MSCI Inc.

Previous wording

•Undetected errors, defects, malfunctions or similar problems leading to increased costs or liability;

Current wording

•Undetected errors, defects, malfunctions or similar problems;

Previous wording

•Issues related to the use and development of AI resulting in reputational harm, competitive harm, regulatory scrutiny or legal liability;

Current wording

•Issues related to the use of AI and development of AI-related solutions resulting in reputational harm, competitive harm, regulatory scrutiny or legal liability;

Previous wording

•Our need to successfully develop new and enhanced products and services in order to remain competitive;

Current wording

•Failure to successfully develop new and enhanced products and services;

Previous wording

•The impact of our global operations and any expansion and our exposure to additional issues from our increased global footprint;

Current wording

•The impact of our global presence and operations and any expansion and our exposure to additional issues from our increased global footprint;

Previous wording

•The impact of our indebtedness on our financial flexibility;

Current wording

•The impact of our indebtedness on our cash flows and financial flexibility;

Previous wording

•The impact of changes in our credit ratings; and

Current wording

•The impact of changes in our credit ratings;

Previous wording

•Our exposure to tax liabilities in various jurisdictions.

Current wording

•Our exposure to tax liabilities in various jurisdictions; and

Previous wording

•Failure to attract, develop or retain qualified personnel;

Current wording

•Failure to attract, develop or retain talent.

Previous wording

We are dependent on third parties to supply data, applications and services for our products and services and are dependent on certain vendors to distribute our products. A refusal or failure by a key vendor to distribute our products; any loss of key third- party suppliers of data, applications or services; a decline in the accuracy or quality of such data, applications or services; or any failure by us to comply with our suppliers’ or distributors’ licensing requirements could impair our ability to provide our products and services, which could have a material adverse effect on our business, financial condition or results of operations.

Current wording

We are dependent on third parties to supply data, applications and services for our products and services and are dependent on certain vendors to distribute our products. A refusal or failure by a key vendor to distribute our products; any termination, suspension or other loss of key third-party data, applications or services; a decline in the accuracy or quality of such data, applications or services; or any failure by us to comply with our suppliers’ or distributors’ licensing requirements or expectations could impair our ability to provide our products and services, which could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

If Vendor Products include errors or design defects, are delayed, become incompatible with future versions of our products, are unavailable on acceptable terms or are not available at all, we may not be able to deliver our products and services. In addition, in the ordinary course of business, suppliers of Vendor Products are subject to various forms of cyber-attacks or other security incidents. Cyber-attacks, vulnerabilities in our suppliers’ software, systems or networks, failure of our suppliers’ safeguards, policies or procedures and other incidents related to our suppliers’ systems and networks may cause material interruptions or malfunctions in our or such suppliers’ websites, applications or data processing and delivery, or may compromise the confidentiality and integrity of affected information. In addition, certain of our suppliers are also our competitors, and they could change the terms of the data and products that they supply to us in order to gain competitive advantage against us.

Current wording

If Vendor Products include errors or design defects, are delayed, become incompatible with future versions of our products, are unavailable on acceptable terms or are suspended or not available at all, we may not be able to deliver our products and services. In addition, in the ordinary course of business, suppliers of Vendor Products are subject to various forms of cyber-attacks or other security incidents. Cyber-attacks, vulnerabilities in our suppliers’ software, systems or networks, failure of our suppliers’ safeguards, policies or procedures and other incidents related to our suppliers’ systems and networks, including supply-chain compromises, may cause material interruptions or malfunctions in our or such suppliers’ websites, applications or data processing and delivery, or may compromise the confidentiality and integrity of affected information. In addition, certain of our suppliers are also our competitors, and they could change the terms of the data and products that they supply to us or refuse to continue to supply us with data and products in order to gain competitive advantage against us.

Previous wording

Some of our agreements with third-party suppliers allow them to cancel on short notice, and from time to time we receive notices from third-party suppliers threatening to terminate the provision of their products or services to us, and some data suppliers have terminated the provision of their data to us. Termination of the provision of Vendor Products by one or more of our significant suppliers or exclusion from, or restricted use of, or litigation in connection with Vendor Products could decrease the data and materials available for us to use and deliver to our clients. In addition, some of our competitors could enter into exclusive contracts with our data suppliers, including with certain stock exchanges, which could preclude us from receiving certain data or other materials or restrict us in our use of such data or other materials. Such exclusive contracts could hinder our ability to create our products and services or to provide our clients with the data or other products or services they prefer.

Current wording

Some of our agreements with third-party suppliers allow them to cancel on short notice, and from time to time we receive notices from third-party suppliers threatening to terminate the provision of their products or services to us, and some data suppliers have terminated the provision of their data to us. In addition, certain of our most significant data and technology agreements are subject to periodic renewal or re-pricing, and we may be required to accept significantly higher fees or other less favorable commercial or legal terms in order to maintain access to key Vendor Products. Termination or suspension of the provision of Vendor Products by one or more of our significant suppliers or exclusion from, or restricted use of, or litigation or other disputes in connection with Vendor Products could decrease the data and materials available for us to use and deliver to our clients. In addition, some of our competitors could enter into exclusive contracts with our suppliers, including with certain stock exchanges, which could preclude us from receiving certain data or other materials or restrict us in our use of such data or other materials. Such exclusive contracts could hinder our ability to create our products and services or to provide our clients with the data or other products or services they prefer. Certain Vendor Products are concentrated among a small number of suppliers, and we also rely on major cloud and infrastructure providers to host and deliver certain products and services, so an adverse negotiation, dispute or renewal outcome with, or our inability to replace, a key supplier or to obtain comparable data or services on acceptable terms could affect our costs or ability to deliver products and services.

Previous wording

Despite our efforts to comply with the licensing requirements of Vendor Products, there can be no assurance that third parties will not challenge our use, which could result in increased acquisition or licensing costs, loss of rights or costly legal actions. Our business could be materially adversely affected if we are unable to timely or effectively replace the data or functionality provided by Vendor Products that may become unavailable or fail to operate effectively for any reason. Our operating costs could increase if additional license fees are imposed, or current license fees increase or the efforts to incorporate enhancements to Vendor Products are substantial and we are unable to negotiate acceptable licensing arrangements with these suppliers or find alternative sources of equivalent products or services. If any of these risks materialize, they could have a material adverse effect on our business, financial condition or results of operations.

