We use computers in substantially all aspects of our business operations. We also use mobile devices, social networking and other online activities to connect with our employees and our customers. We rely heavily on various proprietary and third-party information systems. Our reputation for the secure handling of customer and other sensitive information is critical to the success of our business. We are potentially subject to cyber-attacks, including state-sponsored cyber-attacks, industrial espionage, insider threats, computer denial-of-service attacks, computer viruses, ransomware and other malware, wire fraud and other cyber incidents. Our incident response efforts, business continuity procedures and disaster recovery planning may not be entirely effective as our information technology and network infrastructure may still be vulnerable to attacks by hackers or breaches due to employee error, malfeasance, computer viruses, power outages, natural disasters, acts of terrorism, breaches with respect to third-party systems or other disruptions. A cybersecurity incident and breach of our information systems could lead to theft, destruction, misappropriation or release of sensitive and/or confidential information or intellectual property, which could result in business disruption, negative publicity, violation of privacy laws, loss of customers, brand damage, adverse financial and operational results, and potential litigation.
Our management depends on relevant and reliable information for decision-making purposes, including key performance indicators and financial reporting. Any significant loss of data, failure to maintain reliable data, disruptions affecting our information systems, or delays or difficulties in transitioning to new systems could adversely affect our business, financial condition and results of operations. In addition, our ability to continue to operate our businesses without significant interruption in the event of a disaster or other disruption depends in part on the ability of our information systems to operate in accordance with our disaster recovery and business continuity plans. If our information systems fail and our redundant systems or disaster recovery plans are not adequate to address such failures, or if our business interruption insurance does not sufficiently compensate us for any losses that we may incur, our revenues and profits could be reduced, and the reputation of our brands and our business could be adversely affected. In addition, remediation of such problems could result in significant, unplanned capital investments.