WILLIS TOWERS WATSON PLC
For the period ended Dec 31, 2025. Filed Feb 25, 2026.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Feb 25, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2024-12-31; filed 2025-02-25.
0000950170-25-026278
Item 1A. Risk FactorsFailure to maintain our corporate culture, including in a remote or hybrid work environment, could damage our reputationCurrent report: 10-K
Period ended 2025-12-31; filed 2026-02-25.
0001193125-26-069307
Item 1A. Risk FactorsFailure to maintain our corporate culture, including in a remote or hybrid work environment, could damage our reputationThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 251 previous paragraphs and 251 current paragraphs.
168 unchanged; 73 reworded; 8 added; 9 removed; 1 previous and 2 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (8)
Current report
As our strategy evolves, we may be unable to successfully execute the associated strategic changes, including as a result of factors discussed in this ‘Risk Factors’ section. Our investments of significant time and resources into new product or service offerings, as well as in technology and infrastructure to support these offerings may not deliver the expected return or sufficient return to cover the cost of investment. These investments include those made organically as well as those made through inorganic acquisitions such as the acquisitions of Newfront Insurance Holdings, Inc. (‘Newfront’) and Cushon. If we are unable to develop and execute optimally on our global business strategy it could have a material adverse effect on our business, financial condition and results of operations.
Current report
We also depend on numerous third-party vendors, technology partners and other service providers to deliver our services and operate our business. Macroeconomic stress, labor shortages, supply-chain constraints, sanctions or geopolitical developments can impair the ability of our vendors and counterparties to perform on a timely basis or at agreed service levels, which could result in service degradation, delays, contract penalties, additional costs or reputational harm. While we invest in operational resilience and third-party risk management, disruptions at our vendors or in our internal shared-service and technology environments could adversely affect our ability to serve clients and achieve our objectives. Thus, a deterioration or prolonged period of negative or stagnant macroeconomic conditions globally could adversely affect our business, results of operations or financial condition.
Current report
geopolitical events, conflicts and tensions in a variety of geographies;
Current report
the imposition of trade restrictions or tariffs by both the U.S. and foreign governments;
Current report
In addition, as a result of the global scale of our businesses and operations, we are exposed to many types of fraud-related risks that may be committed by colleagues, vendors, suppliers, distributors and other persons with whom we do business. Our businesses are dependent on our ability to process a large number of increasingly complex transactions across the globe, which, when coupled with geographic and industry vulnerabilities in the different jurisdictions in which we operate, can subject us to potentially fraudulent activity. If, for example, any of our financial, accounting, or other data processing systems are subjected to fraudulent manipulation or purposeful sabotage by our colleagues or one or more outsiders, these systems could fail or have other significant shortcomings, which could materially adversely affect our ongoing business and operations both in the U.S. and abroad. We are similarly dependent on our colleagues. We could be materially adversely affected if one or more of our colleagues causes a significant operational break-down or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates our operations or systems. Third parties with whom we do business could also be sources of operational risk to us, including by conducting fraudulent activities within such parties’ own systems or carried out by its employees. Any of these occurrences could adversely affect our ability to operate one or more of our businesses, while simultaneously exposing us to potential liability to clients and customers, reputational damage, as well as legal, judicial and regulatory intervention or fines.
Current report
On July 4, 2025, the ‘Act to provide for reconciliation pursuant to title II of H. Con. Res. 14’ (‘H.R. 1’) was enacted into law and generally became effective on January 1, 2026, with certain exceptions. H.R. 1 included numerous changes to existing tax law affecting businesses, including extending and modifying certain key provisions of the Tax Cuts and Jobs Act of 2017, both domestic and international, expanding certain Investment Retirement Account incentives while accelerating the phase-out of others.
Current report
Future developments related to Pillar Two or other legislative enactments may adversely impact WTW.
Current report
The Company’s constitution, when originally adopted, authorized our directors to allot shares up to the maximum of the Company’s authorized but unissued share capital and disapplied statutory pre-emption rights for a period of five years. Since the expiry of this initial five-year period, we seek these allotment and pre-emption shareholder authorizations at appropriate levels and intervals. However, if we are unable to obtain these authorizations from our shareholders or are otherwise limited by the terms of our authorizations, then our ability to issue shares under our equity compensation plans and, if applicable, facilitate funding acquisitions or otherwise raise capital could be adversely affected.
Removed paragraphs (9)
Previous report
We may not be able to fully realize the anticipated benefits of our strategy or our expected product, service and transaction pipelines.
Previous report
Our ability to successfully manage ongoing organizational changes could impact our business results and may involve significant or evolving costs and/or disruption to the management and/or operations of our business and generate fewer benefits than originally expected.
Previous report
We may not be able to fully realize the anticipated benefits of our strategy or our expected product, service and transaction pipelines.
Previous report
Our ability to successfully manage ongoing organizational changes could impact our business results and may involve significant or evolving costs and/or disruption to the management and/or operations of our business and generate fewer benefits than originally expected.
Previous report
We have in the past few years undergone several significant business and organizational changes, including the conclusion of our multi-year operational Transformation program at the end of fiscal year 2024 and the implementation of a new management and organizational structure, and have other planned or future initiatives aimed at transforming and updating our systems and processes and gaining efficiencies. These initiatives may have adverse impacts on the business or different results than intended. In connection with these future changes, we will manage a number of large-scale and complex projects in furtherance of our strategic objectives, which may include multiple and connected phases dependent on factors that are outside of our control. As a result, we cannot guarantee the success of these projects or initiatives, individually or collectively. Effectively managing these organizational changes (including ensuring that they are implemented on schedule, within budget and without interruption to the existing business, or that transitions to new systems do not create significant control vulnerabilities during the period of transition) is critical to retaining talent, servicing clients and enhancing our business success overall. We may have difficulty attracting, training and retaining the talent that we need to successfully manage these changes. Further, many of the risks described herein increase during periods of significant organizational change and transformation. The failure to effectively manage such risks could adversely impact our resources or our business or financial results.
Previous report
These Brexit-related changes may adversely affect our operations and financial results.
Previous report
For example, in August 2022, the U.S. enacted the Inflation Reduction Act of 2022 (‘IRA’), which, among other effects, creates a new corporate alternative minimum tax of at least 15% on adjusted financial statement income for certain corporations with average book income of more than $1 billion. The book minimum tax applied to us beginning in 2023 and did not have a material impact on our effective tax rate.
Previous report
Finally, on October 8, 2021, the OECD announced an international agreement with more than 140 countries to implement a two-pillar solution to address tax challenges arising from digitalization of the economy. The agreement introduced rules that would result in the reallocation of certain taxing rights over multinational companies from their home countries to the markets where they have business activities and earn profits, regardless of physical presence (‘Pillar One’) and introduced a global corporate minimum tax of 15% for certain large multinational companies starting in 2024 (‘Pillar Two’). On December 20, 2021, the OECD/G20 Inclusive Framework on Base Erosion and Profit Shifting released the Model Global Anti-Base Erosion rules (the ‘OECD Model Rules’) under Pillar Two. On December 12, 2022, E.U. member states reached an agreement to implement Pillar Two which agreement requires E.U. member states to enact domestic legislation to put Pillar Two into effect. In 2023, many E.U. countries enacted the necessary legislation (based on the OECD Model Rules) to implement Pillar Two in 2024. Ireland, in particular, enacted Pillar Two by signing Finance (No. 2) Bill 2023 into law in December 2023. Other countries and territories have indicated they will introduce Pillar Two beginning in 2025.
Previous report
These changes, when enacted and implemented by various countries in which we do business, could increase uncertainty and may adversely affect our tax rate and cash flow in future years.
Reworded paragraphs (73)
Previous wording
Our success largely depends on our ability to achieve our global business strategy as it evolves, and our results of operations and financial condition could suffer if the Company were unable to successfully establish and execute on its strategy and generate anticipated revenue growth and cost savings and efficiencies.
Current wording
Our success largely depends on our ability to achieve our global business strategy as it evolves, and our results of operations and financial condition could suffer if the Company were unable to successfully establish and execute on its strategy and generate anticipated revenue growth, cost savings, efficiencies and other benefits.
Previous wording
We are subject to political, economic, legal, regulatory, compliance, cultural, market, operational and other risks that are inherent in operating our global businesses.
Current wording
We are subject to political, geopolitical, economic, legal, regulatory, compliance, cultural, market, operational and other risks that are inherent in operating our global businesses.
Previous wording
Sanctions imposed by governments, or changes to such sanction regulations (such as sanctions imposed on Russia and China), and related counter-sanctions, could have a material adverse impact on our operations or financial results.
