Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - MSEX
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
ITEM 1A. RISK FACTORS.
The Company’s cybersecurity program is an integral element of the Company's overarching strategic plan and risk management system. The robustness of the cybersecurity initiatives directly impact the realization of the Company's mission, vision, and goals. Aligned with the National Institute of Standards and Technology Cyber Security Framework, the Company employs a comprehensive "defense-in-depth" strategy, deploying multiple security measures to safeguard its operational environment and data integrity systems.Our Chief Technology Officer (CTO), with over 25 years of experience in various disciplines of information technology, oversees the cybersecurity program. Reporting to the Chief Executive Officer , the CTO provides regular briefs to the Board of Directors (the Board) and executive management, informing them about prevention, detection, mitigation, and remediation of cybersecurity incidents, as well as ongoing risks and threats.
Although we have not experienced cybersecurity breaches or incidents that have significantly impacted our financial condition, results of operations, or business strategy, the effectiveness of our measures to prevent, detect, mitigate, or recover is based on currently known threats and recovery methods. There is no guarantee that cybersecurity breaches or incidents will not impact our business operations, strategy, financial condition, or operations.• Active participation and collaboration with organizations such as the Cybersecurity and Infrastructure Security Agency, Water Information Sharing & Analysis Center, New Jersey Cybersecurity and Communications Integration Cell, Delaware Cybersecurity Advisory Council, and the NJBPU. The Company utilizes partners and third-party service providers to help deliver safe and reliable water and wastewater services across its regulated operations. In connection with these relationships, we perform due diligence, cyber risk scoring, cybersecurity related contractual obligations, and periodic reviews of third-party control environments to ensure alignment with the Company's risk exposure, business requirements, and risk tolerances.We extend our cybersecurity focus to third-party service providers by evaluating and monitoring their cybersecurity risks. High-risk vendors undergo continuous monitoring, and we maintain contractual agreements that mandate our third-party providers’ commitment to managing cybersecurity risks, providing incident notifications, and being subject to cybersecurity audits.
• The Board of Directors receives periodic briefings from executive management, including updates on the evolving threat landscape, significant incidents, program enhancements, and the preparedness of internal response capabilities. • Accountability is reinforced through clearly defined roles, responsibilities, and performance metrics, ensuring that all stakeholders from the Board of Directors to operational teams are engaged in maintaining and enhancing the Company’s cybersecurity posture.
Operational Risks
Weather conditions and overuse of underground aquifers may interfere with our sources of water, demand for water services and our ability to supply water to customers.
Our ability to meet current and future water demands of our customers depends on the availability of an adequate supply of water. Our ability to meet current and future water demands of our customers depends on the availability of an adequate supply of water. Unexpected conditions may interfere with our water supply sources. Drought and overuse of underground aquifers may limit the availability of ground and/or surface water. Freezing weather may also contribute to water transmission and distribution interruptions caused by water main breakage. Freezing weather may also contribute to water transmission interruptions caused by water main breakage. Any interruption in our water supply could cause a reduction in our revenue and profitability. These factors may adversely affect our ability to supply water in sufficient quantities to our customers. Governmental drought restrictions, heightened levels of rainfall and temperatures during the typically warmer months that are cooler than normal may result in decreased customer demand for water services and can adversely affect our revenue and earnings.
Our water sources or water service provided to customers may become contaminated by naturally-occurring or man-made compounds and events. Our water sources or water service provided to customers may become contaminated by naturally-occurring or man-made compounds and events. This may cause disruption in services and impose operational and regulatory enforcement costs upon us to restore the water to required levels of quality as well as may damage our reputation and cause private litigation claims against us.
Our sources of water or water in our distribution systems have in the past and in the future may again become contaminated by naturally-occurring or man-made compounds or other contaminants. In the event that any portion of our water supply sources or water distribution systems is contaminated, we may need to interrupt service to our customers until we are able to remediate the contamination or substitute the flow of water from an uncontaminated water source through existing interconnections with other water purveyors or through our transmission and distribution systems, where possible. We may also incur significant costs in treating any contaminated water, or remediating the effects on our treatment and distribution systems, through the use of our current treatment facilities, or development of new treatment methods. Our inability to substitute water supply from an uncontaminated water source, or to adequately treat the contaminated water supply in a cost-effective manner, may reduce our revenues or increase our expenses and make us less profitable.
