22 unchanged sentences
The Incident Response Team is comprised of the following IT Systems management personnel and members of senior management:
−Removed: • Chief Information Officer (“CIO”) – Our CIO has over forty years of information technology experience across a wide range of industry sectors including insurance, financial and life sciences and forty years in life science research and development information security.
−Removed: For the past four years, our CIO has had oversight of our cybersecurity strategy and building out our cybersecurity capabilities and infrastructure in response to the growing threat from potential cyber security incidents on our IT Systems.
−Removed: Our CIO has also led the initiative to integrate our cybersecurity management
−Removed: into our overall enterprise risk management strategy.
−Removed: Our CIO has an NACD CERT certificate in cybersecurity oversight;
−Removed: • Associate Director, Information Technology (“IT Security Director”) – Our IT Security Director has approximately twenty years of relevant information technology experience including at least fifteen years of hands-on experience working in various cybersecurity domains, including asset and network security and architecture, identity access management, disaster recovery and business continuity.
+Added: • Chief Information Officer (“CIO”) – Our CIO has over 25 years of information technology experience across a wide range of industry sectors including life sciences, medical device, pharmaceutical, real estate and software development with responsibility in cybersecurity, data analytics and GenAI implementations for the last 10 years, and 20 years of business continuity planning and disaster recovery planning and execution.
+Added: Our CIO has oversight of our cybersecurity strategy and building out our cybersecurity capabilities and infrastructure in response to the growing threat from
+Added: potential cyber security incidents on our IT Systems.
+Added: Our CIO is also responsible for the integration of our cybersecurity management into our overall enterprise risk management strategy;
+Added: • Associate Director, Information Technology (“IT Security Director”) – Our IT Security Director has approximately 20 years of relevant information technology experience including at least 15 years of hands-on experience working in various cybersecurity domains, including asset and network security and architecture, identity access management, disaster recovery and business continuity.
Our IT Security Director’s responsibilities include serving as the lead for cybersecurity under the direction of the CIO and maturing our cybersecurity program across all cybersecurity domains, including security and risk management.
10 unchanged sentences
We have also instituted a separate process for communicating with the Audit Committee regarding any risks from an actual cybersecurity threat in the event we are the target of a specific cybersecurity incident.
−Removed: As part of our response to such an incident, members of the Incident Response Team would provide an initial awareness communication of the incident to our Chief Executive Officer who would in turn inform the Chairman of our Board of Directors (“Board Chair”) and the Chair of the Audit Committee (“Audit Committee Chair”).
+Added: As part of our response to such an incident, members of the Incident Response Team would provide an initial awareness communication of the incident to our Chief Financial Officer then to the Chief Executive Officer who would in turn inform the Chairman of our Board of Directors (“Board Chair”) and the Chair of the Audit Committee (“Audit Committee Chair”).
Following an initial assessment of the incident by senior management and IT Systems personnel, we would provide a follow-up communication to the Board Chair and Audit Committee Chair and determine whether further escalation to the full Board of Directors is warranted .
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.