MORGAN STANLEY

Previous wording

Our results of operations have been in the past and may, in the future, be materially affected by global financial market and economic conditions, including in particular by periods of low or slowing economic growth in the United States and other major markets, both directly and indirectly through their impact on client activity levels. These include the level and volatility of equity, fixed income and commodity prices; the level, term structure and volatility of interest rates; inflation and currency values; the level of other market indices, fiscal or monetary policies established by central banks and financial regulators; and uncertainty concerning the future path of interest rates, government shutdowns, debt ceilings or funding, which may be driven by economic conditions, recessionary fears, market uncertainty or lack of confidence among investors and clients due to the effects of widespread events such as global pandemics, natural disasters, climate-related incidents, acts of war or aggression, geopolitical instability, changes in U.S. presidential administrations or Congress, changes to global trade policies, supply chain complications and the implementation of tariffs or protectionist trade policies and other factors, or a combination of these or other factors.

Current wording

Our results of operations have been in the past and may, in the future, be materially affected by global financial market and economic conditions, including, in particular, by periods of low or slowing economic growth in the United States and other major markets, both directly and indirectly through their impact on client activity levels. These include the level and volatility of equity, fixed income and commodity prices; the level, term structure and volatility of interest rates; inflation, currency values and unemployment rates; the level of other market indices, fiscal or monetary policies established by governments, central banks and financial regulators; and uncertainty concerning the future path of interest rates, government shutdowns, debt ceilings or funding, which may be driven by economic conditions, recessionary fears, market uncertainty or lack of confidence among investors and clients due to the effects of widespread events such as global pandemics, natural disasters, climate-related incidents, acts of war or aggression, geopolitical instability, changes as a result of global elections, including changes in U.S. presidential administrations or Congress, changes to global trade policies, supply chain complications and the implementation of tariffs, protectionist trade policies, trade sanctions or investment restrictions and other factors, or a combination of these or other factors.

Previous wording

The results of our Institutional Securities business segment, particularly results relating to our involvement in primary and secondary markets for all types of financial products, are subject to substantial market fluctuations due to a variety of factors that we cannot control or predict with great certainty. These fluctuations impact results by causing variations in business flows and activity and in the fair value of securities and other financial products. Fluctuations also occur due to the level of global market activity, which, among other things, can be impacted by market uncertainty or lack of investor and client confidence due to unforeseen economic, geopolitical or

Current wording

The results of our Institutional Securities business segment, particularly results relating to our involvement in primary and secondary markets for all types of financial products, are subject to substantial market fluctuations due to a variety of factors that we cannot control or predict with great certainty. These fluctuations impact results by causing variations in business flows and activity and in the fair value of securities and other financial products. Fluctuations also occur due to the level of global market activity, which, among other things,

Previous wording

market conditions that in turn affect the size, number and timing of investment banking client assignments and transactions and the realization of returns from our principal investments.

Current wording

can be impacted by market uncertainty or lack of investor and client confidence due to unforeseen economic, geopolitical or market conditions that in turn affect the size, number and timing of investment banking client assignments and transactions and the realization of returns from our principal investments.

Previous wording

Periods of unfavorable market or economic conditions, including equity market levels and the level and pace of changes in interest rates and asset valuation, may have adverse impacts on the level of individual investor confidence and participation in the global markets and/or the level of and mix of client assets, including deposits, which would negatively impact the results of our Wealth Management business segment.

Current wording

Periods of unfavorable market or economic conditions, including equity market levels and the level and pace of changes in interest rates and asset valuation, may have adverse impacts on the level of individual investor confidence and participation in the global markets and/or the level of and mix of client assets, including deposits. This could also impact the level of net new asset flows and/or flows into fee-based assets. Any of these factors could negatively impact the results of our Wealth Management business segment.

Previous wording

Substantial market fluctuations could also cause variations in the value of our investments in our funds, the flow of investment capital into or from AUM, and the way customers allocate capital among money market, equity, fixed income or other investment alternatives, which could negatively impact the results of our Investment Management business segment.

Current wording

Substantial market fluctuations or divergence in asset performance could also cause variations in the value of our investments in our funds, the flow of investment capital into or from AUM, and the way customers allocate capital among money market, equity, fixed income or other investment alternatives, which could negatively impact the results of our Investment Management business segment.

Previous wording

Concentration of risk may reduce revenues or result in losses in our market-making, investing, underwriting (including block trading) and lending businesses (including margin lending) in the event of unfavorable market movements. We commit substantial amounts of capital to these businesses, which often results in our taking large positions in the securities of, or making large loans to, a particular issuer or issuers in a particular industry, country or region. In the event we hold a concentrated position larger than those held by competitors, we may incur larger losses. For further information regarding our country risk exposure, see also “Quantitative and Qualitative Disclosures about Risk—Country Risks.”

Current wording

Concentration of risk may reduce revenues or result in losses in our market-making, investing, underwriting (including block trading) and lending businesses (including margin lending) in the event of unfavorable market movements. We commit substantial amounts of capital to these businesses, which often results in our taking large positions in the securities of, or making large loans to, a particular issuer or issuers in a particular industry, country or region. In the event we hold a concentrated position larger than those held by competitors, we may incur larger losses. For further information regarding our country risk exposure, see also “Quantitative and Qualitative Disclosures about Risk—Country Risk.”

Previous wording

We incur significant credit risk exposure through our Institutional Securities business segment. This risk may arise from a variety of business activities, including, but not limited to: extending credit to clients through various lending commitments; entering into swap or other derivative contracts under which counterparties have obligations to make payments to us; acting as clearing broker for listed and over-the-counter derivatives whereby we guarantee client performance to clearinghouses; providing short- or long-term funding that is secured by physical or financial collateral, including, but not limited to, real estate and marketable securities, whose value may at times be insufficient to fully cover the loan repayment amount; posting margin and/or collateral and other commitments to clearinghouses, clearing agencies, exchanges, banks, securities firms and other financial counterparties; and investing and trading in securities and loan pools, whereby the value of these assets may fluctuate based on realized or expected defaults on the underlying obligations or loans.

