adequately mitigate any risk or loss to us. If our risk management framework is not effective, we could suffer unexpected losses and our business, financial condition and results of operations could be adversely affected. We may also be subject to potentially adverse regulatory consequences.
System failure or breaches of our network security, including as a result of cyber-attacks or data security breaches, could subject us to increased operating costs as well as litigation and other liabilities.
The computer systems and network infrastructure we use may be vulnerable to physical theft, fire, power loss, telecommunications failure or a similar catastrophic event, as well as security breaches, denial of service attacks, viruses, worms and other disruptive problems caused by hackers. Any damage or failure that causes breakdowns or disruptions in our customer relationship management, general ledger, deposit, loan and other systems could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny for failure to comply with required information security standards, or expose us to civil litigation and possible financial liability, any of which could have an adverse effect on us.
Computer break-ins, phishing and other disruptions could also jeopardize the security of information stored in and transmitted through our computer systems and network infrastructure. Information security risks have generally increased in recent years in part because of the proliferation of new technologies, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists, and other external parties. Our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks. In addition, to access our products and services, our customers may use devices that are beyond our control systems. Although we believe we have robust information security procedures and controls, our technologies, systems, networks, and our customers’ devices may become the target of cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of the Bank’s or our customers’ confidential, proprietary and other information, or otherwise disrupt the Bank’s or our customers’ or other third parties’ business operations. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities.
The Bank is under continuous threat of loss due to hacking and cyber-attacks especially as we continue to expand customer capabilities to utilize internet and other remote channels to transact business. Two of the most significant cyber-attack risks that we face are e-fraud and loss of sensitive customer data. Loss from e-fraud occurs when cybercriminals breach and extract funds directly from customer or our accounts. Attempts to breach sensitive customer data, such as account numbers and social security numbers, present significant reputational, legal and/or regulatory costs to us if successful. Our risk and exposure to these matters remains heightened because of the evolving nature and complexity of these threats from cybercriminals and hackers, our plans to continue to provide internet banking and mobile banking channels, and our plans to develop additional remote connectivity solutions to serve our customers. We cannot assure that we will not be the victim of successful hacking or cyberattacks in the future that could cause us to suffer material losses. The occurrence of any cyber-attack or information security breach could result in potential liability to customers, reputational damage and the disruption of our operations, and regulatory concerns, all of which could adversely affect our business, financial condition or results of operations.
The Company’s business continuity plans or data security systems could prove to be inadequate, resulting in a material interruption in, or disruption to, its business and a negative impact on results of operations.
The Company relies heavily on communications and information systems to conduct its business. Any failure, interruption or breach in security of these systems, whether due to severe weather, natural disasters, cyber-attack, acts of war or terrorism, criminal activity or other factors, could result in failures or disruptions in general ledger, deposit, loan, customer relationship management and other systems. While the Company has disaster recovery and other policies and procedures designed to prevent or limit the effect of the failure, interruption or security breach of its information systems, there can be no assurance that any such failures, interruptions or security breaches will not occur or, if they do occur, that they will be adequately addressed. The occurrence of any failures, interruptions or security breaches of the Company’s information systems could damage its reputation, result in a loss of customer business, subject it to additional regulatory scrutiny or expose it to civil litigation and possible financial liability, any of which could have a material adverse effect on results of operations.