S&P Global Inc.

Previous wording

We operate in the capital, commodities, and automotive markets. The capital markets include asset managers, investment banks, commercial banks, insurance companies, exchanges, trading firms, and issuers; the commodities markets include producers, traders and intermediaries within energy, petrochemicals, metals & steel and agriculture; and the automotive markets include manufacturers, suppliers, dealerships, service shops and consumers. Certain risk factors are applicable to certain of our individual segments while other risk factors are applicable Company-wide.

Current wording

We operate in the capital, commodity, and automotive markets. The capital markets include asset managers, investment banks, commercial banks, insurance companies, exchanges, trading firms, and issuers; the commodity markets include producers, consumers, traders and intermediaries within energy, chemicals, shipping, metals, carbon and agriculture; and the automotive markets include manufacturers, suppliers, dealerships, service shops and customers. Certain risk factors are applicable to certain of our individual segments while other risk factors are applicable Company-wide.

Previous wording

•Our operations rely on the secure processing, storage and transmission of confidential, sensitive and other types of data and information in our information systems and networks and those of our third-party service providers, including our vendors. Cyber threats continue to further evolve and continue to be more difficult to detect and successfully defend against. As a result, cyber threats have in the past and may in the future defeat the measures that we or our third-party service providers take to anticipate, detect, avoid, or mitigate such threats.

Current wording

•Our operations rely on the secure processing, storage and transmission of confidential, sensitive and other types of data and information in our information systems and networks and those of our third-party service providers, including our vendors. Cyber threats continue to evolve and are increasingly difficult to detect and successfully defend against. As a result, cyber threats have in the past and may in the future defeat the measures that we or our third-party service providers take to anticipate, detect, avoid, or mitigate such threats.

Previous wording

•The cyber threats we and our third-party service providers (including our vendors) face are rapidly evolving and are becoming increasingly sophisticated and include denial of service attacks, ransomware, spyware, phishing/smishing/vishing attacks, business compromise attacks, employee errors, negligence or malfeasance, the use of malicious codes or worms, payment fraud, and other unauthorized occurrences on, or conducted through, our or our third-party service providers’ (including our vendors’) information systems and networks, originating from a wide variety of sources, including criminals, terrorists, nation states, financially motivated actors, internal actors, and external service providers. The cyber risks the Company faces range from cyber attacks common to most industries, to more sophisticated and targeted attacks, including attacks carried out by state-sponsored actors, intended to obtain unauthorized access to certain information or information systems or networks due in part to our prominence in the global marketplace, such as our ratings on debt issued by sovereigns and corporate issuers, our impending methodology changes in our benchmarks businesses, or the composition of our indices. Our third-party service providers, including our vendors, are also the subject of a variety of cyber attacks, including attacks carried out by state-sponsored actors.

Current wording

•The cyber threats we and our third-party service providers (including our vendors) face are rapidly evolving and are becoming increasingly sophisticated (including through the use of generative artificial intelligence ("AI")) and include denial of service attacks, ransomware, spyware, phishing/smishing/vishing attacks, business compromise attacks, employee errors, negligence or malfeasance, the use of malicious codes or worms, payment fraud, and other unauthorized occurrences on, or conducted through, our or our third-party service providers’ (including our vendors’) information systems and networks, originating from a wide variety of sources, including criminals, terrorists, nation states, financially motivated actors, internal actors, and external service providers. The cyber risks the Company faces range from cyber attacks common to most industries, to more sophisticated and targeted attacks, including attacks carried out by state-sponsored actors, intended to obtain unauthorized access to certain information or information systems or networks due in part to our prominence in the global marketplace, such as our ratings on debt issued by sovereigns and corporate issuers, our impending methodology changes in our benchmarks businesses, or the composition of our indices. Our third-party service providers, including our vendors, are also the subject of a variety of cyber attacks, including attacks carried out by state-sponsored actors.

Previous wording

•We and our third-party service providers, including our vendors, experience cyber attacks, data breaches and other cyber threats of varying degrees on a regular basis. The volume of such attacks, breaches and threats have increased over the years and we expect that volume to continue to increase. Breaches of our or our third-party service providers’ (including our vendors’) information systems and networks may cause material interruptions or malfunctions in our or such third-party’s websites, applications or data processing, or may compromise the confidentiality and integrity of material information regarding us, our business or our customers. Although cyber attacks and data breaches on the Company and its third-party service providers have not had a material adverse effect on the Company, there can be no assurance that there will not be a material adverse effect in the future.

Current wording

•We and our third-party service providers, including our vendors, experience cyber attacks, data breaches and other cyber threats of varying degrees on a regular basis. The volume of such attacks, breaches and threats has increased over the years and we expect that volume to continue to increase. Breaches of our or our third-party service providers’ (including our vendors’) information systems and networks may cause material interruptions or malfunctions in our or such third-party’s websites, applications or data processing, or may compromise the confidentiality and integrity of material information regarding us, our business or our customers. Although we have not experienced a cyber attack or data breach that has had a material adverse effect on us, we may experience such an event in the future.

Previous wording

•In the ordinary course of business, we are exposed to vulnerabilities in widely deployed third-party software. While such vulnerabilities have not resulted in a material adverse effect on the Company, they require us to devote time and resources to remediation on a regular basis. Notwithstanding our efforts, there can be no assurance that we will not suffer a material adverse effect resulting from vulnerabilities in widely deployed third-party software.

