8 unchanged sentences
As discussed in more detail below under the heading “Governance,” our Board’s oversight of cybersecurity risk management is supported by the Audit Committee of the Board, which regularly reviews operational risks.
−Removed: Our Chief In formation Officer (“CIO”), together with our Head of Information Security (“HIS”), and other members of our management team meet regularly to review current cybersecurity risks.
−Removed: The CIO and management team representatives also meet with the Audit Committee at least on a quarterly basis to discuss and review our cybersecurity program and risk landscape.
+Added: Our Senior Director, IT Application & Compliance and Interim Head of Information Technology (“HIT”), together with our Head of Information Security (“HIS”), and other members of our management team meet regularly to review current cybersecurity risks.
+Added: The HIT and management team representatives also meet with the Audit Committee at least on a quarterly basis to discuss and review our cybersecurity program and risk landscape.
Collaborative Approach :
18 unchanged sentences
The Audit Committee also receives prompt and timely information regarding any significant cybersecurity incidents, as well as ongoing updates regarding any such incidents until they have been remediated.
−Removed: Our CIO, Audit Committee and Board review and discuss our approach to cybersecurity risk on an annual basis.
−Removed: The HIS and CIO, in coordination with our management team, which includes our Chief Executive Officer (“CEO”), Chief Financial Officer (“CFO”) and General Counsel, work collaboratively to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents in accordance with our incident response plan.
−Removed: Through an ongoing process, the HIS monitors the prevention, detection, mitigation, and remediation of cybersecurity threats and incidents in real time, and reports such threats and incidents to the CIO, management team, and when appropriate, the Audit Committee.
+Added: Our HIT, Audit Committee and Board review and discuss our approach to cybersecurity risk on an annual basis.
+Added: The HIT and HIS, in coordination with our management team, which includes our Chief Executive Officer (“CEO”), Chief Financial Officer (“CFO”) and General Counsel, work collaboratively to implement a program designed to protect our information systems from cybersecurity threats and to promptly respond to any cybersecurity incidents in accordance with our incident response plan.
+Added: Through an ongoing process, the HIS monitors the prevention, detection, mitigation, and remediation of cybersecurity threats and incidents in real time, and reports such threats and incidents to the HIT, management team, and when appropriate, the Audit Committee.
Selected Management and Director Qualifications
−Removed: The HIS and CIO have both served in various roles in information technology and information security for many years, including serving in similar roles at other publicly traded companies.
+Added: The HIS and HIT have both served in various roles in information technology and information security for many years, including serving in similar roles at other publicly traded companies.
The HIS holds several industry accreditations, including being a certified Chief Information Security Officer, and has worked in the information technology field for over 25 years, specializing in Information Security for the last 15 years .
−Removed: The CIO has undergraduate and graduate degrees in technical fields, plus a master’s degree in business administration, and has worked in healthcare information technology for over 20 years.
−Removed: Our CEO, CFO and General Counsel each hold undergraduate and graduate degrees in their respective fields, and each have over 20 years of experience managing risks at Vir and at similarly situated companies, including risks arising from cybersecurity threats.
−Removed: For example, our CFO has been responsible for leading and managing Information Technology departments at three separate publicly traded companies, including our Company, and has leadership experience in business continuity planning in various roles.
+Added: The HIT has an undergraduate degree in computer science and business administration and has worked in healthcare information technology for over 20 years.
+Added: Our CEO, CFO and General Counsel each hold undergraduate and graduate degrees in their respective fields, and each have over 20 years of experience managing risks at VirBio and at similarly situated companies, including risks arising from cybersecurity threats.
+Added: For example, our CFO has been responsible for leading and managing Information Technology departments at two separate publicly traded companies, including our Company, and has leadership experience in business continuity planning in various roles.
Additionally, one of our directors formerly served as the United States Secretary of Homeland Security, in which capacity she had ultimate responsibility for the cybersecurity of the critical infrastructure of the United States of America, and as President of the University of California with responsibility for cybersecurity matters related to the university’s various networks.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.