Current wording

Despite our efforts to comply with the licensing requirements of Vendor Products, there can be no assurance that third parties will not challenge our use, which could result in increased acquisition or licensing costs, loss of rights or costly legal actions. Our business could be materially adversely affected if we are unable to timely or effectively replace the data, other materials or functionality provided by Vendor Products that may become unavailable or fail to operate effectively for any reason. Our operating costs could increase if additional license fees are imposed, or current license fees increase or the efforts to incorporate enhancements to Vendor Products are substantial and we are unable to negotiate acceptable licensing arrangements with these suppliers or find alternative sources of equivalent products or services.

Previous wording

We also rely on third-party vendors, including some competitors, to distribute our data to clients. Should any of our key vendors refuse to distribute our data for any reason or require that we pay them new or additional fees in connection with the distribution of our data, we would need to find alternative ways to distribute our data, which could increase costs, disrupt operations and have a material adverse effect on our business, financial condition or results of operations.

Current wording

We also rely on third-party vendors, including some competitors, to distribute our data to clients. Should any of our key vendors refuse to distribute our data for any reason or require that we pay them new or additional fees in connection with the distribution of our data, we would need to find alternative ways to distribute our data, which could increase costs or disrupt operations. If any of these risks materialize, they could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

Despite internal testing and in some cases testing or use by clients, our products or services have contained, and in the future may contain, errors in our or third-party data, calculations, methodologies or analysis, including serious defects or malfunctions. This risk may grow with the increase in the number, type and complexity of our products, such as complex client-designed indexes that may require unique and more manual implementation and maintenance. For instance, certain of our processes utilize manual data entry or collection, which increases the risk of human error. If we detect any errors before we release or deliver a product or service or publish a methodology or analysis, we might have to suspend or delay the product or service release or delivery for an extended period of time while we address the problem. We may not discover errors that affect our products or services or enhancements until after they are deployed, and we may need to provide enhancements or corrections to address such errors, and in certain cases it may be impracticable to do so. If undetected errors exist in our products or services, or if our products or services fail to perform properly due to defects, malfunctions or similar problems, it could result in harm to our brand or reputation, increased costs, lost sales and revenues, delays in commercial release, third-party claims, contractual disputes, negative publicity, delays in or loss of market acceptance of our products or services, license terminations or renegotiations or unexpected expenses and diversion of resources to remedy or mitigate such errors, defects or malfunctions. The realization of any of these events could materially adversely affect our business, financial condition or results of operations.

Current wording

Despite internal testing and in some cases testing or use by clients, our products or services have contained, and in the future may contain, errors in our, third-party or client-provided data, calculations, methodologies or analysis, including serious defects or malfunctions. This risk may grow with the increase in the number, type and complexity of our products, such as complex custom indexes that may require unique and more manual implementation and maintenance. For instance, certain processes utilize manual data entry or collection, which increases the risk of human error. In addition, as our business has grown and evolved over time, we have incurred technical debt resulting from, among other things, legacy code and system architectures, deferred maintenance and upgrades, short-term workarounds, unremediated issues, rapid product development, acquisitions, and the integration of new technologies into existing platforms. Such technical debt can exacerbate these risks by increasing the potential for system outages, performance degradation, defects, cybersecurity vulnerabilities, and testing and remediation limitations. If we detect any errors before we release or deliver a product or service or publish a methodology or analysis, we might have to suspend or delay the product or service release or delivery for an extended period of time while we address the problem. We may not discover errors that affect our products or services or enhancements until after they are deployed, and we may need to provide enhancements or corrections to address such errors, and in certain cases it may be impracticable to do so. If undetected errors exist in our products or services, or if our products or services fail to perform properly due to defects, malfunctions or similar problems, it could result in harm to our brand or reputation, increased costs, lost sales and revenues, delays in commercial release, third-party claims, contractual disputes, negative publicity, delays in or loss of market acceptance of our products or services, license terminations or renegotiations or unexpected expenses and diversion of resources to remedy or mitigate such errors, defects or malfunctions. In addition, defects or flawed outputs in regulated products, including indexes and ESG ratings, may prompt regulatory inquiries, supervisory actions or enforcement proceedings that could require changes to products or controls and impose significant fines or other remediation costs. The realization of any of these events could materially adversely affect our business, financial condition or results of operations.

Previous wording

To the extent that any of MSCI’s operating segments, product lines or MSCI as a whole suffers a reputational or other loss in credibility, it could have a material adverse effect on our business, financial condition or results of operations. Factors that have affected or could affect our credibility include: real or perceived conflicts of interest; the adequacy, completeness and editorial independence of our index composition and ESG rating and assessment processes and decisions; the influence, attempted influence or appearance of influence of third parties, including governments, politicians, political and other advocacy groups and large investors or asset owners, on our editorial decisions; the performance of companies relative to their ESG ratings, index inclusion, risk characteristics or other MSCI content or analytics; the timing and nature of changes to our indexes or ESG ratings and assessments; disagreement with our methodologies or models, including for calculating indexes, value-at-risk and other risk measures, climate metrics, and ESG ratings and assessments, data, information and analysis; and the accuracy and completeness of our or third-party data, including data voluntarily disclosed by the investment community, corporate issuers and others that is utilized in our products.