Current wording

We incur significant credit risk exposure through our Institutional Securities business segment. This risk may arise from a variety of business activities, including, but not limited to: extending credit to clients through various lending commitments; entering into swap or other derivative contracts under which counterparties have obligations to make payments to us; acting as clearing broker for listed and over-the-counter derivatives whereby we guarantee client performance to clearinghouses; providing short- or long-term funding that is secured by physical or financial collateral, including, but not limited to, real estate and marketable securities, whose value may at times be insufficient to fully cover the loan repayment amount; posting margin and/or

Previous wording

Our valuations related to, and reserves for losses on, credit exposures rely on complex models, estimates and subjective judgments about the future. While we believe current valuations and reserves adequately address our perceived levels of risk, future economic conditions, including inflation and changes in real estate and other asset values, that differ from or are more severe than forecast, inaccurate models or assumptions, or external factors such as global pandemics, natural disasters, or geopolitical events, could lead to inaccurate measurement of or deterioration of credit quality of our borrowers and counterparties or the value of collateral and result in unexpected losses. We may also incur higher-than-anticipated credit losses as a result of (i) disputes with counterparties over the valuation of collateral or (ii) actions taken by other lenders that may negatively impact the valuation of collateral. In cases where we foreclose on collateral, sudden declines in the value or liquidity of collateral may result in significant losses to us despite our (i) credit monitoring, (ii) over-collateralization, (iii) ability to call for additional collateral or (iv) ability to force repayment of the underlying obligation, especially where there is a single type of collateral supporting the obligation. In addition, in the longer term, climate change may have a negative impact on the financial condition of our clients, which may decrease revenues from those clients and increase the credit risk associated with loans and other credit exposures to those clients. Certain of our credit exposures may be concentrated by counterparty, product, sector, portfolio, industry or geographic region. Although our models and estimates account for correlations among related types of exposures, a change in the market or economic environment for a concentrated product or an external factor impacting a concentrated counterparty, sector, portfolio, industry or geographic region may result in credit losses in excess of amounts forecast. For further information regarding our country risk exposure, see also “Quantitative and Qualitative Disclosures about Risk—Country Risks.”

Current wording

Our valuations related to, and reserves for losses on, credit exposures rely on complex models, estimates and subjective judgments about the future. While we believe current valuations and reserves adequately address our perceived levels of risk, future economic conditions, including inflation and changes in real estate and other asset values, that differ from or are more severe than forecast, inaccurate models or assumptions, or external factors, such as geopolitical events, changes in international trade policies, global pandemics or natural disasters, could lead to inaccurate measurement of or deterioration of credit quality of our borrowers and counterparties or the value of collateral and result in unexpected losses. We may also incur higher-than-anticipated credit losses as a result of (i) disputes with counterparties over the valuation of collateral or (ii) actions taken by other lenders that may negatively impact the valuation of collateral. In cases where we foreclose on collateral, sudden declines in the value or liquidity of collateral may result in significant losses to us despite our (i) credit monitoring, (ii) over-collateralization, (iii) ability to call for additional collateral or (iv) ability to force repayment of the underlying obligation, especially where there is a single type of collateral supporting the obligation. In addition, in the longer term, climate change may have a negative impact on the financial condition of our clients, which may decrease revenues from those clients and increase the credit risk associated with loans and other credit exposures to those clients. Certain of our credit exposures may be concentrated by counterparty, product, sector, portfolio, industry or geographic region. Although our models and estimates account for correlations among related types of exposures, a change in the market or economic environment for a concentrated product or an external factor impacting a concentrated counterparty, sector, portfolio, industry or geographic region may result in credit losses in excess of amounts forecast. For further information regarding our country risk exposure, see also “Quantitative and Qualitative Disclosures about Risk—Country Risk.”

Previous wording

In addition, as a clearing member of several central counterparties, we are responsible for the defaults or misconduct of our customers and could incur financial losses in the event of default by other clearing members. Although we regularly review our credit exposures, default risk may arise from events or circumstances that are difficult to detect or foresee.

Current wording

in the event of default by other clearing members. Although we regularly review our credit exposures, default risk may arise from events or circumstances that are difficult to detect or foresee.

Previous wording

The commercial soundness of many financial institutions and certain other large financial services firms may be closely interrelated as a result of credit, trading, clearing or other relationships among such entities. Increased centralization of trading activities through particular clearinghouses, central agents or exchanges may increase our concentration of risk with respect to these entities. As a result, concerns about, or a default or threatened default by, one or more such entities could lead to significant market-wide liquidity and credit problems, losses or defaults by other institutions, or require

Current wording

The commercial soundness of many financial institutions and certain other large financial services firms may be closely interrelated as a result of credit, trading, clearing or other relationships among such entities. Increased centralization of trading activities through particular clearinghouses, central agents or exchanges may increase our concentration of risk with respect to these entities. As a result, concerns about, or a default or threatened default by, one or more such entities could lead to significant market-wide liquidity and credit problems, losses or defaults by other institutions, or require financial commitments to multilateral actions intended to support market stability. This is sometimes referred to as systemic risk and may adversely affect financial intermediaries, such as clearinghouses, clearing agencies, exchanges, banks and securities firms, with which we interact on a daily basis and, therefore, could adversely affect us. See also “Systemic Risk Regime” under “Business—Supervision and Regulation—Financial Holding Company.”

