8 unchanged sentences
As part of our overall risk management system, we have a dedicated InfoSec team to oversee management’s process for effectively monitoring and mitigating risk.
−Removed: The InfoSec team regularly reviews threat intelligence from various sources, including third-party InfoSec consultants, assesses the applicability of known threats and threat actor behavior and tactics to the Company, and assesses whether these threats pose risks to the Company.
+Added: The InfoSec team regularly reviews threat intelligence from various sources, including third-party InfoSec firms, assesses the applicability of known threats and threat actor behavior and tactics to the Company, and the impact to the Company.
The InfoSec team then evaluates potentially appropriate administrative, technical, and physical controls to mitigate and reduce these risks within the appropriate business context and applies such controls where appropriate.
3 unchanged sentences
Risk Assurance
−Removed: Our InfoSec team tests relevant controls and maintains industry standard attestations, including reports prepared by an independent AICPA-accredited auditor.
−Removed: We also run regular cybersecurity exercises, such as penetration tests, to test the effectiveness of our controls.
+Added: Our InfoSec team tests relevant controls and maintains industry standard SOC2 attestations, including reports prepared by an independent AICPA-accredited auditor.
+Added: We also run regular cybersecurity exercises, such as red team, to test the effectiveness of our controls.
We use the results of these exercises to identify, evaluate, and prioritize potential areas of improvement through the InfoSec Roadmap.
24 unchanged sentences
Prior to joining Recursion, our CTO held various leadership roles providing strategic leadership for the Company’s IT organization.
−Removed: Given the importance of information security to our stakeholders, our Board of Directors receives regular updates from our CISO on cybersecurity-related matters, including the status of projects to strengthen our security systems and to improve our cyber threat readiness.
+Added: Given the importance of information security to our stakeholders, our Audit Committee (Board of Directors) receives regular updates from our CISO on cybersecurity-related matters, including the status of projects to strengthen our security systems and to improve our cyber threat readiness.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.