In the ordinary course of our business, we collect and store sensitive data, including intellectual property, proprietary business and confidential financial information and identifiable personal information of our employees. We rely on industry accepted security measures and technology to protect our information systems and confidential and proprietary information.
However, our information and operations technology systems, including process control systems, are still subject to cyber security risks and are vulnerable to natural disasters, fires, power outages, vandalism, attacks by hackers or others or breaches due to employee error or other disruptions. Any such attack on or breach of our systems including through exposure to potential computer viruses or malware could compromise our systems and stored information may be accessed, publicly disclosed, lost or compromised, which could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, regulatory penalties, disruptions to our operations, decreased performance and production, increased costs, and damage to our reputation, which could have a material adverse effect on our business, financial condition and results of operations. As cyber security threats continue to evolve, we may be required to expend additional resources to continue to modify or enhance protective measures or to investigate and remediate any security vulnerabilities. However, our exposure to these risks cannot be fully mitigated due to the nature of these threats.
Controls and Procedures
Disclosure Controls and Procedures
West Fraser’s management is responsible for establishing and maintaining a system of disclosure controls and procedures to provide reasonable assurance that all material information relating to West Fraser is gathered and reported to senior management, including the President and Chief Executive Officer and the Vice-President, Finance and Chief Financial Officer, on a timely basis so that appropriate decisions can be made regarding public disclosure.
Internal Control over Financial Reporting
West Fraser’s management is also responsible for establishing and maintaining adequate internal control over financial reporting to provide reasonable assurance regarding the reliability of financial reporting and the preparation of consolidated financial statements for external reporting purposes in accordance with IFRS.
There has been no change in the design of West Fraser’s internal control over financial reporting during the year ended December 31, 2019 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.
Evaluation of Effectiveness of Internal Controls
As required by National Instrument 52-109 Certification of Disclosure in Issuers’ Annual and Interim Filings (NI 52-109), West Fraser’s management, under the supervision of the President and Chief Executive Officer and the Vice-President, Finance and Chief Financial Officer, has caused the effectiveness of the disclosure controls and procedures and internal control over financial reporting to be evaluated as of December 31, 2019. Based on that evaluation, the President and Chief Executive Officer and the Vice-President, Finance and Chief Financial Officer have concluded that West Fraser’s disclosure controls and procedures and internal control over financial reporting were effective as of December 31, 2019.
Additional Information
Additional information relating to West Fraser, including our Annual Information Form, can be found on our website at www.westfraser.com or on SEDAR at www.sedar.com.
- 34 -