Current wording
Economic and trade sanctions imposed by governments, or changes to such sanction regulations (such as sanctions imposed on Russia and China), and related counter-sanctions, could have a material adverse impact on our operations or financial results.
Previous wording
Our global operations expose us to increasing, and sometimes conflicting, legal and regulatory requirements in environmental, social and governance (‘ESG’) matters, and violation of these regulations could harm our business.
Current wording
Our global operations expose us to numerous, and sometimes conflicting, legal and regulatory requirements in environmental, social and governance (‘ESG’) matters, and violation of these regulations could harm our business.
Previous wording
The economic, regulatory and political impact of the United Kingdom’s exit from the European Union, which occurred on January 31, 2020, could adversely affect us.
Current wording
The economic, regulatory and political impact of the United Kingdom’s exit from the European Union on January 31, 2020 has adversely affected and may continue to affect our business.
Previous wording
Our success largely depends on our ability to achieve our global business strategy as it evolves, and our results of operations and financial condition could suffer if the Company were unable to successfully establish and execute on its strategy and generate anticipated revenue growth and cost savings and efficiencies.
Current wording
Our success largely depends on our ability to achieve our global business strategy as it evolves, and our results of operations and financial condition could suffer if the Company were unable to successfully establish and execute on its strategy and generate anticipated revenue growth, cost savings, efficiencies and other benefits.
Previous wording
Our future growth, profitability, and cash flows largely depend upon our ability to successfully establish and execute our global business strategy. As discussed under Item 1, ‘Business - Business Strategy’, we seek to be an advisory, broking and solutions provider of choice through an integrated global platform. At the end of 2024, we updated our strategy, as described in this Annual Report on Form 10-K under Item 1. While we have confidence that our strategic plan reflects opportunities that we believe to be appropriate and achievable, our strategy may not deliver projected growth in revenue and profitability due to inadequate execution, incorrect assumptions, global or local economic conditions, competition, changes in the industries in which we operate, sub-optimal resource allocation or other reasons, including the other risks described in this ‘Risk Factors’ section. In addition, our strategy continues to evolve, and it is possible that we will be unable to successfully execute the associated strategy changes, due to factors discussed above or elsewhere in this ‘Risk Factors’ section. In pursuit of our growth strategy, we expect to invest significant time and resources into new product or service offerings, as well as investments in technology and infrastructure to support these offerings, and we may not realize our expected return on these offerings or that these offerings may fail to yield sufficient return to cover the cost of investment. The failure to continually develop and execute optimally on our global business strategy could have a material adverse effect on our business, financial condition and results of operations.
Current wording
Our future growth, profitability, and cash flows largely depend upon our ability to successfully establish and execute our global business strategy, including executing on our expected product, service and transaction pipelines. As discussed under Item 1, ‘Business - Business Strategy’, we seek to be an advisory, broking and solutions provider of choice through an integrated global platform. While we have confidence that our strategic plan reflects opportunities that we believe to be appropriate and achievable, our strategy may not deliver projected growth in revenue and profitability due to inadequate execution, incorrect assumptions, global or local economic conditions, competition, changes in the industries in which we operate, sub-optimal resource allocation or other reasons, including the other risks described in this ‘Risk Factors’ section.
Previous wording
We have stated certain financial goals, including with respect to our cash flows, our growth and margin targets, and our share repurchases. We have stated, and may in the future state, other goals for future periods. Our initiatives aiming to implement our strategy and to achieve future financial objectives pose potential operational risks and may result in distraction of management and colleagues. We cannot be certain whether we will be able to realize benefits from current revenue-generating or cost-saving initiatives, including our recently-completed Transformation program and our continued strategic efforts to achieve operational efficiencies, and ultimately realize our strategic objectives. Furthermore, we may not repurchase as many of our outstanding shares as anticipated due to market or business conditions or due to other factors, including decisions to prioritize acquisitions, investments or other uses of capital. There can be no assurance that our actual results will meet our stated financial goals.
Current wording
Further, we have stated certain financial goals, including with respect to our cash flows, our growth and margin targets, and our share repurchases. We have stated, and may in the future state, other goals for future periods. Our initiatives aiming to implement our strategy and to achieve future financial objectives pose potential operational risks and may result in the distraction of management and colleagues. Furthermore, we may not repurchase as many of our outstanding shares as anticipated due to market or business conditions or due to other factors, including decisions to prioritize acquisitions, investments or other uses of capital. There can be no assurance that our actual results will meet our stated financial goals.
Previous wording
In addition, we face risks related to divesting businesses, including that we may not receive adequate consideration or any earnout proceeds in return for the divested business, we may continue to be subject to the liabilities of the divested business after its divestiture (including with respect to work we might have performed on behalf of the divested business), and we may not be able to reduce overhead or redeploy assets or retain colleagues after the divestiture closes. For example, we completed the divestiture of our then-reinsurance business to Gallagher in 2021 and our sale of the TRANZACT business in 2024, each of which gives rise to such risks, including: in the case of TRANZACT, the risk that such post-closing transition arrangements, which are complex, may impose greater-than-expected costs or liabilities, may give rise to errors in execution or may be distracting to our management; the risk that such a divestiture could cause disruption to our business or our relationships with clients, colleagues, correspondents, suppliers, regulators, competitors and other third parties; the risk that litigation associated with the transaction or with contingent liabilities we have retained, if any, may arise; and other risks detailed in this Annual Report on Form 10-K and in our other SEC filings. We also may not otherwise meet our operational or strategic expectations at all or on the anticipated timeline following the divestiture.
Current wording
In addition, we face risks related to divesting businesses, including that we may not receive adequate consideration or any earnout proceeds in return for the divested business, we may continue to be subject to the liabilities of the divested business after its divestiture (including with respect to work we might have performed on behalf of the divested business), and we may not be able to reduce overhead or redeploy assets or retain colleagues after the divestiture closes.
Previous wording
Further, we cannot be certain that our acquisitions will be accretive to earnings or that our acquisitions or joint ventures will otherwise meet our operational or strategic expectations. Acquisitions and joint ventures, such as our recently-announced joint venture with Bain Capital, involve special risks, including the potential assumption of unanticipated liabilities and contingencies and difficulties in integrating acquired businesses or in achieving a successful joint venture. Acquired businesses or joint ventures may not achieve the levels of revenue, profit, or productivity we anticipate or otherwise perform as we expect. In addition, if the operating performance of an acquired business or joint venture deteriorates significantly or capital needs increase, we may need to make additional investments or write down the value of the goodwill and other acquisition-related intangible assets recorded on our consolidated balance sheet.
Current wording
Further, we cannot be certain that our acquisitions will be accretive to earnings or that our acquisitions or joint ventures will otherwise meet our operational or strategic expectations. Acquisitions, such as our Newfront and Cushon acquisitions, and joint ventures, such as our joint venture with Bain Capital, involve special risks, including the potential assumption of unanticipated liabilities and contingencies and difficulties in integrating acquired businesses or in achieving a successful joint venture. In particular, our acquisition of Newfront requires the integration of a technology-enabled brokerage platform and digital-first operating model into our existing broking operations, which may pose additional challenges related to technology and systems integration, increased cybersecurity exposure, and compliance with U.S. state-based licensing requirements. Our acquisition of Cushon similarly involves the integration of a regulated, technology-driven pension and savings platform into our wealth-related businesses and exposes us to additional risks related to U.K. financial services and pension regulation, operational-resilience and data‑privacy requirements, and the integration of a digital investment platform into our existing offerings. Acquired businesses or joint ventures may not achieve the levels of revenue, profit, or productivity we anticipate or otherwise perform as we expect. Further, we may have difficulty retaining, integrating, or attracting the talent needed to make those transactions successful, including revenue-generating colleagues and colleagues with specialized expertise. In addition, if the operating performance of an acquired business or joint venture deteriorates significantly or capital needs increase, we may need to make additional investments or write down the value of the goodwill and other acquisition-related intangible assets recorded on our consolidated balance sheet.
Previous wording
With respect to any such acquisition transactions or joint ventures, we face risks related to the potential impacts of the transaction on relationships, including with clients, colleagues, correspondents, suppliers, regulators, competitors, and other third parties, as well as the risk related to contingent liabilities (including litigation) potentially creating material liabilities for the Company. The following risks, in addition to those described above, may also adversely affect our ability to successfully implement and integrate these acquisitions or to manage joint ventures: material changes in U.S. and foreign jurisdiction regulations (including those related to the healthcare system and insurance brokerage, pension advisory, and investment services); changes in general economic, business and political conditions in relevant markets, including changes in the financial markets; significant competition in the marketplace; the need to manage potential conflicts of interest; and compliance with extensive and evolving government regulations in the U.S. and in foreign jurisdictions.
