5 unchanged sentences
Cybersecurity Governance
−Removed: RISK FACTORS.
Our approach to cybersecurity begins with our responsibility for strong governance and controls.
2 unchanged sentences
Our management is responsible for risk identification, risk management and risk mitigation strategies associated to cybersecurity related information technology risks, including fully documenting our cybersecurity policies and procedures and cybersecurity risk management program as well as implementing a cybersecurity risk management program and ensuring compliance with our cybersecurity policies and procedures.
−Removed: Our Senior Vice President of Quality, GMP Operations, and Information Technology leads our Information Technology team, which includes experienced and information security professionals and has expertise in various aspects of cybersecurity, such as network security, data protection, incident response, threat intelligence, and security awareness.
+Added: Our Chief Technical Operations Officer leads our Information Technology team, which includes experienced and information security professionals and has expertise in various aspects of cybersecurity, such as network security, data protection, incident response, threat intelligence, and security awareness.
Our Information Technology Team’s expertise is supplemented by external consultants who provide specialized services and independent assessments of our cybersecurity posture and capabilities.
−Removed: Management has appointed a Cybersecurity Incident Response Team (the “CSIRT”) which is operationally responsible for coordinating, executing, and managing cybersecurity incident response activities.
−Removed: The CSIRT is comprised of experienced information security personnel from our Information Technology team.
+Added: Management has appointed a Cybersecurity Incident Response Team (CSIRT) which is operationally responsible for coordinating, executing, and managing cybersecurity incident response activities.
+Added: The CSIRT is comprised of experienced
+Added: RISK FACTORS.
+Added: information security personnel from our Information Technology team.
The CSIRT’s responsibilities include, among other things, incident identification and escalation to designated members of management.
21 unchanged sentences
Both our Executive Management team and CSIRT receive regular training on information security topics.
−Removed: RISK FACTORS.
• Cybersecurity education and training:
5 unchanged sentences
Cybersecurity Incidents
+Added: RISK FACTORS.
On November 24, 2021, we announced that we were the target of a ransomware attack.
12 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.