What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2025-08-29 compared with 2024-09-09 · 21 added, 31 removed, 34 unchanged (60% of the section changed)

18 unchanged sentences

Our cybersecurity risk management program includes:

· risk assessments designed to help identify material cybersecurity risks to

our critical systems, information, products, services and our broader IT environment;

· evaluations of our readiness to assess, respond and, as applicable, recover

from potential cybersecurity incidents;

· periodic tabletop exercises to simulate a response to a cybersecurity incident

and use the findings to improve our processes, technologies and incident response plan;

· the use of external service providers, where appropriate, to assess, test,

or otherwise assist with the aspects of our security controls;

· cybersecurity training to educate our employees, consultants and other users

about their individual responsibilities regarding our IT systems and data;

risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services and our broader IT environment;

evaluations of our readiness to assess, respond and, as applicable, recover from potential cybersecurity incidents;

periodic tabletop exercises to simulate a response to a cybersecurity incident and use the findings to improve our processes, technologies and incident response plan;

the use of external service providers, where appropriate, to assess, test, or otherwise assist with the aspects of our security controls;

cybersecurity training to educate our employees, consultants and other users about their individual responsibilities regarding our IT systems and data;

weekly briefings on cybersecurity incidents, threats, and related matters;

· a third-party risk management process for service providers, suppliers and

vendors who have access to our critical systems and information;

· cybersecurity risk insurance that provides protection against certain potential

costs and losses arising from a cybersecurity incident.

a third-party risk management process for service providers, suppliers and vendors who have access to our critical systems and information;

cybersecurity risk insurance that provides protection against certain potential costs and losses arising from a cybersecurity incident.

As of the date of this report, we do not believe that known risks from

12 unchanged sentences

cybersecurity incidents, as well as any incidents with lesser impact potential.

While the Board reviews and oversees the Company’s information

security efforts, our executive officers, including our Chief Financial Officer, Vice President of Business Operations, and Vice President

of Business Affairs are responsible for the day-to-day management of cybersecurity risk and the design and implementation of policies,

processes and procedures to identify and mitigate this risk.

Our Director of IT, in coordination with the executive officers named above,

is responsible for assessing and managing material risks from cybersecurity threats, as well as managing and responding to material cybersecurity

incidents if any occur.

Our Director of IT has over 27 years of experience in various information technology roles, which includes over

10 years of management of cybersecurity matters.

Our Director of IT provides weekly briefings to the Chief Financial

Officer, Vice President of Business Operations, Vice President of Business Affairs and other members of our cross-functional incident

response team.

The weekly briefings are focused on our cybersecurity risks and activities, including cybersecurity incidents and responses,

cybersecurity systems testing, third-party activities and related topics.

In the event threats and incidents are identified as potentially

significant, the Chief Financial Officer, Vice President of Business Operations or Vice President of Business Affairs will promptly report

to our Board.

While the Board reviews and oversees the Company’s information security

efforts, our Director of IT, under the oversight of our executive officers, is responsible for the day-to-day management of cybersecurity

risk and the design and implementation of policies, processes and procedures to identify and mitigate this risk.

Our Director of IT, in

coordination with the executive officers, is responsible for assessing and managing material risks from cybersecurity threats, as well

as managing and responding to material cybersecurity incidents if any occur.

Our Director of IT has over 28 years of experience in various

information technology roles, which includes over 10 years of management of cybersecurity matters.

Our Director of IT provides weekly briefings to the Chief Financial Officer,

General Counsel and other members of our cross-functional incident response team.

The weekly briefings are focused on our cybersecurity

risks and activities, including cybersecurity incidents and responses, cybersecurity systems testing, third-party activities and related

In the event that threats and incidents are identified as potentially significant, the Chief Financial Officer and General Counsel

promptly report to our Board.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments