3 unchanged sentences
We have implemented and maintain various information security processes designed to manage cybersecurity risks relating to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and data related to our clinical trials and products (Information Systems and Data).
−Removed: Our Director of Information Technology, assisted by our managed information technology service provider and other third party service providers, leads the Company’s cybersecurity risk management processes.
+Added: Our Director of Information Technology, assisted by our information technology managed services provider and other third party service providers, leads the Company’s cybersecurity risk management processes.
This group works to identify and assess risks from cybersecurity threats by monitoring and evaluating our threat environment and the Company’s risk profile using various methods in certain contexts, including, manual tools, subscribing to reports and services that identify cybersecurity threats, analyzing threat intelligence reports and feeds, conducting scans of certain environments, and other tests.
1 unchanged sentence
Our assessment and management of risks from cybersecurity threats are part of the Company’s overall risk management processes.
−Removed: Our Director of Information Technology works with management to prioritize our risk management processes and mitigate cybersecurity threats that are more likely to lead to a material impact to our business.
+Added: Our Director of Information Technology works with management to prioritize our risk management processes and the mitigation of cybersecurity threats.
We use third-party service providers to assist us to identify, assess, and manage risks from cybersecurity threats.
10 unchanged sentences
Management is responsible for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security-related reports.
−Removed: We have processes designed to escalate certain cybersecurity incidents to members of management depending on the circumstances, including our Vice President Legal and Compliance, Vice President Finance and Administration, Vice President - Controller, Chief Financial Officer and Director of Information Technology .
+Added: We have processes designed to escalate certain cybersecurity matters, including incidents, to members of management depending on the circumstances, including our Vice President Legal and Compliance, Vice President Finance and Administration, Vice President - Controller, Chief Financial Officer and Director of Information Technology.
In addition, the Company’s incident response policy includes a process for reporting to the audit committee of the board of directors for certain cybersecurity incidents.
1 unchanged sentence
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.