restrictions and precautions that have been implemented by governments and companies, including ours, around the world. Notably, restrictions on face-to-face meetings with clients and our ability to work from client facilities could lengthen our selling and implementation cycles.
Risks Related to Our Services and Solutions
If we cause disruptions to our clients’ businesses, provide inadequate service, or breach contractual obligations, our clients may have claims for substantial damages against us and our reputation may be damaged. Our insurance coverage may be inadequate to protect us against such claims.
If our professionals make errors in the course of delivering services or we fail to meet contractual obligations to a client, these errors or failures could disrupt the client’s business or expose confidential or personally identifiable information. Any of these events could result in a reduction in our revenues, damage to our reputation, and could also result in a client terminating our engagement and making claims for substantial damages against us. Some of our client agreements do not limit our potential liability for occurrences such as breaches of confidentiality and indemnification relating to intellectual property infringement, misappropriation or other violations, and we cannot generally limit liability to third parties with which we do not have a contractual relationship. In some cases, breaches of confidentiality obligations, including obligations to protect personally identifiable information, may entitle the aggrieved party to equitable remedies, including injunctive relief.
Although we maintain professional liability insurance, product liability insurance, commercial general and property insurance, business interruption insurance, workers’ compensation coverage, cyber insurance and umbrella insurance for certain of our operations, our insurance coverage does not insure against all risks in our operations or all claims we may receive. Damage claims from clients or third parties brought against us or claims that we initiate due to the disruption of our business, litigation or natural disasters, may not be covered by our insurance, may exceed the limits of our insurance coverage, and may result in substantial costs and diversion of resources even if insured. Some types of insurance are not available on reasonable terms or at all in some countries in which we operate, and we cannot insure against damage to our reputation. The assertion of one or more large claims against us, whether or not successful and whether or not insured, could materially adversely affect our reputation, business, financial condition and results of operations.
Security breaches, cyber-attacks, employee and other internal misconduct, computer viruses, the mishandling of personal data and other disruptions to network security could compromise our information and expose us to liability, which would cause our business and reputation to suffer.
In the ordinary course of business, we collect, use, store, process, transmit and view sensitive or confidential data, including intellectual property, proprietary business information or personally identifiable information belonging to us, our clients, respective employees and other end users. This information is stored on our networks or in the data centers and networks of third-party providers. Physical security and the secure processing, maintenance and transmission of this information is critical to our operations and business strategy. Some of our clients have sought, and may continue to seek, additional assurances for the protection of their sensitive information, including personally identifiable information, and attach greater liability in the event that their sensitive information is disclosed.
Despite security measures, information technology and infrastructure may be vulnerable to attacks by hackers, computer malware, viruses, social engineering (including phishing and ransomware attacks), or breached due to software bugs, human error, employee theft, misuse, misconduct or malfeasance, system failure or other disruptions. Any such breach could compromise our networks, or the networks of our third-party providers, and the information stored there could be accessed, held for ransom, publicly disclosed, misappropriated, lost or stolen. Some of our systems will not be fully redundant and any problems at our third-party providers’ data centers could result in lengthy interruptions in service. Such a breach, misappropriation or disruption could also disrupt our operations and the services we provide to clients, damage our reputation, and
27