We may be unable to recover costs associated with treating water supplies through rates or, recovery of these costs may not occur in a timely manner. We may be unable to recover costs associated with treating water supplies through rates or, recovery of these costs may not occur in a timely manner. In addition, we could be subject to claims for damages arising from government enforcement actions or legal actions arising out of interruption of service or actual or perceived human exposure to contaminants in our drinking water and water supplies. In addition, we could be subject to claims for damages arising from government enforcement actions or legal actions arising out of interruption of service or perceived human exposure to hazardous substances in our drinking water and water supplies. Such costs could adversely affect our financial results.
Contamination of the water supply or the water service provided to our customers could result in substantial injury or damage to our customers, employees or others and we could be exposed to substantial claims and litigation, which are
9
inherently subject to uncertainties and are potentially subject to unfavorable regulatory and/or legal actions. Previously, claims have been brought against us alleging our customers received contaminated water. Negative impacts to our profitability and/or our reputation may occur even if we are not responsible for the contamination or the consequences arising out of human exposure to contamination or hazardous substances in the water supplies. Pending or future claims against us could have a material adverse impact on our financial condition, results of operations and cash flows.
The necessity for ongoing physical and technological security has resulted, and may continue to result, in increased operating costs. The necessity for ongoing physical and technological security has resulted, and may continue to result, in increased operating costs.
Because of physical and technological threats to the health and security of the United States of America, we employ physical and technological security measures to guard against such threats and have implemented procedures to review and modify security measures. We provide ongoing training and communications to our employees about threats to our water supply, our assets and related systems and our employees’ personal safety. We have incurred, and will continue to incur, costs for security measures in efforts to protect against such risks.
Climate variability may cause weather volatility in the future, which may impact water usage and related revenue or, may require additional expenditures to reduce risk associated with any increasing storm, flood, drought or other weather occurrences. Climate variability may cause weather volatility in the future, which may impact water usage and related revenue or, may require additional expenditures to reduce risk associated with any increasing storm, flood, drought or other weather occurrences.
Increased climate variability may cause increased precipitation and flooding, increased frequency and severity of storms and droughts and other weather events, any of which may result in degradation of water quality, decreases in available water supply, changes in water usage patterns and disruptions in service. Increased climate variability may cause increased precipitation and flooding, increased frequency and severity of storms and other weather events, potential degradation of water quality, decreases in available water supply, changes in water usage patterns and disruptions in service. Because of the uncertainty of weather volatility related to climate variability, we cannot predict its potential impact on our financial condition, results of operations, cash flows and liquidity. Reductions of or delays in weather forecasting could adversely affect our ability to plan and respond to such events, which may exacerbate the impact of such an event. Although some or all potential expenditures and costs with respect to our regulated businesses could be recovered through rates we charge to our customers, there can be no assurance that the NJBPU or the DEPSC would authorize recovery of such costs, in whole or in part, in a timely manner or at all. Although some or all potential expenditures and costs with respect to our regulated businesses could be recovered through rates we charge to our customers, there can be no assurance that the NJBPU or the DEPSC would authorize recovery of such costs, in whole or in part.
Disruptions in our supply chain related to goods, such as pipe, chemicals, power and other fuel, equipment, water and other raw materials could adversely impact our operations, financial position, and cash flows.
Our ability to serve our customers and operate our business in compliance with regulatory requirements is dependent upon purchasing or securing necessary goods from our suppliers and vendors. These items include but are not limited to chemicals, pipe, valves, hydrants, fittings, equipment (including personal protective equipment), water, and power and other fuel. Examples of supply chain disruptions include reduced quantities of goods available in the marketplace, delays in manufacturing or shipping goods, labor shortages at our suppliers or vendors, natural or other disasters and operational impacts to some of our suppliers or vendors. Disruptions in our supply chain related to goods have occurred and we anticipate may continue to occur in the future.
Supply chain disruptions may cause us to be unable to purchase or otherwise obtain needed goods at a reasonable price or at all, and may significantly increase the price of goods we may obtain from suppliers and vendors. This, in turn, may adversely impact our operations and our ability to serve our customers in compliance with regulatory requirements, as well as our associated results of operations, cash flows and financial condition. While we attempt to plan for and have contingencies in place to address supply chain disruptions, our mitigation efforts may not be successful or may have further negative impacts on us.
Regulatory Risks
Our revenue and earnings depend on the rates we charge our customers. We cannot raise utility rates in our regulated businesses without petitioning and receiving approval from the appropriate Public Utility Commissions. We cannot raise utility rates in our regulated businesses without petitioning the appropriate Utility Commissions. If these agencies modify, delay or deny our petition, our revenues will not increase and our earnings will decline unless we are able to reduce costs without degrading service quality.
The NJBPU regulates our public utility companies in New Jersey with respect to rates and charges for service, classification of accounts, awards of new service territory, acquisitions, financings and other matters. The NJBPU regulates our public utility companies in New Jersey with respect to rates and charges for service, classification of accounts, awards of new service territory, acquisitions, financings and other matters. That means, for example, that we cannot raise the utility rates we charge to our customers in New Jersey without first petitioning the NJBPU for approval and navigating a lengthy administrative process. That means, for example, that we cannot raise the utility rates we charge to our customers without first petitioning the NJBPU and navigating a lengthy administrative process. Similarly, the DEPSC regulates our public utility companies in Delaware. We cannot provide assurance as to when we will request approval for any such matter, nor can we predict whether these Public Utility Commissions will approve, deny or reduce the amount of such requests.
Certain costs are not completely within our control. Certain costs are not completely within our control. The failure to obtain any rate increase would limit our ability to increase our revenues and, unless we are able to reduce costs without degrading service quality, would result in reduced earnings. The failure to obtain any rate increase would prevent us from increasing our revenues and, unless we are able to reduce costs without degrading service quality, would result in reduced earnings. Even if the rates approved are sufficient, we face the risk that we will not achieve the rates of return on equity permitted by the applicable Public Utility Commission. This could occur if certain conditions exist, including, but not limited to, (i) water usage is less than the level anticipated in establishing rates, (ii) customers increase their conservation
10
efforts, (iii) we experience unusual or emergent situations, events or conditions, (iv) a decrease in customers that causes a decrease in operating revenue, or (v) our investments or expenses prove to be higher than the levels estimated in establishing rates.
We are subject to environmental laws and regulations, including water quality and wastewater effluent quality regulations, as well as other state and local regulations. We are subject to environmental laws and regulations, including water quality and wastewater effluent quality regulations, as well as other state and local regulations. Compliance with those laws and regulations requires us to incur costs and we are subject to fines or other sanctions for non-compliance.
Government environmental regulatory agencies regulate our operations in New Jersey and Delaware with respect to water supply, treatment and distribution systems and the quality of water. Government environmental regulatory agencies regulate our operations in New Jersey and Delaware with respect to water supply, treatment and distribution systems and the quality of water. Government environmental regulatory agencies also regulate our operations in New Jersey and Delaware with respect to wastewater collection, treatment and disposal.
Government environmental regulatory agencies’ regulations relating to water quality require us to perform additional testing to ensure our water meets state and federal water quality requirements. Government environmental regulatory agencies’ regulations relating to water quality require us to perform expanded types of testing to ensure our water meets state and federal water quality requirements. We are subject to USEPA regulations under the Federal Safe Drinking Water Act and under the Federal Clean Water Act regarding wastewater services. Regulations under the Safe Drinking Water Act include the Lead and Copper Rule, the maximum contaminant levels established for various volatile organic compounds, the Federal Surface Water Treatment Rule and the Total Coliform Rule. There are also similar NJDEP regulations for our New Jersey water systems. The NJDEP and DEDPH monitor our activities and review the results of water quality tests we perform for adherence to applicable regulations. The NJDEP and DEDPH a monitor our activities and review the results of water quality tests we perform for adherence to applicable regulations. In addition, Government Environmental Regulatory Agencies are continually reviewing regulations governing the limits of certain organic compounds found in the water as byproducts of treatment.
We are also subject to regulations related to fire protection services in New Jersey and Delaware. We are also subject to regulations related to fire protection services in New Jersey and Delaware. In New Jersey there is no state-wide fire protection regulatory agency. However, New Jersey regulations exist as to the size of piping required regarding the provision of fire protection services. In Delaware, fire protection is regulated statewide by the Office of State Fire Marshal.
The cost of compliance with the water and wastewater effluent quality standards depends in part on the limits set in the regulations and on the methods selected to comply with these standards. The cost of compliance with the water and wastewater effluent quality standards depends in part on the limits set in the regulations and on the methods selected to comply with these standards. If new or more restrictive standards are imposed, the cost of compliance could increase and therefore, have an adverse impact on our revenues and results of operations if we cannot recover those costs through the rates we charge our customers. The cost of compliance with fire protection requirements could also increase and make us less profitable if we cannot recover those costs through our rates charged to our customers.
The Company must comply with various environmental laws and regulations promulgated by the USEPA, NJDEP and other governmental agencies, including the Toxic Catastrophe Prevention Act, the Spill Prevention, Control, and Countermeasure Rule and the Discharge Prevention Program of the New Jersey Spill Compensation and Control Act. The Company must comply with various environmental laws and regulations promulgated by the USEPA, NJDEP and other governmental agencies, including the Toxic Catastrophe Prevention Act, the Spill Prevention, Control, and Countermeasure Rule and the Discharge Prevention Program of the New Jersey Spill Compensation and Control Act. If we fail to comply with environmental or other laws and regulations to which our business is subject, we could be subject to fines, penalties or other sanctions, as well as damage to our reputation, as a result of governmental proceedings and private litigation, which could adversely impact our business or results of operations. If we fail to comply with environmental or other laws and regulations to which our business is subject, we could be fined or subject to other sanctions, which could adversely impact our business or results of operations.
Financial Risks
We depend upon our ability to raise money in the capital markets to finance some of the costs of complying with laws and regulations, including environmental laws and regulations and to pay for some of the costs of improvements to or the expansion of our utility system assets. Neither we nor our regulated utility companies can issue debt or equity securities without prior regulatory approval. Our regulated utility companies cannot issue debt or equity securities without prior regulatory approval.
We require financing from external sources to fund the ongoing capital program for the improvement in our utility system assets and for planned expansion of those systems. We require financing from external sources to fund the ongoing capital program for the improvement in our utility system assets and for planned expansion of those systems. We expect to spend approximately $506 million for capital projects through 2028. We must obtain prior approval from our economic regulators to sell debt or equity securities to raise capital for these projects. If sufficient capital is not available, or the cost of capital is too high, or if the regulatory authorities deny our petition to sell debt or equity securities, we may not be able to meet the costs of complying with environmental laws and regulations or the costs of improving and expanding our utility system assets to the level we believe operationally prudent. This may result in the imposition of fines from environmental regulators or restrictions on our operations which could curtail our ability to upgrade or replace utility system assets and have a material adverse effect on our financial condition and results of operations. This may result in the imposition of fines from environmental regulators or restrictions on our operations which could curtail our ability to upgrade or replace utility system assets.
We face competition from other utilities and service providers which might hinder our growth opportunities and mitigate our future profitability. We face competition from other utilities and service providers which might hinder our growth opportunities and mitigate our future profitability.
We face risks of competition from other utilities or other entities authorized by federal, state or local agencies to expand rate-regulated or contracted utility services. We face risks of competition from other utilities or other entities authorized by federal, state or local agencies to expand rate-regulated or contracted utility services. Once a state utility regulator grants a franchise to a public utility to serve a specific territory, that utility effectively has an exclusive right to service that territory. Although a new franchise offers
11
some protection against competitors, the pursuit of franchises is often competitive, particularly in Delaware, where new franchises may be awarded to utilities based upon competitive negotiation. Competing entities have challenged, and may challenge in the future, our applications for new franchises. Also, third parties entering into agreements to operate municipal utility systems may adversely affect the management of our long-term agreements to supply water or wastewater services on a contract basis to those municipalities, which could adversely affect our financial results.
We have short-term and long-term contractual obligations for water, wastewater and storm water system operation and maintenance under which we may incur costs in excess of payments received. 14 Index We have short-term and long-term contractual obligations for water, wastewater and storm water system operation and maintenance under which we may incur costs in excess of payments received.
USA-PA and USA operate and maintain water and wastewater systems for three New Jersey municipalities under 10-year contracts expiring in 2028, 2030 and 2032, respectively. USA-PA and USA operate and maintain water and wastewater systems for three New Jersey municipalities under 10-year contracts expiring in 2028, 2030 and 2032, respectively. These contracts do not protect us against incurring costs in excess of revenues we earn pursuant to the contracts. There can be no assurance we will not experience losses resulting from these contracts. There can be no absolute assurance we will not experience losses resulting from these contracts. Losses under these contracts, or our failure or inability to perform or renew such agreements, may have a material adverse effect on our financial condition and results of operations.
