2 unchanged sentences
Risk Management and Strategy
+Added: We do no believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
+Added: During the reporting period, we have not experienced any material cybersecurity incidents nor any series of immaterial cybersecurity incidents that would require to be disclosed in this year-end report
Management of cybersecurity risks is a component of our overall risk management strategy.
6 unchanged sentences
We engage certain external parties , including consultants, computer security firms and governance experts, to enhance our cybersecurity oversight and to gain valuable insights into the ever-evolving cybersecurity landscape.
−Removed: Our use of third parties in the conduct of our business is significant (including suppliers, CROs, CDMOs, and other service providers, and a cybersecurity incident at third party could materially adversely impact us.
−Removed: We assess third party cybersecurity controls prior to engaging such third parties and include security and privacy addendums to our contracts where applicable.
+Added: Our use of third parties to conduct our business is significant.
+Added: We use suppliers, CROs, CDMOs, and other service providers.
+Added: A cybersecurity incident at third party could materially adversely impact us.
+Added: In order to mitigate this risk, we assess third party cybersecurity controls prior to engaging third parties and include security and privacy addendums to our contracts where applicable.
We also require that third party service providers or partners report cybersecurity incidents to us so that we can assess the impact of the incident on us.
−Removed: We do not believe that there are currently any known risks from cybersecurity threats that are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
−Removed: During the reporting period we have not experienced any material cybersecurity incidents nor any series of immaterial cybersecurity incidents that would require to be disclosed in this year end report.
+Added: In an effort to further deter and detect cyber threats, we provide all employees, including part-time and temporary employees, with data protection, cybersecurity and incident response and prevention materials, which educates employees on the importance of reporting all incidents immediately.
+Added: We also use technology-based tools that are designed to mitigate cybersecurity risks.
+Added: Lastly, we have established a Cybersecurity Incident Response Policy ("CIRP”), which details the steps to be followed to properly respond to, contain, and remediate a cybersecurity incident.
+Added: The CIRP provides a process for escalating certain cybersecurity incidents to the Board and members of management to facilitate management-level consideration as to whether a cybersecurity incident may be material to the Company and whether public disclosure of the incident is required.
Our third-party service providers report to our Principal Financial Officer who is responsible for the management of the Cybersecurity program.
1 unchanged sentence
The Audit Committee of our Board of Directors provides direct oversight over cybersecurity risk and provides updates to the Board of Directors regarding such oversight.
−Removed: The Audit Committee receives periodic updates
−Removed: from management regarding cybersecurity matters, and is notified between such updates regarding significant new cybersecurity threats or incidents.
−Removed: In an effort to deter and detect cyber threats, we provide all employees, including part-time and temporary employees, with a data protection, cybersecurity and incident response and prevention material, which educates employees on the importance of reporting all incidents immediately.
−Removed: We also use technology-based tools that are designed to mitigate cybersecurity risks.
−Removed: Cybersecurity Incident Response Plan
−Removed: We have established a Cybersecurity Incident Response Policy (“CIRP”), which details the steps to be followed to properly respond to, contain, and remediate a cybersecurity incident.
−Removed: The CIRP provides a process for escalating certain cybersecurity incidents to the Board and members of management to facilitate management-level consideration as to whether a cybersecurity incident may be material to the Company and whether public disclosure of the incident is required.
+Added: The Audit Committee receives periodic updates from management regarding cybersecurity matters and is notified between such updates regarding significant new cybersecurity threats or incidents.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.