SCHN 2021 Form 10-K

25 / Schnitzer Steel Industries, Inc. Form 10-K 2021 One or more cybersecurity incidents may adversely impact our financial condition, results of operations, and reputation Our operations involve the use of multiple systems, some of which are outsourced to certain third-party service and hosting providers, that process, store, and transmit sensitive information about our customers, suppliers, employees, financial position, operating results, and strategies. We face global cybersecurity risks and threats on a continual and ongoing basis, which include, but are not limited to, attempts to access systems and information, computer viruses, or denial-of-service attacks. These risks and threats range from uncoordinated individual attempts to sophisticated and targeted measures. Increased numbers of employees working remotely increases our exposure to cyber-threats. While we are not aware of any material cyber-attacks or breaches of our systems to date, such attempts occur regularly and, thus, we have and continue to implement measures to safeguard our systems and information and mitigate potential risks, including employee training around phishing, malware, and other cyber risks, but there is no assurance that such actions will be sufficient to prevent cyber-attacks or security breaches that manipulate or improperly use our systems, compromise sensitive information, destroy or corrupt data, or otherwise disrupt our operations. The occurrence of such events, including breaches of our security measures or those of our third-party service providers, could negatively impact our reputation and our competitive position and could result in litigation with third parties, regulatory action, loss of business due to disruption of operations and/or reputational damage, potential liability and increased remediation and protection costs, any of which could have a material adverse effect on our financial condition and results of operations. Additionally, as cybersecurity risks become more sophisticated, we may need to increase our investments in security measures which could have a material adverse effect on our financial condition and results of operations. Risk Factors Relating to the Regulatory Environment Governmental agencies may refuse to grant or renew our licenses and permits, thus restricting our ability to operate We conduct certain of our operations subject to licenses, permits, and approvals from state and local governments. Governmental agencies often resist the establishment of certain types of facilities in their communities, including metal recycling and auto parts facilities. Changes in zoning and increased residential and mixed-use development near our facilities are reducing the buffer zones and creating land use conflicts with heavy industrial uses such as ours. This could result in increased complaints, increased inspections and enforcement including fines and penalties, operating restrictions, the need for additional capital expenditures, and increased opposition to maintaining or renewing required approvals, licenses, and permits. In addition, waste products from our operations are subject to classification and regulations that, among other things, determine how such materials may be handled, stored, transported, and disposed. Failure to obtain or maintain regulatory permits, approvals, or exemptions for such waste could materially increase our costs or limit our operations. In March 2021, for example, a state court in California determined that the state regulatory agency had a mandatory duty under a 2014 law to rescind the regulatory determinations pursuant to which treated metal shredder residue from our and other metal recycling facilities in the state has been classified as non-hazardous and safely used as alternative daily cover at landfills for over 30 years. See “Legal Proceedings” in Part I, Item 3. While the court’s decision has been stayed and is being appealed, failure to overturn this decision on appeal or to put in place a workable alternative that will allow such material to continue to qualify as non-hazardous waste or to identify other cost-effective disposal options could limit our operations in the state and could have a material adverse effect on our results of operations and on the metal shredding industry in California in general. Furthermore, from time to time, both the U.S. and foreign governments impose regulations and restrictions on trade in the markets in which we operate. In some countries, governments require us to apply for certificates or registration before allowing shipment of recycled metal to customers in those countries. There can be no assurance that future approvals, licenses, and permits will be granted or that we will be able to maintain and renew the approvals, licenses, and permits we currently hold. Failure to obtain these approvals could cause us to limit or discontinue operations in these locations or prevent us from developing or acquiring new facilities, which could have a material adverse effect on our financial condition and results of operations.

RkJQdWJsaXNoZXIy NTIzOTM0