We rely on information technology systems, including the internet and third-party hosted services, to support a variety of business processes including booking transactions, and activities and to store sensitive data, including our proprietary business information and that of our suppliers, personally identifiable information and other information of our travel customers and employees and data with respect to invoicing and the collection of payments, accounting and procurement activities. In addition, we rely on our information technology systems to process financial information and results of operations for internal reporting purposes and to comply with financial reporting, legal, and tax requirements. The risk of a cybersecurity-related attack, intrusion, or disruption, including by criminal organizations, hacktivists, foreign governments, and terrorists, is persistent. We have experienced and may in the future experience system interruptions that make some or all of these systems unavailable or prevent us from efficiently fulfilling orders or providing services to third parties. Interruptions of this nature could include security intrusions and attacks on our systems for fraud or service interruption. Significant interruptions, outages or delays in our internal systems, or systems of third parties that we rely upon-including multiple co-location providers for data centers, cloud computing providers for application hosting, and network access providers-and network access, or deterioration in the performance of such systems, would impair our ability to process transactions, decrease our quality of service that we can offer to our travel customers, damage our reputation and brands, increase our costs and/or cause losses.
Potential security breaches to our systems or the systems of our service providers, whether resulting from internal or external sources, could significantly harm our business. We devote significant resources to network security, monitoring and testing, employee training, and other security measures, but we cannot assure you that these measures will prevent all possible security breaches or attacks. A party, whether internal or external, that is able to circumvent our security systems could misappropriate travel customers' or employees' information, proprietary information or other business and financial data or cause significant interruptions in our operations. We may need to expend significant resources to protect against security breaches or to address problems caused by breaches, and reductions in website availability could cause a loss of substantial business volume during the occurrence of any such incident. Because the techniques used to sabotage security change frequently, often are not recognized until launched against a target and may originate from less regulated and remote areas around the world, we may be unable to proactively address these techniques or to implement adequate preventive measures. We have obtained cyber insurance, however we cannot assure you that our insurance will be sufficient to protect against our losses or will cover all potential incidents. Moreover, security breaches could result in negative publicity and damage to our reputation, exposure to risk of loss or litigation and possible liability due to regulatory penalties and sanctions or pursuant to our contractual arrangements with payment card processors for associated expenses and penalties. Security breaches could also cause travel customers and potential users and our suppliers to lose confidence in our security, which would have a negative effect on the value of our brands. Failure to adequately protect against attacks or intrusions, whether for our own systems or those of our suppliers, could expose us to security breaches that could have an adverse impact on our financial performance.
In addition, we cannot assure you that our backup systems or contingency plans will sustain critical aspects of our operations or business processes in all circumstances, many other systems are not fully redundant and our disaster recovery or business continuity planning may not be sufficient. Fire, flood, power loss, telecommunications failure, break-ins, earthquakes, acts of war or terrorism, acts of God, computer viruses, electronic intrusion attempts from both external and internal sources and similar events or disruptions may damage or impact or interrupt computer or communications systems or business processes at any time. Although we have put measures in place to protect certain portions of our facilities and assets, any of these events could cause system interruption, delays and loss of critical data, and could prevent us from providing services to our travel customers and/or third parties for a significant period of time. Remediation may be costly and we may not have adequate insurance to cover such costs. Moreover, the costs of enhancing infrastructure to attain improved stability and redundancy may be time consuming and expensive and may require resources and expertise that are difficult to obtain.