What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2026-03-30 compared with 2025-03-28 · 53 added, 52 removed, 25 unchanged (81% of the section changed)

Unresolved Staff Comments.

reporting companies are not required to provide the information required by this item.

Cybersecurity.

believe cybersecurity risk management is an important part of its overall risk management efforts.

The Company has a policy of transparency

regarding our data collection, use, retention and sharing practices, and it is our commitment to implement appropriate technical security

measures to protect all Company stakeholders and manage third party risk.

We believe cybersecurity risk management is an

important part of its overall risk management efforts.

The Company has a policy of transparency regarding our data collection, use, retention

and sharing practices, and it is our commitment to implement appropriate technical security measures to protect all Company stakeholders

and manage third party risk.

Our operations may, in some cases, involve the

14 unchanged sentences

costs or contractual liabilities with third-party vendors and customers).

on the environment and system, we implement and maintain various technical, physical, and organizational measures, processes, standards

and policies designed to manage and mitigate material risks from cybersecurity threats, including, for example, periodic cybersecurity

testing and cybersecurity awareness training for employees.

Company is actively engaged in identifying and managing cybersecurity risks.

Protecting company data, non-public customer and employee

data, and the systems that collect, process, and maintain this information is deemed critical.

use third-party service providers to perform a variety of functions throughout our business, including manufacturing our product candidates

and assisting with R&D activities.

Depending on the nature of the services provided, the sensitivity of the systems and data at issue,

and the identity of the provider, our vendor contracting processes may include imposing certain contractual provisions related to privacy

and cybersecurity.

Depending on the environment and system, we implement

and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate

material risks from cybersecurity threats, including, for example, periodic cybersecurity testing and cybersecurity awareness training

for employees.

The Company is actively engaged in identifying

and managing cybersecurity risks.

Protecting company data, non-public customer and employee data, and the systems that collect, process,

and maintain this information is deemed critical.

We use third-party service providers to perform

a variety of functions throughout our business, including manufacturing our product candidates and assisting with R&D activities.

Depending on the nature of the services provided, the sensitivity of the systems and data at issue, and the identity of the provider,

our vendor contracting processes may include imposing certain contractual provisions related to privacy and cybersecurity.

In addition, the Board will oversee any cybersecurity

5 unchanged sentences

or more frequently as needed, to ensure cybersecurity risks are appropriately managed and integrated into our broader risk oversight strategy.

Cybersecurity

2018, the United States Securities and Exchange Commission (the “ SEC ”) published interpretive guidance to assist public

companies in preparing disclosures about cybersecurity risks and incidents.

These SEC guidelines, and any other regulatory guidance,

are in addition to notification and disclosure requirements under state and federal laws and regulations.

If we fail to observe this

regulatory guidance or standards, we could be subject to various regulatory sanctions, including financial penalties.

regulators have been increasingly active in implementing privacy and cybersecurity standards and regulations.

Recently, several states

have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements

with respect to these programs, including data encryption requirements.

Many states have also recently implemented or modified their

data breach notification, information security and data privacy requirements.

We expect this trend of state-level activity in those areas

to continue and are continually monitoring developments where our customers are located.

and exposures related to cybersecurity attacks, including litigation and enforcement risks, are expected to be elevated for the foreseeable

future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking,

mobile banking, and other technology-based products and services by us.

Board, in coordination with the Audit Committee, oversees the Company’s processes for assessing and managing risk.

The Board and

Audit Committee may review the measures implemented by the Company to identify and mitigate data protection and cybersecurity risks.

The Company’s Audit Committee is also responsible for overseeing cybersecurity risk and are informed in a timely manner of any

incidents considered potentially serious, together with details on the prevention, detection, mitigation and remediation of such incidents.

from Cybersecurity Threats

of the date of this report, we are not aware of any material risks from cybersecurity threats that have materially affected or are reasonably

likely to materially affect the Company, including our business strategy, results of operations, or financial condition.

cannot provide assurance that we will not experience any such event in the future.

For a description of the risks from cybersecurity

threats that may materially affect the Company and how they may do so, see our risk factors under Part 1.

Risk Factors in this

Annual Report, including the risk entitled “Our computer systems or data, or those of our collaborators or other contractors or

consultants, maybe compromised, which could result in adverse consequences, including but not limited to regulatory investigations or

fines and penalties;

significant disruption of our product development programs and our ability to operate our business

reputational harm;

and other adverse consequences.”

Cybersecurity Risk

In 2023, the SEC adopted new

rules to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incidents by public companies

that are subject to the reporting requirements of the Exchange Act.

These require current disclosure about material cybersecurity incidents,

as well as requiring periodic disclosures about a public company’s processes to assess, identify, and manage material cybersecurity

risks, management’s role in assessing and managing material cybersecurity risks, and the board of directors’ oversight of

cybersecurity risks.

If we fail to comply with these rules, we could be subject to various regulatory sanctions, including

financial penalties.

State regulators have been increasingly active

in implementing privacy and cybersecurity standards and regulations.

Recently, several states have adopted regulations requiring certain

financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including

data encryption requirements.

Many states have also recently implemented or modified their data breach notification, information security

and data privacy requirements.

We expect this trend of state-level activity in those areas to continue and are continually monitoring

developments where our customers are located.

Risks and exposures related to cybersecurity attacks,

including litigation and enforcement risks, are expected to be elevated for the foreseeable future due to the rapidly evolving nature

and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking, and other technology-based

products and services by us.

The Board, in coordination with the Audit Committee,

oversees the Company’s processes for assessing and managing risk.

The Board and Audit Committee may review the measures implemented

by the Company to identify and mitigate data protection and cybersecurity risks.

The Company’s Audit Committee is also responsible

for overseeing cybersecurity risk and are informed in a timely manner of any incidents considered potentially serious, together with details

on the prevention, detection, mitigation and remediation of such incidents.

Risks from Cybersecurity Threats

As of the date of this Annual Report, we are

not aware of any material risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect

the Company, including our business strategy, results of operations, or financial condition.

However, we cannot provide assurance that

we will not experience any such event in the future.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments