Item 1A. Risk Factors

The Company is subject to various risks. The following is a discussion of risks that could materially and adversely affect the Company’s business, operating results, and financial condition.

Risks Related to the Company’s Business, Industry, and Markets

Recent and future disruptions in domestic and global economic and market conditions could have adverse consequences for the used automotive retail industry in the future and may have greater consequences for the non-prime segment of the industry.

In the normal course of business, the used automotive retail industry is subject to changes in regional U.S. economic conditions, including, but not limited to, interest rates, gasoline prices, inflation, personal discretionary spending levels, and consumer sentiment about the economy in general. Recent and future disruptions in domestic and global economic and market conditions, including rising interest rates and higher grocery and gasoline prices, or significant changes in the political environment (such as the ongoing military conflicts in the Middle East, and Ukraine) and/or public policy, could adversely affect consumer demand or increase the Company’s costs, resulting in lower profitability for the Company. Recent and future disruptions in domestic and global economic and market conditions, including rising interest rates and higher grocery and gasoline, or significant changes in the political environment (such as the ongoing military conflict between Ukraine and Russia) and/or public policy, could adversely affect consumer demand or increase the Company’s costs, resulting in lower profitability for the Company. Due to the Company’s focus on non-prime customers, its actual rate of delinquencies, repossessions and credit losses on contracts could be higher under adverse economic conditions than those experienced in the automotive retail finance industry in general.

The outlook for the U.S. economy and the impacts of efforts to reduce inflation through interest rate increases remains uncertain, which may adversely affect the Company’s financial condition, results of operations and liquidity. Periods of economic slowdown or recession are often characterized by high unemployment and diminished availability of credit, generally resulting in increases in delinquencies, defaults, repossessions and credit losses. Further, periods of economic slowdown may also be accompanied by temporary or prolonged decreased consumer demand for motor vehicles and declining used vehicle prices. Significant increases in the inventory of used vehicles during periods of economic slowdown or recession may also depress the prices at which repossessed automobiles may be sold or delay the timing of these sales. The prices of used vehicles are variable and a rise or decline in the used vehicle prices may have an adverse effect on the Company’s business. The Company is unable to predict with certainty the future impact of the most recent global and domestic economic conditions on consumer demand in our markets or on the Company’s costs.

A reduction in the availability or access to sources of inventory could adversely affect the Company’s business by increasing the costs of vehicles purchased.

The Company acquires vehicles primarily through wholesalers, new car dealers, individuals and auctions. There can be no assurance that sufficient inventory will continue to be available to the Company or will be available at comparable costs. Any reduction in the availability of inventory or increases in the cost of vehicles could adversely affect gross margin percentages as the Company focuses on keeping payments affordable to its customer base. The Company could have to absorb a portion of cost increases. The supply of vehicles at appropriate prices available to the Company is significantly affected by overall new car sales volumes, which were negatively impacted by the business and economic and supply chain disruptions following the outbreak of the COVID-19 pandemic and have historically been materially and adversely affected by prior economic downturns. Any future decline in new car sales could further adversely affect the Company’s access to and costs of inventory. Our ability to source vehicles could also be impacted by the closure of auctions and wholesalers as a result of any future public health crisis, adverse economic conditions, or other factors.

The used automotive retail industry is fragmented and highly competitive, which could result in increased costs to the Company for vehicles and adverse price competition. Increased competition on the financing side of the business could result in increased credit losses.

The Company competes principally with other independent Integrated Auto Sales and Finance dealers, and with (i) the used vehicle retail operations of franchised automobile dealerships, (ii) independent used vehicle dealers, and (iii) individuals who sell used vehicles in private transactions. The Company competes for both the purchase and resale, which includes, in most cases, financing for the customer, of used vehicles. The Company’s competitors may sell the same or similar makes of vehicles that Car-Mart offers in the same or similar markets at competitive prices. Increased competition in the market, including new entrants to the market, could result in increased wholesale costs for used vehicles and lower-than-expected vehicle sales and margins. Further, if any of the Company’s competitors seek to gain or retain market share by reducing prices for used vehicles, the Company would likely reduce its prices in order to remain competitive, which may result in a decrease in its sales and profitability and require a change in its operating strategies. Increased competition on the financing side puts pressure on contract structures and increases the risk for higher credit losses. More qualified applicants have more financing options on the front-end, and if events adversely affecting the borrower occur after the sale, the increased competition may tempt the borrower to default on their contract with the Company in favor of other financing options, which in turn increases the likelihood of the Company not being able to save that account.