Current wording

To the extent that any of MSCI’s operating segments, product lines or MSCI as a whole suffers a reputational or other loss in credibility, it could have a material adverse effect on our business, financial condition or results of operations. Reputational damage could prompt clients or vendors to reduce use of our products, or terminate or renegotiate contracts. Factors that have affected or could affect our credibility include: real or perceived conflicts of interest; the adequacy, completeness and editorial independence of our index composition and ESG ratings and controversy assessment processes and decisions; allegations of perceived bias or lack of independence; the inappropriate influence, attempted influence or appearance of influence of third parties, including governments, politicians, NGOs and other advocacy groups, and clients (including large asset managers or asset owners), on our editorial decisions; the impact on companies of our indexes, ESG ratings and controversies, risk models or other MSCI content or analytics; the timing and nature of changes to our methodologies or products, including indexes and ESG ratings and controversies; disagreement with our methodologies or models, including for calculating indexes, value-at-risk and other risk measures, climate metrics, and ESG ratings and controversies; the accuracy and completeness of our client data or third-party data, including data voluntarily disclosed by the investment community, corporate issuers and others that is utilized in our products; and controversies, investigations, media attention, or regulatory or other governmental actions affecting our industry, competitors, clients, strategic partners, vendors or other relevant industry participants.

Previous wording

We may also face public or media scrutiny concerning politically or socially sensitive topics, which could lead to negative media coverage, reputational harm or increased government or regulatory scrutiny, even if such claims lack merit. Views expressed by the media, politicians, other government officials or representatives, regulators, political and other advocacy groups or other third parties regarding our company, our industry or our role in the investment process—including allegations or suggestions that we have biases, lack independence or encourage investment in, or divestment from, certain companies, countries or regions or in support of certain causes or trends—and the impact of political and geo-political tensions relating to countries, industries, companies or issues relevant to our products and services, such as the inclusion of certain Chinese companies in our indexes or the focus on ESG or sustainable investing and climate considerations, could negatively impact our reputation and credibility. Such negative attention or scrutiny could also increase the risk of shareholder activism, including proposals seeking changes to our governance practices, corporate strategy or product offerings.

Current wording

We may face public or media scrutiny concerning politically or socially sensitive topics, which could lead to negative media coverage, reputational harm or increased government or regulatory scrutiny, even if such claims lack merit. Views expressed by the media, politicians, other government officials or representatives, regulators, NGOs and other advocacy groups, industry associations or other third parties regarding our company, our industry or our role in the investment process—including allegations or suggestions that we have biases, lack independence or encourage investment in, or divestment from, certain companies, countries or regions or in support of certain causes or trends—and the impact of political and geopolitical tensions relating to countries, industries, companies or issues relevant to our products and services, such as the inclusion of certain Chinese companies in our indexes or the focus on ESG or sustainable investing and climate considerations, could negatively impact our reputation and credibility. Such negative attention or scrutiny could also increase the risk of shareholder activism, including proposals seeking changes to our governance practices, corporate strategy or product offerings.

Previous wording

In some cases, our sustainability and climate offerings, such as our country and company ESG ratings, our controversies assessments or our Net-Zero Tracker, may insert MSCI into a public spotlight or a public debate regarding the environment, climate change, social concerns, political issues, geo-political matters, governance practices or corporate responsibility. Scrutiny around ESG and climate topics has increased, with anti-ESG and anti-climate advocacy groups, political leaders and industry organizations criticizing ESG or climate-focused products and services. Anti-ESG and anti-climate sentiment may impact demand for our products, limit our ability to retain clients or lead to heightened scrutiny of our methodologies or content. Additionally, legislation, litigation, investigations or regulatory action or enforcement activities aimed at curbing ESG or climate investing practices or penalizing institutions perceived as prioritizing ESG or climate considerations could further increase reputational risks to us and reduce the marketability of our products.

Current wording

In some cases, our offerings may insert MSCI into a public spotlight or a public debate regarding investment trends and practices; environmental, social or political issues; geopolitical matters; or corporate governance matters. For example, scrutiny around ESG and climate investment considerations has increased, with anti-ESG and anti-climate advocacy groups, political leaders and industry organizations criticizing ESG or climate-focused risk management practices or investment strategies. Anti-ESG and anti-climate sentiment may impact demand for our products, limit our ability to retain clients or lead to heightened scrutiny of our methodologies or content. Additionally, legislation, litigation, investigations or regulatory action or enforcement activities aimed at curbing ESG or climate investing practices or penalizing institutions perceived as prioritizing ESG or climate considerations could further increase reputational risks to us and reduce the marketability of our products.

Previous wording

In addition, increased regulatory and political focus on ESG and climate-related practices has impacted our clients. Certain of our clients use our ESG and climate data, tools and indexes to benchmark ESG investment performance and to construct and manage ETFs and other indexed financial products. These institutional investors are increasingly the subject of additional disclosure requirements, as well as media and political scrutiny, that are focused on preventing “greenwashing” (i.e., holding out an investment product as having “green” or “sustainable” characteristics when this is not, in fact, the case). Our products, and the use of our products by these institutions, could draw MSCI into debates about and criticisms of greenwashing.

Current wording

In addition, increased regulatory and political focus on ESG and climate-related investment considerations has impacted our clients. Certain of our clients use our sustainability and climate data and tools to build and manage portfolios; perform risk management; benchmark their investment performance; and construct and manage ETFs and other indexed financial products. In some cases, these institutional investors are increasingly the subject of additional disclosure requirements, as well as media and regulatory scrutiny, that are focused on preventing “greenwashing” (i.e., holding out an investment product as having “green” or “sustainable” characteristics when this is not, in fact, the case). Our products, and the use of our products by these institutions, could draw MSCI into media attention, political debates, and litigation or regulatory actions related to greenwashing allegations.

Previous wording

Moreover, clients that have licensed our indexes to serve as the basis of indexed investment products are generally not required to continue to use our indexes. Clients that license our indexes to serve as the basis for listed futures and options contracts might also discontinue such contracts. Additionally, we have a differentiated licensing strategy for our indexes and from time to time experience faster growth from lower fee products, resulting in a lower average asset-based fee percentage from indexed investment products. While we aim to maximize the price and volume tradeoff over the long-term, there can be no assurance that we will be able to do so. Results for any given quarter could be materially adversely affected by stronger growth in assets in indexed investment products with lower-than-average fees not sufficiently offset by growth in assets in indexed investment products with higher-than-average fees. Our asset-based fees could dramatically decrease, which could have a material adverse effect on our business, financial condition or results of operations. Finally, to the extent that multiple investment products are based on the same index, (i) assets under management in one product could shift to products that pay MSCI lower fee levels, (ii) the products could compete for the same assets such that none of the products becomes large enough to be successful or sustained, or (iii) the failure or discontinuance of one product (e.g., derivatives used for hedging) could have a detrimental effect on the use of the other products (e.g., ETFs).