Current wording

•In the ordinary course of business, we are exposed to vulnerabilities in widely deployed third-party software. While such vulnerabilities have not resulted in a material adverse effect on the Company, they require us to devote time and resources to remediation on a regular basis. Notwithstanding our efforts, we may suffer a material adverse effect resulting from such vulnerabilities in the future.

Previous wording

•Misappropriation, improper modification, destruction, corruption or unavailability of our data and information, including personal data, due to cyber incidents, attacks or other security breaches, or the perception of such an occurrence, could damage our brand and reputation, result in litigation, regulatory actions, sanctions or other statutory penalties, lead to loss of customer confidence in our security measures and reliability, which would harm our ability to retain customers and gain new ones, result in financial losses that are either not insured against or not fully covered through any insurance maintained by us, and lead to increased expenses related to addressing or mitigating the risks associated with any such incidents. We may be required to expend significant resources to mitigate the impact of any errors, interruptions, delays or cessations of service and we may have insufficient recourse against our third-party service providers, including our vendors. Additionally, our failure to timely or accurately communicate cyber incidents to relevant parties, including as a result of a failure of our third-party service providers, including our vendors, to inform us of incidents impacting their information systems or networks in a timely manner could result in regulatory or litigation risk, and reputational harm.

Current wording

•Misappropriation, improper modification, destruction, corruption or unavailability of our data and information, including personal data, due to cyber incidents, attacks or other security breaches, or the perception of such an occurrence, could damage our brand and reputation, result in litigation, regulatory actions, sanctions or other statutory penalties, or lead to loss of customer confidence in our security measures and reliability. While such incidents have not had a material impact on the Company to date, future incidents could materially harm our ability to retain customers and gain new ones, result in financial losses that are either not insured against or not fully covered through any insurance maintained by us, and lead to increased expenses related to addressing or mitigating the risks associated with any such incidents. We may be required to expend significant resources to mitigate the impact of any errors, interruptions, delays or cessations of service and we may have insufficient recourse against our third-party service providers, including our vendors. Additionally, our failure to timely or accurately communicate cyber incidents to relevant parties, including as a result of a failure of our third-party service providers, including our vendors, to inform us of incidents impacting their information systems or networks in a timely manner could result in regulatory or litigation risk, and reputational harm.

Previous wording

•We devote significant resources to maintain and regularly update our systems and processes that are designed to protect the security of our information systems, software, networks and other technology assets and the confidentiality, integrity and availability of information belonging to the enterprise and our customers, clients and employees. However, such measures may be circumvented or become obsolete, and additional measures that we take to prevent or mitigate cyber incidents may be expensive or ineffective. Accordingly, there can be no assurance that our security measures will be sufficient to protect our information or information systems and networks.

Current wording

•We devote significant resources to maintain and regularly update our systems and processes that are designed to protect the security of our information systems, software, networks and other technology assets and the confidentiality, integrity and availability of information belonging to the enterprise and our customers, clients and employees. However, such measures may be circumvented or become obsolete, and additional measures that we take to prevent or mitigate cyber incidents may be expensive or ineffective.

Previous wording

•While we conduct cyber due diligence during the acquisition process, following the completion of acquisitions, we have identified weaknesses and vulnerabilities in acquired entities’ information systems and networks, which expose us to unexpected liabilities or make our own information systems or networks more vulnerable to a cyber attack. Such weaknesses and vulnerabilities have been, and may continue to be identified as we complete integration of IHS Markit Ltd. information systems and networks.

Current wording

•While we conduct cyber due diligence during the acquisition process, following the completion of acquisitions, we have identified weaknesses and vulnerabilities in acquired entities’ information systems and networks, which expose us to unexpected liabilities or make our own information systems or networks more vulnerable to a cyber attack.

Previous wording

We operate in highly competitive markets that continuously change to adapt to customer needs. We could experience material threats to our existing businesses from the rise of new competitors due to the rapidly changing environment in which we operate. In order to maintain a competitive position, we invest in innovation, new offerings and enhancements, including new ways to deliver our products and services. These new or enhanced offerings resulting from our investments sometimes do not, and may not in the future, achieve market acceptance, profit or the level of profitability that we expect or have experienced historically.

Current wording

We operate in highly competitive markets that continuously change to adapt to customer needs. We could experience material threats to our existing businesses from the rise of new competitors due to the rapidly changing environment in which we operate. For instance, new competitors are leveraging AI in their offerings in ways that could materially reduce demand for our products and services (for example, by deploying AI in ways that make processing of information relatively inexpensive or free or by leveraging AI to build indices or ETFs). In order to maintain a competitive position, we invest in innovation, new offerings and enhancements, including new ways to deliver our products and services (including through AI). These new or enhanced offerings resulting from our investments sometimes do not, and may not in the future, achieve market acceptance, profit or the level of profitability that we expect or have experienced historically.

Previous wording

Our ability to develop, adapt, or implement new and improved processes and technology may materially adversely impact our business, financial condition or results of operations.

Current wording

Our inability to successfully develop, adapt, or implement new and improved processes and technology could materially adversely impact our business, financial condition or results of operations.

Previous wording

•Innovation and constant development in support of new products and enhancements to existing products calls for the implementation of new and improved processes and technologies that require related change management efforts. While we employ a certain level of internal and external resources to mitigate the risks associated with implementing process and technology improvements, new processes and technologies that are still in development tend to be subject to more risks than established processes and technologies. For instance, certain of our new processes require manual data entry or collection before they can be automated, which subjects them to greater risk of human error. We may also face unexpected challenges in execution that may require more management attention than expected, thus diverting management time and energy from other businesses. The foregoing and other unforeseen factors could also result in additional commitments of financial resources and business disruptions.

