The Company relies on various information systems, including information systems operated by third-parties, to support safe, efficient and reliable business and operating processes and activities and to safeguard its proprietary information assets, including trade secrets, know-how and other sensitive, business critical information. These systems are critical to the Company's process to accurately report financial results for management and external reporting purposes and to ensure compliance with financial reporting, legal and tax requirements in the United States and around the world. These systems may also be used to collect and process sensitive customer and personal employee data the Company may be legally required to protect.
Increased global cybersecurity vulnerabilities, threats and more sophisticated and targeted cyberattacks continue to pose risks to the Company’s products, systems and networks, and the confidentiality, availability and integrity of the Company’s data. These vulnerabilities also expose the Company’s customers, suppliers and third-party service providers to loss. In addition, the Company is exposed to similar risks resulting from cyberattacks that are experienced by its suppliers and other vendors. As a result, cyberattacks, internal and external security breaches, and attacks and security breaches of third-party systems could disrupt the Company's operations, compromise Dow’s proprietary and confidential, business critical information, jeopardize the Company's ability to safeguard and maintain accurate data, including personal data, and harm the Company's reputation which could result in litigation, enforcement actions, including fines, penalties and disruption of the Company's right to operate in certain jurisdictions, and significant remediation costs. Additionally, the Company’s use of artificial intelligence software may create additional risks related to the unintentional disclosure of proprietary, confidential, personal or otherwise sensitive information.
While the Company has a comprehensive cybersecurity program that is continuously reviewed, maintained and upgraded, cyberattacks by nation-state organizations, crime organizations and other hackers have become increasingly sophisticated, and it is possible for such attacks to remain undetected for an extended period of time. Such attacks could have a material negative impact on the Company’s business strategy, results of operations, financial position and reputation. More information on the Company’s processes for assessing, identifying and managing material risks from cybersecurity threats, including management’s role and the Board's oversight of such processes, can be found in Item 1C. Cybersecurity.