Current wording

Moreover, clients that have licensed our indexes to serve as the basis of indexed investment products are generally not required to continue to use our indexes. For example, clients that license our indexes to serve as the basis for listed futures and options contracts might discontinue such contracts. Additionally, we have a differentiated licensing strategy for our indexes and from time to time experience faster growth from lower fee products, resulting in a lower average asset-based fee percentage from indexed investment products. While we aim to maximize the price and volume tradeoff over the long-term, there can be no assurance that we will be able to do so. Results for any given quarter could be materially adversely affected by stronger growth in assets in indexed investment products with lower-than-average fees not sufficiently offset by growth in assets in indexed investment products with higher-than-average fees. Our asset-based fees could dramatically decrease, which could have a material adverse effect on our business, financial condition or results of operations. Finally, to the extent that multiple investment products are based on the same index, (i) assets under management in one product could shift to products that pay MSCI lower fee levels, (ii) the products could compete for the same assets such that none of the products becomes large enough to be successful or sustained, or (iii) the failure or discontinuance of one product (e.g., derivatives used for hedging) could have a detrimental effect on the use of the other products (e.g., ETFs).

Previous wording

A material portion of our revenues is concentrated in some of our largest clients. For the fiscal year ended December 31, 2024, our largest client organization by revenue, BlackRock, accounted for 10.2% of our consolidated operating revenues. For the fiscal year ended December 31, 2023, BlackRock accounted for 9.8% of our consolidated operating revenues. Our revenue growth depends on our ability to obtain new clients, quickly onboard our clients and deploy our products and services to them, sell additional services to existing clients and achieve and sustain a high level of renewal rates with respect to our existing licenses. Failure to achieve one or more of these objectives could have a material adverse effect on our business, financial condition or results of operations.

Current wording

A material portion of our revenues is concentrated in some of our largest clients. For the fiscal year ended December 31, 2025, our largest client organization by revenue, BlackRock, accounted for 10.8% of our consolidated operating revenues. For the fiscal year ended December 31, 2024, our largest client organization by revenue, BlackRock accounted for 10.2% of our consolidated operating revenues. Our revenue growth depends on our ability to obtain new clients, quickly onboard our clients and deploy our products and services to them, sell additional services to existing clients and achieve, maintain or improve pricing structures and sustain a high level of renewal rates with respect to our existing licenses. Failure to achieve one or more of these objectives could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

A client’s activity with us may decrease for a variety of reasons, including the client’s level of satisfaction with our products and services; the effectiveness of our support services; the pricing of our products and services; the pricing and quality of competing products or services; client events such as mergers, acquisitions, restructurings, or business closures; or the effects of changes in economic conditions and the global capital markets. In addition, demand for our products may be impacted by cyclical market changes, regulatory uncertainty and political scrutiny, which could negatively affect client adoption and our financial performance. If we experience significant cancelations or reductions in licenses, either individually or in the aggregate, and we are unsuccessful in replacing those licenses, our business, financial condition or results of operations could be materially adversely affected.

Current wording

A client’s activity with us may decrease for a variety of reasons, including the client’s level of satisfaction with our products and services; the effectiveness of our support services; the pricing of our products and services; the pricing and quality of competing products or services; client events such as mergers, acquisitions, restructurings, or business closures; or the effects of changes in economic conditions and the global capital markets. In addition, demand for our products may be impacted by cyclical market changes, regulatory uncertainty and political scrutiny, which could negatively affect client adoption and our financial performance. If we experience significant cancellations or reductions in licenses, either individually or in the aggregate, and we are unsuccessful in replacing those licenses, our business, financial condition or results of operations could be materially adversely affected.

Previous wording

Our clients may internally develop certain functionality contained in the products or services they currently license from us. For example, a number of our clients have obtained regulatory clearance to create indexes for use as the basis of ETFs that they manage and others have invested in direct indexing strategies, allowing investors to purchase individual stocks making up an index rather than investing in a fund or ETF. Similarly, some of our clients who currently license our risk or sustainability and climate data to analyze their portfolio risk may develop their own tools to collect data and assess risk or embed sustainability considerations into their investment processes, making our products or services unnecessary for them. A growing number of asset managers and investment banks, in partnership with index providers that offer calculation agent services, or acting together with an industry group or association, have created or may create their own range of proprietary indexes, which they use to manage funds or as the basis of ETFs, structured products or over-the-counter derivatives. To the extent that our clients become more self-sufficient, demand for our products or services may be reduced, which could have a material adverse effect on our business, financial condition or results of operations.

Current wording

Our clients may internally develop certain functionality contained in the products or services they currently license from us. For example, a number of our clients have obtained regulatory clearance to create indexes for use as the basis of ETFs that they manage and others have invested in direct indexing strategies, allowing investors to purchase individual stocks making up an index rather than investing in a fund or ETF. Similarly, some of our clients who currently license our risk or sustainability and climate data to analyze their portfolio risk may develop their own tools to collect data and assess risk or embed sustainability considerations into their investment processes, making our products or services unnecessary for them. Advances in AI and cloud platforms have also lowered the barriers for clients to build capabilities internally. A growing number of asset managers and investment banks, in partnership with index providers that offer calculation agent services, or acting together with an industry group or association, have created or may create their own range of proprietary indexes, which they use to manage funds or as the basis of ETFs, structured products or over-the-counter derivatives. To the extent that our clients become more self-sufficient, demand for our products or services may be reduced, which could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

Some of our products also relate to these parties. For example, our ESG ratings and other products assess companies, including clients, shareholders, distributors of our content and competitors. Additionally, our indexes may include or exclude companies that are clients, shareholders, distributors of our content or competitors. These determinations may create perceptions of bias, lack of independence or influence over our editorial decisions. Allegations of such influence or bias could undermine the perceived integrity of our products, leading to reputational harm, increased regulatory scrutiny or lower demand for our products.

