Skip to main content

RLI CORP

For the period ended Dec 31, 2024. Filed Feb 21, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 21, 2025

RLI$68.35-2.0%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-23.

0001558370-24-001599

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-21.

0001558370-25-001301

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 74 previous paragraphs and 72 current paragraphs.

57 unchanged; 14 reworded; 0 added; 1 removed; 2 previous and 1 current paragraphs rearranged.

Tables are not compared: 56 previous and 57 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Removed paragraphs (1)

Previous report

coverages we provide for those industries, or increase claims and losses related to those industries, any of which could affect our profitability,
Reworded paragraphs (14)

Previous wording

We market our insurance products through brokers, agents and carrier partners. In 2023, 42 percent of our gross premiums written were produced through six producer entities, while no other entity’s production exceeded 2 percent of our gross premiums written. Accordingly, our business is dependent on the willingness of these agents, brokers and carrier partners to recommend our products to their customers, who may also promote and distribute the products of our competitors. Loss of all or a substantial portion of the business written through these parties could have a material adverse effect on our business.

Current wording

We market our insurance products through brokers, agents and carrier partners. In 2024, 46 percent of our gross premiums written were produced through eight producer entities, while no other entity’s production exceeded 2 percent of our gross premiums written. Accordingly, our business is dependent on the willingness of these agents, brokers and carrier partners to recommend our products to their customers, who may also promote and distribute the products of our competitors. Loss of all or a substantial portion of the business written through these parties could have a material adverse effect on our business.

Previous wording

Although we operate in all 50 states, 57 percent of our direct premiums earned were generated in four states in 2023: Florida – 20 percent; California – 17 percent; Texas – 11 percent; and New York – 9 percent. An interruption in our operations, or a negative change in the business environment, insurance market or regulatory environment in one or more of these states could have a disproportionate effect on our business and direct premiums earned.

Current wording

Although we operate in all 50 states, 57 percent of our direct premiums earned were generated in four states in 2024: Florida – 20 percent; California – 18 percent; Texas – 11 percent; and New York – 8 percent. An interruption in our operations, or a negative change in the business environment, insurance market or regulatory environment in one or more of these states could have a disproportionate effect on our business and direct premiums earned.

Previous wording

A number of new, proposed or potential legislative or industry developments could further increase competition in our industry, including:

Current wording

New, proposed or potential legislative or industry developments could further increase competition in our industry, including:

Previous wording

Financial strength ratings are an important factor in establishing the competitive position of insurance companies. Our insurance companies are rated for overall financial strength by AM Best, Standard & Poor’s and Moody’s. AM Best, Standard & Poor’s and Moody’s ratings are independent opinions of an insurer’s financial strength and ability to meet ongoing insurance policy and contract obligations, based on a comprehensive quantitative and qualitative analysis of balance sheet strength, operating performance, business profile and enterprise risk management. These financial strength ratings are based on factors relevant to policyholders, agents, insurance brokers and intermediaries and are not specifically related to securities issued by the company. The view of required capital may differ between rating agencies, as well as from RLI Corp.’s own view of desired capital. Our ratings are subject to periodic review by such firms, and the criteria used in the rating methodologies is subject to change. As such, we cannot assure we will continue to maintain of our current ratings.

Current wording

Financial strength ratings are an important factor in establishing the competitive position of insurance companies. Our insurance companies are rated for overall financial strength by AM Best, Standard & Poor’s and Moody’s. AM Best, Standard & Poor’s and Moody’s ratings are independent opinions of an insurer’s financial strength and ability to meet ongoing insurance policy and contract obligations, based on a comprehensive quantitative and qualitative analysis of balance sheet strength, operating performance, business profile and enterprise risk management. These financial strength ratings are based on factors relevant to policyholders, agents, insurance brokers and intermediaries and are not specifically related to securities issued by the company. The view of required capital may differ between rating agencies, as well as from RLI Corp.’s own view of desired capital. Our ratings are subject to periodic review by such firms, and the criteria used in the rating methodologies is subject to change. As such, we cannot assure we will continue to maintain our current ratings.