Current wording
With respect to any such acquisition transactions or joint ventures, we face risks related to the potential impacts of the transaction on relationships, including with clients, colleagues, correspondents, suppliers, regulators, competitors, and other third parties, as well as the risk related to contingent liabilities as described in the preceding paragraph. The following risks, in addition to those described above, may also adversely affect our ability to successfully implement and integrate these acquisitions or to manage joint ventures: material changes in U.S. and foreign jurisdiction regulations (including those related to the healthcare system and insurance brokerage, pension advisory, and investment services); changes in general economic, business and political conditions in relevant markets, including changes in the financial markets; significant competition in the marketplace; the need to manage potential conflicts of interest; and compliance with extensive and evolving government regulations in the U.S. and in foreign jurisdictions.
Previous wording
We may be unable to effectively integrate an acquired business into our organization and may not succeed in managing such acquired businesses or the larger company that results from such acquisitions. The process of integrating an acquired business may subject us to a number of risks, including, without limitation, an inability to retain the management, key personnel and other colleagues of the acquired business; an inability to establish uniform standards, controls, systems, procedures and policies or to achieve anticipated savings; and exposure to legal claims or regulatory censure for activities of the acquired business prior to acquisition.
Current wording
We may be unable to effectively integrate an acquired business into our organization and may not succeed in managing such acquired businesses or the larger company that results from such acquisitions. The process of integrating an acquired business may subject us to a number of risks, including, without limitation, an inability to retain the management, key personnel and other colleagues of the acquired business; an inability to establish uniform standards, controls, systems, procedures and policies or to achieve anticipated savings; an inability to successfully apply technology from one part of the business to another; and exposure to legal claims or regulatory censure for activities of the acquired business prior to acquisition.
Previous wording
Our business strategy includes the organic growth of our existing operations when we enter into new lines of business or offer new products and services within existing lines of business. We may not be able to effectively execute our organic growth strategy for reasons within and outside of our control. Organic growth presents additional risks, particularly in instances where the markets are heavily regulated, meaningfully competitive with high bars to entry, or new or not fully developed. Such risks include the investment of significant time and resources; the possibility that these efforts will not be successful and could result in reputational damage to us; the possibility that the marketplace does not accept our products or services; the possibility that we are unable to retain clients that adopt our new products or services; and the risk of new or additional liabilities associated with these efforts, including potential errors and omissions or other claims. External factors, such as compliance with new or revised regulations, competitive alternatives and shifting market preferences may also impact the successful implementation of a line of business, product or service. If the entry into businesses, products or services is not successfully integrated into our business, the intended benefits and business development initiatives will not be achieved, which may adversely affect our business, financial condition, results of operations and reputation.
Current wording
Our business strategy includes the organic growth of our existing operations when we enter into new lines of business or offer new products and services within existing lines of business. We may not be able to effectively execute our organic growth strategy for reasons within and outside of our control. Organic growth presents additional risks, particularly in instances where the markets are heavily regulated, meaningfully competitive with high bars to entry, or new or not fully developed. Such risks include the investment of significant time and resources; the possibility that these efforts will not be successful and could result in reputational damage to us; the possibility that the marketplace does not accept our products or services; the possibility that we are unable to retain clients that adopt our new products or services; and the risk of new or additional liabilities associated with these efforts, including potential errors and omissions or other claims. External factors, such as compliance with new or revised regulations, competitive alternatives and shifting market preferences may also impact the successful implementation of a line of business, product or service. If the entry into businesses, products or services is not successfully integrated into our business, the intended benefits and business development initiatives will not be achieved, which may adversely affect our business, financial condition, results of operations or reputation.
Previous wording
Our success depends, in part, on our ability to develop and implement innovative technology, data and analytic solutions that anticipate, lead, keep pace with or respond to rapid and continuing changes in technology both for internal operations, for maintaining industry standards, meeting client preferences and gaining competitive advantage. We may not be successful in anticipating or responding to these developments in a timely and cost-effective manner or in attracting and maintaining personnel with the necessary skills in this area. Our ideas may not lead to the desired internal efficiencies or be accepted in the marketplace. In addition, we may not be able to implement technology-based solutions as quickly as desired if, for example, greater resources are required than originally expected or resources are otherwise needed elsewhere. The effort to gain technological and data expertise and develop new technologies or analytic techniques in our business requires us to incur significant cost and attract qualified technical talent who are in high demand. Our competitors are seeking to develop competing or new technologies, and their success in this space may impact our ability to differentiate our services to our clients through the use of unique technological solutions. If we do not keep up with technological changes or execute effectively on our strategic initiatives, our business and results of operations could be adversely impacted. For example, incorporating artificial intelligence (‘AI’) into certain product offerings is becoming more important in our operations, particularly as our competitors, including new entrants focused on using technology and innovation, such as generative AI, digital platforms, data analytics, robotics and blockchain, seek to simplify and improve the client experience, increase efficiencies, alter business models and effect other potentially disruptive changes in the industries in which we operate. If we fail to keep pace with rapidly evolving AI and other technological developments, our competitive position and business results may be negatively impacted. In certain cases, we may decide, based on perceived business needs, to make investments that may be greater than we currently anticipate. If we cannot offer new technologies or data and analytic services or solutions as quickly or effectively as our competitors, or if our competitors develop more cost-effective technologies or analytic tools, it could have a material adverse effect on our ability to obtain and complete client engagements. There are significant risks involved in our efforts to keep pace with technological developments and no assurance can be provided that the usage of such technology will enhance our business or assist us in being more efficient or profitable. While development and enhancement of our technology systems may improve the efficiency of data analytics and reduce certain costs, there is no assurance that the benefits related to such advan…
Excerpt shortened here; the source contains the full paragraph.
Current wording
Our success depends, in part, on our ability to develop and implement innovative technology, data and analytic solutions that anticipate, lead, keep pace with or respond to rapid and continuing changes in technology both for internal operations, for maintaining industry standards, meeting client preferences and gaining competitive advantage. We may not be successful in anticipating or responding to these developments in a timely and cost-effective manner or in attracting and maintaining personnel with the necessary skills in this area. Our ideas may not lead to the desired internal efficiencies or be accepted in the marketplace. In addition, we may not be able to implement technology-based solutions as quickly as desired if, for example, greater resources are required than originally expected or resources are otherwise needed elsewhere. The effort to gain technological and data expertise and develop new technologies or analytic techniques in our business requires us to incur significant cost and attract qualified technical talent who are in high demand. Our competitors are seeking to develop competing or new technologies, and their success in this space may impact our ability to differentiate our services to our clients through the use of unique technological solutions. If we do not keep up with technological changes or execute effectively on our strategic initiatives, our business and results of operations could be adversely impacted. For example, incorporating artificial intelligence (‘AI’) into certain product offerings is becoming more important in our operations, particularly as our competitors, including new entrants focused on using technology and innovation, such as generative or agentic AI, digital platforms, data analytics, robotics and blockchain, seek to simplify and improve the client experience, increase efficiencies, alter business models and effect other potentially disruptive changes in the industries in which we operate. Additionally, rapid advances in generative and agentic AI may enable certain clients to perform internally, automate, or obtain through low-cost digital tools analytical, benchmarking, modeling, drafting or other work that they have historically relied on us to provide, which could reduce demand for some of our services and adversely affect our revenues and growth. If we fail to keep pace with rapidly evolving AI and other technological developments, our competitive position and business results may be negatively impacted. In certain cases, we may decide, based on perceived business needs, to make investments that may be greater than we currently anticipate. If we cannot offer new technologies or data and analytic services or solutions as quickly or effectively as our competitors, or if our competitors develop more cost-effective technologies or analytic tools, it could have a material adverse effect on our ability to obtain and complete client engagements. There are significant risks involved in our efforts to …
Excerpt shortened here; the source contains the full paragraph.
Previous wording
The enhancement and development of technology systems may enhance cybersecurity risks and operational and technological risks, as any latency, disruption or failure in such technological tools could result in errors in analyses and compromise the integrity, security or privacy of generated content. Additionally, the process of integrating technology systems of businesses we acquire is complex and exposes us to additional risk. We may not adequately identify weaknesses in the information systems or information handling, privacy and security policies and protocols of targets, which could expose us to unexpected liabilities or make our own systems and data more vulnerable to cybersecurity incidents. For further discussion of risks relating to these technology systems, please see ‘Data and cybersecurity breaches or improper disclosure of confidential company or personal data could result in material financial loss, regulatory actions, reputational harm and/or legal liability’ below.
