ATS Corp /ATS

OPERATIONAL RISKS

Security breaches or disruptions of information technology systems risk. ATS utilizes a variety of information technology systems to manage and operate its businesses. These information systems may be owned and maintained by the Company or outsourced to providers, and may be managed on premise or through hosted cloud services. These information systems are subject to attacks, failures, and access denials from a number of potential sources including hackers, malware, viruses, destructive or inadequate code, power failures, and physical damage to computers, hard drives, communication lines, and networking equipment. Despite the implementation of extensive security measures (including access controls, data encryption, vulnerability assessments, continuous monitoring, security operations controls, and maintenance of back-up and protective systems), the Company's information technology systems are potentially vulnerable to interruptions or delays, ransomware, unauthorized access, computer viruses, cyberattack, and other events, ranging from individual attempts to advanced persistent threats. It is possible a security breach could result in theft of trade secrets or other intellectual property, or disclosure of confidential customer, supplier, or employee information. Should the Company be unable to prevent security breaches, disruptions could have an adverse effect on the Company's operations and financial results, as well as expose the Company to litigation, increased cybersecurity protection costs, and reputational damage.