The used automotive retail industry operates in a highly regulated environment with significant attendant compliance costs and penalties for non-compliance.

The used automotive retail industry is subject to a wide range of federal, state, and local laws and regulations, such as local licensing requirements and laws regarding advertising, vehicle sales, financing, and employment practices. Facilities and operations are also subject to federal, state, and local laws and regulations relating to environmental protection and human health and safety. The violation of these laws and regulations could result in administrative, civil, or criminal penalties against the Company or in a cease and desist order. As a result, the Company has incurred, and will continue to incur, capital and operating expenditures, and other costs of complying with these laws and regulations. Further, over the past several years, private plaintiffs and federal, state, and local regulatory and law enforcement authorities have increased their scrutiny of advertising, sales and finance activities in the sale of motor vehicles. Additionally, the Company’s finance subsidiary, Colonial, is deemed a “larger participant” in the automobile finance market and is therefore subject to examination and supervision by the CFPB, which has broad regulatory powers over consumer credit products and services such as those offered by the Company.

The Company’s business is geographically concentrated; therefore, the Company’s results of operations may be adversely affected by unfavorable conditions in its local markets.

The Company’s performance is subject to local economic, competitive, and other conditions prevailing in the twelve states where the Company operates. The Company provides financing in connection with the sale of substantially all of its vehicles. These sales are made primarily to customers residing in Alabama, Arkansas, Georgia, Illinois, Kentucky, Mississippi, Missouri, Oklahoma, Tennessee and Texas with approximately 27.1% of revenues resulting from sales to Arkansas customers. The Company’s current results of operations depend substantially on general economic conditions and consumer spending habits in these local markets. Any decline in the general economic conditions or decreased consumer spending in these markets may have a negative effect on the Company’s results of operations.

The Company’s growth strategy is dependent upon the following factors:

●

Favorable operating performance. Our ability to increase revenues at existing dealerships or expand our business through additional dealership openings or strategic acquisitions is dependent on a sufficiently favorable level of operating performance to support the management, personnel and capital resources necessary to successfully grow existing locations, open and operate new locations, or acquire new locations.

●

Ability to successfully identify, complete and integrate new acquisitions. Part of our current growth strategy includes strategic acquisitions of dealerships. We could have difficulty identifying attractive target dealerships, completing the acquisition or integrating the acquired business’ assets, personnel and operations with our own. Acquisitions are accompanied by a number of inherent risks, including, without limitation, the difficulty of integrating acquired companies and operations; potential disruption of our ongoing business and distraction of our management or the management of the target company; difficulties in maintaining controls, procedures and policies; potential impairment of relationships with associates and partners as a result of any integration of new personnel; potential inability to manage an increased number of locations and associates; failure to realize expected efficiencies, synergies and cost savings; reaction to the transaction among the companies’ customers and potential customers; and the effect of any government regulations which relate to the businesses acquired.

●

Availability of suitable dealership sites. Our ability to open new dealerships is subject to the availability of suitable dealership sites in locations and on terms favorable to the Company. If and when the Company decides to open new dealerships, the inability to acquire suitable real estate, either through lease or purchase, at favorable terms could limit the expansion of the Company’s dealership base. In addition, if a new dealership is unsuccessful and we are forced to close the dealership, we could incur additional costs if we are unable to dispose of the property in a timely manner or on terms favorable to the Company. Any of these circumstances could have a material adverse effect on the Company’s expansion strategy and future operating results.

