assets and protocols become increasingly important to Enerflex as it continues to expand internationally, provide information technology access to global personnel, develop web-based applications, to monitor products, and improve its business software applications. If any such programs or systems were to fail or create erroneous information in the Company’s hardware or software network infrastructure, it could have a material adverse effect on the Company’s business activities and reputation.
Enerflex may be threatened by or subjected to cyberattack risks such as cyber-fraud, viruses, malware infections, or social engineering activities like phishing and employee impersonation, which may result in adverse outcomes including, but not limited to, the exposure of sensitive data, disruption of operations, and diminished operating results. In recent years, cyberattacks have become more prevalent and much harder to detect and defend against. These threats may arise from a variety of sources, all ranging in sophistication from an individual hacker to alleged state-sponsored attacks. A cyberattack may be generic, or it may be custom crafted to target the specific information technology used by Enerflex. The occurrence of any such cyberattacks could adversely affect the Company’s financial condition, operating results, and reputation.
The Company may be targeted by parties using fraudulent spoof and phishing emails to misappropriate Enerflex information, or the information of clients and suppliers, or to introduce viruses or other malware through “trojan horse” programs into computer networks of the Company, its clients, or suppliers. These phishing emails may appear upon a cursory review to be legitimate emails sent by an employee or representative of Enerflex, its clients, or suppliers. If a member of Enerflex or a member of one of its clients or suppliers fails to recognize that a phishing email has been sent or received and responds to or forwards the phishing email, the attack could corrupt the computer networks and/or access confidential information of Enerflex, its clients, employees, and/or suppliers, including passwords, through email or downloaded malware. In addition to spoof and phishing emails, network and storage applications may be subject to unauthorized access by hackers or breached due to operator error, malfeasance, or other system disruptions. It is often difficult to anticipate or immediately detect such incidents and the damage caused by them.
Security measures, such as incident monitoring, vulnerability testing, tabletop exercises, response planning, and employee education and training have been implemented to protect the Company’s information security and network infrastructure. However, the Company’s mitigation measures cannot provide absolute security, and the information technology infrastructure may be vulnerable to criminal cyberattacks or data security incidents due to employee or client error, malfeasance, or other vulnerabilities. Additionally, Enerflex is reliant on third-party service providers for certain information technology applications. While the Company conducts due-diligence and believes that these third-party service providers have adequate security measures, there can be no assurance that these security measures will prevent any cyber events or computer viruses from impacting the applications upon which Enerflex relies.
If Enerflex’s information technology systems were to fail and the Company was unable to recover in a timely way, the Company might be unable to fulfill critical business functions, which could damage the Company’s reputation and have a material adverse effect on the business, financial condition, and results of operations. A breach of Enerflex’s information security measures or controls could result in losses of material or confidential information, reputational consequences, financial damages, breaches of privacy laws, damage to assets, safety issues, operational downtime or delays, and revenue losses. The significance of any such event is difficult to quantify but may in certain circumstances be material to the Company and could have adverse effects on the Company’s business, financial condition, and results of operations.
The nature of Enerflex’s operations brings inherent litigation risk and liability claims
The Company’s operations entail inherent risks, including but not limited to equipment defects, malfunctions and failures, and natural disasters that could result in uncontrollable flows of natural gas, untreated water or well fluids, fires, and explosions. Some of the Company’s products are used in hazardous applications where an accident or a failure of a product could cause personal injury or loss of life, or damage to property, equipment, or the environment, as well as the suspension of the end-user’s operations. The Company seeks to mitigate its exposure to these risks through various means including contracting strategies, however, if the Company’s products were to be involved in any of these incidents, the Company could face litigation and may be held liable for those losses.
In the normal course of Enerflex’s operations, the Company may become involved in, named as a party to, or be the subject of various legal proceedings, including regulatory proceedings, tax proceedings, and legal actions related to contract disputes, property damage, environmental matters, employment matters, and personal injury. The Company may not be able to adequately protect itself contractually and insurance coverage may not be available or adequate in risk coverage or policy limits to cover all losses or liabilities that it may incur. Moreover, the Company may not be able to maintain insurance in the future at levels of risk coverage or policy limits that management deems adequate. Any claims made under the Company’s policies may cause its premiums to increase. Any future damages deemed to be caused by the Company’s products or services that are not covered by insurance, or that are in excess of policy limits or subject to substantial deductibles, could have a material adverse effect on the Company’s projections, business, results of operations, and financial condition.
Defense and settlement costs associated with lawsuits and claims can be substantial, even with respect to lawsuits and claims that have no merit. Due to the inherent uncertainty of the litigation process, the resolution of any legal proceeding could have an adverse effect on Enerflex’s operating results or financial performance.
| | | | |
| | |
Management’s Discussion and Analysis | | | | M-25 |