Capital market conditions and key assumptions may adversely impact the value of our postretirement benefit plan assets and liabilities. Capital market conditions and key assumptions may adversely impact the value of our postretirement benefit plan assets and liabilities.
Market factors can adversely affect (1) the rate of return on assets held in trusts to satisfy our future postretirement benefit obligations and (2) interest rates. Reduced rates of return can increase the level of contributions required by us to satisfy future postretirement benefit obligations. Changes in interest rates impact the discount rates used in the determination of our postretirement benefit actuarial valuations. In addition, changes in demographics, such as increases in life expectancy assumptions, can increase future postretirement benefit obligations. Any negative impact to these factors, either individually or a combination thereof, may have a material adverse effect on our financial condition and results of operations.
An element of our growth strategy is the acquisition of water and wastewater assets, operations, contracts or companies. An element of our growth strategy is the acquisition of water and wastewater assets, operations, contracts or companies. Any pending or future acquisitions we decide to undertake will involve risks.
The acquisition and/or operation of additional water and wastewater systems is an element of our growth strategy. The acquisition and/or operation of water and wastewater systems is an element of our growth strategy. This strategy depends on identifying suitable opportunities that meet our risk and reward profile and reaching mutually agreeable terms with acquisition candidates or contract parties. This strategy depends on identifying suitable opportunities that meet our risk/reward profile and reaching mutually agreeable terms with acquisition candidates or contract parties. In addition, many acquisitions or operational arrangements involving regulated water and wastewater systems are subject to approval by one or more governmental or regulatory authorities, which may include Public Utility Commissions or similar bodies with jurisdiction over rates, service territories, ownership changes, or operating authority. There can be no assurance that such approvals will be obtained on acceptable terms, in a timely manner, or at all, and regulatory authorities may impose conditions, limitations, or requirements that increase costs, restrict operations, delay integration, or reduce the anticipated benefits of a transaction.
Acquisitions may result in dilution in the value of our equity securities, incurrence of debt and contingent liabilities and fluctuations in financial results. Further, acquisitions may result in dilution in the value of our equity securities, incurrence of debt and contingent liabilities and fluctuations in financial results. In addition, identifying suitable opportunities, negotiating terms, and integrating operations may require management attention without any assurance of achieving a projected outcome. Even if an acquisition is successfully consummated, or we enter into an agreement to operate additional water or wastewater systems, the assets, operations, contracts or companies we acquire may not achieve the projected revenues and profitability.
Our ability to achieve organic customer growth in our market area is dependent on the residential building market. Our ability to achieve organic customer growth in our market area is dependent on the residential building market. New housing starts and home sale closings are one element that impacts our rate of growth and therefore, may not meet our expectations.
We expect our revenues to increase from customer growth for our regulated water operations as a result of anticipated construction, sale and close of new housing units. We expect our revenues to increase from customer growth for our regulated water operations as a result of anticipated construction, sale and close of new housing units. If housing starts decline, or do not increase as we have projected, or home sales closing cycle times increase as a result of economic conditions or otherwise, the timing and extent of our organic revenue growth may not meet our expectations, our deferred project costs may not produce revenue-generating projects in the timeframes anticipated and our financial results could be negatively impacted.
There can be no assurance we will continue to pay dividends in the future or, if dividends are paid, that they will be in amounts similar to past dividends. There can be no assurance we will continue to pay dividends in the future or, if dividends are paid, that they will be in amounts similar to past dividends.
We have paid dividends on our common stock each year since 1912 and have increased the amount of dividends paid each year since 1973. Our earnings, financial condition, capital requirements, applicable regulations and other factors, including the timeliness and adequacy of rate increases, will determine both our ability to pay dividends and the amount of those dividends. We have paid dividends on our common stock each year since 1912 and have increased the amount of dividends paid each year since 1973. Our earnings, financial condition, capital requirements, applicable regulations and other factors, including the timeliness and adequacy of rate increases, will determine both our ability to pay dividends and the amount of those dividends. There can be no assurance we will continue to pay dividends in the future or, if dividends are paid, that they will be in amounts similar to past dividends. There can be no assurance we will continue to pay dividends in the future or, if dividends are paid, that they will be in amounts similar to past dividends.
12
If we are unable to pay the principal and interest on our indebtedness as it comes due or we default under certain other provisions of our loan documents, our indebtedness could be accelerated and our results of operations and financial condition could be adversely affected.