●

Ability to attract and retain management for new and existing dealerships. The success of new dealerships is dependent upon the Company being able to hire and retain additional competent personnel. The market for qualified employees in the industry and in the regions in which the Company operates is highly competitive. If we are unable to hire and retain qualified and competent personnel to operate our new dealerships, these dealerships may not be profitable, which could have a material adverse effect on our future financial condition and operating results.

●

Availability and cost of vehicles. The cost and availability of sources of inventory could affect the Company’s ability to open new dealerships. The cost and availability of sources of inventory could affect the Company’s ability to open new dealerships The long-term impacts of the economic downturn due to COVID-19 on new car sales volumes and the ability of auctions and wholesalers to continue to operate is uncertain. The long-term impacts of the economic downturn due to COVID-19 on new car sales volumes and the ability of auctions and wholesalers to continue to operate is uncertain. Any of these factors could potentially have a significant negative effect on the supply of vehicles at appropriate prices available to the Company in future periods. This could also make it difficult for the Company to supply appropriate levels of inventory for an increasing number of dealerships without significant additional costs, which could limit our future sales or reduce future profit margins if we are required to incur substantially higher costs to maintain appropriate inventory levels.

●

Acceptable levels of credit losses at new dealerships. Credit losses tend to be higher at new dealerships due to fewer repeat customers and less experienced associates; therefore, the opening of new dealerships tends to increase the Company’s overall credit losses. This may require the Company to incur additional costs to reduce future credit losses or to close the underperforming locations altogether. These third-party sites could make it more difficult for us to market our vehicles online and attract customers to our online offerings. Any of these circumstances could have a material adverse effect on the Company’s future financial condition and operating results.

The Company’s business is subject to seasonal fluctuations.

Historically, the Company’s third fiscal quarter (November through January) has been the slowest period for vehicle sales. Conversely, the Company’s first and fourth fiscal quarters (May through July and February through April) have historically been the busiest times for vehicle sales. Therefore, the Company generally realizes a higher proportion of its revenue and operating profit during the first and fourth fiscal quarters. The Company expects this pattern to continue in future years.

If conditions arise that impair vehicle sales during the first or fourth fiscal quarters, the adverse effect on the Company’s revenues and operating results for the year could be disproportionately large.

The effects of any future public health crisis could have a significant impact on our business, sales, results of operations and financial condition.

The global outbreak of COVID-19 led to severe disruptions in general economic activities, particularly retail operations, as businesses and federal, state, and local governments implemented mandates to mitigate this public health crisis. The pandemic has affected consumer demand and the overall health of the U.S. economy. The effects of any future outbreaks of the pandemic or similar health crises could negatively impact all aspects of our business, including used vehicle sales and financing, finance receivable collections, repossession activity and inventory acquisition. Our business is also dependent on the continued health and productivity of our associates, including management teams, throughout this crisis. The consequences of any future adverse public health developments could have a material adverse effect on our business, sales, results of operations and financial condition.

Additionally, our liquidity could be negatively impacted if economic conditions were to once again deteriorate due to a future COVID-19 outbreak or other public health crisis, which could require us to pursue additional sources of financing to obtain working capital, maintain appropriate inventory levels, support the origination of vehicle financing, and meet our financial obligations. Capital and credit markets were significantly affected by onset of the crisis and could be disrupted once again by any future wave of the virus or outbreak of a new coronavirus variant, and our ability to obtain any new or additional financing is not guaranteed and largely dependent upon evolving market conditions and other factors.

Risks Related to the Company’s Operations

The Company may have a higher risk of delinquency and default than traditional lenders because it finances its sales of used vehicles to credit-impaired borrowers.

