We face cybersecurity risk related to our computer systems and data, which may include unauthorized access, acts by computer hackers, computer viruses, malicious code, organized cybersecurity attacks and other security problems and system disruptions, including possible unauthorized access to our and our customers' information. We also rely on third-parties to host certain enterprise systems and manage and host our data and that of our customers. Our ability to monitor such third parties' security measures and the full impact of the systemic risk is limited. If our systems, data, or any third party service that we use is unavailable to us for any reason, our customers may experience service interruptions, which could significantly impact our operations, reputation, business, and financial results. Lack of access to our data and that of our clients, or failure of our systems or those of our third-party service providers, may result in interruptions in our service, all of which may cause a loss in customers, refunds of product fees, and/or material harm to our reputation and operating results.
We maintain a cybersecurity risk management program to monitor and mitigate cybersecurity threats and an incident response plan for emerging threats. To date, costs associated with preventing or remediating information management security breaches or complying with related laws and regulations have not had a material adverse effect on our capital expenditures, earnings or competitive position. Additionally, we have obtained insurance that provides coverage for certain cybersecurity incidents. Despite these efforts, we can make no assurances that we will be able to mitigate, detect, prevent, timely and adequately respond, or fully recover from the negative effects of cybersecurity incidents or other cybersecurity compromises, and such cybersecurity incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption, or unavailability of personal information, critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. The potential consequences of a material cybersecurity incident include financial loss, reputational damage, damage to our IT systems, data loss, litigation with third parties, theft of intellectual property, fines, customer attrition, diminution in the value of our investment in research and development, and increased cybersecurity protection and remediation costs due to the increasing sophistication and proliferation of threats, which in turn could adversely affect our competitiveness and results of operations. Any imposition of liability, particularly liability that is not covered by insurance or is in excess of insurance coverage, could materially harm our operating results and financial condition.