and employee information.
−Removed: In an effort to protect this information from cybersecurity risks, we have developed a cybersecurity program which incorporates policies and practices designed to protect the confidentiality, integrity and security of our sensitive information.
+Added: In an effort to protect this information from cybersecurity risks, we have developed a cybersecurity program that has been
+Added: integrated into our overall risk management process;
+Added: it incorporates policies and practices designed to protect the confidentiality, integrity and security of our sensitive information.
As part of our cybersecurity risk management procedures, we perform system monitoring and scanning and utilize security tools supported by a third-party managed services provider.
5 unchanged sentences
This program aims to assess the cybersecurity maturity of vendors who have access to our data or systems through an evaluation of the vendor’s cybersecurity practices.
−Removed: Our cybersecurity program is managed by our IT Director , who reports directly to senior management on matters regarding cybersecurity, as appropriate.
−Removed: Our IT Director has over twenty years of experience in IT, including cybersecurity, and previously served as the IT Director at another biopharmaceutical company.
−Removed: Together, our senior management and IT Director are responsible for leading company-wide cybersecurity strategy, policies, standards, and processes.
+Added: Our cybersecurity program is managed by our Manager of Operations and IT Systems , who reports directly to senior management on matters regarding cybersecurity, as appropriate, and is supported by third-party vendors .
+Added: Together, our senior management and Manager of Operations and IT Systems are responsible for leading company-wide cybersecurity strategy, policies, standards, and processes.
The Audit Committee, pursuant to its charter, has oversight over management of cybersecurity risks.
−Removed: Senior management and our IT Director provide the Audit Committee with periodic updates on data management and cybersecurity initiatives, as well as on significant existing and emerging cybersecurity risks, including cybersecurity incidents, as applicable.
+Added: Senior management provide the Audit Committee with periodic updates on data management and cybersecurity initiatives, as well as on significant existing and emerging cybersecurity risks, including cybersecurity incidents, as applicable.
We have a process to record identified risks from cybersecurity threats in our risk register, along with an assessment of the severity of the potential impact and the likelihood of occurrence.
1 unchanged sentence
The risk register is reviewed periodically by senior management and at least annually by the Board of Directors .
−Removed: Our cybersecurity program is also periodically evaluated by external security consultants, with the results of those reviews reported to senior management and the Audit Committee, as appropriate.
We have not identified any cybersecurity incidents or threats that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition;
2 unchanged sentences
Risk Factors.
−Removed: We lease and occupy approximately 19,700 square feet of state-of-the-art wet laboratory and office space in Germantown, Maryland, United States.
−Removed: We also lease and occupy approximately 31,000 square feet of office and laboratory space on the Harwell Science and Innovation Campus, Harwell, Oxfordshire, United Kingdom.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.