Current wording

•Innovation and constant development in support of new products and enhancements to existing products calls for the implementation of new and improved processes and technologies that require related change management efforts. While we employ a certain level of internal and external resources to mitigate the risks associated with implementing process and technology improvements, new processes and technologies that are still in development tend to be subject to more risks than established processes and technologies. For instance, we are incorporating AI in internal operations across our Company, which subjects us to a variety of risks, as further described in the risk factor entitled “Our approach to AI may not be successful, which could materially and adversely affect our business, financial condition or results of operations.” Additionally, certain of our new processes require manual data entry or collection before they can be automated, which subjects them to greater risk of human error. We may also face unexpected challenges in execution that may require more management attention than expected, thus diverting management time and energy from other businesses. The foregoing and other unforeseen factors could also result in additional commitments of financial resources and business disruptions.

Previous wording

•We are transitioning our technology to a cloud-based infrastructure, which is complex, time consuming, and involves substantial expenditures. Our utilization of cloud services is critical to developing and providing products and services to our customers, scaling our business for future growth, accurately maintaining data and otherwise operating our business; any such implementation involves risks inherent in the conversion to a new system, including loss of information and potential disruption to our normal operations. We may discover material deficiencies in our design or implementation or maintenance of the new cloud-based systems that could adversely affect our business. Disruptions to either the outsourced systems or the communication links between us and the outsourced supplier negatively affect our ability to operate our data systems, and impair our ability to provide services to our customers.

Current wording

•We have transitioned an important portion of our technology to a cloud-based infrastructure, which is complex, time consuming, and involves substantial expenditures. Our utilization of cloud services is critical to developing and providing products and services to our customers, scaling our business for future growth, accurately maintaining data and otherwise operating our business; any such implementation involves risks inherent in the conversion to a new system, including loss of information and potential disruption to our normal operations. We may discover material deficiencies in our design or implementation or maintenance of the new cloud-based systems that could adversely affect our business. Disruptions to either the outsourced systems or the communication links between us and the outsourced supplier negatively affect our ability to operate our data systems, and impair our ability to provide services to our customers.

Previous wording

•Enhancing existing products and developing new products often requires effective collaboration across various divisions, functions and business lines of the Company. Ineffective or insufficient collaboration across divisions, functions and business lines decreases our ability to expand geographically, enhance products, innovate, increase sales, leads to brand confusion and may result in a material adverse effect on our financial condition or results of operations.

Current wording

•Enhancing existing products and developing new products often requires effective collaboration across various divisions, functions and business lines of the Company. Ineffective or insufficient collaboration across divisions, functions and business lines decreases our ability to expand geographically, enhance products, innovate, increase sales, promote brand awareness (and can lead to brand confusion) and may result in a material adverse effect on our business, financial condition or results of operations.

Previous wording

Increased availability of free or relatively inexpensive information sources may reduce demand for our products and could have a material adverse effect on our business, financial condition or results of operations.

Current wording

Increased availability of free or relatively inexpensive information sources may materially reduce demand for our products and could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

In recent years, more public sources of free or relatively inexpensive information have become available, particularly through the Internet, and advances in public cloud computing and open source software is expected to continue. Moreover, generative artificial intelligence (“AI”) may be used in a way that significantly increases access to publicly available free or relatively inexpensive information. Public sources of free or relatively inexpensive information can reduce demand for our products and services. Demand could also be reduced as a result of cost-cutting initiatives at certain companies and organizations. Although we believe our products are enhanced by our analysis, tools, delivery mechanisms and applications, if a large number of smaller customers or a critical number of larger customers choose to use public sources as a substitute for our products or services, it could have a material adverse effect on our business, financial condition or results of operations.

Current wording

In recent years, more public sources of free or relatively inexpensive information have become available, particularly through the Internet, and advances in public cloud computing and open source software are expected to continue. Moreover, AI is being used in a way that is significantly increasing access to publicly available free or relatively inexpensive information. Given the importance of data to our products and services, the continued growth of publicly available free or relatively inexpensive information could materially reduce demand for our products and services. Demand could also be materially reduced as a result of cost-cutting initiatives at certain companies and organizations that choose to use publicly available free or relatively inexpensive information rather than pay for our products and services. Although we believe our products are enhanced by our analysis, tools, delivery mechanisms and applications, if a large number of smaller customers or a critical number of larger customers choose to use public sources of free or relatively inexpensive information as a substitute for our products or services, it could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

AI is an emerging technology that is expected to fundamentally change the way data is gathered, produced, protected, licensed, processed, and consumed. Given the importance of data to our products and services, AI is becoming an increasingly important part of our business and industry. We have established a Company-wide AI strategy to drive our approach to data protection, licensing and AI integration in our processes, products and services. We have made significant investments in various AI initiatives. However, the AI landscape is complex and rapidly evolving, and new and enhanced laws and regulations, governmental or regulatory scrutiny, competition from established or emerging companies, litigation, ethical concerns, cybersecurity concerns, intellectual property concerns, or other complications could adversely impact our ability to protect our data and intellectual property, to develop and offer products and services that effectively use AI, to compete with other AI products or services, or to improve efficiency of existing products or services through the effective use of AI to remain competitive, or could increase our burden and cost of research, development and regulatory compliance. For instance, competitors may deploy AI in ways that make processing of information relatively inexpensive or free, which could significantly reduce demand for our data. Additionally, we may be unable to effectively license or otherwise protect our data from unintended use by AI. For additional risks related to intellectual property rights, see the risk factor entitled “Our ability to protect our intellectual property rights could impact our competitive position.” The development, testing and deployment of AI systems requires continued investment and may materially increase the cost profile of our offerings due to the nature of the computing cost involved in such systems. In addition, the number of approaches to integrating and commercializing AI is currently large, and many of those approaches may fail to gain market acceptance or become obsolete as AI continues to evolve. At this time, we are unable to predict which offerings will ultimately be successful. Notwithstanding our investments, our products and services may become less marketable or less competitive, or potentially obsolete if either our approach to integrating AI into our products and services fails to gain market acceptance or our approach to protecting our data and intellectual property is ultimately inadequate. Any of these factors could materially and adversely affect our business, financial condition or results of operations.

