Regular access to and security of information technology systems are critical to Vista's operations. To Vista's knowledge, it has not experienced any material losses relating to disruptions to its information technology systems. Vista has implemented policies, controls, and practices to manage and safeguard Vista and its stakeholders from internal and external cybersecurity threats and to comply with changing legal requirements and industry practice. Cyber risks cannot be fully mitigated, and these threats are continuing to evolve. Therefore, Vista cannot assure that its information technology systems are fully protected from cybercrime or that the systems will not be inadvertently compromised, or without failures or defects. Potential disruptions to Vista's information technology systems, including, without limitation, security breaches, power loss, theft, computer viruses, cyber-attacks, natural disasters, and noncompliance by third party service providers and inadequate levels of cybersecurity expertise and safeguards of third party information technology service providers, may adversely affect the operations of Vista as well as present significant costs and risks including, without limitation, loss or disclosure of confidential, proprietary, personal or sensitive information and third party data, material adverse effect on its financial performance, compliance with its contractual obligations, compliance with applicable laws,damaged reputation, remediation costs, potential litigation, regulatory enforcement proceedings and heightened regulatory scrutiny.