Previous wording

Operational risk refers to the risk of loss, or of damage to our reputation, resulting from inadequate or failed processes or systems, from human factors (e.g., inappropriate or unlawful conduct) or from external events (e.g., cyberattacks or third-party vulnerabilities) that may manifest as, for example, loss of information, business disruption, theft and fraud, legal, regulatory and compliance risks, or damage to physical assets. We may incur operational risk across the full scope of our business activities, including revenue-generating activities and support and control groups (e.g., information technology ("IT") and trade processing). Legal, regulatory and compliance risk is included in the scope of operational risk and is discussed below under “Legal, Regulatory and Compliance Risk.” For more information on how we monitor and manage operational risk, see “Quantitative and Qualitative Disclosures about Risk—Operational Risk.”

Current wording

Operational risk refers to the risk of loss, or of damage to our reputation, resulting from inadequate or failed processes or systems, human factors (e.g., inappropriate or unlawful conduct) or external events (e.g., cyberattacks or third-party vulnerabilities) that may manifest as, for example, loss of information, business disruption, theft and fraud, legal, regulatory and compliance risks, or damage to physical assets. We may experience operational risk across the full scope of our business activities, including revenue-generating activities and support and control groups (e.g., information technology (“IT”) and trade processing). Legal, regulatory and compliance risk is included in the scope of operational risk and is discussed below under “Legal, Regulatory and Compliance Risk.” For more information on how we monitor and manage operational risk, see “Quantitative and Qualitative Disclosures about Risk—Operational Risk.”

Previous wording

Our businesses are highly dependent on our ability to process and report, on a daily basis, a large number of transactions across numerous and diverse markets in many currencies. We may introduce new products or services or change processes or reporting, including in connection with new regulatory requirements, or integration of processes or systems of acquired companies, resulting in new operational risk that we may not fully appreciate or identify.

Current wording

Our businesses are highly dependent on our ability to process and report, on a daily basis, a large number of transactions across numerous and diverse markets in many currencies. We may introduce new products or services or change processes or reporting, including in connection with new regulatory requirements, or integration of processes or systems of

Previous wording

The trend toward direct access to automated, electronic markets and the move to more automated trading platforms has resulted in the use of increasingly complex technology that relies on the continued effectiveness of the programming code and integrity of the data to process the trades. We rely on the ability of our employees, our consultants, our internal systems and systems at technology centers maintained by unaffiliated third parties to operate our different businesses and process a high volume of transactions. Unusually high trading volumes or site usage could cause our systems to operate at an unacceptably slow speed or even fail. Disruptions to, destruction of, instability of or other failure to effectively maintain our IT systems or external technology that allows our clients and customers to use our products and services (including our self-directed brokerage platform) could harm our business and our reputation.

Current wording

The trend toward direct access to automated, electronic markets, and the move to more automated trading platforms has resulted in the use of increasingly complex technology that relies on the continued effectiveness of the programming code and integrity of the data to process the trades. We rely on the ability of our employees, our consultants, our internal systems and systems at technology centers maintained by unaffiliated third parties to operate our different businesses and process a high volume of transactions. Unusually high trading volumes or site usage could cause our systems to operate at an unacceptably slow speed or even fail. Disruptions to, destruction of, instability of or other failure to effectively maintain our IT systems or external technology that allows our clients and customers to use our products and services (including our self-directed brokerage platform and mobile services) could harm our business and our reputation.

Previous wording

As a major participant in the global capital markets, we face the risk of incorrect valuation or risk management of our trading positions due to flaws in data, models, electronic trading systems or processes, or due to fraud or cyberattack. We also face the risk of operational failure or disruption of any of the clearing agents, exchanges, clearinghouses or other financial intermediaries we use to facilitate our lending, securities and derivatives transactions. In addition, in the event of a breakdown or improper operation or disposal of our or a direct or indirect third party’s systems (or third parties thereof), processes or information assets, or improper or unauthorized action by third parties, including consultants and subcontractors or our employees, we have received in the past and may receive in the future regulatory sanctions, and could suffer financial loss, an impairment to our liquidity position, a disruption of our businesses or damage to our reputation.

Current wording

As a major participant in the global capital markets, we face the risk of incorrect valuation or risk management of our trading positions due to flaws in data, models, electronic trading systems or processes, or due to fraud or cyberattacks. We also face the risk of operational failure or disruption of any of the clearing agents, exchanges, clearinghouses or other financial intermediaries we use to facilitate our lending, securities and derivatives transactions. In addition, in the event of a breakdown or improper operation or disposal of our, or a direct or indirect third party’s (or third parties thereof) systems, processes or information assets, or improper or unauthorized action by third parties, including consultants and subcontractors or our employees, we have received in the past and may receive in the future regulatory sanctions, and could suffer financial loss, an impairment to our liquidity position, a disruption of our businesses or damage to our reputation.

Previous wording

There can be no assurance that our business contingency and security response plans fully mitigate all potential risks to us. Our ability to conduct business may be adversely affected by a disruption in the infrastructure that supports our businesses and the communities where we are located. This may include a disruption involving physical site access; software flaws and vulnerabilities; cybersecurity incidents; terrorist activities; political unrest; disease pandemics; catastrophic events; climate-related incidents and natural disasters (such as earthquakes, tornadoes, floods, hurricanes and wildfires); electrical outages; environmental hazards; computer servers; communication platforms or other services we use; new technologies (such as generative artificial intelligence); and our employees or third parties with whom we conduct business. Although we employ backup systems for our data, those backup systems may be unavailable following a disruption, the affected data may not have been backed up or may not be recoverable from the backup, or the backup data may be costly to recover, which could adversely affect our business.