Current wording
The enhancement and development of technology systems may enhance cybersecurity risks and operational and technological risks, as any latency, disruption or failure in such technological tools could result in errors in analyses and compromise the integrity, security or privacy of generated content. Additionally, the process of integrating technology systems of businesses we acquire is complex and exposes us to additional risk. We may not adequately identify weaknesses in the information systems or information handling, privacy and security policies and protocols of targets, which could expose us to unexpected liabilities or make our own systems and data more vulnerable to cybersecurity incidents. The use of third-party generative AI tools by our employees, contractors, consultants, vendors or service providers also presents a risk that confidential, personal or proprietary information could be inadvertently disclosed through prompts or uploads and incorporated into external models or training data, potentially compromising our ability to realize the benefit of, or adequately maintain, protect and enforce, our intellectual property or confidential information, and causing harm to our competitive position and business. For further discussion of risks relating to these technology systems, please see ‘Data and cybersecurity breaches or improper disclosure of confidential company or personal data could result in material financial loss, regulatory actions, reputational harm and/or legal liability’ below.
Previous wording
We depend on our technology systems for conducting business, as well as for providing the data and analytics we use to manage and administer our business. As a result, our business success is dependent on maintaining the effectiveness of existing technology systems and on continuing to develop and enhance technology systems that support our business processes and strategic initiatives in a cost- and resource-efficient manner, particularly as our business processes become more digital.
Current wording
We depend on our technology systems for conducting business, as well as for providing the data and analytics we use to manage and administer our business. As a result, our business success is dependent on maintaining the effectiveness of existing technology systems and on continuing to develop and enhance technology systems that support our business processes and strategic initiatives in a cost- and resource-efficient manner, particularly as our business processes become more digital. The failure of business-continuity and disaster-recovery processes at critical vendors or at the Company may require us to suspend or limit certain services temporarily.
Previous wording
We have a number of strategic initiatives involving investments in technology and infrastructure to support our own systems as well as partnerships with technology companies. These investments can be costly and require significant capital expenditures, and such investment may not be profitable or may be less profitable than what we have experienced historically. In addition, investments in technology systems may not deliver the benefits or perform as expected or may be replaced or become obsolete more quickly than expected, which could result in operational difficulties or additional costs. In some cases, we also depend on our partners and key vendors to provide technology and other support for these and other strategic initiatives. If these partners or vendors fail to perform their obligations as we expect them to do or at all or such partners or vendors otherwise cease to work with us, our ability to execute on our strategic initiatives, and our business and results of operations, could be adversely impacted.
Current wording
We have a number of strategic initiatives involving investments in technology and infrastructure to support our own systems as well as partnerships with technology companies. These investments can be costly and require significant capital expenditures, and such investment may not be profitable or may be less profitable than what we have experienced historically. In addition, investments in technology systems may not deliver the benefits or perform as expected or may be replaced or become obsolete more quickly than expected, which could result in operational difficulties or additional costs. In some cases, we also depend on our partners and key vendors to provide technology and other support for these and other strategic initiatives. If these partners or vendors fail to or are unable to fully perform their obligations as we expect them to do or at all or such partners or vendors otherwise cease to work with us, our ability to execute on our strategy could be impaired. Vendor outages, flawed software updates, migration issues, capacity constraints or delays in delivering enhancements can further disrupt client delivery and increase costs.
Previous wording
Global economic events and other factors, such as accommodative monetary and fiscal policy, have contributed to significant inflation in many of the markets in which we operate over time. In particular, inflation in the United States, Europe and other geographies has recently risen to levels not experienced in decades and we have seen, and may continue to see, its impact on various aspects of our business. In some cases, such inflation has had, or could have in the future, a negative effect on our operations and financial condition. In order to combat inflation and restore price stability, a number of central banks around the world raised interest rates and, as inflation has moderated, have begun to reduce them. Potential trade wars, including tariffs and retaliatory actions, also may contribute to inflation and/or hinder economic growth. If interest rates fluctuate and/or inflation rates or trade barriers increase, economic growth in a number of markets where we do business may be hindered and may continue to have far-reaching effects on the global economy. Weakness in the economy and the possibility of a global recession has had, and may continue to have, a negative effect on our business and financial condition, including on the value of our ordinary shares. Additionally, fluctuations in short-term interest rates in our major markets can impact our interest income derived from the investment of our owned and fiduciary cash.
Current wording
Global economic events and other factors, such as accommodative monetary and fiscal policy, have contributed to significant inflation in many of the markets in which we operate over time. In particular, inflation in the United States, Europe and other geographies has in recent years risen to levels not experienced in decades and we have seen, and may continue to see, the impact of inflation on various aspects of our business. In some cases, such inflation has had, or could have in the future, a negative effect on our operations and financial condition. In order to combat inflation and restore price stability, a number of central banks around the world raised interest rates and, as inflation has moderated, have begun to reduce them. Potential trade wars, including tariffs and retaliatory actions, also may contribute to inflation and/or hinder economic growth. If interest rates fluctuate and/or inflation rates or trade barriers increase, economic growth in a number of markets where we do business may be hindered and may continue to have far-reaching effects on the global economy. Weakness in the economy and the possibility of a global recession has had, and may continue to have, a negative effect on our business and financial condition, including on the value of our ordinary shares. Additionally, fluctuations in short-term interest rates in our major markets can impact our interest income derived from the investment of our owned and fiduciary cash.
Previous wording
Major public health issues have adversely affected, and could in the future materially adversely affect, our business, results of operations and/or financial condition. The future impact of a public health crisis will depend on future developments that we are unable to predict. Public health issues could continue to disrupt, possibly materially, our business operations and services that we provide or impact our business operations and results in the future.
Current wording
Major public health issues have adversely affected, and could in the future materially adversely affect, our business, results of operations and/or financial condition. We cannot predict the impact of future public health crises, nor the future developments that may give rise to such crises. Public health issues have disrupted and could continue to disrupt, possibly materially, our business operations and services that we provide or impact our business operations and results in the future. These disruptions can include office closures, travel restrictions, workforce availability challenges, changes in client priorities and budgets, interruption to technology and shared-service delivery, and delays by third-party vendors and service providers on whom we rely.
Previous wording
We are exposed to various risks arising out of natural disasters, including fires (such as the recent wildfires in southern California), earthquakes, hurricanes, floods and tornadoes, many of which could be exacerbated by climate change. These consequences could, among other things, implicate other risks described herein, including without limitation: business continuity risks; human capital risks; regulatory and reputational risks; and risks relating to alleged errors and omissions in performing client work, and thereby adversely impact our business, results of operations or financial condition.
Current wording
We are exposed to various risks arising out of natural disasters, including fires, earthquakes, hurricanes, floods and tornadoes, many of which could be exacerbated by climate change. These consequences could, among other things, implicate other risks described herein, including without limitation: business continuity risks; human capital risks; regulatory and reputational risks; and risks relating to alleged errors and omissions in performing client work, and thereby adversely impact our business, results of operations or financial condition.
Previous wording
Additionally, U.S. and global markets are affected by geopolitical conflict in highly unpredictable ways and are currently experiencing volatility and disruption as a result of the ongoing war between Russia and Ukraine and the Middle East conflicts. These ongoing wars and other geopolitical conflicts could lead to further market disruptions and could have a material adverse effect on our business, prospects, financial condition and operating results.
Current wording
Additionally, many of the markets in which we do business are affected by geopolitical conflict in highly unpredictable ways and are currently experiencing volatility and disruption as a result of the ongoing Russia- Ukraine war and other geopolitical conflicts and tensions. These ongoing wars and other geopolitical conflicts could lead to further market disruptions and could have a material adverse effect on our business, prospects, financial condition and operating results.
Previous wording
Further, a slowdown in the global economy, including a recession, or in a particular region or industry, inflation or a tightening of the credit markets could negatively impact our business, financial condition and liquidity, including by way of inhibiting our continued access to preferred sources of liquidity when we would like or by our increasing our borrowing costs. In particular, tightening of the credit markets could limit our ability to obtain external financing to fund our operations and capital expenditures, if and when needed. In addition, we could experience losses on our holdings of cash and investments due to failures of financial institutions and other parties. Thus, a deterioration or prolonged period of negative or stagnant macroeconomic conditions in the U.S. and globally could adversely affect our business, results of operations or financial condition.