Current wording

Some of our products also relate to these parties. For example, our ESG ratings and other products assess companies, including clients, shareholders, distributors of our content and competitors. Additionally, our indexes may include or exclude companies that are clients, shareholders, distributors of our content or competitors. These determinations could cause an impacted company to cease doing business with us, or may create perceptions of bias, lack of independence or influence over our editorial decisions. Allegations of such influence or bias could undermine the perceived integrity of our products, leading to reputational harm, increased regulatory scrutiny or lower demand for our products.

Previous wording

We depend heavily on the capacity, reliability and security of our information technology systems, networks and platforms and their components, including our data centers, cloud providers and other third-party vendors and service providers, production and delivery systems as well as the internet, to create and deliver our products and service our clients. Our employees also depend on these systems, networks, platforms and providers for internal use. Factors affecting the availability of our products and services and our information technology systems and networks, such as loss of service, operational failures, human error, terrorist attacks, geopolitical instability, climate-related events (e.g., hurricanes, floods or other natural disasters), outbreak of pandemic or contagious disease, power loss, telecommunications failures, technical breakdowns, internet failures or cyber-attacks, could impair our or our third-party service provider systems’ operations or interrupt their availability for extended periods of time or impact the availability of our or our third-party service provider’s personnel. Our ability to effectively use the internet, including for remote work, may also be impaired due to infrastructure failures, service outages, cyber attacks or increased government regulation.

Current wording

We depend heavily on the capacity, reliability and security of our information technology systems, networks and platforms and their components, including our data centers, cloud providers and other third-party vendors and service providers, production and delivery systems as well as the internet, to create and deliver our products and service our clients. Our employees also depend on these systems, networks, platforms and providers for internal use. Factors affecting the availability of our products and services and our information technology systems and networks, such as loss of service, operational failures, human error, model error, terrorist attacks, geopolitical instability, climate-related events (e.g., hurricanes, floods or other natural disasters), outbreak of pandemic or contagious disease, power loss, telecommunications failures, technical breakdowns, internet failures or cyber-attacks, could impair our or our third-party service provider systems’ operations or interrupt their availability for extended periods of time or impact the availability of our or our third-party service provider’s personnel. Our ability to effectively use the internet, including for remote work, may also be impaired due to a variety of reasons including infrastructure failures, service outages, cyber-attacks or government restrictions.

Previous wording

Disruptions, failures, or slowdowns in our operations, or those of our third-party vendors and service providers, could reduce confidence in our products and services, damage our brand and reputation, result in litigation, or negatively affect our ability to distribute products to clients, including managed services or real-time index data. While we generally perform cybersecurity due diligence on key vendors and service providers, our ability to monitor their practices is limited, and vulnerabilities or incidents affecting their software, systems, or networks could introduce risks to our operations. Additionally, newly acquired businesses may not have invested in technology and resilience to the same extent as we have, and integration of their systems could introduce vulnerabilities that impact us.

Current wording

Disruptions, failures, or slowdowns in our operations, or those of our third-party vendors and service providers, could reduce confidence in our products and services, damage our brand and reputation, result in litigation, or negatively affect our ability to distribute products to clients, including managed services or real-time index data. In addition, accumulated design, implementation, or architectural decisions in our technology environment, which may have been appropriate at the time they were made, may require incremental investment over time to maintain, enhance, or modernize our systems. This “technical debt” can increase the risk of outages, disruptions, performance degradation, defects, and cybersecurity incidents. While we generally perform cybersecurity due diligence on key vendors and service providers, our ability to monitor their practices is limited, and vulnerabilities or incidents affecting their software, systems, or networks could introduce risks to our operations. Additionally, newly acquired businesses may not have invested in technology and resilience to the same extent as we have, and integration of their systems could introduce vulnerabilities that impact us.

Previous wording

There is no assurance that we will be able to successfully defend against such disruptions or that our disaster recovery or business continuity plans, or those of our third-party service providers (including cloud providers), will be effective in mitigating the risks and associated costs, which could be exacerbated by our shift to an increasingly remote working environment. While we maintain insurance coverage intended to address certain aspects of cybersecurity and data protection risks, such coverage may not include, or may not be sufficient to cover, all or a majority of any costs or other losses resulting from cyber-attacks or other security incidents. Any of these factors could have a material impact on our business, financial condition, or results of operations.

Current wording

There is no assurance that we will be able to successfully defend against such disruptions or that our disaster recovery or business continuity plans, or those of our third-party service providers (including cloud providers), will be effective in mitigating the risks and associated costs, which could be exacerbated by our hybrid work model. While we maintain insurance coverage intended to address certain aspects of cybersecurity and data protection risks, such coverage may not include, or may not be sufficient to cover, all or a majority of any costs or other losses resulting from cyber-attacks or other security incidents. Any of these factors could have a material impact on our business, financial condition, or results of operations.

Previous wording

Many of our products, systems and processes involve the collection, retrieval, storage, transmission and processing of proprietary, third-party and client confidential information. We also handle personal information of our employees in connection with their employment. We rely on complex processes and IT controls along with policies, procedures and training to protect this information, including sensitive client data such as material non-public information and client portfolio data, against unauthorized access or disclosure. In addition, we believe that when we change the composition of our indexes or if we expect to change the methodologies that govern our indexes, in some cases, those changes can have an indirect effect on the prices of constituent securities and on certain indexed investment products as a result of trading activity related to tracking our indexes. The foreknowledge of these changes could be determined to be material non-public information. Similarly, our ESG ratings and ratings changes could potentially impact the companies and entities that we rate, including the price of their securities and the price of other securities that reference their securities.

Current wording

Many of our products, systems and processes involve the collection, retrieval, storage, transmission and processing of proprietary, third-party and client confidential information. We also handle personal information of our employees in connection with their employment. We rely on complex processes and IT controls along with policies, procedures and training to protect this information, including sensitive data such as material non-public information and client portfolio data, against unauthorized access or disclosure. When we change the composition of our indexes or if we expect to change the methodologies that govern our indexes, in some cases, those changes can have an indirect effect on the prices of constituent securities and on certain indexed investment products as a result of trading activity related to tracking our indexes. The foreknowledge of these changes could be determined to be material non-public information. Similarly, our ESG ratings and changes to our ratings or methodology could potentially impact the companies and entities that we rate, including the price of their securities and the price of other securities that reference their securities.

