2 unchanged sentences
Cybersecurity Risk Management Program
−Removed: The Company’s cybersecurity risk management program is designed to employ industry best practices, including ongoing enhancement of governance, risk, and compliance management, regular updates to our response planning and protocols, security policy and standards maintenance, and new technology implementation to proactively monitor vulnerabilities and reduce risk, including processes designed to identify material cybersecurity risks associated with our use of third-party service providers.
+Added: The Company’s cybersecurity risk management program, aligned with the National Institute of Standards and Technology Cybersecurity Framework (CSF) domains and HITRUST CSF, is designed to employ industry best practices, including ongoing enhancement of governance, risk, and compliance management, regular updates to our response planning and protocols, security policy and standards maintenance, and new technology implementation to proactively monitor vulnerabilities and reduce risk, including processes designed to identify material cybersecurity risks associated with our use of third -party service providers.
This program includes the engagement of consulting firms and other third parties.
7 unchanged sentences
However, despite our security measures, there is no assurance that we or the third parties with which we interact have not identified or experienced, or will not experience, a cybersecurity incident in the future that will materially affect us.
−Removed: For additional information regarding the risks to us associated with cybersecurity incidents, see “A data breach or cybersecurity incident could result in a loss of confidential data, give rise to remediation and other expenses, expose us to liability under federal and state data protection and data privacy requirements, foreign data privacy regulations, consumer protection laws, common law theories, and other laws, rules and regulations, subject us to litigation and governmental inquiries and actions, damage our reputation, and otherwise adversely impact our financial results and business” included in Part I, Item 1A of this Form 10-K.
+Added: For additional information regarding the risks to us associated with cybersecurity incidents, see “A data breach or cybersecurity incident could result in a loss of confidential data, give rise to remediation and other expenses, expose us to liability, subject us to litigation and governmental inquiries and actions, damage our reputation, and otherwise adversely impact our financial results and business” included in Part I, Item 1A of this Form 10-K.
Cybersecurity Governance
11 unchanged sentences
As of December 31, 2024, we leased other facilities in Nashville, Tennessee;
−Removed: San Diego, California;
−Removed: and Boulder, Colorado.
+Added: and San Diego, California.
Legal Proceedings
2 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.