Current wording
Further, a slowdown in the global economy, including a recession, or in a particular region or industry, inflation or a tightening of the credit markets could negatively impact our business, financial condition and liquidity, including by way of inhibiting our continued access to preferred sources of liquidity when we would like or by increasing our borrowing costs. In particular, tightening of the credit markets could limit our ability to obtain external financing to fund our operations and capital expenditures, if and when needed. In addition, we could experience losses on our holdings of cash and investments due to failures of financial institutions and other parties.
Previous wording
Maintaining a positive reputation is critical to our ability to attract and maintain relationships with clients and colleagues. Damage to our reputation could therefore cause significant harm to our business and prospects. Harm to our reputation can arise from numerous sources, including, among others: colleague misconduct; litigation or regulatory action; failure to deliver minimum standards of service and quality; compliance failures; and allegations of conflicts of interest and unethical behavior. Such harm could also arise from negative public opinion or political conditions arising from our association with third parties in any number of activities or circumstances. Negative perceptions or publicity, whether or not true, may result in harm to our prospects. In addition, the failure to deliver satisfactory service and quality performance, on time and within budget, in one line of business could cause clients to terminate the services we provide to those clients in many other lines of business. This risk has increased as the Company has become larger and more complex and as we take on increasingly complicated projects for our clients (such as complex outsourcing engagements and technology solutions development/implementation projects that require a significant amount of dedicated personnel, resources and expenses).
Current wording
Maintaining a positive reputation is critical to our ability to attract and maintain relationships with clients and colleagues. Damage to our reputation could therefore cause significant harm to our business and prospects. Harm to our reputation can arise from numerous sources, including, among others: colleague misconduct; litigation or regulatory action; failure to deliver minimum standards of service and quality; compliance failures; and allegations of conflicts of interest and unethical behavior. Such harm could also arise from negative public opinion or political conditions arising from our association with third parties in any number of activities or circumstances. Negative perceptions or publicity, whether or not true, may result in harm to our prospects. In addition, the failure to deliver satisfactory service and quality performance, on time and within budget, in one line of business could cause clients to terminate the services we provide to those clients in many other lines of business. This risk has increased as the Company has become larger and more complex and as we take on increasingly complicated projects for our clients (such as complex outsourcing engagements and technology solutions development/implementation projects that require a significant amount of dedicated personnel, resources and expenses). It also has increased as the Company seeks to provide more services to individual clients directly or through business-to-business-to-consumer arrangements.
Previous wording
Our success has depended, and our future performance will continue to depend, largely upon the ongoing services of our executive officers, senior management, and other highly skilled personnel. We have relied on our leadership team to execute on our business plan, for strategy, growth, research and development, marketing, sales, provision, maintenance, and support of our products and services, and general and administrative functions, and on mission-critical individual contributors. From time to time, our executive management team and the groups of skilled individual contributors may change from the hiring or departure of executive officers or such contributors, which could disrupt our business. The employment-related agreements with our chief executive officer and certain of our executive officers (to the extent our officers are party to such agreements) and other key personnel will not require them to continue to work for us for any specified period; therefore, they could terminate their employment at any time. The loss of one or more of our executive officers, senior management members, or other key colleagues (including any limitation on the performance of their duties) could significantly delay or prevent the achievement of our development and strategic objectives.
Current wording
Our success has depended, and our future performance will continue to depend, largely upon the ongoing services of our executive officers, senior management, and other highly skilled personnel. We have relied on our leadership team to execute on our business plan, for strategy, growth, research and development, marketing, sales, provision, maintenance, and support of our products and services, and general and administrative functions, and on mission-critical individual contributors. From time to time, our executive management team and the groups of skilled individual contributors may change from the hiring or departure of executive officers or such contributors, which could disrupt our business. The employment-related agreements with our chief executive officer and certain of our executive officers (to the extent our officers are party to such agreements) and other key personnel may not require them to continue to work for us for any specified period; therefore, they could terminate their employment at any time. The loss of one or more of our executive officers, senior management members, or other key colleagues (including any limitation on the performance of their duties) could significantly delay or prevent the achievement of our development and strategic objectives.
Previous wording
Our success depends on our ability to attract, retain and motivate qualified personnel, including key managers and colleagues. In addition, our success largely depends upon our colleagues’ abilities to generate business and provide quality services. Our ability to provide services our clients demand requires such skills and training, in insurance, actuarial, human resources and other areas, which are also in high demand among our competitors. The market for talent in our industry is extremely competitive, and competitors for talent increasingly attempt to hire, and to varying degrees have been successful in hiring, our colleagues or employment candidates. In particular, our colleagues’ business relationships with our clients are a critical element of obtaining and maintaining client engagements. Labor markets have continued to tighten globally, and we have experienced intense competition and increased costs for certain types of colleagues, especially as new entrants in the insurance business (among others) continue to expend significant resources in their own hiring. Also, in the past, we have lost colleagues who manage substantial client relationships or possess substantial experience or expertise; if we lose additional colleagues such as those, or if we lose a large number of other colleagues, it could result in such colleagues competing against us. It may take longer than expected to hire new colleagues to replace those who have left or these new colleagues may be subject to restrictive covenants from former employers that impact the amount of business they can generate while those covenants are in effect. Further, the increased availability of remote working arrangements has also expanded the pool of companies that can compete for our colleagues and employment candidates. Our business strategy requires us to attract, onboard and retain individuals relevant for those efforts and we may not be able to do that successfully. The failure to successfully attract and retain qualified personnel could materially adversely affect our ability to secure and complete engagements or could disrupt our business or cause increased operational risk, which would materially adversely affect our results of operations and prospects.
Current wording
Our success depends on our ability to attract, retain and motivate qualified personnel, including key managers and colleagues. In addition, our success largely depends upon our colleagues’ abilities to generate business and provide quality services. Our ability to provide services our clients demand requires such skills and training, in insurance, actuarial, human resources and other areas, which are also in high demand among our competitors. The market for talent in our industry is extremely competitive, and competitors for talent increasingly attempt to hire, and to varying degrees have been successful in hiring, our colleagues or employment candidates. In particular, our colleagues’ business relationships with our clients are a critical element of obtaining and maintaining client engagements. Labor markets have generally continued to tighten globally, and we have experienced intense competition and increased costs for certain types of colleagues, especially as new entrants in the insurance business (among others) continue to expend significant resources in their own hiring. Also, in the past, we have lost colleagues who manage substantial client relationships or possess substantial experience or expertise; if we lose additional colleagues such as those, or if we lose a large number of other colleagues, it could result in such colleagues competing against us. This risk has historically increased following significant mergers or acquisitions. It may take longer than expected to hire new colleagues to replace those who have left or these new colleagues may be subject to restrictive covenants from former employers that impact the amount of business they can generate while those covenants are in effect. Further, the increased availability of remote working arrangements has also expanded the pool of companies that can compete for our colleagues and employment candidates. Our business strategy requires us to attract, onboard and retain individuals relevant for those efforts and we may not be able to do that successfully. The failure to successfully attract and retain qualified personnel could materially adversely affect our ability to secure and complete engagements or could disrupt our business or cause increased operational risk, which would materially adversely affect our results of operations and prospects.
Previous wording
We depend on information technology networks and systems to process, transmit and store electronic information and to communicate among our locations around the world and with our alliance partners, insurance carriers/markets, clients and third-party vendors. We also maintain our clients’ confidential and proprietary information and the personal data of their customers and employees. Our information systems, and those of our third-party service providers and vendors, are vulnerable to an increasing threat of continually evolving cybersecurity risks. We regularly experience cyberattacks and are the target of computer viruses, hackers, distributed denial of service attacks, malware infections, ransomware attacks, phishing and spear-phishing campaigns, and other external hazards, as well as improper or inadvertent workforce behavior, which could expose confidential company and personal data systems and information, including information of our customers and employees, to security breaches. Further, the advance of generative AI may give rise to additional vulnerabilities and potential entry points for cyber threats. With generative AI tools, threat actors may have additional tools to automate breaches or persistent attacks, evade detection, or generate sophisticated phishing emails or other forms of digital impersonation. In addition, increasing use of generative AI models in our internal systems may create new attack methods for adversaries. Because generative AI is a new field, our understanding of cybersecurity risks resulting from generative AI and protection methods continues to develop, and features that rely on generative AI, including in services provided to us by third parties, may be susceptible to unanticipated cybersecurity threats from sophisticated adversaries and other cybersecurity incidents.