Current wording

AI is an emerging technology that is fundamentally changing the way data is gathered, produced, protected, licensed, processed, and consumed. Given the importance of data to our products and services, AI continues to be an increasingly important part of our business and industry. We have established a Company-wide AI strategy to drive our approach to data protection, licensing and AI integration in our processes, products and services. We have made significant investments in various AI initiatives. However, the AI landscape is complex and rapidly evolving, and new and enhanced laws and regulations (or inadequate laws or regulations), governmental or regulatory scrutiny, competition from established or emerging companies, litigation, ethical concerns, cybersecurity concerns, intellectual property concerns, or other complications could materially and adversely impact our ability to protect our data and intellectual property, to develop and offer products and services that effectively use AI, to compete with other AI products or services, to improve efficiency of existing products or services through the effective use of AI to remain competitive, or to incorporate AI in our internal operations, or could materially increase our burden and cost of research, development and regulatory compliance. As discussed in the risk factor entitled “The markets in which we operate continuously change to adapt to customer needs. Our inability to innovate and compete with new or enhanced products and services of our competitors could impact our profitability,” competitors are deploying AI in ways that could materially reduce demand for our products and services. Additionally, we may be unable to protect our data from unintended use or access by third-party AI systems. For additional risks related to intellectual property rights, see the risk factor entitled “Our ability to protect our intellectual property rights could impact our competitive position.” The development, testing and deployment of AI systems requires continued investment and may materially increase the cost profile of our offerings due to the nature of the computing cost involved in such systems. In addition, the number of approaches to integrating and commercializing AI is currently large, and many of those approaches may fail to gain market acceptance or become obsolete as AI continues to evolve. At this time, we are unable to predict which offerings will ultimately be successful. Notwithstanding our investments, our products and services may become less marketable or less competitive, or potentially obsolete if either our approach to integrating AI into our products and services fails to gain market acceptance or our approach to protecting our data and intellectual property is ultimately inadequate. Any of these factors could materially and adversely affect our business, financial condition or results of operations.

Previous wording

Social and ethical issues relating to the use of new and evolving technologies, such as AI, in our offerings could materially and adversely affect our business, financial condition or results of operations.

Current wording

Social, ethical and operational issues relating to the use of new and evolving technologies, such as AI, in our offerings could materially and adversely affect our business, financial condition or results of operations.

Previous wording

Many of our offerings use new and evolving technologies, such as AI. These new and evolving technologies often present social and ethical risks and challenges that could affect their adoption, and therefore our business. For example, the use of AI could lead to harmful consequences such as accuracy issues, unintended biases or discriminatory outputs. If we enable or offer solutions that draw controversy due to their perceived or actual impact on society or if we fail to properly remediate any social or ethical issues that may arise in our offerings, we may experience brand or reputational harm, competitive harm, legal liability or loss of public confidence, or our products and services may become less marketable or less competitive. For our AI products and services to be competitive in the evolving and continually developing AI landscape, we must apply resources and make investments to secure such competitiveness and to ensure that our AI products and services are developed and implemented in a way to minimize unintended and harmful impacts. In addition, our failure to continue development and adoption of ethical and transparent policies and procedures related to AI could negatively impact our reputation and customer confidence. Any of these social or ethical issues could materially and adversely affect our business, financial condition or results of operations.

Current wording

Many of our offerings use new and evolving technologies, such as AI. These new and evolving technologies often present social and ethical risks and challenges that could affect their adoption, and therefore our business. For example, the use of AI could lead to harmful consequences such as accuracy issues, unintended biases or discriminatory outputs. Enabling or offering solutions that draw controversy due to their perceived or actual impact on society or failing to properly remediate any social or ethical issues that may arise in our offerings may result in material brand or reputational harm, competitive harm, legal liability or loss of public confidence, or a material reduction to the marketability or competitiveness of our products and services. For our AI products and services to be competitive in the evolving and continually developing AI landscape, we must apply resources and make investments to secure such competitiveness and to ensure that our AI products and services are developed and implemented in a way to minimize unintended and harmful impacts. In addition, our failure to continue development and adoption of ethical and transparent policies and procedures related to AI could negatively impact our reputation and customer confidence. Any of these social, ethical or operational issues could materially and adversely affect our business, financial condition or results of operations.

Previous wording

•This may include a disruption involving physical or technological infrastructure used by us or third parties with or through whom we conduct business, whether due to human error, natural disasters, power loss, telecommunication failures, break-ins, sabotage, intentional acts of vandalism, acts of terrorism, political unrest, war or otherwise. Our efforts to secure and plan for potential disruptions of our major operating systems may not be successful.

Current wording

•This may include a disruption involving physical or technological infrastructure used by us or third parties with or through whom we conduct business, whether due to human error, natural disasters, power loss, telecommunication failures, cyber attacks, data breaches, break-ins, sabotage, intentional acts of vandalism, acts of terrorism, political unrest, war or otherwise. Our efforts to secure and plan for potential disruptions of our major operating systems are not always successful, and future disruptions could have a material adverse effect on the Company.