Current wording

vulnerabilities; cybersecurity incidents; terrorist activities; political unrest; disease pandemics; catastrophic events; climate-related incidents and natural disasters (such as earthquakes, tornadoes, floods, hurricanes and wildfires); electrical outages; environmental hazards; computer servers; internet outages; client access to our digital platforms and mobile applications; communication platforms or other services we use; new technologies (such as generative artificial intelligence); and our employees or third parties with whom we conduct business. Although we and the third parties with whom we conduct business employ backup systems for data, those backup systems may be unavailable following a disruption, the affected data may not have been backed up or may not be recoverable from the backup, the backup systems may not process data as accurately or efficiently as the primary systems or the backup data may be costly to recover, any of which could adversely affect our business.

Previous wording

our controls and other procedures that are intended to prevent and detect such errors or violations. These can include calculation or input errors, inadvertent or duplicate payments, mistakes in addressing emails or other communications, errors in software or model development or implementation, or errors in judgment, as well as intentional efforts to disregard or circumvent applicable policies, laws, rules or procedures. Our use of new technologies may be undermined by such human errors or misconduct due to undetected flaws or biases in the algorithms or data utilized by such technologies. Human errors and malfeasance, even if promptly discovered and remediated, can result in material losses and liabilities for us, and negatively impact our reputation in the future.

Current wording

Notwithstanding evolving technology and technology-based risk and control systems, our businesses ultimately rely on people, including our employees and those of our third parties (or third parties thereof). As a result of human error or engagement in violations of applicable policies, laws, rules or procedures, certain errors or violations are not always discovered immediately by our technological processes or by our controls and other procedures that are intended to prevent and detect such errors or violations. These can include calculation or input errors, inadvertent or duplicate payments, mistakes in addressing emails or other communications, errors in software or model development or implementation, or errors in judgment, as well as intentional efforts to disregard or circumvent applicable policies, laws, rules or procedures. Our use of new technologies may be undermined by such human errors or misconduct due to undetected flaws or biases in the algorithms or data utilized by such technologies. Human errors and malfeasance, even if promptly discovered and remediated, can result in material losses and liabilities for us, and negatively impact our reputation in the future.

Previous wording

We conduct business in various jurisdictions outside the U.S., including jurisdictions that may not have comparable levels of protection for their corporate assets, such as intellectual property, trademarks, trade secrets, know-how, and customer information and records. The protection afforded in those jurisdictions may be less established and/or predictable than in the U.S. or other jurisdictions in which we operate. As a result, there may also be heightened risks associated with the potential theft of their data, technology and intellectual property in those jurisdictions by domestic or foreign actors, including private parties and those affiliated with or controlled by state actors. Additionally, we are subject to complex and evolving U.S. and international laws and regulations governing cybersecurity, privacy and data governance, transfer and protection, which may differ and potentially conflict, in various jurisdictions. Any theft of data, technology or intellectual property may negatively impact our operations and reputation, including disrupting the business activities of our subsidiaries, affiliates, joint ventures or clients conducting business in those jurisdictions.

Current wording

We conduct business in various jurisdictions outside the U.S., including jurisdictions that may not have comparable levels of protection for their corporate assets, such as intellectual property, trademarks, trade secrets, know-how, and customer information and records. The protection afforded in those jurisdictions may be less established and/or predictable than in the U.S. or other jurisdictions in which we operate. As a result, there may also be heightened risks associated with the potential theft of their data, technology and intellectual property in those jurisdictions by domestic or foreign actors, including private parties and those affiliated with or controlled by state actors. Additionally, we are subject to complex and evolving U.S. and international laws and regulations governing areas such as cybersecurity, privacy and data governance, transfer and protection, which may differ and potentially conflict, in various jurisdictions. Any theft of data, technology or intellectual property may negatively impact our operations and reputation, including disrupting the business activities of our subsidiaries, affiliates,

Previous wording

Cybersecurity risks for financial institutions have significantly increased in recent years in part because of the proliferation of new technologies; the use of the internet, mobile telecommunications and cloud technologies to conduct financial transactions; and the increased sophistication and activities of organized crime, hackers, terrorists, nation-states, state-sponsored actors and other parties. Any of these parties may also attempt to fraudulently induce employees, customers, clients, vendors or other third parties or users of our systems to disclose sensitive information in order to gain access to our networks, systems or data or those of our employees or clients, and such parties may see their effectiveness enhanced by the use of artificial intelligence. Global events and geopolitical instability have also led to

Current wording

Cybersecurity risks for financial institutions have significantly increased in recent years, in part because of the proliferation of new technologies; the use of the internet, mobile telecommunications and cloud technologies to conduct financial transactions; and the increased sophistication and activities of organized crime, hackers, terrorists, nation-states, state-sponsored actors and other parties. Any of these parties may also attempt to fraudulently induce employees, customers, clients, vendors or other third parties or users of our systems to disclose sensitive information in order to gain access to our networks, systems or data or those of our employees or clients, and such parties may see their effectiveness enhanced by the use of artificial intelligence. Global events and geopolitical instability have also led to increased nation-state targeting of financial institutions in the U.S. and abroad.

Previous wording

Information security risks may also derive from human error, fraud or malice on the part of our employees or third parties, software bugs, server malfunctions, software or hardware failure or other technological failure. For example, human error has led to the loss of the Firm's physical data-bearing devices in the past. These risks may be heightened by several factors, including remote work, reliance on new technologies (such as generative artificial intelligence) or as a result of the integration of acquisitions and other strategic initiatives that may subject us to new technology, customers or third-party providers. In addition, third parties with whom we do business or share information, and each of their service providers, our regulators and the third parties with whom our customers and clients share information used for authentication, may also be sources of cybersecurity and information security risks, particularly where activities of customers are beyond our security and control systems. There is no guarantee that the measures we take will provide absolute security or recoverability given that the techniques used in cyberattacks are complex, frequently change and are difficult to anticipate.

