We rely extensively on information technology systems and related personnel to collect, use, retain, manage, transmit, and protect transactions and data. For these information technology systems, applications, and processes to operate effectively, we or our service providers must maintain and update them. Delays in the maintenance, updates, upgrading, or patching of these systems, applications or processes, as well as the actions taken to maintain, update, upgrade and patch, could impair their effectiveness or expose us to security risks.
Some of these systems are managed or provided by third-party service providers, including certain cloud platform providers. Failure by these third-party service providers to meet their contractual, regulatory and other obligations to us, or our failure to adequately monitor their performance, could result in our inability to achieve expected efficiencies and result in additional costs to correct errors made by such service providers. Depending on the function involved and despite the availability of contractual remedies against these providers, such errors can also lead to business disruption, systems performance degradation, processing inefficiencies or other systems disruptions, the loss or theft of or damage to intellectual property or sensitive data through security breaches or otherwise, incorrect or adverse effects on financial reporting, litigation, claims, legal or regulatory proceedings, inquiries or investigations, fines or penalties, remediation costs, damage to our reputation or have a negative impact on employee morale, all of which can materially adversely affect our business.
In addition, we are currently making, and will continue to make, substantial investments in our information technology systems, infrastructure and personnel, including a new enterprise resource planning system implemented in the third quarter of 2025, in certain cases with the assistance of strategic partners and other third-party service providers. These investments involve replacing existing systems, some of which are older, legacy systems that are less flexible and efficient, with successor systems; outsourcing certain technology and business processes to third-party service providers; deploying enhanced end-to-end digital processes (which may include the use of AI); maintaining or enhancing legacy systems that are not currently being replaced; designing or cost effectively acquiring new systems with new functionality; or testing the use and incorporation of AI, including generative AI.
These efforts, including the continued transition to and implementation of the new enterprise resource planning system and related systems, could result in significant potential risks, including failure of the systems to operate as designed, unexpected impacts on related systems or processes, potential loss or corruption of data, failures in security processes and internal controls, cost overruns, implementation delays or errors, disruption of operations, and the potential inability to meet business and reporting requirements. Any system implementation issues or transition difficulties may result in operational challenges, security issues, reputational harm, and increased costs that could adversely affect our business operations, our relationships with our customers, and results of operations.