4 unchanged sentences
We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K.
−Removed: These risks include, among other things, operational risks,
−Removed: intellectual property theft, fraud, extortion, harm to employees or customers, violation of privacy or security laws and other litigation and legal risk and reputational risks.
+Added: These risks include, among other things, operational risks, intellectual property theft, fraud, extortion, harm to employees or customers, violation of privacy or security laws and other litigation and legal risk and reputational risks.
We have implemented several cybersecurity processes, technologies and controls to aid in our efforts to assess, identify and manage such material risks.
14 unchanged sentences
As part of the above processes, we may engage with assessors, consultants, auditors and other third-parties , including by having a third-party review our cybersecurity program to help identify areas for continued focus, improvement and/or compliance.
−Removed: Our processes also address cybersecurity threat risks associated with our use of third-party service providers, including those in our supply chain, our CROs or those who have access to our customer and employee data or our systems.
+Added: Our processes also address cybersecurity threat risks associated with our use of third-party service providers, including those in our supply chain, our contract research organizations (CRO)s or those who have access to our customer and employee data or our systems.
Third-party risks are included within our broader overall risk assessment process, as well as our cybersecurity-specific risk identification program, both of which are discussed above.
1 unchanged sentence
We perform diligence on third-parties that have access to our systems, data or facilities that house such systems or data, and continually monitor cybersecurity threat risks identified through such diligence.
−Removed: We describe whether and how risks from identified cybersecurity threats have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the risk factors entitled “ We are increasingly dependent on information technology systems, infrastructure and data.
+Added: We describe whether and how risks from identified cybersecurity threats have materially affected or are reasonably likely to materially affect us, including our business strategy, financial condition or results of operations, under the risk factors entitled “ We are increasingly dependent on information technology systems, infrastructure and data.
Cybersecurity breaches could expose us to liability, damage our reputation, compromise our confidential information or otherwise adversely affect our business ,” and “ Our internal computer systems, or those of our collaborators, CROs or other contractors or consultants, may fail or suffer security breaches, which could result in a material disruption of development programs for our product candidates ,” in Part I, Item 1A of this Annual Report on Form 10-K, each of which is incorporated herein by reference.
Cybersecurity Governance
−Removed: Cybersecurity is an important part of our risk management processes and an area of increasing focus for our Board and management.
+Added: Cybersecurity is an important part of our risk management processes and an area of increasing focus for our board of directors and management.
Our Audit Committee is responsible for the oversight of risks from cybersecurity threats.
1 unchanged sentence
Members of the Audit Committee are also encouraged to regularly engage in ad hoc conversations with management on cybersecurity-related news events and discuss any updates to our cybersecurity risk management and strategy programs.
−Removed: Material cybersecurity threat risks are also considered during separate Board meeting discussions of important matters like risk management, business continuity planning, brand management, and other relevant matters.
+Added: Material cybersecurity threat risks are also considered during separate board of directors meeting discussions of important matters like risk management, business continuity planning, brand management, and other relevant matters.
Our cybersecurity risk management and strategy processes, which are discussed in greater detail above, are led by a team of senior level management, including our President, Chief Executive Officer and Chairman of the Board, Senior Vice President, Chief Financial Officer and Treasurer, Senior Vice President, General Counsel and Secretary, and VP of Information Technology.
3 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.