Global cyber security threats can range from uncoordinated individual attempts to gain unauthorized access to our information technology systems, and those of our business or service providers, to sophisticated and targeted measures known as advanced persistent threats. Like other companies, RLI Corp. is also subject to insider threats that may impact the confidentiality, integrity or availability of our data. We, as well as our business partners and service providers, employ measures to prevent, detect, address, mitigate and recover from these threats (including employee training, access controls, data encryption, vulnerability assessments, continuous monitoring of information technology networks and systems and maintenance of backup and protective systems).
However, cyber security incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. Security breaches could expose the Company to a risk of loss or misuse of Company or third-party confidential information, litigation and potential liability. In addition, cyber incidents that impact the availability, reliability, speed, accuracy or other proper functioning of our technology systems could impact our operations. We may not have the resources or technical sophistication to anticipate or prevent every type of cyber attack. A significant cyber incident, including system failure, security breach, disruption by malware or other damage could interrupt or delay our operations, result in a violation of applicable privacy and other laws, damage our reputation, cause a loss of customers or give rise to remediation costs, monetary fines and other penalties, which could be significant. We have cyber insurance, but it is possible that the coverage we have in place would not entirely protect the Company in the event that we experienced a cyber security incident, interruption or widespread failure of our information technology systems.