Substantially all of the Company’s automobile contracts involve financing to individuals with impaired or limited credit histories, or higher debt-to-income ratios than permitted by traditional lenders. Financing made to borrowers who are restricted in their ability to obtain financing from traditional lenders generally entails a higher risk of delinquency, default and repossession, and higher losses than financing made to borrowers with better credit. Delinquency interrupts the flow of projected interest income and repayment of principal from a contract, and a default can ultimately lead to a loss if the net realizable value of the automobile securing the contract is insufficient to cover the principal and interest due on the contract or if the vehicle cannot be recovered. The Company’s profitability depends, in part, upon its ability to properly evaluate the creditworthiness of non-prime borrowers and efficiently service such contracts. Although the Company believes that its underwriting criteria and collection methods enable it to manage the higher risks inherent in financing made to non-prime borrowers, no assurance can be given that such criteria or methods will afford adequate protection against such risks. If the Company experiences higher losses than anticipated, its financial condition, results of operations and business prospects could be materially and adversely affected.

The Company’s allowance for credit losses may not be sufficient to cover actual credit losses, which could adversely affect its financial condition and operating results.

When applicable, the Company has to recognize losses resulting from the inability of certain borrowers to pay contracts and the insufficient realizable value of the collateral securing contracts. The Company maintains an allowance for credit losses in an attempt to cover net credit losses expected over the remaining life of the contracts in the portfolio at the measurement date. Additional credit losses will likely occur in the future and may occur at a rate greater than the Company has experienced to date. The allowance for credit losses represents management’s best estimate of lifetime expected losses based on reasonable and supportable forecasts, historical credit loss experience, changes in contractual characteristics (i.e., average amount financed, term, and interest rates), and other qualitative considerations, such as credit quality trends, collateral values, current and forecasted economic conditions, underwriting and collections practices, concentration risk, credit review, and other external factors., average amount financed, term, and interest rates), and other qualitative considerations, such as credit quality trends, collateral values, current and forecasted economic conditions, underwriting and collections practices, concentration risk, credit review, and other external factors. This evaluation is inherently subjective as it requires estimates of material factors that may be susceptible to significant change. If the Company’s assumptions and judgments prove to be incorrect, its current allowance for credit losses may not be sufficient and adjustments may be necessary to allow for different economic conditions or adverse developments in its contract portfolio which could adversely affect the Company’s financial condition and results of operations. At April 30, 2024 the Company had an allowance for credit losses at 25.32% (compared to 23.91% at April 30, 2023) of the principal balance of finance receivables, net of deferred revenue and pending APP claims. The increase in the allowance for credit losses was primarily due to continuing inflationary pressure on customers and the update to our calculation methodology and the performance of our loan portfolio in the second quarter of the fiscal year 2024. Any future deterioration in economic conditions or consumer financial health may result in additional future credit losses that may not be fully reflected in the allowance for credit losses.

The Company’s success depends upon the continued contributions of its management teams and the ability to attract and retain qualified employees.

The Company is dependent upon the continued contributions of its management teams. Because the Company maintains a decentralized operation in which each dealership is responsible for inspecting and selling its own vehicles, making credit decisions and collecting contracts it originates, the key employees at each dealership are important factors in the Company’s ability to implement its business strategy. Because the Company maintains a decentralized operation in which each dealership is responsible for buying and selling its own vehicles, making credit decisions and collecting contracts it originates, the key employees at each dealership are important factors in the Company’s ability to implement its business strategy. Consequently, the loss of the services of key employees could have a material adverse effect on the Company’s results of operations. In addition, when the Company decides to open new dealerships, the Company will need to hire additional personnel. The market for qualified employees in the industry and in the regions in which the Company operates is highly competitive and may subject the Company to increased labor costs during periods of low unemployment or times of increased competition for labor.

The Company’s business is dependent upon the efficient operation of its information systems.

The Company relies on its information systems in managing its sales, inventory, consumer financing, and customer information effectively. The failure of the Company’s information systems to perform as designed, or the failure to maintain and continually enhance or protect the integrity of these systems, could disrupt the Company’s business, impact sales and profitability, or expose the Company to customer or third-party claims.

Security breaches, cyber-attacks or fraudulent activity could result in damage to the Company's operations or lead to reputational damage.

