3 unchanged sentences
We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware and software and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature and data related to our clinical trials and commercial and pipeline tests (“Information Systems and Data”).
−Removed: Our Director of Cyber Security & Infrastructure (“DCSI”) oversees our information security function, which in conjunction with our security and engineering operations, Security Operations Center, a third-party managed
−Removed: security provider, helps identify, assess and manage the Company’s cybersecurity threats and risks.
+Added: Our Director of Cyber Security & Infrastructure (“DCSI”) oversees our information security function, which in conjunction with our security and engineering operations, Security Operations Center, a third-party managed security provider, helps identify, assess and manage the Company’s cybersecurity threats and risks.
This group identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment and the Company’s risk profile using various methods including, for example:
27 unchanged sentences
our senior management evaluates material risks from cybersecurity threats against our overall business objectives and reports to the audit committee of the board of directors, which is primarily responsible for overseeing our risk management processes on behalf of our board of directors.
−Removed: We use third-party service providers to assist us from time to time to identify, assess, and manage material risks from cybersecurity threats, including for example professional services firms (including legal counsel), threat intelligence service providers, cybersecurity consultants, cybersecurity software and managed service providers, penetration testing firms, and dark web monitoring services.
+Added: We use third-party service providers to assist us from time to time in an effort to identify, assess and manage material risks from cybersecurity threats, including for example professional services firms (including legal counsel), threat intelligence service providers, cybersecurity consultants, cybersecurity software and managed service providers, penetration testing firms and dark web monitoring services.
We use third-party service providers to perform a variety of functions throughout our business, such as application providers and hosting companies.
−Removed: We have vendor management processes to manage cybersecurity risks associated with our use of certain providers.
+Added: We have vendor management processes designed to manage cybersecurity risks associated with our use of certain providers.
These processes may include reviewing vendors’ written security programs and security assessments, conducting security assessment calls with vendor personnel, and imposing contractual obligations related to information security on certain of our vendors.
14 unchanged sentences
Our cybersecurity incident response plan is designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including Security Management.
−Removed: Security Management works with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of
−Removed: which they are notified.
+Added: Security Management works with the Company’s incident response team to help the Company mitigate and remediate cybersecurity incidents of which they are notified.
In addition, the Company’s incident response plan includes reporting to the audit committee of the board of directors for certain cybersecurity incidents.
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.