The extent of the impact of the COVID-19 pandemic on our and our portfolio companies’ operational and financial performance will depend on many factors, including the actions taken by governmental authorities to contain its financial and economic impact, the extent of any related travel advisories and restrictions implemented, the impact of such public health emergency on overall supply and demand, goods and services, investor liquidity, consumer confidence and levels of economic activity and the extent of its disruption to important global, regional and local supply chains and economic markets, all of which remain highly uncertain and cannot be predicted.
These factors may also cause the valuation of our investments to differ materially from the values that we may ultimately realize. Valuations, and particularly valuations of private investments and private companies, are inherently uncertain, may fluctuate over short periods of time and are often based on estimates, comparisons and qualitative evaluations of private information.
Cybersecurity Risks. The occurrence of a disaster, such as a cyber-attack against us or against a third-party that has access to our data or networks, a natural catastrophe, an industrial accident, failure of our disaster recovery systems, or consequential employee or vendor error, could have an adverse effect on our ability to communicate or conduct business, negatively impacting our operations and financial condition. This adverse effect can become particularly acute if those events affect our electronic data processing, transmission, storage, and retrieval systems, or impact the availability, integrity, or confidentiality of our data.
We depend heavily upon computer systems to perform necessary business functions. Despite our implementation of a variety of security measures, our computer systems, networks, and data, like those of other companies, could be subject to cyber-attacks and unauthorized access, use, alteration, or destruction, such as from physical and electronic break-ins or unauthorized tampering, malware and computer virus attacks, or system failures and disruptions. If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary, and other information processed, stored in, and transmitted through our computer systems and networks. Such an attack could cause, among other adverse effects, interruptions or malfunctions in our operations, misstated or unreliable financial data, misappropriation of assets, liability for stolen information, any of which could result in financial losses, litigation, regulatory penalties, client dissatisfaction or loss, reputational damage, and increased costs associated with mitigation of damages and remediation.
Third parties with which we do business (including vendors that provide us with services) may also be sources of cybersecurity or other technological risks. We outsource certain functions and these relationships allow for the storage and processing of our information, as well as client, counterparty, employee and borrower information. Cybersecurity failures or breaches by service providers (including, but not limited to, accountants and custodians), and the issuers of securities in which we invest, also have the ability to cause disruptions and impact business operations, potentially resulting in financial losses, interference with our ability to calculate its NAV, impediments to trading, the inability of our Shareholders to transact business, violations of applicable privacy and other laws, regulatory fines, penalties, reputation damages, reimbursement of other compensation costs, or additional compliance costs. While we engage in actions to reduce our exposure resulting from outsourcing, ongoing threats may result in unauthorized access, loss, exposure or destruction of data, or other cybersecurity incidents that affects our data, resulting in increased costs and other consequences, as described above. The Company, the Adviser and its affiliates have implemented processes, procedures and internal controls to help mitigate cybersecurity risks and cyber intrusions but these measures, as well as the Company’s increased awareness of the nature and extent of a risk of a cyber-incident, may be ineffective and do not guarantee that a cyber-incident will not occur or that the Company’s financial results, operations or confidential information will not be negatively impacted by a cybersecurity or cyber intrusion incident. Substantial costs may be incurred in order to prevent any cyber incidents in the future.
Privacy and information security laws and regulation changes (including any regulations to report material cybersecurity incidents adopted by the SEC), and compliance with those changes, may result in cost increases due to system changes and the development of new administrative processes. In addition, we may be required to
65