Current wording
We depend on information technology networks and systems to process, transmit and store electronic information and to communicate among our locations around the world and with our alliance partners, insurance carriers/markets, clients and third-party vendors. We also maintain our clients’ confidential and proprietary information and the personal data of their customers and employees. Our information systems, and those of our third-party service providers and vendors, are vulnerable to an increasing threat of continually evolving cybersecurity risks. We regularly experience cyberattacks and are the target of computer viruses, hackers, distributed denial of service attacks, malware infections, ransomware attacks, phishing and spear-phishing campaigns, and other external hazards, as well as improper or inadvertent workforce behavior, which could expose confidential company and personal data systems and information, including information of our customers and employees, to security breaches. Further, the advance of both generative and agentic AI may give rise to additional vulnerabilities and potential entry points for cyber threats. With generative AI tools, threat actors may have additional tools to automate breaches or persistent attacks, evade detection, or generate sophisticated phishing emails or other forms of digital impersonation. In addition, increasing use of generative and agentic AI models in our internal systems may create new attack methods for adversaries. Because generative and agentic AI are new fields, our understanding of cybersecurity risks resulting from generative and agentic AI and protection methods continues to develop, and features that rely on generative or agentic AI, including in services provided to us by third parties, may be susceptible to unanticipated cybersecurity threats from sophisticated adversaries and other cybersecurity incidents.
Previous wording
Many of the software applications that we use in our business are licensed from, and supported, upgraded and maintained by, third-party vendors. Our third-party applications include, but are not limited to, enterprise cloud storage and cloud computing application services provided and maintained by third-party vendors. These third-party applications store or may afford access to confidential and proprietary data of the Company, our colleagues and our clients. We have processes designed to require third-party vendors that provide information technology (‘IT’) outsourcing, offsite storage and other services to agree to maintain certain standards with respect to the storage, protection and transfer of confidential, personal and proprietary information, but our processes cannot eliminate all risk of compromise or unauthorized access or use of such information in the event of a breakdown of a vendor’s data protection processes, a data breach due to the intentional or unintentional non-compliance by a vendor’s employee or agent, or as a result of a cyber-attack on the product, software or information systems of a vendor in our software supply chain. Any compromise of the product, software, data or infrastructure of a Company vendor, including a software or IT vendor in our supply chain, has and could again, result in the compromise of Company data or infrastructure or result in material operational disruption, although no such known previous compromise has been material to our business or financial results. Further, the risk and potential impact of a data breach on our third-party vendors’ products, software or systems increase as we move more of our data and our clients’ data into our vendors’ cloud storage, engage in IT outsourcing, and consolidate the group of third-party vendors that provide cloud storage or other IT services for the Company. Over time, the frequency, severity and sophistication of the attacks against us and our vendors have increased, including due to the use of AI for purposes of cybercrime, and the broader range of threat actors, including state-sponsored actors and hacker activists.
Current wording
Many of the software applications that we use in our business are licensed from, and supported, upgraded and maintained by, third-party vendors. Our third-party applications include, but are not limited to, enterprise cloud storage and cloud computing application services provided and maintained by third-party vendors. These third-party applications store or may afford access to confidential and proprietary data of the Company, our colleagues and our clients. We have processes designed to require third-party vendors that provide information technology (‘IT’) outsourcing, offsite storage and other services to agree to maintain certain standards with respect to the storage, protection and transfer of confidential, personal and proprietary information, but our processes cannot eliminate all risk of compromise or unauthorized access or use of such information in the event of a breakdown of a vendor’s data protection processes, a data breach due to the intentional or unintentional non-compliance by a vendor’s employee or agent, or as a result of a cyber-attack on the product, software or information systems of a vendor in our software supply chain. Any compromise of the product, software, data or infrastructure of a Company vendor, including a software or IT vendor in our supply chain, has and could again, result in the compromise of Company data or infrastructure or result in material operational disruption, although no such known previous compromise has been material to our business or financial results. Further, the risk and potential impact of a data breach on our third-party vendors’ products, software or systems increase as we move more of our data and our clients’ data into our vendors’ cloud storage, engage in IT outsourcing, and consolidate the group of third-party vendors that provide cloud storage or other IT services for the Company. Over time, the frequency, severity and sophistication of the attacks against us and our vendors have increased, including due to the use of AI for purposes of cybercrime, and the broader range of threat actors, including state-sponsored actors and hacker activists. In addition, our contractual and insurance protections with vendors may be limited or unenforceable, and vendor outages, flawed updates or delayed patching could disrupt our operations.
Previous wording
We and our vendors regularly experience cybersecurity incidents, including successful attacks from time to time, and we expect that to continue going forward. While we have experienced successful attacks by various types of hacking groups in which personal and commercially sensitive information, belonging to the Company or its clients, has been compromised, none of these cybersecurity incidents or attacks to our knowledge have been material to our business or financial results. Cybersecurity incidents include those resulting from human error or malfeasance, implantation of malware and viruses, phishing and spear-phishing attacks, unauthorized access to our information technology networks and systems, and unauthorized access to data or individual account funds through fraud or other means of deceiving our colleagues, clients, third-party service providers and vendors. We cannot ensure that such cybersecurity incidents or attacks will not have a material impact on our business or financial results in the future. When required by law, we have notified individuals, clients and/or relevant regulatory authorities (such as insurance and financial services regulators and privacy regulators) of such cybersecurity incidents or attacks.
Current wording
We and our vendors regularly experience cybersecurity incidents, including successful attacks from time to time, and we expect that to continue going forward. While we have experienced successful attacks by various types of hacking groups in which personal and commercially sensitive information, belonging to the Company or its clients, has been compromised, none of these cybersecurity incidents or attacks to our knowledge have been material to our business or financial results. Cybersecurity incidents include those resulting from human error or malfeasance, implantation of malware and viruses, phishing and spear-phishing attacks, unauthorized access to our information technology networks and systems, and unauthorized access to data or individual account funds through fraud or other means of deceiving our colleagues, clients, third-party service providers and vendors. We cannot ensure that such cybersecurity incidents or attacks will not have a material impact on our business or financial results in the future. When required by law, we have notified individuals, clients and/or relevant regulatory authorities (such as insurance and financial services regulators and privacy regulators) of such cybersecurity incidents or attacks. During an incident, we may need to disconnect systems or suspend certain services, and there can be delays before full scope and impact are understood. Our cyber insurance coverage may be unavailable or insufficient to cover losses.
Previous wording
The methods used to obtain unauthorized access to, disable or degrade service or sabotage the Company’s systems are also constantly evolving, are increasingly sophisticated, and may be difficult to anticipate or detect. For example, the U.S. Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency, and other U.S. federal agencies continue to issue warnings about trends in cybercriminal and nation-state activity and other threats that are consistent with some of the types of incidents we have experienced. To our knowledge, these incidents have not had a material impact on our business or operations thus far. However, our reputation could be harmed and our business and results of operations could be materially and adversely affected if we were to be the target of such attacks in the future, or if, despite our controls and efforts to detect breaches, we were to be the victim of an undetected breach.
Current wording
The methods used to obtain unauthorized access to, disable or degrade service or sabotage the Company’s systems are also constantly evolving, are increasingly sophisticated, and may be difficult to anticipate or detect. For example, the U.S. Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency, and other U.S. federal agencies continue to issue warnings about trends in cybercriminal and nation-state activity and other threats that are consistent with some of the types of incidents we have experienced. To our knowledge, these incidents have not had a material impact on our business or operations thus far. However, our reputation could be harmed and our business and results of operations could be materially and adversely affected if we were to be the target of such attacks in the future, or if, despite our controls and efforts to detect breaches, we were to be the victim of an undetected breach. Threat actors have used, and in the future may continue to use, AI-enabled tools and advanced persistent techniques to evade detection over extended periods or to exploit third-party access.
Previous wording
We are subject to numerous laws and regulations in the U.S. and foreign jurisdictions, only certain of which are named here, designed to protect the personal information of client and company constituents and suppliers. These laws often develop in ways we cannot predict, and some laws may be in conflict with one another. This may significantly increase our cost of doing business, particularly as we expand our localization efforts. In addition, we may not be readily able to achieve compliance with the requirements of certain privacy and data security laws and regulations within the required periods for compliance. Certain laws and regulations we are subject to prohibit or restrict the transmission of data outside of certain countries’ borders, and certain others impose heightened obligations on specific categories of sensitive personal information, such as health or financial information. These laws have significantly increased our responsibilities when handling personal data including, without limitation, requiring us: to conduct privacy impact assessments or data protection impact assessments; to restrict the transmission or cross border transfers of data; to adopt and maintain new privacy policies and notices; and to publicly disclose significant data breaches.