Previous wording

•Many of these proceedings, investigations and inquiries (including market studies) regularly relate to the activity of our Ratings, Indices, and Commodity Insights businesses. In addition, various government and self-regulatory agencies frequently make inquiries and conduct investigations into our compliance with applicable laws and regulations, including those related to our regulated activities, antitrust matters, and other matters, such as environmental, social and governance (“ESG”) matters. From time to time, we also face proceedings, investigations or inquiries related to tax matters. Enhancements to our products and services combined with evolving regulation requires us to continuously evaluate our regulatory and compliance obligations, and government and self-regulatory agencies may conduct investigations to determine whether our products and services subject us to additional regulations. Any of these proceedings, investigations or inquiries (including market studies) impose additional expenses on the Company, require the attention of senior management, and could ultimately result in adverse judgments, damages, fines, penalties, activity restrictions, reduced demand for our products and services, or negative impacts on our cash flows, which could have a material adverse effect on our business, financial condition or results of operations.

Current wording

•Many of these proceedings, investigations and inquiries (including market studies) regularly relate to the activity of our Ratings, Indices, and Commodity Insights businesses. In addition, various government and self-regulatory agencies frequently make inquiries and conduct investigations into our compliance with applicable laws and regulations, including those related to our regulated products and services, antitrust matters, and other matters, such as environmental, social and governance (“ESG”) matters. From time to time, we also face proceedings, investigations or inquiries related to tax matters. Enhancements to our products and services combined with evolving regulation requires us to continuously evaluate our regulatory and compliance obligations, and government and self-regulatory agencies may conduct investigations to determine whether our products and services subject us to additional regulations. Any of these proceedings, investigations or inquiries (including market studies) impose additional expenses on the Company, require the attention of senior management, and could ultimately result in adverse judgments, damages, fines, penalties, activity restrictions, reduced demand for our products and services, or negative impacts on our cash flows, which could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

•In view of the uncertainty inherent in litigation, government and regulatory enforcement matters, and changing political sentiments, we cannot predict the eventual outcome of the matters we are currently facing or the timing of their resolution, or in most cases reasonably estimate what the eventual judgments or impact of activity restrictions may be. As a result, we cannot provide assurance that the outcome of the matters we are currently facing or that we may face in the future will not have a material adverse effect on our business, financial condition or results of operations.

Current wording

•In view of the uncertainty inherent in litigation, government and regulatory enforcement matters, and changing political sentiments, we cannot predict the eventual outcome of the matters we are currently facing or the timing of their resolution, or in most cases reasonably estimate what the eventual judgments or impact of activity restrictions may be. The outcome of matters we are currently facing or that we may face in the future could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

•As litigation or the process to resolve pending matters progresses, as the case may be, we continuously review the latest information available and assess our ability to predict the outcome of such matters and the effects, if any, on our consolidated financial condition, cash flows, business and competitive position, which may require that we record liabilities in the consolidated financial statements in future periods.

Current wording

•As litigation or the process to resolve pending matters progresses, as the case may be, we continuously review the latest information available and assess our ability to predict the outcome of such matters and the effects, if any, on our consolidated financial condition, cash flows, business and competitive position, which sometimes requires us to record liabilities in the consolidated financial statements.

Previous wording

•We, and certain types of information we collect, compile, use, and publish, are subject to numerous U.S. federal and state laws and non-U.S. regulations governing the protection of personal and confidential information of our clients and employees in the jurisdictions in which we operate. Further, global privacy, data localization, data maintenance, data transfer and data protection legislation, regulatory, enforcement, and policy activity are rapidly and continually evolving and creating a complex regulatory compliance environment. There is also increasing concern among certain privacy and data protection advocates, government regulators, litigators, and the press regarding marketing and privacy matters as well as data protection, particularly as they relate to individual privacy, threats to personal information, and perceived national security interests. Costs and adaptation of our business practices to comply with and implement the increasing privacy-related and data protection, data maintenance and transfer restriction measures have been, and we expect will continue to be, significant, particularly as the laws and regulations across jurisdictions change frequently and sometimes conflict. In addition, such measures, as well as any associated inquiries or investigations or any other government actions, increase our operating costs and require significant management time and attention, and may result in negative publicity and subject us to costs that may harm our business, including fines or damages as well as demands or orders that we modify or cease existing business practices.

Current wording

•We, and certain types of information we collect, compile, use, and publish, are subject to numerous U.S. federal and state laws and non-U.S. regulations governing the protection of personal and confidential information of our clients, employees and products in the jurisdictions in which we operate. Further, global privacy, data localization, data maintenance, data transfer and data protection legislation, regulatory, enforcement, and policy activity are rapidly and continually evolving and creating a complex regulatory compliance environment. There is also increasing concern among certain privacy and data protection advocates, government regulators, litigators, and the press regarding marketing and privacy matters as well as data protection, particularly as they relate to individual privacy, threats to personal information, and perceived national security interests. Costs and adaptation of our business practices to comply with and implement the increasing privacy-related and data protection, data maintenance and transfer restriction measures have been, and we expect will continue to be, significant, particularly as the laws and regulations across jurisdictions change frequently and sometimes conflict. In addition, such measures, as well as any associated inquiries or investigations or any other government actions, increase our operating costs and require significant management time and attention, and may result in negative publicity and subject us to costs that may harm our business, including fines or damages as well as demands or orders that we modify or cease existing business practices.

