56 While we have developed systems and processes designed to protect the integrity, confidentiality and security of the sensitive information under our control, we cannot assure you that our security measures or those of the third parties we depend on will be effective in preventing security incidents. There are many different and rapidly evolving cybercrime and hacking techniques, and we may be unable to anticipate attempted security incidents, identify them before our information is exploited, or react in a timely manner. We may be unable to detect vulnerabilities in our information technology systems and software because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security incident has occurred. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. We may expend significant resources or modify our business activities (including our clinical trial activities) to try to protect against security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures, industry-standard or reasonable security measures to protect our information technology systems and sensitive information. Additionally, applicable data protection requirements, including, without limitation, laws, regulations, guidance as well as our internal and external policies and our contractual obligations, may require us to notify relevant stakeholders of security incident, including affected individuals, partners, collaborators, regulators, law enforcement agencies, and others. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to litigation or other liability, fines, harm to our reputation, significant costs, or other materially adverse effects. Any limitations or exclusions of liability in our contracts may not be enforceable or adequate or protect us from liability or damages. Our insurance coverage may not be adequate for cybersecurity liabilities, may not continue to be available to us on economically reasonable terms, or at all, and insurers could deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our reputation, business, financial condition and results of operations. Business disruptions could seriously harm our future revenue and financial condition and increase our costs and expenses. Our operations, and those of our CROs, CMOs, suppliers, and other contractors and consultants, could be subject to earthquakes, power shortages, telecommunications failures, water shortages, floods, hurricanes, typhoons, fires, extreme weather conditions, medical epidemics and other natural or man-made disasters or business interruptions, for which we are partly uninsured. In addition, we rely on our third-party research institution collaborators for conducting research and development of our product candidates, and they may be affected by government shutdowns or withdrawn funding. The occurrence of any of these business disruptions could seriously harm our operations and financial condition and increase our costs and expenses. For example, in connection to health epidemics like the COVID-19 pandemic, the various quarantines, shelter-in-place and similar government orders, or the perception that such orders, shutdowns or other restrictions on the conduct of business operations could occur, related to COVID-19 or other infectious diseases, could adversely affect our business, financial condition or results of operations by limiting our ability to manufacture product, forcing temporary closure of facilities that we rely upon or increasing the costs associated with obtaining clinical supplies of our product candidates. The extent to which health epidemics could impact our results will depend on future developments, which are highly uncertain and cannot be accurately predicted, including the severity and the actions to contain or treat such outbreaks, epidemics, or pandemics, among others. Our operations are located at facilities in Palo Alto, California and Switzerland. Damage or extended periods of interruption to our corporate, development or research facilities due to fire, natural disaster, power loss, communications failure, unauthorized entry or other events could cause us to cease or delay development of some or all of our product candidates. Although we maintain property damage and business interruption insurance coverage on these facilities, our insurance might not cover all losses under such circumstances and our business may be seriously harmed by such delays and interruption. We implemented a new enterprise resource planning, or ERP, system as well as other systems as part of our ongoing technology and process improvements. Our ERP system is critical to our ability to accurately maintain books and records and prepare our financial statements. If we encounter unforeseen problems with our ERP system or other systems and infrastructure, our business, operations, and financial results could be adversely affected.