Our ability to pay the principal and interest on our indebtedness as it comes due will depend upon our current and future performance. Our ability to pay the principal and interest on our indebtedness as it comes due will depend upon our current and future performance. Our performance is affected by many factors, some of which are beyond our control.
We believe cash generated from operations and, if necessary, borrowings under existing credit facilities, will be sufficient to enable us to make our debt payments as they become due. 15 Index We believe cash generated from operations and, if necessary, borrowings under existing credit facilities, will be sufficient to enable us to make our debt payments as they become due. If, however, we do not generate sufficient cash, we may be required to attempt to refinance our obligations or sell additional equity. If, however, we do not generate sufficient cash, we may be required to refinance our obligations or sell additional equity, which may be on terms that are less favorable than we desire.
No assurance can be given that any refinancing or sale of equity will be possible when needed, or that we will be able to negotiate favorable terms. No assurance can be given that any refinancing or sale of equity will be possible when needed, or that we will be able to negotiate acceptable terms. In addition, our failure to comply with certain provisions contained in our trust indentures and loan agreements relating to our outstanding indebtedness could lead to a default under these documents, which could result in an acceleration of our indebtedness.
The current concentration of our business in central New Jersey and in Delaware makes us susceptible to adverse developments in local regulatory, economic, demographic, competitive and weather conditions. The current concentration of our business in central New Jersey and in Delaware makes us susceptible to adverse developments in local regulatory, economic, demographic, competitive and weather conditions.
Our Middlesex System provides water services to customers located primarily in eastern Middlesex County, New Jersey. Our Middlesex System provides water services to customers located primarily in eastern Middlesex County, New Jersey. Water service is provided under wholesale contracts to the Townships of Edison, East Brunswick and Marlboro, the Borough of Highland Park, the Old Bridge Municipal Utilities Authority and the City of Rahway. We also provide water services to customers in the State of Delaware. Our revenues and operating results are therefore subject to local regulatory, economic, demographic, competitive and weather conditions in a relatively concentrated geographic area. A change in any of these conditions could make it more costly for us to conduct our business or reduce the revenue earned in conducting our business. A change in any of these conditions could make it more costly for us to conduct our business.
We are subject to anti-takeover measures that may be used to discourage, delay or prevent changes of control that might benefit non-management shareholders. We are subject to anti-takeover measures that may be used to discourage, delay or prevent changes of control that might benefit non-management shareholders.
Subsection 10A of the New Jersey Business Corporation Act, known as the New Jersey Shareholders Protection Act, applies to us. Subsection 10A of the New Jersey Business Corporation Act, known as the New Jersey Shareholders Protection Act, applies to us. The Shareholders Protection Act deters merger proposals, tender offers or other attempts to effect changes in control that are not approved by our Board of Directors. In addition, we have a classified Board of Directors, which means only a portion of the Director population is elected each year. A classified Board can make it more difficult for an acquirer to gain control of the Company by voting its candidates onto the Board of Directors and may also deter merger proposals and tender offers. The Board of Directors has the authority, upon obtaining NJBPU approval, to issue preferred stock in one or more series with the number of shares, voting rights, designation, limitations and other rights determined at their discretion. Our Board of Directors also has the ability, subject to obtaining NJBPU approval, to issue one or more series of preferred stock having such number of shares, designation, preferences, voting rights, limitations and other rights as the Board of Directors may fix. This could be used by the Board of Directors to discourage, delay or prevent an acquisition the Board of Directors determines is not in the best interest of the common shareholders.
General Risks
General economic conditions may materially and adversely affect our financial condition and results of operations.
Adverse economic conditions could negatively impact our customers’ water usage demands, particularly the level of water usage demand by our commercial and industrial customers in our Middlesex System. Adverse economic conditions could negatively impact our customers’ water usage demands, particularly the level of water usage demand by our commercial and industrial customers in our Middlesex System. If water demand by our commercial and industrial customers in our Middlesex System decreases, our financial condition and results of operations could be negatively impacted until completion of a subsequent base rate filing.
We rely on our information technology systems to help manage our operations.