Current wording

Information security risks may also derive from human error, fraud or malice on the part of our employees or third parties, software bugs, server malfunctions, software or hardware failure or other technological failure. For example, human error has led to the loss of the Firm's physical data-bearing devices in the past. These risks may be heightened by several factors, including remote work, reliance on new technologies (such as generative artificial intelligence) or as a result of the integration of acquisitions and other strategic initiatives that may subject us to new technology, customers or third-party providers. In addition, third parties with whom we do business or share information, and each of their service providers, our regulators and the third parties with whom our customers and clients share information used for authentication, may also be sources of cybersecurity and information security risks, particularly where these activities are beyond our security and control systems. There is no guarantee that the measures we take will provide absolute security or recoverability given that the techniques used in cyberattacks are complex, frequently change and are difficult to anticipate.

Previous wording

Like other financial services firms, the Firm, its third-party providers and its clients continue to be the subject of unauthorized access attacks; mishandling, loss, theft or misuse of information; computer viruses or malware; cyberattacks designed to obtain confidential information, destroy data, disrupt or degrade service, sabotage systems or networks or cause other damage; ransomware; denial of service attacks; data breaches; social engineering attacks; phishing attacks; and other events. There can be no assurance that such unauthorized access, mishandling or misuse of information, or cybersecurity incidents will not occur in the future and they could occur more frequently and on a more significant scale.

Current wording

Like other financial services firms, the Firm, its third-party providers and its clients continue to be the subject of unauthorized access attacks; mishandling, loss, theft or misuse of information; computer viruses or malware; cyberattacks designed to obtain confidential information, destroy data, disrupt or degrade service, sabotage systems or networks, impede our ability to execute or confirm settlement of transactions or cause other damage; ransomware; denial of

Previous wording

We maintain a significant amount of personal and confidential information on our customers, clients and certain counterparties that we are required to protect under various state, federal and international data protection and privacy laws. These laws may be in conflict with one another or courts and regulators may interpret them in ways that we had not anticipated or that adversely affect our business. A cyberattack, information or security breach, or a technology failure of ours or of a third party could jeopardize our or our clients’, employees’, partners’, vendors’ or counterparties’ personal, confidential, proprietary or other information processed and stored in, and transmitted through, our and our third parties’ computer systems and networks. Furthermore, such events could cause interruptions or malfunctions in our, our clients’, employees’, partners’, vendors’, counterparties’ or third parties’ operations, as well as the unauthorized release, gathering, monitoring, misuse, loss or destruction of personal, confidential, proprietary and other information of ours, our employees, our customers or of other third parties. Any of these events could result in reputational damage with

Current wording

We maintain a significant amount of personal and confidential information on our customers, clients and certain counterparties that we are required to protect under various state, federal and international data protection and privacy laws. These laws may be in conflict with one another or courts and regulators may interpret them in ways that we had not anticipated or that adversely affect our business. A cyberattack, information or security breach, or a technology failure of ours or of a third party could jeopardize our or our clients’, employees’, partners’, vendors’ or counterparties’ personal, confidential, proprietary or other information processed and stored in, and transmitted through, our and our third parties’ computer systems and networks. Furthermore, such events could cause interruptions or malfunctions in our, our clients’, partners’, vendors’, counterparties’ or third parties’ operations, as well as the unauthorized release, gathering, monitoring, misuse, loss or destruction of personal, confidential, proprietary and other information of ours, our employees, our customers or of other third parties. Any of these events could result in reputational damage with our clients and the market, client dissatisfaction, additional costs to us to maintain and update our operational and security systems and infrastructure, violation of the applicable data protection and privacy laws, regulatory investigations and enforcement actions, litigation exposure, or fines or penalties, any of which could adversely affect our business, financial condition or results of operations.

Previous wording

Given our global footprint and the high volume of transactions we process; the large number of clients, partners, vendors and counterparties with which we do business; and the increasing sophistication of cyberattacks, a cyberattack or information or security breach could occur and persist for an extended period of time without detection. It could take considerable time for us to determine the scope, extent, amount and type of information compromised, and the impact of such an attack may not be fully understood. During such time we would not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, if at all, all or any of which would further increase the costs and consequences of a cyberattack or information security incident.

Current wording

Given our global footprint and the high volume of transactions we process; the large number of clients, partners, vendors and counterparties we interact with to conduct business; and the increasing sophistication of cyberattacks; a cyberattack or information or security breach could occur and persist for an extended period of time without detection. It could take considerable time for us to determine the scope, extent, amount and type of information compromised, and the impact of such an attack may not be fully understood. During such time, we would not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, if at all, all or any of which would further increase the costs and consequences of a cyberattack or information security incident.

Previous wording

While many of our agreements with partners and third-party vendors include indemnification provisions, we may not be able to recover sufficiently, or at all, under such provisions to adequately offset any losses we may incur. In addition, although we maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber and information security risks, such insurance coverage may be insufficient to cover any or all losses we may incur, and we cannot be sure that such insurance will continue to be available to us on commercially reasonable terms, or at all, or that our insurers will not deny coverage as to any future claim.

Current wording

While many of our agreements with partners and third parties include indemnification provisions, we may not be able to recover sufficiently, or at all, under such provisions to adequately offset any losses we may incur. In addition, although we maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber and information security risks, such insurance coverage may be insufficient to cover any or all losses we may incur, and we

Previous wording

Liquidity risk refers to the risk that we will be unable to finance our operations due to a loss of access to the capital markets or difficulty in liquidating our assets. Liquidity risk also encompasses our ability (or perceived ability) to meet our financial obligations without experiencing significant business disruption or reputational damage that may threaten our viability as a going concern, as well as the associated funding risks triggered by the market or idiosyncratic stress events that may negatively affect our liquidity and may impact our ability to raise new funding. For more information

Current wording

Liquidity risk refers to the risk that we will be unable to finance our operations due to a loss of access to the capital markets or difficulty in liquidating our assets. Liquidity risk also encompasses our ability (or perceived ability) to meet our financial obligations without experiencing significant business disruption or reputational damage that may threaten our viability as a going concern, as well as the associated funding risks triggered by the market or idiosyncratic stress events that may negatively affect our liquidity and may impact our ability to raise new funding or the cost of new funding. For more information on how we monitor and manage liquidity risk, see “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Liquidity and Capital Resources” and “Quantitative and Qualitative Disclosures about Risk—Liquidity Risk.”

