In the normal course of business, PGE collects, processes, and retains sensitive and confidential customer and employee information, as well as proprietary business information, and operates systems that directly impact the availability of electric power and the transmission of electric power in its service territory. PGE owns and operates generation, transmission, distribution, and other facilities that depend on information technology systems. The Company is exposed to, and may be adversely affected by, interruptions to its computer and information technology systems and sophisticated cyber-attacks. As with most companies, PGE has experienced attempts to breach the Company's systems and other similar incidents. A cyber-attack may cause large-scale disruption to the U.S. bulk power system or PGE operations and could target the Company's computer systems, software, or networks to achieve such disruption. Generation, transmission, and distribution facilities, in general, have been identified as potential targets of physical or cyber-attacks. In addition, physical attacks on transmission and distribution facilities have occurred in the United States. Despite the security measures in place, the Company's systems and assets, and those of third-party service providers, could be vulnerable to cybersecurity attacks, data security breaches, physical attacks and security breaches, acts of terrorism, or other similar events that could disrupt operations, cause damage to the Company's generation, transmission, or distribution facilities, impact reliability of the transmission and distribution system, information technology systems, inhibit the capability of equipment or systems to function as designed or expected, prevent service to customers or collection of revenues, or result in the release of sensitive or confidential customer, employee, or Company information. Such events could cause a shutdown of service, expose PGE to liability, or cause reputational damage. In addition, the Company may be required to expend significant capital and other resources to protect against security breaches or to alleviate problems caused by security breaches. A breach of certain business systems could impact PGE's ability to initiate, authorize, process, record, and report financial information. The cost of repairing damage to PGE's facilities and infrastructure caused by acts of terrorism, and the loss of revenue if such events prevent PGE from providing utility service to its customers, could adversely impact its financial condition and results of operations. PGE maintains insurance coverage against some, but not all, potential losses resulting from these risks. However, insurance is limited in scope and subject to exceptions, and may not be adequate to protect the Company against liability in all cases and insurers may dispute or be unable to perform their obligations to the Company, or may not be available at rates that are commercially reasonable. PGE continuously seeks to maintain a robust program of security and controls, but the impact of a physical or material information technology event could have a material adverse effect on the Company's competitive position, reputation, results of operations, financial condition and cash flows.