International Stem Cell (ISCO) Risk Analysis

The biotechnology, cosmetic, and pharmaceutical industries place considerable importance on obtaining patent and trade secret protection for new technologies, products, and processes. Our success will depend, to a substantial degree, on our ability to obtain and enforce patent protection for our products, preserve any trade secrets and operate without infringing the proprietary rights of others. We cannot assure you that: - we will succeed in obtaining any patents, obtain them in a timely manner, or that the breadth or degree of protection that any such patents will protect our interests;- the use of our technology will not infringe on the proprietary rights of others;- patent applications relating to our potential products or technologies will result in the issuance of any patents or that, if issued, such patents will afford adequate protection to us or will not be challenged, invalidated, or infringed; or - patents will not be issued to other parties, which may be infringed by our potential products or technologies. We are aware of certain patents that have been granted to others and certain patent applications that have been filed by others with respect to nuclear transfer and other stem cell technologies. The fields in which we operate have been characterized by significant efforts by competitors to establish dominant or blocking patent rights to gain a competitive advantage, and by considerable differences of opinion as to the value and legal legitimacy of competitors' purported patent rights and the technologies they actually utilize in their businesses. Considerable research in the areas of stem cells, cell therapeutics and regenerative medicine is being performed in countries outside of the United States, and a number of our competitors are located in those countries. The laws protecting intellectual property in some of those countries may not provide adequate protection to prevent our competitors from misappropriating our intellectual property.

Our ability to provide uninterrupted and high levels of service depends upon the performance of our internal network, systems, and related infrastructure, and those of our third-party vendors. Any significant interruptions in, or degradation of, the quality of the services, including infrastructure storage and support, that these third parties provide to us could severely harm our business and reputation and lead to the loss of customers and revenue. Our internal network, systems, and related infrastructure, in addition to the networks, systems, and related infrastructure of our third-party technology vendors, may be vulnerable to computer viruses and other malware that infiltrate such systems and networks, as well as physical or electronic security breaches, natural disasters, and similar disruptions. They have been and may continue to be the target of attempts to identify and exploit network and system vulnerabilities, penetrate or bypass security measures in order to interrupt or degrade the quality of the services we receive or provide, or otherwise gain unauthorized access to our networks and systems or those of our third-party vendors. These vulnerabilities or other attempts at access may result from, or be caused by, human error or technology failures, however, they may also be the product of malicious actions by third parties intending to harm our business. The methods that may be used by these third parties to cause interruptions or failures or to obtain unauthorized access to information change frequently, are difficult to detect, evolve rapidly, and are increasingly sophisticated and hard to defend against. Although we have not incurred material losses or liabilities as a result of security breaches or attempted security breaches and continue to invest in security measures, we cannot be certain that our defensive measures, and those employed by our third-party vendors, will be sufficient to defend against all such current and future methods. Our careful vetting of third parties to provide technology services and the contractual requirements related to the security that we impose on our third-party vendors who have access to this data may not be sufficient to protect us from network or system failures or service interruptions. Any actual or perceived security breach, whether experienced by us or a third-party vendor; the reporting or announcement of such an event, or reports of perceived security vulnerabilities of our systems or the systems of our third-party service providers whether accurate or not; or our failure or perceived failure to respond or remediate an event or make adequate or timely disclosures to the public, regulatory or law enforcement agencies following any such event may be material and lead to harm to our financial condition, business reputation, and prospects of future business due to, among other factors: loss of customer confidence arising from interruptions or outages, delays, failure to meet contractual obligations, and loss of data or public release of confidential data; increase regulatory scrutiny on us; compromise our trade secret and intellectual property; expose us to costly uninsured liabilities such as material fines, penalties, liquidated damages, and overall margin compression due to renegotiation of contracts on less favorable terms or loss of business; liability for claims relating to misuse of personal information in violation of contractual obligations or data privacy laws; and potential theft of our intellectual property. A security breach could occur and persist for an extended period of time without detection. We expect that any investigation of a security breach could take a substantial amount of time, and during such time we may not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, all of which could further increase the costs and consequences of such a breach. Further, detecting and remediating such incidents may require specialized expertise and there can be no assurance that we will be able to retain or hire individuals who possess, or otherwise internally develop, such expertise. Our remediation efforts therefore may not be successful. The inability to implement, maintain, and upgrade adequate safeguards could have a material and adverse impact on our business, financial condition, and results of operations. Moreover, there could be public announcements regarding any data security-related incidents and any steps we take to respond to or remediate such incidents. The occurrence of any such failure may also subject us to costly lawsuits, claims for contractual indemnities, as well as divert valuable management, research and development, information technology, and marketing resources toward addressing these issues and delay our ability to achieve our strategic initiatives. In addition, we gather, as permitted by law, non-public, personally identifiable financial information from customers, such as names, addresses, telephone numbers, bank and credit card account numbers and financial transaction information, and the compromise of such data, which may subject us to fines and other related costs of remediation.