5 unchanged sentences
In support of our cybersecurity program, our systems and services undergo regular reviews by management to determine if any insufficiencies in cybersecurity exist.
−Removed: If an incident is detected, the Cybersecurity team follows the incident response policy to investigate, review and determine the potential impacts of such an incident.
+Added: If an incident is detected, our cybersecurity team follows the incident response policy to investigate, review and determine the potential impacts of such an incident.
If the cybersecurity team determines that an incident could reasonably be expected to have an impact on the financial condition or operations of the Company, it escalates the incident to the crisis management team, which includes executive management.
−Removed: The crisis management team further evaluates the potential impact and materiality of an event and the
−Removed: appropriate response required.
+Added: The crisis management team further evaluates the potential impact and materiality of an event and the appropriate response required.
The crisis management team coordinates the appropriate response effort and communicates, as applicable, to the Audit Committee.
8 unchanged sentences
A cybersecurity breach could hurt our reputation by adversely affecting the perception of customers and potential customers about the security of their orders and personal information, as well as the perception of our manufacturing partners of the security of their proprietary information.
−Removed: In addition, a cybersecurity attack could result in other negative consequences, including disruption of our internal operations, increased cybersecurity protection costs, lost revenue, regulatory actions or litigation.
+Added: In addition, a cybersecurity attack
+Added: could result in other negative consequences, including disruption of our internal operations, increased cybersecurity protection costs, lost revenue, regulatory actions or litigation.
Any disruption of internal operations could also have a material adverse impact on our results of operations, financial condition and cash flows.
As of the date of this report, we have not experienced any known cybersecurity incidents, or a series of related incidents, that have materially affected or are reasonably likely to affect us, including our business strategy, results of operations or financial condition.
−Removed: For an additional description of these cybersecurity risks and potential related impacts on us, see “Risk Factors” in Part I, Item 1A of this Annual Report on Form 10-K.
+Added: For an additional description of these cybersecurity risks and potential related impacts on us, see “Risk Factors” in Part I, Item 1A of this Form 10-K.
Our Board actively oversees our corporate strategy and enterprise risk management (“ERM”) programs, including those relating to cybersecurity and data privacy risks.
3 unchanged sentences
A summary of these results are also reported by the Audit Committee to the Board at least annually.
−Removed: Management, including our Chief Information Officer (“CIO”), who has over 25 years of experience serving primarily in the life science industry and is a recognized industry leader, is responsible for monitoring and assessing cybersecurity risks.
+Added: Management, including our Chief Information Officer , who has over 25 years of experience serving primarily in the life science industry and is a recognized industry leader, is responsible for monitoring and assessing cybersecurity risks.
Management reviews and determines the effectiveness of both internal and third-party leveraged expertise to ensure we have the appropriate knowledge base for risk coverage.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.