Previous wording

•There has been increased public attention regarding the use of personal information and data transfer, accompanied by examinations of regulated entities, and legislation and regulations intended to strengthen data protection, information security and consumer and personal privacy. The law in these areas continues to develop and the changing nature and interpretations by courts around the world of privacy and data protection laws around the world, including in jurisdictions such as the U.S. (including in an increasing number of U.S. states), the European Union (the “EU”), the People’s Republic of China and India, could have a significant impact on our processing of personal and sensitive information of our employees, vendors and customers and other data, and in turn, our business practices.

Current wording

•There has been increased public attention regarding the use and transfer of personal information, accompanied by examinations of regulated entities, and legislation and regulations intended to strengthen data protection, information security and consumer and personal privacy. The law in these areas continues to develop and the changing nature and interpretations by courts of privacy and data protection laws around the world, including in jurisdictions such as the U.S. (including in an increasing number of U.S. states), the European Union (the “EU”), the People’s Republic of China and India, could have a significant impact on our processing of personal and sensitive information of our employees, vendors and customers and other data, and in turn, our business practices.

Previous wording

•We devote meaningful time and financial resources to compliance with current and future applicable international and U.S. privacy, cybersecurity, data protection and related laws and regulations. We have made, and expect to continue to make, capital investments and other expenditures to address cybersecurity preparedness and prevent future breaches, including costs associated with additional security technologies, personnel, experts and credit monitoring services for those whose data has been breached. Any such expenses that we incur in the future, which could be material, will impact our results of operations in the period in which they are incurred, but may not meaningfully limit the success of future attempts to compromise our information or information technology systems.

Current wording

•We devote meaningful time and financial resources to compliance with current and future applicable international and U.S. privacy, cybersecurity, data protection and related laws and regulations. We have made, and expect to continue to make, capital investments and other expenditures to address cybersecurity preparedness and prevent future cyber incidents and breaches, including costs associated with additional security technologies, personnel, experts and credit monitoring services for those whose data has been breached. Any such expenses that we incur in the future, which could be material, will impact our results of operations in the period in which they are incurred, but may not meaningfully limit the success of future attempts to compromise our information or information technology systems.

Previous wording

Future legislation, regulatory reform or policy changes, such as financial services regulatory reform, energy or commodity-specific regulation, including oil, regulations related to pricing providers, sustainability, credit rating data, data privacy, operational resilience and cyber security, tax regulations, AI, ESG, government-sponsored enterprise reform and increased infrastructure spending and significant changes in trade policy (including sanctions), could impact our business. There are currently a number of laws and regulations in jurisdictions in which we operate around the world that have recently been adopted but not yet implemented or have been proposed or are being considered to which we or our clients will or may become subject, but at this time their impact on our business and results of operations remains uncertain. Changes in legislation, regulation or policy increase the likelihood that we will fail to appropriately adapt to changes in our compliance obligations, particularly when such changes happen abruptly, such as following a change in government. Any of the foregoing changes could increase our litigation and regulatory exposure, directly impact our results of operations and cash flows, adversely affect our ability to provide our products and services, or adversely impact the demand for our products and services. Such changes may also impact our business by creating increased volatility and uncertainty in the markets in which we operate. At this time, we cannot predict the scope or nature of these changes or assess what the overall effect of such potential changes could be on our results of operations or cash flows.

Current wording

Future legislation, regulatory reform or policy changes, such as financial services regulatory reform, energy or commodity-specific regulation, including oil, regulations related to pricing providers, credit rating data, data privacy, operational resilience and cybersecurity, tax regulations, AI, ESG (including matters of diversity, equity and inclusion (“DEI”)), government-sponsored enterprise reform and increased infrastructure spending and significant changes in trade policy (including sanctions and tariffs), could impact our business. There are currently a number of laws and regulations in jurisdictions in which we operate around the world that have recently been adopted but not yet implemented or have been proposed or are being considered to which we or our clients will or may become subject, but at this time their impact on our business and results of operations remains uncertain. Changes in legislation, regulation or policy increase the likelihood that we will fail to appropriately adapt to changes in our compliance obligations, particularly when such changes happen abruptly, such as following a change in government. Any of the foregoing changes could increase our litigation and regulatory exposure, directly impact our results of operations and cash flows, adversely affect our ability to provide our products and services, or adversely impact the demand for our products and services. Such changes may also impact our business by creating increased volatility and uncertainty in the markets in which we operate. At this time, we cannot predict the scope or nature of these changes or assess what the overall effect of such potential changes could be on our results of operations or cash flows.

Previous wording

•The financial services industry is highly regulated, rapidly evolving and subject to the potential for increasing regulation in the U.S., Europe and elsewhere. The businesses conducted by Ratings are regulated under the laws of various jurisdictions around the world, including the Credit Rating Agency Reform Act of 2006, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the U.S. Securities Exchange Act of 1934, the EU’s credit rating agency regulation, and the U.K.’s credit rating agency regulation.

Current wording

•The financial services industry is highly regulated, rapidly evolving and subject to the potential for increasing regulation in the U.S., Europe and elsewhere. The businesses conducted by Ratings are regulated under the laws of various jurisdictions around the world, including the U.S. Credit Rating Agency Reform Act of 2006, the U.S. Dodd-Frank Wall Street Reform and Consumer Protection Act, the U.S. Securities Exchange Act of 1934, the EU’s credit rating agency regulation, and the U.K.’s credit rating agency regulation.

