5 unchanged sentences
Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes .
−Removed: Cybersecurity risks related to our business are identified and addressed through a multi-faceted approach that consists of third-party assessments, testing of our information systems and information technology security.
+Added: Cybersecurity risks related to our business are identified and addressed through a multi-faceted approach that consists of periodic third-party assessments, testing of our information systems and information technology security.
To defend against, detect and respond to cybersecurity incidents, we, among other things:
7 unchanged sentences
As part of the above processes, we regularly engage external consultants to assess our internal cybersecurity programs and compliance with applicable practices and standards.
+Added: To date, we have not identified any cybersecurity incidents that have materially affected, or are reasonably likely to materially affect , our business strategy, results of operations or financial condition.
+Added: We also evaluate cybersecurity risks associated with our use of third-party service providers that may have access to our systems or data.
+Added: As part of these processes, we assess vendor security controls and, where appropriate, incorporate cybersecurity considerations into vendor selection and oversight.
Cybersecurity Governance
3 unchanged sentences
This includes existing and new cybersecurity risks, information on how management is addressing and/or mitigating those risks, cybersecurity incidents (if any) and status on key information security initiatives.
+Added: Additionally, management maintains internal governance processes designed to support the assessment and management of cybersecurity risk, including cross-functional collaboration among information technology, legal, compliance, finance and business teams.
+Added: Our Vice President, Global Head Digital Transformation is responsible for the establishment and maintenance of our overall cybersecurity program , as well as the assessment and management of cybersecurity risks.
+Added: Our current Vice President, Global Head Digital Transformation has over 20 years of experience in information technology and possesses the requisite education, skills and experience expected of an individual assigned to these duties.
Despite our cybersecurity efforts, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on our business.
−Removed: For a discussion of cybersecurity risks applicable to us, see Part I, Item 1A, Risk Factors , under the heading “Our internal computer systems, or those of our collaborators or other contractors or consultants, may fail or suffer security breaches, which could result in a material disruption of our product development programs” in this Annual Report on Form 10-K.
+Added: For a discussion of cybersecurity risks applicable to us, see Part I, Item 1A, Risk Factors, under the heading “Our internal computer systems, or those of our collaborators, third-party vendors, contractors or consultants, may fail or suffer security breaches, which could result in a material disruption of our business and development programs” in this Annual Report on Form 10-K.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.