Previous wording

If our processes, confidentiality policies, conflict of interest policies or information barrier procedures fail or are insufficient, including as a result of intentional or unintentional human error, manual process failure, system error or other failure, then unauthorized release of, access to, or disclosure or misappropriation of data, including material non-public information or other confidential information (e.g., certain client portfolio data, index composition data, or ESG rating data), could harm our brand and reputation, lead to litigation, regulatory actions or penalties, and result in a loss of client confidence, which could have a material adverse effect on our business, financial condition or results of operations.

Current wording

If our processes, confidentiality policies, conflict of interest policies or information barrier procedures fail or are insufficient, including as a result of intentional or unintentional human error, manual process failure, system error or other failure, then unauthorized release of, access to, or disclosure or misappropriation of data, including material non-public information or other confidential information (e.g., certain client portfolio data, index composition data, or ESG rating data), could harm our brand and reputation, lead to litigation, regulatory actions or penalties, and result in a loss of client confidence, which could have a material adverse effect on our business, financial condition or results of operations. In addition, such incidents may trigger notification and reporting obligations to regulators, clients and other stakeholders. Failure to meet those obligations or to effectively communicate during an incident could exacerbate reputational harm and regulatory exposure, including the risk of enforcement actions and fines.

Previous wording

Our operations rely on the secure collection, retrieval, storage, transmission and other processing of confidential, sensitive, proprietary and other types of data and information that is managed internally and with third-party vendors and service providers. We and our vendors and service providers are subject to security risks, including cyber-attacks and other security incidents, such as phishing scams or other social engineering attacks, hacking, tampering, intrusions, viruses, malware (including ransomware) and denial-of-service attacks. Cybersecurity risks also may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. The use of mobile and cloud technologies, as well as remote work arrangements, may heighten these risks. In addition, failure by our clients, third-party vendors or service providers to notify us of cybersecurity incidents in a timely manner could lead to unauthorized access to our systems and data, resulting in material adverse effects on our business, operations, and financial results.

Current wording

Our operations rely on the secure collection, retrieval, storage, transmission and other processing of confidential, sensitive, proprietary and other types of data and information that is managed internally and with third-party vendors and service providers. We and our vendors and service providers are subject to security risks, including cyber-attacks and other security incidents, such as phishing scams or other social engineering attacks, deepfake attacks, hacking, tampering, intrusions, viruses, malware (including ransomware) and denial-of-service attacks – all of which could be exacerbated by AI technologies. Cybersecurity risks also may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. The use of mobile and cloud technologies, as well as remote work arrangements, may heighten these risks. In addition, failure by our clients, third-party vendors or service providers to notify us of cybersecurity incidents in a timely manner could lead to unauthorized access to our systems and data, resulting in material adverse effects on our business, operations, and financial results.

Previous wording

We may be exposed to more targeted and more sophisticated cyber-attacks and other security incidents because of our role or prominence in the global marketplace, including our handling of client portfolio data, the composition of our indexes and ESG ratings. Additionally, although we conduct due diligence during acquisition processes, acquired businesses may not have invested as heavily in security measures and technology, and this may introduce additional security risk. In the past, we have experienced cyber-attacks of varying degrees, including denial-of-service attacks. There can be no assurance that there will not be material adverse effects relating to these types of incidents in the future, in particular as these types of incidents have generally become increasingly frequent, sophisticated, difficult to detect and difficult to successfully defend against, and we may see their frequency increased, and effectiveness enhanced, by the use of AI. As these threats continually evolve, we may be required to devote additional resources to modify or enhance our operational or security systems and networks and our cybersecurity program.

Current wording

We may be exposed to more targeted and more sophisticated cyber-attacks and other security incidents because of our role or prominence in the global marketplace, including our handling of client portfolio data, the composition and use of our indexes and ESG ratings. Advanced, persistent and state-sponsored threat actors with significant resources and capabilities could also attempt to penetrate our or our vendors’ systems. Additionally, although we conduct due diligence during acquisition processes, acquired businesses may not have invested as heavily in security measures and technology, and this may introduce additional security risk. In the past, we have experienced cyber-attacks of varying degrees, including denial-of-service attacks. There can be no assurance that there will not be material adverse effects relating to these types of incidents in the future, in particular as these types of incidents have generally become increasingly frequent, sophisticated, difficult to detect and difficult to successfully defend against, and we may see their frequency increased, and effectiveness enhanced, by the use of AI. As these threats continue to evolve, we may be required to devote additional resources to modify or enhance our operational or security systems and networks and our cybersecurity program.

Previous wording

In the past, we have experienced interruptions and delays in the performance and delivery of certain products, including after we migrated applications and infrastructure to new data centers or other network infrastructure. While we have taken steps to mitigate such interruptions and delays, we cannot provide assurance that they will not occur again as part of future migration to new technologies, applications or processes (e.g., cloud migration), even after extensive testing, or if we experience significant growth of our customer base or increases in the number of products or services or in the speed at which we provide products and services. Such disruptions may result in cancellations and reduced demand for our products and services, resulting in decreased revenues, or in cost increases relating to our use of power and data storage. After adopting new technologies, applications and processes, we may experience unanticipated interruption and delay in the performance or delivery of certain products, services or client support. We may also incur increased operating expenses to recover data, repair, replace or remediate systems, equipment or facilities, and to protect ourselves from such disruptions. Accordingly, any significant failures, disruptions or instability affecting our information technology platform, providers, production and delivery systems, applications, processes or the internet could negatively affect our ability to distribute products and service our clients, damage our brand and reputation and result in litigation, which may have a material adverse effect on our business, financial condition or results of operations.