Previous wording

All of our ratings were reviewed during 2023. AM Best reaffirmed its A+, Superior rating for the combined entity of RLI Ins., Mt. Hawley and CBIC (group-rated). Standard & Poor’s reaffirmed our A rating for the group of RLI Ins. and Mt. Hawley. Moody’s reaffirmed our group rating of A2 for RLI Ins. and Mt. Hawley. If our ratings are significantly reduced from their current levels by AM Best, Standard & Poor’s or Moody’s, our competitive position in the industry, and therefore our business, could be adversely affected. A significant downgrade could result in a substantial loss of business, as policyholders might move to other companies with greater financial strength ratings.

Current wording

All our ratings were reviewed during 2024. AM Best reaffirmed its A+, Superior rating for the combined entity of RLI Ins., Mt. Hawley and CBIC (group-rated). Standard & Poor’s reaffirmed our A rating for the group of RLI Ins. and Mt. Hawley. Moody’s reaffirmed our group rating of A2 for RLI Ins. and Mt. Hawley. If our ratings are significantly reduced from their current levels by AM Best, Standard & Poor’s or Moody’s, our competitive position in the industry, and therefore our business, could be adversely affected. A significant downgrade could result in a substantial loss of business, as policyholders might move to other companies with greater financial strength ratings.

Previous wording

Estimating loss reserves is a difficult, complex and inherently uncertain process involving many variables and subjective judgments. Changes in industry practices, and in legal, legislative, regulatory, judicial, social and other conditions under which we operate may require us to pay claims we did not intend to cover when we wrote the policies. These changes may serve to extend the time for making claims, extend coverage and increase damages. These changes may not become apparent until after we have issued policies or bonds that are affected by the changes and, consequently, we may not know the extent of our liability and the impact to our financial performance until many years after a policy or bond was issued. The effects of these and other coverage issues are difficult to predict and could have a materially adverse effect on our financial performance.

Current wording

Estimating loss reserves is a difficult, complex and an inherently uncertain process involving many variables and subjective judgments. Changes in industry practices, and in legal, legislative, regulatory, judicial, social and other conditions under which we operate may require us to pay claims we did not intend to cover when we wrote the policies. These changes may serve to extend the time for making claims, extend coverage and increase damages. These changes may not become apparent until after we have issued policies or bonds that are affected by the changes and, consequently, we may not know the extent of our liability and the impact to our financial performance until many years after a policy or bond was issued. The effects of these and other coverage issues are difficult to predict and could have a materially adverse effect on our financial performance.

Previous wording

Our insurance coverages include exposure to catastrophic events, particularly earthquakes on the West Coast and hurricanes and tropical storms affecting coastal regions of the United States. Weather-related catastrophes may include meteorological events such as hurricanes, severe convective storms and winter weather; and climatological events such as drought, wildfires and heatwaves. In addition, catastrophe losses can occur from events such as lava flows in Hawaii and terrorist events in the United States.

Current wording

Our insurance coverages include exposure to catastrophic events, particularly hurricanes and tropical storms affecting coastal regions of the United States and earthquakes, primarily on the West Coast. Weather-related catastrophes may include events such as hurricanes, severe convective storms, winter weather, drought and heatwaves. In addition, catastrophe losses can occur from events such as wildfires, lava flows in Hawaii and terrorist events in the United States.

Previous wording

We use models to help assess exposure to catastrophic events against established thresholds. Models include underlying assumptions based on a limited set of actual events and cannot contemplate all possible catastrophe scenarios. In addition, models are revised periodically, which could change modeled losses. The losses we might incur from an actual catastrophe could be higher than our expectation of losses generated from modeled catastrophe scenarios, which could have a materially adverse effect on our results of operations and financial condition. To address uncertainty related to catastrophe models, we also monitor against thresholds using non-modeled scenarios.

Current wording

We use models to help assess exposure to certain catastrophic events against established thresholds. Models include underlying assumptions based on a limited set of actual events and cannot contemplate all possible catastrophe scenarios. In addition, models are revised periodically, which could change modeled losses. The losses we might incur from an actual catastrophe could be higher than our expectation of losses generated from modeled catastrophe scenarios, which could have a materially adverse effect on our results of operations and financial condition. To address uncertainty related to catastrophe models, we also monitor against thresholds using non-modeled scenarios.