Previous wording

Liquidity is essential to our businesses. Our liquidity could be negatively affected by our inability to raise funding in the long-term or short-term debt capital markets, our inability to access the secured lending markets, our inability to attract and retain deposits, or unanticipated outflows of cash or collateral by customers or clients. Factors that we cannot control, such as disruption of the financial markets or negative views about the financial services industry generally, including concerns regarding fiscal matters in the U.S. and other geographic areas, could impair our ability to raise funding.

Current wording

Liquidity is essential to our businesses. Our liquidity could be negatively affected by our inability to raise funding in the long-term or short-term debt capital markets, our inability to access the secured lending markets, our inability to attract and retain deposits, or unanticipated outflows of cash or collateral by customers or clients. Factors that we cannot control, such as volatility and disruption of the financial markets or negative views about the financial services industry generally, including concerns regarding fiscal matters in the U.S. and other geographic areas, could impair our ability to raise funding.

Previous wording

If we are unable to raise funding using the methods described above, we would likely need to finance or liquidate unencumbered assets, such as our investment portfolios or trading assets, to meet maturing liabilities or other obligations. We may be unable to sell some of our assets or we may have to sell assets at a discount to market value, either of which could adversely affect our results of operations, cash flows and financial condition.

Current wording

If we are unable to raise funding using the methods described above, we would likely need to utilize other funding sources or finance or liquidate unencumbered assets, such as our investment portfolios or trading assets, to meet maturing liabilities or other obligations. We may be unable to sell some of our assets or we may have to sell assets at a discount to market value, either of which could adversely affect our results of operations, cash flows and financial condition.

Previous wording

such as OTC and other derivative transactions, including credit derivatives and interest rate swaps. In connection with certain OTC trading agreements and certain other agreements associated with our Institutional Securities business segment, we may be required to provide additional collateral to, or immediately settle any outstanding liability balance with, certain counterparties in the event of a credit rating downgrade.

Current wording

Our credit ratings also can have an adverse impact on certain trading revenues, particularly in those businesses where longer-term counterparty performance is a key consideration, such as OTC and other derivative transactions, including credit derivatives and interest rate swaps. In connection with certain OTC trading agreements and certain other agreements associated with our Institutional Securities business segment, we may be required to provide additional collateral to, or immediately settle any outstanding liability balance with, certain counterparties in the event of a credit rating downgrade.

Previous wording

The Parent Company has no business operations and depends on dividends, distributions, loans and other payments from its subsidiaries to fund dividend payments and to fund all payments on its obligations, including debt obligations. Regulatory restrictions, tax restrictions or elections and other legal restrictions may limit our ability to transfer funds freely, either to or from our subsidiaries. In particular, many of our subsidiaries, including our bank and broker-dealer subsidiaries, are subject to laws, regulations and self-regulatory organization rules that, in certain circumstances, limit, as well as permit regulatory bodies to block or reduce, the flow of funds to the Parent Company, or that prohibit such transfers or dividends altogether, including steps to “ring fence” entities by regulators outside the U.S. to protect clients and creditors of such entities in the event of financial difficulties involving such entities.

Current wording

subsidiaries, including our bank and broker-dealer subsidiaries, are subject to laws, regulations and self-regulatory organization rules that, in certain circumstances, limit, as well as permit regulatory bodies to block or reduce, the flow of funds to the Parent Company, or that prohibit such transfers or dividends altogether, including steps to “ring fence” entities by regulators outside the U.S. to protect clients and creditors of such entities.

Previous wording

These laws, regulations and rules may hinder our ability to access funds that we may need to make payments on our obligations. Furthermore, as a BHC, we may become subject to a prohibition or to limitations on our ability to pay dividends. The Federal Reserve, the OCC and the FDIC have the authority, and under certain circumstances the duty, to prohibit or to limit the payment of dividends or other capital actions by the banking organizations they supervise, including us and our U.S. Bank Subsidiaries. See “We may be prevented from paying dividends or taking other capital actions because of regulatory constraints or revised regulatory capital requirements” under “Legal, Regulatory and Compliance Risk” herein.

Current wording

These laws, regulations and rules may hinder our ability to access funds that we may need to make payments on our obligations. Furthermore, as a BHC, we may become subject to a prohibition or to limitations on our ability to pay dividends. The U.S. banking agencies have the authority, and under certain circumstances the duty, to prohibit or to limit the payment of dividends or other capital actions by the banking organizations they supervise, including us and our U.S. Bank Subsidiaries. See “We may be prevented from paying dividends or taking other capital actions because of regulatory constraints or revised regulatory capital requirements” under “Legal, Regulatory and Compliance Risk” herein.

Previous wording

Like other major financial services firms, we are subject to extensive regulation by U.S. federal and state regulatory agencies and securities exchanges and by regulators and exchanges in each of the major markets where we conduct our business, including an increasing number of complex sanctions and disclosure regimes. These laws and regulations, which continue to increase in volume and complexity, significantly affect the way and costs of doing business and can restrict the scope of our existing businesses and limit our ability to expand our product offerings and pursue certain investments.

Current wording

Like other major financial services firms, we are subject to extensive regulation by U.S. federal and state regulatory agencies and securities exchanges, and by regulators and exchanges in each of the major markets where we conduct our business, including an increasing number of complex sanctions and disclosure regimes. These laws and regulations, which may continue to increase in volume and complexity, significantly affect the way and costs of doing business and can restrict the scope of our existing businesses and limit our ability to expand our product offerings and pursue certain investments.

