5 unchanged sentences
The Company identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example using manual and automated tools, analyzing reports of threat actors, conducting scans of the threat environment, evaluating threats reported to us and coordinating with law enforcement concerning threats.
−Removed: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our
−Removed: Information Systems and Data, including, for example:
+Added: Depending on the environment, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example:
an incident response plan;
11 unchanged sentences
We use third-party service providers to perform a variety of functions throughout our business, such as application providers and hosting companies.
−Removed: We have a vendor management program to manage cybersecurity risks associated with our use of these providers.
+Added: We have a vendor management program designed to manage cybersecurity risks associated with our use of these providers.
The program includes security questionnaires, reviews of vendor’s written security program and audits.
1 unchanged sentence
For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see our risk factors under Part I.
−Removed: Risk Factors in this Annual Report on Form 10-K, including “Our internal computer systems, or those of our collaborators or other contractors or consultants, may fail or suffer security breaches, which could result in a significant disruption of our product development programs and can lead to adverse consequences, including but not limited to regulatory investigations or actions;
+Added: Risk Factors in this Annual Report on Form 10-K, including “Our internal computer systems, or those of our collaborators, contractors, consultants or other third parties with whom we work, may fail or suffer security breaches, which could result in a significant disruption of our product development programs and can lead to adverse consequences, including but not limited to regulatory investigations or actions;
fines and penalties;
14 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.