Current wording
We are subject to numerous laws and regulations in the U.S. and foreign jurisdictions, only certain of which are named here, designed to protect the personal information of client and company constituents and suppliers. These laws often develop in ways we cannot predict, and some laws may be in conflict with one another. This may significantly increase our cost of doing business, particularly as we expand our localization efforts. In addition, we may not be readily able to achieve compliance with the requirements of certain privacy and data security laws and regulations within the required periods for compliance. Certain laws and regulations we are subject to prohibit or restrict the transmission of data outside of certain countries’ borders, and certain others impose heightened obligations on specific categories of sensitive personal information, such as health or financial information. These laws have significantly increased our responsibilities when handling personal data including, without limitation, requiring us: to conduct privacy impact assessments or data protection impact assessments; to restrict the transmission or cross border transfers of data; to adopt and maintain new privacy policies and notices; to maintain detailed records of processing and vendor oversight; to respond to data subject rights requests within prescribed timelines; and to publicly disclose significant data breaches.
Previous wording
The evolving and potentially conflicting interpretations of these laws and regulations in the U.S and abroad, as well as laws applicable to the Company that are not named in these risk factors, may restrict the manner in which we provide services to our clients, divert resources from other important initiatives, increase the risk of non-compliance, impose significant compliance and other costs that are likely to increase over time, and increase the risk of fines, lawsuits or other potential liability, all of which could have a material adverse effect on our business and results of operations. Our failure to adhere to or successfully develop processes in response to legal or regulatory requirements, including legal or regulatory requirements that may be developed or revised due to economic or geopolitical changes such as Brexit, and changing customer expectations in this area, could result in substantial legal liability and impairment to our reputation or business.
Current wording
The evolving and potentially conflicting interpretations of these laws and regulations in the U.S and abroad, as well as laws applicable to the Company that are not named in these risk factors, may restrict the manner in which we provide services to our clients, divert resources from other important initiatives, increase the risk of non-compliance, impose significant compliance and other costs that are likely to increase over time, and increase the risk of fines, lawsuits or other potential liability, all of which could have a material adverse effect on our business and results of operations. Enforcement remedies can include orders to suspend or restrict processing or transfers, mandatory audits, disgorgement, corrective actions and ongoing monitoring in addition to administrative fines and damages. Our failure to adhere to or successfully develop processes in response to legal or regulatory requirements, including legal or regulatory requirements that may be developed or revised due to economic or geopolitical changes such as Brexit, and changing customer expectations in this area, could result in substantial legal liability and impairment to our reputation or business.
Previous wording
We are also subject to the terms of our privacy policies and contractual obligations to third parties related to privacy, data protection and information security. In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us. We also expect that there will continue to be new proposed laws and regulations concerning privacy, data protection and information security, but cannot yet determine the impact such future laws, regulations and standards may have on our business. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, contractual obligations and other obligations may require us to incur additional costs and restrict our business operations. Because the interpretation and application of laws and other obligations relating to privacy and data protection are still uncertain, it is possible that these laws and other obligations may be interpreted and applied in a manner that is inconsistent with our existing data management practices. If so, in addition to the possibility of fines, lawsuits and other claims, we could be required to fundamentally change our business activities and practices, which could harm our business. We may be unable to make such changes and modifications in a commercially reasonable manner or at all. Any inability to adequately address privacy concerns, even if unfounded, or comply with applicable privacy or data protection laws, regulations and policies, could result in additional cost and liability, damage to our reputation, or harm to our business.
Current wording
We are also subject to the terms of our privacy policies and contractual obligations to third parties related to privacy, data protection and information security. In addition to government regulation, privacy advocates and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us. We also expect that there will continue to be new proposed laws and regulations concerning privacy, data protection and information security, but cannot yet determine the impact such future laws, regulations and standards may have on our business. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, contractual obligations and other obligations may require us to incur additional costs and restrict our business operations. Because the interpretation and application of laws and other obligations relating to privacy and data protection are still uncertain, it is possible that these laws and other obligations may be interpreted and applied in a manner that is inconsistent with our existing data management practices. If so, in addition to the possibility of fines, lawsuits and other claims, we could be required to fundamentally change our business activities and practices, which could harm our business. We may be unable to make such changes and modifications in a commercially reasonable manner or at all. Any inability to adequately address privacy concerns, even if unfounded, or comply with applicable privacy or data protection laws, regulations and policies, could result in additional cost and liability, damage to our reputation, or harm to our business. Further, emerging disclosure, controls and assurance requirements related to cybersecurity and privacy may require enhanced governance and attestations; if we cannot design and operate effective compliance controls, maintain accurate data inventories and maps, or obtain timely and reliable inputs from vendors and affiliates, our compliance, reporting and operational risks could increase.
Previous wording
We are exposed to various risks arising out of disasters and business continuity problems, such as fires (such as the recent wildfires in southern California), earthquakes, hurricanes, terrorist attacks, acts of war or civil unrest, pandemics, security breaches, ransomware or destructive malware attacks, power loss, telecommunications failures or other natural or man-made disasters. Should we experience such an event, we may incur operational challenges, and our continued success will depend, in part, on the availability of our personnel, our office facilities, our outsourcing providers or other vendors, access to data, and the proper functioning of our computer, telecommunication and other related systems and operations.
Current wording
We are exposed to various risks arising out of disasters and business continuity problems, such as wildfires, earthquakes, hurricanes, terrorist attacks, acts of war, conflicts, or civil unrest, pandemics, security breaches, ransomware or destructive malware attacks, power loss or disruption, telecommunications failures or other natural or man-made disasters. Should we experience such an event, we may incur operational challenges, and our continued success will depend, in part, on the availability of our personnel, our office facilities, our outsourcing providers or other vendors, access to data, and the proper functioning of our computer, telecommunication and other related systems and operations.
Previous wording
Our business and our capacity to serve our clients depend on effective information systems, including the effective storage, retrieval, processing and management of information. Maintaining and enhancing existing systems and developing and creating new systems and products in order to keep pace with evolving technologies and evolving industry and regulatory standards requires significant financial and other resources. We aim to be at the forefront of a range of technology options relevant to our business and staying ahead of the technology offered by our competitors, and attracting, developing and retaining skilled individuals in the cybersecurity space.
Current wording
Our business and our capacity to serve our clients depend on effective information systems, including the effective storage, retrieval, processing and management of information. Maintaining and enhancing existing systems and developing and creating new systems and products in order to keep pace with evolving technologies and evolving industry and regulatory standards requires significant financial and other resources. We aim to be at the forefront of a range of technology options relevant to our business and staying ahead of the technology offered by our competitors, and attracting, developing and retaining skilled individuals in the cybersecurity space. The market for such qualified individuals is competitive and we may be unable to hire the talent needed to mitigate the foregoing risks.
Previous wording
Because we often assist our clients with matters involving substantial amounts of money and complex regulatory requirements, including actuarial services, asset management, technology solutions development and implementation and the placement of insurance coverage, claims against us generally allege our potential liability for all or part of the substantial amounts in question. The nature of our work, particularly our actuarial services, necessarily involves the use of assumptions and the preparation of estimates relating to future and contingent events, the actual outcome of which we cannot know in advance. Our actuarial and brokerage services also rely on substantial amounts of data provided by clients, the accuracy and quality of which we cannot ensure. In addition, computational, software programming or data management errors occur from time to time in connection with the services we provide to clients. Clients may seek to hold us responsible for our alleged failures to comply with legal or professional duties. For example, if a client alleged that we failed to comply with legislative requirements as part of our actuarial work and these failures in turn led to an increase in pension scheme liabilities, such a client may seek to bring a claim against us which could materially adversely affect our reputation, business or financial condition.
Current wording
Because we often assist our clients with matters involving substantial amounts of money and complex regulatory requirements, including actuarial services, asset management, technology solutions development and implementation and the placement of insurance coverage, claims against us generally allege our potential liability for all or part of the substantial amounts in question. The nature of our work, particularly our actuarial services, necessarily involves the use of assumptions and the preparation of estimates relating to future and contingent events, the actual outcome of which we cannot know in advance. Our actuarial and brokerage services also rely on substantial amounts of data provided by clients, the accuracy and quality of which we cannot ensure. In addition, computational, software programming or data management errors occur from time to time in connection with the services we provide to clients. Clients may seek to hold us responsible for our alleged failures to comply with legal or professional duties, or for alleged conflicts of interest we may have in carrying out our work.