Previous wording

•The U.S. Congress, the International Organization of Securities Commissions ("IOSCO"), the SEC, the European Commission, including through the European Securities Market Authority and the U.K. Financial Conduct Authority (“FCA”), as well as regulators in other countries in which Ratings operates, have reviewed the role of rating agencies and their processes and the need for greater oversight or regulations concerning the issuance of credit ratings or the activities of credit rating agencies, and they may conduct such reviews in the future. Other laws, regulations and rules relating to credit rating agencies are from time to time considered by local, national and multinational bodies and are likely to continue to be considered in the future, including, for example, provisions seeking to reduce regulatory and investor reliance on credit ratings or to increase competition among credit rating agencies, provisions regarding remuneration and rotation of credit rating agencies, and liability standards applicable to credit rating agencies. Other laws, regulations and rules are being considered or are likely to be considered in the future that may impact ancillary and other services provided by Ratings in addition to its credit rating products and services, for example regulatory oversight regimes for ESG ratings providers such as the proposal for an EU regulation on the transparency and integrity of ESG rating activities.

Current wording

•The U.S. Congress, the International Organization of Securities Commissions ("IOSCO"), the SEC, the European Commission, including through the European Securities Market Authority (“ESMA”) and the U.K. Financial Conduct Authority (“FCA”), as well as regulators in other countries in which Ratings operates, have reviewed the role of rating agencies and their processes and the need for greater oversight or regulations concerning the issuance of credit ratings or the activities of credit rating agencies, and they may conduct such reviews in the future. Other laws, regulations and rules relating to credit rating agencies are from time to time considered by local, national and multinational bodies and are likely to continue to be considered in the future, including, for example, provisions seeking to reduce regulatory and investor reliance on credit ratings or to increase competition among credit rating agencies, provisions regarding remuneration and rotation of credit rating agencies, and liability standards applicable to credit rating agencies. Other laws, regulations and rules are being considered or are likely to be considered in the future that may impact ancillary and other services provided by Ratings in addition to its credit rating products and services. Examples include regulatory oversight regimes for ESG ratings providers which may impose new regulatory requirements regarding some of Ratings’ ancillary and other services, such as the EU regulation on the transparency and integrity of ESG rating activities adopted by the European Parliament and Council in November 2024, or draft legislation published by the U.K. in 2024 to empower the FCA to supervise ESG ratings providers.

Previous wording

Our international business activities must comport with international trade restraints, including economic sanctions regulations administered by the U.S. Treasury Department’s Office of Foreign Assets Controls, which could affect our ability to market and/or sell our products and services into certain countries where we do business. Failure to comply with these laws and regulations can result in significant fines and penalties and related material adverse effects on our reputation, business, financial condition and results of operations.

Current wording

Our international business activities must comport with international trade restraints, including economic sanctions regulations administered by the U.S. Treasury Department’s Office of Foreign Assets Control, which could affect our ability to market and/or sell our products and services into certain countries where we do business. Failure to comply with these laws and regulations can result in significant fines and penalties and related material adverse effects on our reputation, business, financial condition and results of operations.

Previous wording

•Additional international trade restraints may be promulgated at any time and may require changes to our operations and increase our risk of noncompliance.

Current wording

•Additional international trade restraints may be promulgated at any time, including following the recent change in the US administration, and may require changes to our operations and increase our risk of noncompliance.

Previous wording

We may become subject to liability or face reputational harm based on the use of our products by our clients.

Current wording

We may become subject to liability or face reputational harm due to our offerings.

Previous wording

•Some of our products support the investment processes and other activities of our clients, which, in the aggregate, manage or own trillions of dollars of assets. The use of our products as part of such activities, including the investment process, from time to time exposes us to claims for significant dollar amounts by our clients or the parties whose assets are managed by our clients. Such claims have not materially adversely affected us to date, but there can be no assurance that future claims will not materially adversely affect our business, financial condition or results of operations.

Current wording

•Some of our products and services support the investment processes and other activities of our clients, which, in the aggregate, manage or own trillions of dollars of assets. The use of our products or services as part of such activities, including the investment process, from time to time exposes us to claims for significant dollar amounts by our clients or the parties whose assets are managed by our clients. Such claims have not materially adversely affected us to date, but future claims may have a material adverse effect on our business, financial condition or results of operations.

Previous wording

•Any claim relating to our products, even one in which the outcome is ultimately favorable to us, involves a significant commitment of our management, personnel, financial and other resources and could have a negative impact on our reputation. In addition, such claims and lawsuits could have a material adverse effect on our business, financial condition or results of operations.

Current wording

•Any claim relating to our products or services, even one in which the outcome is ultimately favorable to us, involves a significant commitment of our management, personnel, financial and other resources and could have a negative impact on our reputation. In addition, such claims and lawsuits could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

•Economic conditions and volatility across the globe are generally affected by negative or uncertain economic and political conditions. In addition, natural and man-made disasters, public health crises (e.g., pandemics), and military conflict, such as the ongoing military conflicts between Russia and Ukraine and Israel and Hamas, introduce volatility and uncertainty into the global capital and commodities markets and negatively impact general economic conditions. Volatile, negative or uncertain economic and political conditions in our significant markets typically undermine business confidence in our significant markets or in other markets, which are increasingly interdependent. Because we operate globally and have significant businesses in many markets, increased volatility or an economic slowdown in any of those markets typically adversely affects our results of operations. For example, military conflicts typically result in adverse and uncertain economic conditions such as negatively impacting global demand for goods and services; causing supply chain disruptions; increasing costs for transportation, energy and other raw materials; and causing an increase in cyber security incidents. Such conditions typically result in increased volatility and disruption to the global economy and the markets in which we operate, thereby adversely impacting our results of operations.