Current wording

In the past, we have experienced interruptions and delays in the performance and delivery of certain products, including after we migrated applications and infrastructure to new data centers or other network infrastructure. While we have taken steps to mitigate such interruptions and delays, we cannot provide assurance that they will not occur again as part of future migration to new technologies, applications or processes (e.g., cloud migration), even after extensive testing, or if we experience significant growth of our client base or increases in the number of products or services or in the speed at which we provide products and services. Future migrations may result in outages, latency or degraded functionality, or data loss or corruption despite backup and recovery plans. Such disruptions may result in cancellations and reduced demand for our products and services, resulting in decreased revenues, or in cost increases relating to our use of power and system resources. After adopting new technologies, applications and processes, we may experience unanticipated interruption and delay in the performance or delivery of certain products, services or client support. We may also incur increased operating expenses to recover data, repair, replace or remediate systems, equipment or facilities, and to protect ourselves from such disruptions. Accordingly, any significant failures, disruptions or instability affecting our information technology platforms, providers, production and delivery systems, applications, processes or the internet could negatively affect our ability to distribute products and service our clients, damage our brand and reputation and result in litigation, which may have a material adverse effect on our business, financial condition or results of operations.

Previous wording

We rely on open source code to develop software and to incorporate it in our products and internal systems. The use of open source code may entail greater risks than third-party commercial software, as open source licensors generally do not provide warranties or other protections regarding infringement claims, the quality of the code or the security of the code. Certain open source licenses provide that if we combine our proprietary code with open source code and distribute it in a certain manner, we could be required to release the source code to the public, potentially allowing our competitors to create similar products and putting us at a competitive disadvantage. Additionally, the terms of many open source code licenses are ambiguous and have not been interpreted by U.S. courts, increasing the risk of unanticipated restrictions or conditions on our use of such software. Therefore, we could be required to seek licenses from third parties on terms that are not commercially feasible, to make portions of our proprietary code publicly available to re-engineer our products or systems, to discontinue licensing certain products, or to take other remedial action that could divert resources. We could also be subject to suits by parties claiming breach of the terms of licenses, which could be costly for us to defend. Any of these requirements could materially adversely affect our business, financial condition or results of operations.

Current wording

We rely on open source code to develop software and to incorporate it in our products and internal systems. The use of open source code may entail greater risks than third-party commercial software, as open source licensors generally do not provide warranties or other protections regarding infringement claims, the quality of the code or the security of the code. Certain open source licenses provide that if we combine our proprietary code with open source code and distribute it in a certain manner, we could be required to release the source code to the public, potentially allowing our competitors to create similar products and putting us at a competitive disadvantage. Additionally, the terms of many open source code licenses are ambiguous and have not been interpreted by U.S. courts, increasing the risk of unanticipated restrictions or conditions on our use of such software. Therefore, we could be required to seek licenses from third parties on terms that are not commercially feasible, to make portions of our proprietary code publicly available to re-engineer our products or systems, to discontinue licensing certain products, or to take other remedial action that could divert resources. We could also be subject to suits by parties claiming breach of the terms of licenses, which could be costly for us to defend. Open source code may also contain security vulnerabilities or malicious code (including backdoors), which could impair our products or systems, reduce client confidence, harm our reputation and expose us to litigation or other liability. Any of these factors could materially adversely affect our business, financial condition or results of operations.

Previous wording

Issues related to the use and development of AI could result in reputational harm, competitive harm, regulatory scrutiny or legal liability, and could have a material adverse effect on our business, financial condition or results of operations.

Current wording

Issues related to the use of AI and development of AI-related solutions could result in reputational harm, competitive harm, regulatory scrutiny or legal liability, and could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

We currently incorporate, and expect to continue to incorporate, AI technologies, including generative AI, into our products and operations, and these uses of AI may become significantly more important over time. There are significant and evolving risks involved in utilizing AI, and there is no assurance that our usage of AI will help our products and operations become more effective, efficient or profitable, or otherwise achieve our intended outcomes. Our use of AI will require additional resources and costs to develop and maintain products, comply with emerging regulations, address ethical and reputational considerations, and manage technical, operational and competitive risks. Our competitors or other third parties may incorporate AI into their products and operations more quickly or more successfully than us, which could impair our ability to compete effectively. Additionally, the models underlying our use of AI technologies may be incorrectly or inadequately designed or implemented. Further, if the content, analyses, or recommendations produced by AI are, or are perceived to be biased, inaccurate, misleading, poor-quality, unethical or otherwise deficient or flawed, any of which may not be easily detectable, our business may be adversely affected. Client or third-party use of AI could potentially result in reduction or replacement of our products or solutions.

Current wording

We currently incorporate, and expect to continue to incorporate, AI technologies, including generative AI, into our products and operations, and these uses of AI may become significantly more important over time. There are significant and evolving risks involved in utilizing AI, and there is no assurance that our usage of AI will help our products and operations become more effective, efficient or profitable, or otherwise achieve our intended outcomes. Our use of AI will require additional resources and costs to develop and maintain products, comply with emerging regulations, address ethical and reputational considerations, and manage technical, operational and competitive risks.

Previous wording

The use of AI may involve third-party information with unclear intellectual property rights or interests. If we do not have sufficient rights to use the data or other material or content that AI technologies utilize or generate, we may incur liability through the violation of applicable laws and regulations, third-party intellectual property, privacy or other rights or contracts to which we are a party. In addition, intellectual property ownership rights, including copyright, of generative and other AI output, have not been fully interpreted by courts or regulations. The use of AI may also result in cyber-attacks or other security incidents, including those that implicate confidential or personal information (e.g., propriety, third-party, employee or client information). The use of third-party AI by our employees, contractors or partners could also result in the inadvertent disclosure of confidential or personal information, risking our intellectual property rights, competitive position and reputation.

Current wording

The use of AI may involve third-party information with unclear intellectual property rights or interests. If we do not have sufficient rights to use the data or other material or content that AI technologies utilize or generate, we may incur liability through the violation of applicable laws and regulations, third-party intellectual property, privacy or other rights or contracts to which we are a party. In addition, intellectual property ownership rights, including copyright, of generative and other AI output, have not been fully interpreted by courts or regulations. The use of AI by us or by others may also result in, and increase our exposure to, cyber-attacks or other security incidents, including those that involve confidential or personal information (e.g., proprietary, third-party, employee or client information). The use of AI by our employees, contractors or partners could also result in the inadvertent disclosure of confidential or personal information, risking our intellectual property rights, competitive position and reputation.

