Unresolved Staff Comments.
−Removed: N ot applicable.
+Added: Not applicable.
Cybersecurity.
36 unchanged sentences
We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition under the heading “Actual or attempted security incidents or breaches, loss of data, or other disruptions could expose us to material liability and materially and adversely affect our business, financial condition, and our reputation,” which disclosures are incorporated by reference herein.
−Removed: In the last three fiscal years, we have not experienced any material cybersecurity incidents.
+Added: We have not experienced any material cybersecurity incidents.
As of the date of this report, we do not believe that risks from any cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to affect us, including our business strategy, results of operations or financial condition.
−Removed: However, these threats pose a risk to the security of our systems and networks and the confidentiality, availability, and integrity of our data.
+Added: However, we are aware that changes in our IT systems, including those provided by third parties, could expose us to risk in the future.
+Added: These threats pose a risk to the security of our systems and networks and the confidentiality, availability, and integrity of our data.
Cybersecurity attacks could also include attacks targeting patient, employee, or customer data or the security, integrity, and/or reliability of the hardware and software we utilize in our business operations.
2 unchanged sentences
For more information, see the risk factors included in Item 1A of this Annual Report.
−Removed: As of the date of this report, we do not believe that risks from any cybersecurity threats as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to affect us, including our business strategy, results of operations or financial condition.
−Removed: However, we are aware that changes in our IT systems, including those provided by third parties, could expose us to risk in the future.
−Removed: We cannot guarantee that controls we will implement to mitigate this risk will eliminate it.
−Removed: See Item 1A of this Annual Report for discussion of this risk.
Cybersecurity Governance;
1 unchanged sentence
In general, our board of directors oversees risk management activities designed and implemented by our management and considers specific risks, including, for example, risks associated with our strategic plan, business operations, and capital structure.
−Removed: Our board of directors executes its oversight responsibility for risk management both directly and through delegating oversight of certain of these risks to its committees, and our board of directors has authorized our audit committee to oversee risks from cybersecurity threats.
+Added: Our board of directors executes its oversight responsibility for risk management both directly and through delegating oversight of
+Added: certain of these risks to its committees, and our board of directors has authorized our audit committee to oversee risks from cybersecurity threats.
At least quarterly, our board of directors receives an update from management of our cybersecurity threat risk management and strategy processes, covering topics such as data security posture, any results from third-party assessments, progress towards pre-determined risk-mitigation-related goals, our incident response plan, material cybersecurity threat risks or incidents and developments, as well as the steps management has taken to respond to such risks.
7 unchanged sentences
degree in Information Security, and is a Certified Information Systems Security Professional (CISSP).
+Added: Our General Counsel and Chief Privacy Officer is an attorney with 18 years of experience, including experience in privacy matters.
+Added: They are also a Certified Information Privacy Professional (CIPP/US/E), a Certified Privacy Manager (CIPM), and a Privacy Law Specialist (PLS) with the International Association of Privacy Professionals (IAPP).
As discussed above, our CISO and/or General Counsel and Chief Privacy Officer report to our board of directors about cybersecurity threat risks, among other cybersecurity related matters, on a quarterly basis.
−Removed: In addition, our cybersecurity risk management and data strategy processes are further overseen by management team members.
−Removed: These management team members are informed about and monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan.
+Added: In addition, our cybersecurity risk management and data strategy processes are further overseen by certain management team members.
+Added: Together with CISO and our General Counsel and Chief Privacy Officer, these management team members are regularly informed about and routinely monitor the prevention, mitigation, detection, and remediation of cybersecurity incidents through their ongoing management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan.
Such individuals have extensive prior work experience in various roles involving managing information security, developing cybersecurity strategy, implementing effective information and cybersecurity programs, as well as several relevant degrees and certifications.
2 unchanged sentences
We use these facilities for laboratory testing and management activities and certain research and development, administrative and other functions.
−Removed: We have CLIA-certified laboratories located in Irving, Texas;
+Added: We have CLIA-certified laboratories located in Coppell, Texas;
Alpharetta, Georgia;
Phoenix, Arizona;
−Removed: Needham, Massachusetts;
−Removed: and New York, New York.
−Removed: In Irving, Texas, we lease and occupy approximately 172,000 square feet under a lease that will expire in May 2024.
−Removed: In Alpharetta, Georgia, we lease and occupy approximately 65,000 square feet under a lease that will expire in March 2028.
+Added: and Needham, Massachusetts.
+Added: In Coppell, Texas, we own and occupy approximately 96,500 square feet of building and space situated on 6.8 acres of land.
+Added: In Alpharetta, Georgia, we own and occupy approximately 65,000 square feet of building and space situated on 8.5 acres of land.
In Phoenix, Arizona, we lease and occupy approximately 25,000 square feet under a lease that will expire in November 2025.
In Needham, Massachusetts, we lease and occupy approximately 21,000 square feet under a lease that will expire in September 2027.
−Removed: In New York, New York, we lease and occupy approximately 400 square feet under a lease that will expire in September 2024.
We use these facilities for laboratory testing and certain administrative and other functions.
−Removed: We also own another real property located in Coppel, Texas, which consists of approximately 96,500 square feet of building space situated on 6.8 acres of land.
−Removed: We are building a CLIA-certified laboratory at this location.
We believe our existing facilities are adequate for our current and expected near-term needs and additional space would be available on commercially reasonable terms if required.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.