Previous wording

The Firm and its employees are subject to wide-ranging regulation and supervision, which, among other things, subject us to intensive scrutiny of our businesses and any plans for expansion of those businesses through acquisitions or otherwise, limitations on activities, a systemic risk regime that imposes heightened capital and liquidity and funding requirements and other enhanced prudential standards,

Current wording

The Firm and its employees are subject to wide-ranging regulation and supervision, which, among other things, subject us to intensive scrutiny of our businesses and any plans for expansion of those businesses through acquisitions or otherwise, limitations on activities, a systemic risk regime that imposes heightened capital and liquidity and funding requirements, including the global implementation of capital standards established by the Basel Committee, and other enhanced prudential standards, resolution regimes and resolution planning requirements, requirements for maintaining minimum amounts of TLAC and external long-term debt, restrictions on activities and investments imposed by the Volcker Rule, comprehensive derivatives regulation, interest rate benchmark requirements, commodities regulation, market structure regulation, consumer protection regulation, AML, terrorist financing and anti-corruption rules and regulations, tax regulations and interpretations, antitrust laws, trade and transaction reporting obligations, requirements related to preventing the misuse of confidential information, including material non-public information, record-keeping requirements, broadened fiduciary obligations and disclosure requirements.

Previous wording

In addition, provided that certain procedures are met, we can be subject to a resolution proceeding under the orderly liquidation authority under Title II of the Dodd-Frank Act with the FDIC being appointed as receiver instead of being resolved under the U.S. Bankruptcy Code. The FDIC’s power under the orderly liquidation authority to disregard the priority of creditor claims and treat similarly situated creditors differently in certain circumstances, subject to certain limitations, could adversely impact holders of our unsecured

Current wording

In addition, provided that certain procedures are met, we can be subject to a resolution proceeding under the orderly liquidation authority under Title II of the Dodd-Frank Act with the FDIC being appointed as receiver instead of being resolved under the U.S. Bankruptcy Code. The FDIC’s power under the orderly liquidation authority to disregard the priority of creditor claims and treat similarly situated creditors differently in certain circumstances, subject to certain limitations, could adversely impact holders of our unsecured debt. See “Business—Supervision and Regulation” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Liquidity and Capital Resources—Regulatory Requirements.”

Previous wording

Further, because both our resolution plan contemplates an SPOE strategy under the U.S. Bankruptcy Code and the FDIC has proposed an SPOE strategy through which it may apply its orderly liquidation authority powers, we believe that the application of an SPOE strategy is the reasonably likely outcome if either our resolution plan were implemented or a resolution proceeding were commenced under the orderly liquidation authority. An SPOE strategy generally contemplates the provision of adequate capital and liquidity by the Parent Company to certain of its subsidiaries so that such subsidiaries have the resources necessary to implement the resolution strategy, and the Parent Company has entered into a secured amended and restated support agreement with such entities, pursuant to which it would provide such capital and liquidity to such entities.

Current wording

Further, because both our resolution plan contemplates an SPOE strategy under the U.S. Bankruptcy Code and the FDIC has indicated that it expects to use an SPOE strategy through which it may apply its orderly liquidation authority powers for a U.S. G-SIB, we believe that the application of an SPOE strategy is the reasonably likely outcome if either our resolution plan were implemented or a resolution proceeding were commenced under the orderly liquidation authority. An SPOE strategy generally contemplates the provision of adequate capital and liquidity by the Parent Company to certain of its subsidiaries so that such subsidiaries have the resources necessary to implement the resolution strategy, and the Parent Company has entered into a secured amended and restated support agreement with such entities, pursuant to which it would provide such capital and liquidity to such entities.

Previous wording

In addition, a wholly owned, direct subsidiary of the Parent Company, Morgan Stanley Holdings LLC (“Funding IHC”), serves as a resolution funding vehicle. The Parent Company has transferred, and has agreed to transfer on an ongoing basis, certain assets to the Funding IHC. In the event of a resolution scenario, the Parent Company would be obligated to contribute all of its material assets that can be contributed under the terms of the amended and restated support agreement (other than shares in subsidiaries of the Parent Company and certain other assets) to the Funding IHC. The Funding IHC would be obligated to provide capital and liquidity, as applicable, to certain supported subsidiaries, pursuant to the terms of the secured amended and restated support agreement.

Current wording

In addition, a wholly owned, direct subsidiary of the Parent Company, Morgan Stanley Holdings LLC (“Funding IHC”), serves as a resolution funding vehicle. The Parent Company has transferred, and has agreed to transfer on an ongoing basis, certain assets to the Funding IHC. In the event of a resolution scenario, the Parent Company would be obligated to contribute all of its material assets that can be contributed under the terms of the amended and restated support

Previous wording

the orderly liquidation authority and other resolution regimes. For example, the Federal Reserve requires top-tier BHCs of U.S. G-SIBs, including the Firm, to maintain adequate TLAC, including equity and eligible long-term debt, in order to ensure that such institutions have enough loss-absorbing resources at the point of failure to be recapitalized through the conversion of debt to equity or otherwise by imposing losses on eligible TLAC where the SPOE strategy is used. The combined implication of the SPOE resolution strategy and the TLAC requirement is that our losses will be imposed on the holders of eligible long-term debt and other forms of eligible TLAC issued by the Parent Company before any losses are imposed on the creditors of our supported subsidiaries without requiring taxpayer or government financial support.