Current wording

•Economic conditions and volatility across the globe are generally affected by negative or uncertain economic and political conditions. In addition, natural and man-made disasters, public health crises (e.g., pandemics), and military conflict, such as the ongoing military conflicts between Russia and Ukraine and in the Middle East, introduce volatility and uncertainty into the global capital and commodities markets and negatively impact general economic conditions. Volatile, negative or uncertain economic and political conditions in our significant markets typically undermine business confidence in our significant markets or in other markets, which are increasingly interdependent. Because we operate globally and have significant businesses in many markets, increased volatility or an economic slowdown in any of those markets typically adversely affects our results of operations. For example, military conflicts typically result in adverse and uncertain economic conditions such as negatively impacting global demand for goods and services; causing supply chain disruptions (e.g., tensions across the Taiwan Straight that could lead to semiconductor supply disruption); increasing costs for transportation, energy and other raw materials; and causing an increase in cybersecurity incidents. Such conditions typically result in increased volatility and disruption to the global economy and the markets in which we operate, thereby adversely impacting our results of operations.

Previous wording

Inability to attract and retain key qualified personnel could have a material adverse effect on our business and results of operations.

Current wording

Inability to attract, retain or train key qualified personnel or to navigate key management transitions could have a material adverse effect on our business and results of operations.

Previous wording

The development, maintenance, sale and support of our products and services are dependent upon the knowledge, experience and ability of our highly skilled, educated and trained employees. Accordingly, our business is dependent on successfully attracting, retaining and training talented employees in a highly competitive business environment. Our ability to attract and retain talented employees is dependent on a number of factors, including prevailing market conditions and compensation packages offered by companies competing for the same talent. While we offer competitive salary and benefit packages, intense competition for talent within our markets is driving difficulties in attracting and retaining skilled employees. If we are less successful in our recruiting efforts, or if we are unable to attract or retain key employees, our ability to develop and deliver successful products and services or achieve strategic goals may be adversely affected, which could have a material adverse effect on our business and results of operations.

Current wording

The development, maintenance, sale and support of our products and services are dependent upon the knowledge, experience and ability of our highly skilled, educated and trained key personnel. Accordingly, our business is dependent on successfully attracting, retaining and training talented employees and navigating key management transitions (including in our executive leadership team) in a highly competitive business environment. Our ability to attract and retain talented employees is dependent on a number of factors, including prevailing market conditions and compensation packages offered by companies competing for the same talent. While we offer competitive salary and benefit packages, intense competition for talent within our markets is driving difficulties in attracting and retaining skilled employees. Key management transitions, such as the recent changes to our executive leadership team, involve inherent risk, and such transition periods can be disruptive and may result in a loss of personnel with deep institutional or technical knowledge. If we are less successful in our recruiting efforts, or if we are unable to attract, retain or train key qualified personnel or to navigate key management transitions, our ability to develop and deliver successful products and services or achieve strategic goals may be adversely affected, which could have a material adverse effect on our business and results of operations.

Previous wording

•We have made and expect to continue to make acquisitions, divestitures and other strategic transactions to strengthen our business and grow our Company. For example, we acquired ChartIQ on January 3, 2023, TruSight Solutions LLC on January 4, 2023, and Market Scan Information Systems, Inc. on February 16, 2023. Additionally, on May 2, 2023, we sold our Engineering Solutions business. Such transactions present significant challenges and risks, as the market for acquisitions, divestitures and other strategic transactions is highly competitive, especially in light of industry consolidation, which may affect our ability to complete such transactions.

Current wording

•We have made and expect to continue to make acquisitions, divestitures and other strategic transactions to strengthen our business and grow our Company. For example, we acquired Visible Alpha, World Hydrogen Leaders and ProntoNLP on May 1, 2024, May 14, 2024, and December 31, 2024, respectively, and we sold Fincentric and our PrimeOne business on August 15, 2024 and November 1, 2024, respectively. Such transactions present significant challenges and risks, as the market for acquisitions, divestitures and other strategic transactions is highly competitive, especially in light of industry consolidation, which affects our ability to complete such transactions.

Previous wording

◦divestitures requiring continued financial involvement in the divested business through continuing equity ownership, guarantees, indemnities or other financial obligations;

Current wording

◦divestitures requiring continued financial involvement in the divested business through continuing equity ownership, guarantees, indemnities, other financial or operational obligations, or transition services obligations;

Previous wording

•The markets for credit ratings, financial research, market data and solutions, index-based products, automotive data, commodities analytics and price assessments, ESG products and scores, and related news and information about these markets are intensely competitive. Our businesses compete domestically and internationally on the basis of a number of factors, including the quality of their offerings, client service, reputation, price, geographic scope, range of products and technological innovation.

Current wording

•The markets for credit ratings, financial research, market data and solutions, index-based products, automotive data, commodities analytics and price assessments, and related news and information about these markets are intensely competitive. Our businesses compete domestically and internationally on the basis of a number of factors, including the quality of their offerings, client service, reputation, price, geographic scope, range of products and technological innovation.

Previous wording

•The competitive landscape may also experience consolidation in the form of mergers and acquisitions, joint ventures or strategic partnerships, which results in competitors that are better capitalized or that are able to gain a competitive advantage through synergies.

Current wording

•The competitive landscape also experiences consolidation in the form of mergers and acquisitions, joint ventures or strategic partnerships, which results in competitors that are better capitalized or that are able to gain a competitive advantage through synergies.