Sunoco 2014 Annual Report Download - page 25

23
Cybersecurity breaches and other disruptions could compromise our information and expose us to liability, which would
cause our business and reputation to suffer.
In the ordinary course of our business, we collect and store sensitive data, including intellectual property, our proprietary
business information and that of our customers, suppliers and business partners, and personal identification information of our
employees, in our data centers and on our networks. The secure processing, maintenance and transmission of this information is
critical to our operations and business strategy. Despite our security measures, our information technology and infrastructure
may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other disruptions. Any such breach
could compromise our networks and the information stored there could be accessed, publicly disclosed, lost or stolen. Any such
access, disclosure or other loss of information could result in legal claims or proceedings, liability under laws that protect the
privacy of personal information, regulatory penalties, disruption of our operations, damage to our reputation, and cause a loss
of confidence in our products and services, which could adversely affect our business.
Our operations could be disrupted if our information systems fail, causing increased expenses and/or loss of sales.
Our business is highly dependent on financial, accounting and other data processing systems and other communications
and information systems. We process a large number of transactions on a daily basis and rely upon the proper functioning of
computer systems. If a key system was to fail or experience unscheduled downtime for any reason, even if only for a short
period, our operations and financial results could be affected adversely. Our systems could be damaged or interrupted by a
security breach, fire, flood, power loss, telecommunications failure or similar event. We have a formal disaster recovery plan in
place, but this plan may not entirely prevent delays or other complications that could arise from an information systems failure.
Our business interruption insurance may not compensate us adequately for losses that may occur.
Our business could be affected adversely by union disputes and strikes or work stoppages by our unionized employees.
As of December 31, 2014, approximately 49 percent of our workforce was covered by a number of collective bargaining
agreements with various terms and dates of expiration. There can be no assurances that we will not experience a work stoppage
in the future as a result of labor disagreements. Any work stoppages could have a material adverse effect on our business,
financial position, results of operations or cash flows.
We do not control, and therefore may not be able to cause or prevent certain actions by, certain of our joint ventures.
Certain of our joint ventures have their own governing boards, and we may not control all of the decisions of those
boards. Consequently, it may be difficult or impossible for us to cause the joint venture entity to take actions that we believe
would be in our or the joint venture's best interests. Likewise, we may be unable to prevent actions of the joint venture.