Previous wording

Laws and regulations applicable to AI, including intellectual property, data privacy and security, consumer protection, competition and equal opportunity laws, continue to develop and may be inconsistent from jurisdiction to jurisdiction. Because AI is complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI. These risks include the possibility of enhanced governmental or regulatory scrutiny, litigation or other legal liability, compliance issues, ethical concerns, negative consumer perceptions, confidentiality or security risks, as well as other factors. Any of these issues could materially adversely affect our business, financial condition or results of operations.

Current wording

AI technologies are subject to an evolving and fragmented legal and regulatory landscape. Laws and regulations applicable to AI, including intellectual property, data privacy and security, consumer protection, competition and equal opportunity laws, continue to develop and may be inconsistent from jurisdiction to jurisdiction. Because AI is complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI. These risks include the possibility of enhanced governmental or regulatory scrutiny, litigation or other legal liability, compliance issues, ethical concerns, negative consumer perceptions, confidentiality or security risks, supply-chain and cost risks related to AI infrastructure and models, as well as other factors. Any of these issues could materially adversely affect our business, financial condition or results of operations.

Previous wording

Our business may be affected by changes in economic conditions and the global capital markets, including those resulting from geopolitical events, adverse equity market conditions, volatility in the financial markets and evolving investment trends. Such changes could decrease the use of our products and services which could have a material adverse effect on our business, financial condition or results of operations.

Current wording

Our business may be affected by changes in economic conditions and the global capital markets, including those resulting from geopolitical events, trade policy changes, adverse equity market conditions, volatility in the financial markets and evolving investment trends. Such changes could decrease the use of our products and services which could have a material adverse effect on our business, financial condition or results of operations.

Previous wording

Our business is impacted by economic conditions, including economic uncertainty, market downturns and volatility in the global capital markets and evolving investment trends (including volatility and trends resulting from geopolitical events, such as the Russia-Ukraine conflict and conflicts in the Middle East, and related escalation of geopolitical tensions). Our clients use our products for a variety of purposes, including benchmarking, performance attribution, portfolio construction and risk management, and to support investment strategies including sustainability, climate, factor, thematic, private asset and MAC investing. Volatile capital markets, geopolitical instability or unrest and other economic and market conditions and trends, including a recession or other significant financial-market event or crisis, may impact whether, how, where and when investors choose to invest, for example between developed or emerging markets, U.S. or non-U.S. markets, as well as whether to adopt different investment strategies.

Current wording

Our business is impacted by economic conditions, including economic uncertainty, market downturns and volatility in the global capital markets and evolving investment trends (including volatility and trends resulting from geopolitical events and trade policy changes, including tariffs, retaliatory tariffs and related trade tensions). Our clients use our products for a variety of purposes, including benchmarking, performance attribution, portfolio construction and risk management, and to support investment strategies including sustainability, climate, factor, thematic, private asset and MAC investing. Volatile capital markets, geopolitical instability or unrest, trade tensions and shifts in trade policy and other economic and market conditions and trends, including a recession or other significant financial-market event or crisis, may impact whether, how, where and when investors choose to invest, for example between developed or emerging markets, U.S. or non-U.S. markets, as well as whether to adopt different investment strategies. Such shifts may increase demand for certain of our products while reducing demand for others, and may reduce client budgets, delay purchasing decisions or cause clients to defer or cancel subscriptions, any of which could materially reduce demand for our offerings.

Previous wording

Competition exists across all markets for our products and services. Our competitors range from large companies with substantial resources to small, single-product businesses that are highly specialized. Larger competitors may have access to more resources and may be able to achieve greater economies of scale, and specialized competitors may be more effective in devoting technical, marketing and financial resources to compete with respect to a particular product or service. Some competitors may offer price incentives or different pricing structures that are more attractive to clients. The competitive landscape may also experience consolidation, which results in a narrower pool of competitors that are better capitalized or that are able to gain a competitive advantage through synergies.

Current wording

Competition exists across all markets for our products and services. Our competitors range from large companies with substantial resources to small, single-product businesses that are highly specialized. Larger competitors may have access to more resources and may be able to achieve greater economies of scale, and specialized competitors may have unique expertise and dedicated resources and capabilities to compete with respect to a particular product or service. Some competitors may offer price incentives or different pricing structures that are more attractive to clients. The competitive landscape may also experience consolidation, which results in a narrower pool of competitors that are better capitalized or that are able to gain a competitive advantage through synergies.

Previous wording

Barriers to entry may be low or declining in many markets, including for single-purpose product companies, supporting new competitors. For example, more broker-dealers, data suppliers, credit rating agencies or other market participants or vendors could begin developing their own content such as proprietary risk analytics, sustainability and climate data or indexes. Factors such as increases in the availability of free or relatively inexpensive information through internet sources or other low-cost delivery systems, advances in cloud computing, increased use of open source code, the ability of machine learning and other AI to process and organize large data sets, as well as client development of proprietary applications, have further reduced barriers to entry in some cases. Such developments may over time reduce the demand for, or clients’ willingness to pay for, certain of our products and services.

Current wording

Barriers to entry may be low or declining in many markets, including for single-purpose product companies, supporting new competitors. For example, more broker-dealers, data suppliers, credit rating agencies, analytics firms, technology providers (including AI providers) or other market participants or vendors could begin developing their own content such as proprietary risk analytics, sustainability and climate data or indexes. Factors such as increases in the availability of free or relatively inexpensive information through internet sources and through the use of AI or other low-cost delivery systems, advances in cloud computing, increased use of open source code, the ability of machine learning and other AI to process and organize large data sets, as well as client development of proprietary applications, have further reduced barriers to entry in some cases and our competitors may use these tools to deliver solutions at lower prices, or these tools may be used in a way that significantly increases access to publicly available information. Such developments may over time reduce the demand for, or clients’ willingness to pay for, certain of our products and services.