Our information technology systems require periodic modifications, upgrades and/or replacement which subject us to costs and risks including potential disruption of our internal control structure, substantial unanticipated capital expenditures, additional operating expenses, retention of sufficiently skilled personnel and other risks in transitioning to new systems or integrating new systems. A failure to modify, upgrade or replace our information technology systems could have an adverse impact on our business. In addition, challenges implementing new technology systems may cause disruptions in our business operations and have an adverse effect on our business operations.
Our information technology systems may be subject to physical and cyber attacks. Our information technology systems may be subject to physical and cyber attacks.
We rely on our computer, information and communications technology systems in connection with the operation of our business, especially with respect to customer service and billing, accounting and, in some cases, the monitoring and operation of our operating facilities. We rely on our computer, information and communications technology systems in connection with the operation of our business, especially with respect to customer service and billing, accounting and, in some cases, the monitoring and operation of our operating facilities. Our computer and communications systems and operations could be damaged or interrupted by natural disasters, cyber-attacks, power loss and internet, telecommunications or data network failures or acts
13
of war or terrorism or similar events or disruptions. Any of these or other events could cause service interruption, delays and loss of critical data or, impede aspects of operations and therefore, adversely affect our financial results. Any of these or other events could cause service interruption, delays and loss of critical data or, impede aspects of operations and therefore, adversely affect our financial results.
Cyber-attacks could result in the loss, or compromise, of customer, financial or operational data, disruption of billing, collections or normal field service activities, disruption of electronic monitoring and control of operational systems and delays in financial reporting and other management functions. Cyber-attacks could result in the loss, or compromise, of customer, financial or operational data, disruption of billing, collections or normal field service activities, disruption of electronic monitoring and control of operational systems and delays in financial reporting and other management functions. Possible impacts associated with a cyber-incident may include remediation costs related to lost, stolen, or compromised data, repairs to data processing systems, increased cyber security protection costs, adverse effects on our compliance with regulatory and environmental laws and regulations, including standards for drinking water, litigation and reputational damage.
We depend significantly on the technical and management services of our team, and the departure of any of certain persons could cause our operating results to temporarily be short of our expectations. We depend significantly on the technical and management services of our team, and the departure of any of certain persons could cause our operating results to temporarily be short of our expectations.
Our success depends significantly on the continued individual and collective contributions of our team. Our success depends significantly on the continued individual and collective contributions of our team. If we lose the services of certain members of our team, or are unable to attract and retain qualified personnel in key roles, our operating results could be negatively impacted.
ITEM 1B.ITEM 1A. UNRESOLVED STAFF COMMENTS.UNRESOLVED STAFF COMMENTS.
None.
ITEM 1C.ITEM 1A. CYBERSECURITY
Cybersecurity Program
The Company continually evaluates and refines its cybersecurity program in response to key factors such as evolving threat landscapes, program maturation, gap analysis, and guidance from external security consultants. The Company’s cybersecurity program relies on three key pillars: People, Process and Technology (PPT) to deliver a robust cybersecurity program. The cybersecurity program includes various aspects of PPT, including, but not limited to:
•Technology: Encryption, threat management, backups, monitoring, investigative support utilizing artificial intelligence embedded tools;
•Identity and Access Control Management Tools: Multi-factor authentication, monitoring and alerting of privilege account access;
•Cybersecurity Processes: Vulnerability scanning, penetration testing, and periodic assessments conducted by external security consultants;
•Incident Response Training: Regularly assessed incident response preparedness through various incident response and disaster recovery exercises; and
•Cyber Risk Awareness and Training: Frequent simulation exercises to heighten awareness of cybersecurity threats and educate our user community on preventative measures and reporting protocols. All employees participate in required periodic training with respect to cybersecurity risk and risk mitigation.
In our industry, the continuous functioning of information systems is of the utmost importance. Leveraging information technology systems, we collect, process and safeguard sensitive data and utilize automated tools to operate our plants.
Cybersecurity threats encompass potential hazards such as malicious code, employee misconduct, advanced persistent threats, fraud, and phishing attacks. These risks have the potential to lead to information technology system failures, threat to water supply, or compromise of sensitive information.
Our cybersecurity program aims to protect the uninterrupted availability of critical information technology resources. Regular assessments, conducted both internally and by third parties, evaluate our program against industry standards,
14
including the National Institute of Standards and Technology Cybersecurity Standard and the Risk Management Framework.