Previous wording
Clients may seek to hold us responsible for alleged errors or omissions relating to any of the brokerage advice and services we provide, including when claims they submit to their insurance carriers are disputed or denied. This risk is likely to be higher in circumstances, where there are significant disputes between clients and insurance carriers over coverage and clients allege claims against us. In other cases, clients may allege that we have failed entirely to procure insurance coverage consistent with their instructions, and although we have established internal processes and controls to prevent such omissions, we cannot guarantee that these processes will always work as intended. Risk of errors or omissions may be higher in circumstances where we have significant numbers of departures or new joiners or other disruptions to our business, such as changes in ways of working. Such risks may also be higher in parts of our business that are not well-integrated with the rest of the Company for reasons of geography, culture, language, historical practice or other circumstances. Given that many of our clients have very high insurance policy limits to cover their risks, alleged errors and omissions claims against us arising from disputed or denied claims are often significant. Moreover, in certain circumstances, our brokerage, investment and certain other types of business may not limit the maximum liability to which we may be exposed for claims involving alleged errors or omissions. As such, we do not have limited liability for the work we provide to the associated clients.
Current wording
Clients may seek to hold us responsible for alleged errors or omissions relating to any of the brokerage advice and services we provide, including when claims they submit to their insurance carriers are disputed or denied. This risk is likely to be higher in circumstances where there are significant disputes between clients and insurance carriers over coverage and clients allege that a failure by us is the reason. Such alleged failures can include that we misrepresented coverage terms to the client, that we failed to advise the client of key policy terms, that we failed to carry out client instructions, that we failed to procure insurance suitable to the client’s needs, and that we failed to timely present the client’s claims to their insurance carriers. In other cases, clients may allege that we have failed entirely to procure insurance coverage consistent with their instructions. Although we have established internal processes and controls to prevent all such errors and omissions, we cannot guarantee that these processes will always work as intended. Risk of errors or omissions may be higher in circumstances where we have significant numbers of departures or new joiners or other disruptions to our business, such as changes in ways of working. Such risks may also be higher in parts of our business that are not well-integrated with the rest of the Company for reasons of geography, culture, language, historical practice or other circumstances. Given that many of our clients have very high insurance policy limits to cover their risks, alleged errors and omissions claims against us arising from disputed or denied claims are often significant. Moreover, in certain circumstances, our agreements with brokerage, investment and certain other types of clients may not limit the maximum liability to which we may be exposed for claims involving alleged errors or omissions. As such, we would not have limited liability for the work we provide to these clients.
Previous wording
Further, given that we frequently work with large pension funds and insurance companies as well as other large clients, relatively small percentage errors or variances can create significant financial variances and may result in significant claims for unintended or unfunded liabilities. The risks from such variances or errors could be aggravated in an environment of declining pension fund asset values and insurance company capital levels. In almost all cases, our exposure to liability with respect to a particular engagement is substantially greater than the revenue opportunity that the engagement generates for us.
Current wording
Further, given that we frequently work with large pension funds and insurance companies as well as other large clients, relatively small percentage errors or variances can create significant financial variances and may result in significant claims for unintended or unfunded liabilities. The risks from such variances or errors could be aggravated in an environment of declining pension fund asset values and insurance company capital levels. Our exposure to liability with respect to a particular engagement can be substantially greater than the revenue opportunity that the engagement generates for us.
Previous wording
Clients may seek to hold us responsible for the financial consequences of variances between assumptions and estimates and actual outcomes or for errors. For example, in the case of pension plan actuarial work, a client’s claims might focus on the client’s alleged reliance on actuarial assumptions that it asserts in hindsight were unreasonable and, based on such reliance, the client made benefit commitments that it may later claim are not affordable or funding decisions that result in plan underfunding if and when actual outcomes vary from actuarial assumptions.
Current wording
Clients may seek to hold us responsible for the financial consequences of variances between assumptions and estimates and actual outcomes or for errors. For example, in the case of pension plan actuarial work, a client’s claims might focus on its alleged reliance on actuarial assumptions that it asserts in hindsight were unreasonable. The client might then argue that, based on such reliance, the client made benefit commitments that it may later claim are not affordable or funding decisions that resulted in plan underfunding if and when actual outcomes vary from actuarial assumptions.
Previous wording
We also continue to create new products and services (including a new managing general underwriter and increasingly complex technology solutions) and to grow the business of providing products and services to institutional investors, financial services companies and other clients. The risk of claims from these lines of business and related products and services may be greater than from our core products or services, and such claims may be for significant amounts as we take on increasingly complicated projects, including those with complex regulatory requirements.
Current wording
We also continue to create new products and services (including increasingly complex technology solutions) and to grow the business of providing products and services to institutional investors, financial services companies and other clients. We are also increasingly developing products and services where the end users are individuals. The risk of claims from these lines of business and related products and services may be greater than from our core products or services, and such claims may be for significant amounts as we take on increasingly complicated projects, including those with complex regulatory requirements.
Previous wording
We also provide advice on both asset allocation and selection of investment managers. Increasingly, for many clients, we are responsible for making decisions on both of these matters, or we may serve in a fiduciary capacity, either of which may increase liability exposure. In addition, the Company offers affiliated investment funds, including in the U.S. and Ireland, with plans to launch additional funds over time. Given that our Investments business may recommend affiliated investment funds or affirmatively invest such clients’ assets in such funds under delegated authority, this may increase our liability exposure. We may also be liable for actions of managers or other service providers to the funds. Further, for certain clients, we are responsible for some portions of cash and investment management, including rebalancing of investment portfolios and guidance to third parties on the structure of derivatives and securities transactions. Asset classes may experience poor absolute performance, and investment managers may underperform their benchmarks; in both cases the investment return shortfall can be significant. Clients experiencing this underperformance, including from our affiliated investment funds, may assert claims against us, and such claims may be for significant amounts. In addition, our failure to properly execute our role can cause monetary damage to our clients or such third parties for which we might be found liable, and such claims may be for significant amounts. As we continue to expand this business geographically and by way of new product, service, and advisory offerings we will be subject to additional contractual exposures and obligations with investors, asset managers, and third-party service providers, as well as increased regulatory exposures. Overall, our ability to contractually limit our potential liability may be restrained in certain jurisdictions or markets or in connection with claims involving breaches of fiduciary duties or other alleged errors or omissions.
Current wording
We also provide advice on both asset allocation and selection of investment managers. Increasingly, for many clients, we are responsible for making decisions on both of these matters, or we may serve in a fiduciary capacity, either of which may increase liability exposure. In addition, the Company offers affiliated investment funds, including in the U.S. and Ireland, with plans to launch additional funds over time. Given that our Investments business may recommend affiliated investment funds or affirmatively invest such clients’ assets in such funds under delegated authority, this may increase our liability exposure. We may also be liable for actions of managers or other service providers to the funds. Further, for certain clients, we are responsible for some portions of cash and investment management, including rebalancing of investment portfolios and guidance to third parties on the structure of derivatives and securities transactions. Asset classes may experience poor absolute performance, and investment managers may underperform their benchmarks; in both cases the investment return shortfall can be significant. Clients experiencing this underperformance, including from our affiliated investment funds, may assert claims against us, and such claims may be for significant amounts. In addition, our failure to properly execute our role can cause monetary damage to our clients or such third parties for which we might be found liable, and such claims may be for significant amounts. As we continue to expand this business geographically and by way of new product, service, and advisory offerings (including expanded services to individuals either directly or through business-to-business-to-consumer arrangements), we will be subject to additional contractual exposures and obligations with investors, asset managers, and third-party service providers, as well as increased regulatory exposures. Overall, our ability to contractually limit our potential liability may be restrained in certain jurisdictions or markets or in connection with claims involving breaches of fiduciary duties or other alleged errors or omissions.
Showing the first 40 of 73 pairs. Open the source sections for the rest.
Rearranged current paragraphs (2)
Current report — wording carried from elsewhere
the practical challenges and costs of complying with regulations applicable to insurance brokers and other business operations in countries where we do business, including many in emerging markets; and
Current report — wording carried from elsewhere
the practical challenges and costs of compliance with all other laws, rules and regulations relating to the conduct of business, including trade sanction laws administered by the U.S., E.U., U.K., and other governments, as well as the requirements of the U.S. Foreign Corrupt Practices Act (‘FCPA’) and anti-bribery and corruption laws in other countries where we carry out business.
Rearranged previous paragraphs (1)
Previous report — wording carried elsewhere
The market for such qualified individuals is competitive and we may be unable to hire the talent needed to mitigate the foregoing risks.