3 unchanged sentences
We have implemented and maintain various information security processes designed to identify, assess and manage material risks from cybersecurity threats to our critical computer networks, third party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, and data related to our clinical trials and employees (“Information Systems and Data”).
−Removed: Our information security function is led by our Vice President, Strategy & Finance (“IT Lead”), who reports to our CEO and is supported by our third party security provider, and it helps identify, assess and manage the Company’s cybersecurity threats and risks.
+Added: Our information security function is led by our Chief Financial Officer & Head of Corporate Strategy (“IT Lead”), who reports to our CEO and is supported by our third party security provider, and it helps identify, assess and manage the Company’s cybersecurity threats and risks.
The information security function identifies and assesses risks from cybersecurity threats by monitoring and evaluating our threat environment using various methods including, for example analyzing report of threats and threat actors and conducting periodic vulnerability assessments for certain systems.
Our assessment and management of material risks from cybersecurity threats are considered as part of our risk management processes.
−Removed: For example, our IT Lead and certain management, including our CEO, evaluate identified material risks from cybersecurity threats against our overall business objectives and our IT Lead periodically reports to the audit committee of the board of directors, which evaluates our overall enterprise risk.
+Added: For example, our IT Lead and certain management, including our CEO, evaluate identified material risks from cybersecurity threats against our overall business
+Added: objectives and our IT Lead periodically reports to the audit committee of the board of directors, which evaluates our overall enterprise risk.
Depending on the environment, systems, and data, we implement and maintain various technical, physical, and organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our Information Systems and Data, including, for example:
13 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.