Company: NMFCZ
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001496099-25-000010
Chunk: 182

Company: New Mountain Finance Corp
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 182
---
 these systems in the event of a major telecommunications failure, cyber-attack, fire, earthquake, severe weather conditions or other catastrophic event could cause system interruptions, delays in product development and loss of critical data and could otherwise disrupt their business operations.

The failure of cybersecurity protection systems, as well as the occurrence of events unanticipated in our disaster recovery systems and management continuity planning, could impair our ability to conduct business effectively.

We, and others in our industry, are the targets of malicious cyber activity, which we work hard to prevent. A successful cyber-attack, whether perpetrated by criminal or state-sponsored actors, against us or our service providers, or an accidental disclosure of non-public information, could have an adverse effect on our ability to communicate or conduct business, negatively impacting our operations and financial condition. This adverse effect can become particularly acute if those events affect our electronic data processing, transmission, storage, and retrieval systems, or impact the availability, integrity, or confidentiality of our data.We depend heavily upon computer systems to perform necessary business functions. Despite our implementation of a variety of security measures, our computer systems, networks, and data, like those of other companies, could be subject to unauthorized access, acquisition, use, alteration, or destruction, such as from the insertion of malware (including ransomware). physical and electronic break-ins or unauthorized tampering. If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary, personal, and other information processed, stored in, and transmitted through our computer systems and networks. Such an attack could cause interruptions or malfunctions in our operations, which could result in financial losses, litigation, regulatory enforcement action and penalties, client dissatisfaction or loss, reputational damage, and increased costs associated with mitigation of damages and remediation. If unauthorized parties gain access to such information and technology systems, they may be able to steal, publish, delete or modify private and sensitive information, including nonpublic personal information related to stockholders (and their beneficial owners) and material nonpublic information. The systems we have implemented to manage risks relating to these types of events could prove to be inadequate and, if compromised, could become inoperable for extended periods of time, cease to function properly or fail to adequately secure private information. Breaches such as those involving covertly introduced malware, impersonation of authorized users and industrial or other espionage may not be identified even with sophisticated prevention and detection systems, potentially resulting in further harm and preventing them from being addressed appropriately. The failure of these systems or of disaster recovery plans for any