In addition to the operational risks described above, our information technology systems and infrastructure, and that of our vendors, are also exposed to increasing risks related to cybersecurity incidents. Cybersecurity attacks by third parties with malicious intent, including but not limited to, attacks on these systems, pose risks to our company. Further, advances in technology and the increasing sophistication of attackers have led to more frequent and effective cyberattacks, including advanced persistent threats by state-sponsored actors, cyberattacks relying on complex social engineering or "phishing" tactics, ransomware attacks, and other methods. We take measures to minimize the risk and impact of a cyber-attack, including utilization of multi-factor authentication, deployment of firewalls, virtual private networks for mobile connections, elevated access controls, standardized vendor access, active patching monitoring / logging, and regular training of our employees related to protecting sensitive information and recognizing "phishing" attacks. The measures we employ may not always be effective to prevent or detect cyber-attacks or incidents, and unauthorized access to our technology and confidential information may occur. Depending on the severity of the incident or cyber-attack, such events could result in business interruptions, disclosure of nonpublic information, loss of sales and customers, misstated financial data, liabilities for stolen assets or information, diversion of our management's attention, transaction errors, processing inefficiencies, increased cybersecurity protection costs, litigation, and financial consequences, any or all of which could adversely affect our business operations and reputation. In addition, cybersecurity incidents could subject us to civil liability to customers and other third parties, as well as fines, penalties, or other legal recourse imposed by governmental or regulatory authorities, which could be substantial. We maintain cyber risk insurance, but this insurance may not cover, or may be insufficient to cover, all of our losses from incidents impacting our systems or those of our vendors. In addition, our business operations may be disrupted, and our results of operations may be impaired, by the impact of breaches or cyber-attacks on our vendors, and these potential disruptions and impairments may not be covered by our insurance policies.