Our information and technology systems are vulnerable to damage or interruption from computer viruses, network failures, computer and telecommunications failures, infiltration by unauthorized persons and security breaches, usage errors by our employees, power outages and catastrophic events such as fires, tornadoes, floods, hurricanes and earthquakes. A security breach of the Company's computer systems could also interrupt or damage its operations or harm its reputation. In addition, the Company could be subject to liability if confidential customer information is misappropriated from its computer systems. Any compromise of security, including security breaches perpetrated on persons with whom the Company has commercial relationships, that result in the unauthorized release of its users’ personal information, could result in a violation of applicable privacy and other laws, significant legal and financial exposure, damage to the Company's reputation, and a loss of confidence in the Company's security measures, which could harm its business. Any compromise of security could deter people from entering into transactions that involve transmitting confidential information to the Company's systems and could harm relationships with the Company's suppliers, which could have a material adverse effect on the Company's business. Actual or anticipated attacks may cause the Company to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees, and engage third-party experts and consultants. Despite the implementation of security measures, these systems may still be vulnerable to physical break-ins, computer viruses, programming errors, attacks by third parties or similar disruptive problems. The Company may not have the resources or technical sophistication to anticipate or prevent rapidly evolving types of cyber-attacks.

Most of the Company's customers provide personal information when applying for financing. The Company relies on encryption and authentication technology to provide security to effectively store and securely transmit confidential information. Advances in computer capabilities, new discoveries in the field of cryptography or other developments may result in the technology used by the Company to protect transaction data being breached or compromised.

In addition, many of the third parties who provide products, services, or support to the Company could also experience any of the above cyber risks or security breaches, which could impact the Company's customers and its business and could result in a loss of customers, suppliers, or revenue.

We may be unable to keep pace with technological advances and changes in consumer behavior affecting our business, which could adversely affect our business, financial condition and results of operations.

We rely on our information technology systems to facilitate digital sales leads. Our ability to optimize our digital sales platform is affected by online search engines and classified sites that are not direct competitors but that may direct online traffic to the websites of competing automotive retailers. These third-party sites could make it more difficult for us to market our vehicles online and attract customers to our online offerings. Further, to address changes in consumer buying preferences and to improve customer experience, inventory procurement and recruiting and training, we make corresponding technology and systems upgrades. We may not be able to establish sufficient technological upgrades to support evolving consumer buying preferences and to keep pace with our competitors. If these systems fail to perform as designed or if we fail to respond effectively to consumer buying preferences or keep pace with technological advances by our competitors, it could have a material adverse effect on our business, financial condition and results of operations.

Changes in the availability or cost of capital and working capital financing could adversely affect the Company’s growth and business strategies, and volatility and disruption of the capital and credit markets and adverse changes in the global economy could have a negative impact on the Company’s ability to access the credit markets in the future and/or obtain credit on favorable terms.

The Company generates cash from income from continuing operations. The cash is primarily used to fund finance receivables growth. To the extent finance receivables growth exceeds income from continuing operations, the Company generally increases its borrowings under its revolving credit facilities and, more recently, has issued non-recourse notes through asset-back securitization transactions to provide the cash necessary to fund operations. On a long-term basis, the Company expects its principal sources of liquidity to consist of income from continuing operations and borrowings under revolving credit facilities and/or term securitizations. Any adverse changes in the Company’s ability to borrow under revolving credit facilities or by accessing the securitization market, or any increase in the cost of such borrowings, would likely have a negative impact on the Company’s ability to finance receivables growth which would adversely affect the Company’s growth and business strategies. Further, the Company’s current credit facilities and non-recourse notes payable contain various reporting and/or financial performance covenants. Any failure of the Company to comply with these covenants could have a material adverse effect on the Company’s operating results, financial condition, cash flow and ability to implement its business strategy. Any failure of the Company to comply with these covenants could have a material adverse effect on the Company’s ability to implement its business strategy.

If the capital and credit markets experience disruptions and/or the availability of funds becomes restricted, it is possible that the Company’s ability to access the capital and credit markets may be limited or available on less favorable terms which could have an impact on the Company’s ability to refinance maturing debt or react to changing economic and business conditions. In addition, if negative domestic or global economic conditions persist for an extended period of time or worsen substantially, the Company’s business may suffer in a manner which could cause the Company to fail to satisfy the financial and other restrictive covenants under its credit facilities.