Current wording

Regulators have taken and proposed various actions to facilitate an SPOE strategy under the U.S. Bankruptcy Code, the orderly liquidation authority and other resolution regimes. For example, the Federal Reserve requires top-tier BHCs of U.S. G-SIBs, including the Firm, to maintain adequate TLAC, including equity and eligible long-term debt, in order to ensure that such institutions have enough loss-absorbing resources at the point of failure to be recapitalized through the conversion of debt to equity or otherwise by imposing losses on eligible TLAC where the SPOE strategy is used. The combined implication of the SPOE resolution strategy and the TLAC requirement is that our losses will be imposed on the holders of eligible long-term debt and other forms of eligible TLAC issued by the Parent Company before any losses are imposed on the creditors of our supported subsidiaries without requiring taxpayer or government financial support.

Previous wording

In addition, certain jurisdictions, including the U.K. and E.U. jurisdictions, have implemented, or are in the process of implementing, changes to resolution regimes to provide resolution authorities with the ability to recapitalize a failing entity organized in such jurisdiction by writing down certain unsecured liabilities or converting certain unsecured liabilities into equity. Such “bail-in” powers are intended to enable the recapitalization of a failing institution by allocating losses to its shareholders and unsecured creditors. This may increase the overall level of capital and liquidity required by us on a consolidated basis and may result in limitations on our ability to efficiently distribute capital and liquidity among our affiliated entities, including in times of stress. Non-U.S. regulators are also considering requirements that certain subsidiaries of large financial institutions maintain minimum amounts of TLAC that would pass losses up from the subsidiaries to the Parent Company and, ultimately, to security holders of the Parent Company in the event of failure.

Current wording

In addition, certain jurisdictions, including the U.K. and E.U. jurisdictions, have implemented changes to resolution regimes to provide resolution authorities with the ability to recapitalize a failing entity organized in such jurisdiction by writing down certain unsecured liabilities or converting certain unsecured liabilities into equity. Such “bail-in” powers are intended to enable the recapitalization of a failing institution by allocating losses to its shareholders and unsecured creditors. This may increase the overall level of capital and liquidity required by us on a consolidated basis and may result in limitations on our ability to efficiently distribute capital and liquidity among our affiliated entities, including in times of stress. Non-U.S. regulators are also considering requirements that certain subsidiaries of large financial institutions maintain minimum

Previous wording

obligations. In other cases, including antitrust litigation, we may be subject to claims for joint and several liability with other defendants for treble damages or other relief related to alleged conspiracies involving other institutions. Like any large corporation, we are also subject to risk from potential employee misconduct, including noncompliance with policies, laws, rules and regulations, and improper use or disclosure of confidential information, or improper sales practices or other conduct.

Current wording

In some cases, the third-party entities that would otherwise be the primary defendants in such cases are bankrupt, in financial distress or may not honor applicable indemnification obligations. In other cases, including antitrust litigation, we may be subject to claims for joint and several liability with other defendants for treble damages or other relief related to alleged conspiracies involving other institutions. Like any large corporation, we are also subject to risk from potential employee misconduct, including noncompliance with policies, laws, rules and regulations, and improper use or disclosure of confidential information, or improper sales practices or other conduct.

Previous wording

We have policies, procedures and controls that are designed to identify and address potential conflicts of interest, and we utilize various measures, such as the use of disclosure, to manage these potential conflicts. However, identifying and mitigating potential conflicts of interest can be complex and challenging and can become the focus of media and regulatory scrutiny. Indeed, actions that merely appear to create a conflict can put our reputation at risk even if the likelihood of an actual conflict has been mitigated. It is possible that potential conflicts could give rise to litigation or enforcement actions, which may lead to our clients being less willing to enter into transactions in which a conflict may

Current wording

We have policies, procedures and controls that are designed to identify and address potential conflicts of interest, and we utilize various measures, such as the use of disclosure, to manage these potential conflicts. However, identifying and mitigating potential conflicts of interest can be complex and challenging and can become the focus of media and regulatory scrutiny. Indeed, actions that merely appear to create a conflict can put our reputation at risk even if the likelihood of an actual conflict has been mitigated. It is possible that potential conflicts could give rise to litigation or enforcement actions, which may lead to our clients being less willing to enter into transactions in which a conflict may occur and could adversely affect our businesses and reputation.

Previous wording

We have devoted significant resources to develop our risk management capabilities and expect to continue to do so in the future. Nonetheless, our risk management strategies, models and processes, including our use of various risk models for assessing market, credit, liquidity and operational exposures and hedging strategies, stress testing and other analysis, may not be fully effective in mitigating our risk exposure in all market environments or against all types of risk, including risks that are unidentified or unanticipated.

Current wording

We have devoted significant resources to develop our risk management strategies, models and processes, including our use of various risk models for assessing market, credit, liquidity and operational exposures and hedging strategies, stress testing and other analysis capabilities, and expect to continue to do so in the future. Nonetheless, our risk management capabilities may not be fully effective in mitigating our risk exposure in all market environments or against all types of risk, including risks that are unidentified or unanticipated.

Previous wording

anticipate every economic and financial outcome or the timing of such outcomes. For example, to the extent that our trading or investing activities involve less liquid trading markets or are otherwise subject to restrictions on sales or hedging, we may not be able to reduce our positions and, therefore, reduce our risk associated with such positions. We may, therefore, incur losses in the course of our trading or investing activities. For more information on how we monitor and manage market and certain other risks and related strategies, models and processes, see “Quantitative and Qualitative Disclosures about Risk—Market Risk.”

Current wording

While we employ a broad and diversified set of risk monitoring and risk mitigation techniques, those techniques and the judgments that accompany their application cannot anticipate every economic and financial outcome or the timing of such outcomes. For example, to the extent that our trading or investing activities involve less liquid trading markets or are otherwise subject to restrictions on sales or hedging, we may not be able to reduce our positions and, therefore, reduce our risk associated with such positions. We may, therefore, incur losses in the course of our trading or investing activities. For more information on how we monitor and manage market and certain other risks and related strategies, models and processes, see “Quantitative and Qualitative Disclosures about Risk—Market Risk.”