The ever-evolving landscape of cybersecurity threats introduces ongoing challenges. The Company recognizes the increasing frequency and sophistication of these threats. Despite implementing measures to secure operational and technology systems and fostering a culture of continuous improvement, the dynamic nature of cyber-attacks and vulnerabilities implies that these defenses may not be foolproof.
Cybersecurity Risk Management Program and Strategy
Cybersecurity risk management strategy is an integral component of our operations and our overall risk management process. Recognizing the dynamic nature of cybersecurity threats, we have implemented a comprehensive risk management program that aims to identify, assess, and mitigate potential risks. Our strategy involves a proactive approach, incorporating preventative measures, continuous monitoring, and adaptive response mechanisms. We prioritize the safeguarding of our operational network environment, sensitive data, including confidential business information and personal details of our customers and employees. Regular assessments conducted both internally and by third parties ensure our cybersecurity program aligns with industry standards. In addition to a dedicated cybersecurity team, we employ a defense-in-depth strategy, utilizing multiple security measures to protect our information technology system. Collaboration with third-party experts, industry peers and ongoing training initiatives ensures our cybersecurity strategy remains robust and responsive to evolving threats. We understand the importance of maintaining a vigilant and adaptive stance in the ever-evolving landscape of cybersecurity to safeguard our business operations, financial stability, and as a direct result, our overall success.
Key elements of our cybersecurity risk mitigation approach are comprised of:
•A dedicated cybersecurity team;
•Collaboration with third-party managed detection and response resources for 24/7 monitoring and response;
•Cybersecurity insurance to cover a portion of losses and damages resulting from cyber-attacks or security breaches;
•An incident response team that is comprised of various departments required for an effective response;
•Conducting periodic drills and exercises, including industry collaborations and participation from the executive team;
•Continuous information security awareness training and phishing simulation exercises;
•Regular security assessments to address evolving risks and threats;
•Deployment of automation solutions to strengthen detection and response capabilities;
•Utilizing services offered by the United States Department of Homeland Security to assist with resiliency planning; and
Third-Party Relationships
15
Governance Structure and Oversight
The Company’s cybersecurity governance framework is designed to ensure robust oversight, accountability, and continuous improvement in managing information technology and cybersecurity risks. Governance responsibilities are distributed across several key bodies and roles:
Board of Directors Oversight
•The Enterprise Risk Committee (Committee) of the Board of Directors serves as the primary oversight body for management of risk identification, assessment, and mitigation strategies related to information technology, cybersecurity, and data security risks.
•The Committee will regularly review and evaluate the effectiveness of the Company’s cybersecurity program, ensuring alignment with the organization’s risk appetite and strategic objectives.
Continuous Improvement and Accountability
•The governance structure supports a culture of continuous improvement, required to adapt to the rapidly changing cybersecurity landscape.
Recently Filed
Click on a ticker to see risk factors
| Ticker * | File Date |
|---|---|
| IRTC | 31 minutes ago |
| GCMG | 34 minutes ago |
| ED | 38 minutes ago |
| IAUX | 39 minutes ago |
| LNC | 39 minutes ago |
| TSCO | 43 minutes ago |
| MSTR | 43 minutes ago |
| GH | 47 minutes ago |
| MIR | 56 minutes ago |
| CSGS | an hour ago |
| LKQ | an hour ago |
| DTM | an hour ago |
| BG | an hour ago |
| THRM | an hour ago |
| SEM | an hour ago |
| TVTX | an hour ago |
| KALU | an hour ago |
| LYV | an hour ago |
| FTI | an hour ago |
| MS | an hour ago |
| ICUI | an hour ago |
| ET | an hour ago |
| BNL | an hour ago |
| OWL | an hour ago |
| BTU | an hour ago |
| EFX | an hour ago |
| PTCT | an hour ago |
| RPD | an hour ago |
| MET | an hour ago |
| IEX | an hour ago |
| CNDT | an hour ago |
| SPSC | an hour ago |
| CYH | an hour ago |
| SLM | an hour ago |
| STT | an hour ago |
| WSC | an hour ago |
| NPO | an hour ago |
| FFBC | an hour ago |
| SUNC | an hour ago |
| FDP | an hour ago |
| SUN | an hour ago |
| UDMY | an hour ago |
| OPEN | an hour ago |
| MSEX | an hour ago |
| ULS | an hour ago |
| GATX | an hour ago |
| RMAX | an hour ago |
| CTO | an hour ago |
| GLPI | an hour ago |
| AIZ | an hour ago |