The impact of climate-change related events, including efforts to reduce or mitigate the effects of climate change and inclement weather can adversely impact the Company’s operating results.

The effects of climate change such as natural disasters or the occurrence of weather events, such as rain, snow, wind, storms, hurricanes, or other natural disasters, which can adversely affect consumer traffic and operations at the Company’s automotive dealerships as well as customers’ ability to make their car payments, could negatively impact the Company’s operating results. Further, the pricing of used vehicles is affected by, among other factors, consumer preferences, which may be impacted by consumer perceptions of climate change and consumer efforts to mitigate or reduce climate change-related events by purchasing vehicles that are viewed as more fuel efficient (including vehicles powered primarily or solely through electricity). An increase in the supply or a decrease in the demand for used vehicles may impact the resale value of the vehicles the Company sells. Moreover, the implementation of new or revised laws or regulations designed to address or mitigate the potential impacts of climate change (including laws which may adversely impact the auto industry in particular as a result of efforts to mitigate the factors contributing to climate change) could have a significant impact on the Company. Consequently, the impact of climate change-related events, including efforts to reduce or mitigate the effects of climate change, may adversely impact the Company’s operating results.

Risks Related to the Company’s Common Stock

The Company’s stock trading volume may result in greater volatility in the market price of the Company’s common stock and may not provide adequate liquidity for investors.

Although shares of the Company’s common stock are traded on the NASDAQ Global Select Market, the average daily trading volume in the Company’s common stock is less than that of other larger automotive retail companies. A public trading market having the desired characteristics of depth, liquidity and orderliness depends on the presence in the marketplace of a sufficient number of willing buyers and sellers of the common stock at any given time. This presence depends on the individual decisions of investors and general economic and market conditions over which the Company has no control. Given the average daily trading volume of the Company’s common stock, the market price of the Company’s common stock may be subject to greater volatility than companies with larger trading volumes as smaller transactions can more significantly impact the Company’s stock price. Significant sales of the Company’s common stock in a brief period of time, or the expectation of these sales, could cause a decline in the price of the Company’s common stock. The price of the Company’s common stock may also be subject to wide fluctuations based upon the Company’s operating results, general economic and market conditions, general trends and prospects for our industry, announcements by competitors, the Company’s ability to achieve any long-term targets or performance metrics and other factors. Any such fluctuations could increase the Company’s risk of being subject to securities class action litigation, which could result in substantial costs, divert management’s attention and resources and have other material adverse impacts on the Company’s business. Additionally, low trading volumes may limit a stockholder’s ability to sell shares of the Company’s common stock.

The Company currently does not intend to pay future dividends on its common stock.

The Company historically has not paid cash dividends on its common stock and currently does not anticipate paying future cash dividends on its common stock. Any determination to pay future dividends and other distributions in cash, stock, or property by the Company in the future will be at the discretion of the Company’s Board of Directors and will be dependent on then-existing conditions, including the Company’s financial condition and results of operations and contractual restrictions. The Company is also limited in its ability to pay dividends or make other distributions to its shareholders without the consent of its lender. Therefore, stockholders should not rely on future dividend income from shares of the Company’s common stock.

Item 1B. Unresolved Staff Comments

Not applicable.

Item 1C. Cybersecurity

Material Effects of Cybersecurity Incidents

Risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have not materially affected us, including our business strategy, results of operations, or financial condition. Further information regarding cybersecurity risks can be found in Item 1A. Risk Factors, of this Annual Report on Form 10-K.

Cybersecurity Risk Management and Strategy

We consider the protection of our customers’ and corporate data to be a priority within our business. We continually monitor and assess the cybersecurity landscape and invest in enhancing our cybersecurity capabilities and strengthening our partnerships with appropriate business partners, service partners, and government and law enforcement agencies to understand the range of cybersecurity risks in the operating environment, enhance defenses, and improve resiliency against cybersecurity threats. Through these partnerships, we incorporate threat intelligence, security operations, continuous training, and penetration testing. We strive to reduce the threat landscape for both the Company and our customers, through vigilantly monitoring systems and general technology controls.

