3 unchanged sentences
We rely on information technology and data to operate our business and develop, market, and deliver our therapies to our customers.
−Removed: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to critical computer networks, third party hosted services, communications systems, hardware, lab equipment, software, and our critical data includes
−Removed: confidential, personal, proprietary, and sensitive data (collectively “Information Assets”).
+Added: We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to critical computer networks, third party hosted services, communications systems, hardware, lab equipment, software, and our critical data includes confidential, personal, proprietary, and sensitive data (collectively “Information Assets”).
Accordingly, we maintain certain risk assessment processes intended to identify cybersecurity threats, determine their likelihood of occurring, and assess potential material impact to our business.
30 unchanged sentences
Depending on the nature of the services provided, the sensitivity and quantity of information processed, and the identity of the service provider, our vendor management process may include reviewing the cybersecurity practices of such provider, contractually imposing obligations on the provider related to the services they provide and/or the information they process, conducting security assessments, conducting on-site inspections, requiring their completion of written questionnaires regarding their services and data handling practices, and conducting periodic re-assessments during their engagement.
+Added: We have not experienced any cybersecurity incidents that we have determined to be material in the past fiscal year.
For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, refer to Part I, Item 1A.
2 unchanged sentences
The Vice President of Finance has over 15 years of experience as a Certified Public Accountant specializing in internal controls and U.S.
−Removed: nearly 25 years of experience in management including serving as a CFO and CEO of publicly traded life science companies as well as holding an MBA for New York University’s Stern School of Business.
+Added: The CEO has nearly 25 years of experience in management including serving as a CFO and CEO of publicly traded life science companies as well as holding an MBA for New York University’s Stern School of Business.
Management is also responsible for hiring appropriate personnel, integrating cybersecurity considerations into the company’s overall risk management strategy, and for communicating key priorities to employees, as well as for approving budgets, helping prepare for cybersecurity incidents, approving cybersecurity processes, and reviewing security assessments and other security-related reports.
2 unchanged sentences
In addition, the company’s incident response processes include reporting to the Audit committee of the board of directors for certain cybersecurity incidents.
−Removed: Management is involved with our efforts to prevent, detect, and mitigate cybersecurity incidents by overseeing preparation of cybersecurity policies and procedures, testing of incident response plans, engagement of vendors to conduct penetration tests.
+Added: Management is involved with our efforts to prevent, detect, and mitigate cybersecurity incidents by overseeing preparation of cybersecurity policies and procedures, testing of incident response plans, and engaging of vendors to conduct penetration tests.
Management participates in cybersecurity incident response efforts by being a member of the incident response team and helping direct the company’s response to cybersecurity incidents.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.