The failure in cyber security systems, as well as the occurrence of events unanticipated in our disaster recovery systems and management continuity planning could impair our ability to conduct business effectively.
The occurrence of a disaster such as a cyber-attack against us or against a third-party that has access to our data or networks, a natural catastrophe, an industrial accident, a terrorist attack or war, disease pandemics, events unanticipated in our disaster recovery systems, or a support failure from external providers, could have an adverse effect on our ability to conduct business and on our results of operations and financial condition, particularly if those events affect our computer-based data processing, transmission, storage, and retrieval systems or destroy data.
We depend heavily upon computer systems to perform necessary business functions. Despite our implementation of a variety of security measures, our computers, networks, and data, like those of other companies, could be subject to cyber-attacks and unauthorized access, use, alteration, or destruction, such as from physical and electronic break-ins or unauthorized tampering. If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary and other information processed, stored in, and transmitted through our computer systems and networks. Such an attack could cause interruptions or malfunctions in our operations, which could result in financial losses, litigation, regulatory penalties, client dissatisfaction or loss, reputational damage, and increased costs associated with mitigation of damages and remediation.
Third parties with which we do business may also be sources of cybersecurity or other technological risk. We outsource certain functions and these relationships allow for the storage and processing of our information, as well as client, counterparty, employee, and borrower information. While we engage in actions to reduce our exposure resulting from outsourcing, ongoing threats may result in unauthorized access, loss, exposure, destruction, or other cybersecurity incident that affects our data, resulting in increased costs and other consequences as described above.
In addition, cybersecurity has become a top priority for regulators around the world, and some jurisdictions have enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal data. If we fail to comply with the relevant laws and regulations, we could suffer financial losses, a disruption of our businesses, liability to investors, regulatory intervention or reputational damage.
We and our service providers are currently impacted by quarantines and similar measures being enacted by governments in response to the global COVID-19 pandemic, which are obstructing the regular functioning of business workforces (including requiring employees to work from external locations and their homes). Policies of extended periods of remote working, whether by us or by our service providers, could strain technology resources, introduce operational risks and otherwise heighten the risks described above. Remote working environments may be less secure and more susceptible to hacking attacks, including phishing and social engineering attempts that seek to exploit the COVID-19 pandemic. Accordingly, the risks described above are heightened under current conditions.
We are dependent on information systems and systems failures could significantly disrupt our business, which may, in turn, negatively affect the NAV of our Shares and our ability to pay dividends.
Our business is highly dependent on the communications and information systems of the Adviser, which are provided to us on behalf of the Adviser by Investcorp pursuant to the Services Agreement directly or through third party service providers. Any failure or interruption of those systems, including as a result of the termination of the Services Agreement or an agreement with any third-party service providers, could cause delays or other problems in our activities. Our financial, accounting, data processing, backup or other operating systems and facilities may fail to operate properly or become disabled or damaged as a result of a number of factors including events that are wholly or partially beyond our control and adversely affect our business. There could be:
| • | | sudden electrical or telecommunications outages; |
68