Our efforts focus on protecting and enhancing the security of our information systems, software, networks, and other assets, whether commercial products or custom solutions. Our cybersecurity program focuses on protecting and enhancing the security of our information systems, software, networks, and other assets, whether commercial products or custom solutions. These efforts are under continuous review for improvement within the changing threat landscape and are designed to protect against, and mitigate the effects of, cybersecurity incidents that could result in unauthorized access to confidential, sensitive, or personal information of associates or customers or proprietary company information and potentially disrupt or impede our operations or otherwise cause harm to the Company, our customers, suppliers, dealers, or other key stakeholders.

Our cybersecurity program leverages both internal and external techniques and expertise across the cybersecurity spectrum. We maintain and utilize industry best practice capabilities, processes, and other security-related measures, based upon National Institute of Standards and Technology (NIST) and Control Objectives for Information Technologies (CoBIT) frameworks. Our capabilities, processes, and other security measures include, among others:

●

Threat detection through the use of security information and event management software;

●

Incident management processes for any security-related activity, requiring senior management signoff;

●

Corporate endpoint detection and response software, which monitors for malicious activities on external-facing endpoints;

●

Cloud monitoring tools, running on primary public and private cloud environments;

●

Data encryption at rest and during transit and immutable data backups; and

●

Business continuity, disaster recovery and incident response plans.

We also expect our suppliers to follow the same industry-standard security practices that we follow. Despite having thorough due diligence, onboarding, and cybersecurity assessment processes in place for our suppliers, the responsibility ultimately rests with our suppliers to establish and uphold their respective cybersecurity programs. The ability and availability of information to monitor the cybersecurity practices and controls of our suppliers is limited, and there can be no assurance that we can prevent or mitigate the risk of any compromise or failure in information systems, software, networks, and other assets owned or controlled by our suppliers. Although the Company attempts to manage its exposure to such events through the purchase of cyber liability insurance, such events are inherently unpredictable, and insurance may not be sufficient to protect the Company against all losses. There is no assurance that the Company's security systems or processes will prevent or mitigate future break-ins, tampering, security breaches or other cyber-related attacks.

Cybersecurity Governance

Our Board of Directors oversees the management of risks inherent in the operation of our business, with a focus on the most significant risks that we face, including those related to cybersecurity. Our Board of Directors has delegated oversight of cybersecurity, including privacy and information security, as well as enterprise risk management to the Innovation and Technology Committee. In connection with that oversight responsibility, our Senior Vice President of Technology and Chief Legal Officer meet with the Innovation and Technology Committee on a quarterly basis to provide information and updates on a range of cybersecurity topics which may include our cybersecurity program and governance processes; cyber risk monitoring and management; the status of projects to strengthen our cybersecurity and privacy capabilities; recent significant incidents or threats impacting our operations, industry, or third-party suppliers; and the emerging threat landscape.

Our information security team works closely with key stakeholders, including regulators, government agencies, law enforcement, peer institutions, industry groups, and develops and invests in talent and innovative technology to manage cybersecurity risk.

When a cybersecurity threat or incident is identified, the Senior Vice President of Technology and the security team works closely with cross functional committees, leveraging subject matter expertise across the organization, as part of our incident response plans and promptly provides information to senior management, with the goal of timely assessing such incidents, determining applicable disclosure requirements and communicating with the Chairs of the Innovation and Technology Committee and the Audit Committee, regarding any significant cybersecurity incidents, including those experienced by third party service providers, which may pose significant risk to our business, customers, clients, associates and stakeholders, and continues to provide regular reports until such incidents are concluded. The above framework tracks and allows team members to monitor each incident throughout its lifecycle to ensure the Company is informed about and following cybersecurity incidents as they are mitigated and remediated. Post-incident reviews are also performed to determine if there are any additional controls that may feasibly be implemented to prevent recurrence.