Previous wording

Market conditions beyond our control determine the availability and cost of the reinsurance protection that we purchase. In addition, the historical results of reinsurance programs and the availability of capital also affect the availability of reinsurance. Our reinsurance agreements are generally subject to annual renewal. We cannot be sure that we can maintain our current reinsurance protection, obtain other reinsurance facilities in adequate amounts and at favorable rates, or diversify our exposure among an adequate number of high-quality reinsurance partners. If we are unable to renew our expiring facilities or obtain new reinsurance facilities on terms we deem acceptable, either our net loss exposures would increase, which could increase the volatility of our results, or we would have to reduce the level of our underwriting commitments when possible, which would reduce our revenues. Many of the bonds we issue, particularly in the energy sector, are non-cancelable and may expose the Company to greater losses, should the surety reinsurance coverage we are able to secure be reduced or become unavailable.

Current wording

Market conditions beyond our control determine the availability and cost of the reinsurance protection that we purchase. In addition, the historical results of reinsurance programs and the availability of capital also affect the availability of reinsurance. Our reinsurance agreements are generally subject to annual renewal. We cannot be sure that we can maintain our current reinsurance protection, obtain other reinsurance facilities in adequate amounts and at favorable rates, or diversify our exposure among an adequate number of high-quality reinsurance partners. If we are unable to renew our expiring facilities or obtain new reinsurance facilities on terms we deem acceptable, either our net loss exposures would increase, which could increase the volatility of our results, or we would have to reduce the level of our underwriting commitments when possible, which would reduce our revenues. Some of the bonds we issue, particularly in the energy sector, are non-cancelable and may expose the Company to greater losses, should the surety reinsurance coverage we are able to secure be reduced or become unavailable. Additionally, the potential exists for losses to exceed our reinsurance limits when we believe we have adequate reinsurance coverage in place, which would adversely impact our net earnings.

Previous wording

We invest the premiums we receive from customers until they are needed to pay expenses or policyholder claims. Funds remaining after paying expenses and claims remain invested and are included in retained earnings. The value of our investment portfolio can fluctuate as a result of changes in the business, financial condition or operating results of the entities in which we invest. In addition, fluctuations can result from changes in interest rates, credit risk, government monetary policies, liquidity of holdings and general economic conditions. The equity portfolio will fluctuate with movements in the overall stock market. While the equity portfolio has been constructed to have lower downside risk than the market, the portfolio is positively correlated with movements in domestic stocks. The bond portfolio is affected by interest rate changes and movement in credit spreads. We attempt to mitigate our interest rate and credit risks by constructing a well-diversified portfolio of high-quality securities with varied maturities. These fluctuations may negatively impact our financial condition.

Current wording

general economic conditions. The equity portfolio will fluctuate with movements in the overall stock market. While the equity portfolio has been constructed to have lower downside risk than the market, the portfolio is positively correlated with movements in domestic stocks. The bond portfolio is affected by interest rate changes and movement in credit spreads. We attempt to mitigate our interest rate and credit risks by constructing a well-diversified portfolio of high-quality securities with varied maturities. These fluctuations may negatively impact our financial condition.

Previous wording

Operational risk and losses can result from, among other things, fraud, errors, failure to document transactions properly, failure to obtain proper internal authorization, failure to comply with regulatory requirements, information technology failures or external events. We continue to enhance our operating procedures and internal controls to effectively support our business and our regulatory and reporting requirements. The NAIC and state legislatures have increased their focus on risks within an insurer’s holding company system that may pose enterprise risk to insurers. The Illinois legislature has adopted the Risk Management and Own Risk and Solvency Assessment (ORSA) Law, which requires domestic insurers to maintain a risk management framework and establishes a legal requirement for domestic insurers to conduct an ORSA in accordance with the NAIC’s ORSA Guidance Manual. The ORSA Law also provides that, no less than annually, an insurer must submit an ORSA summary report. Under the Illinois insurance holding company laws, on an annual basis, we are also required to file an enterprise risk report with the IDOI, which is intended to identify the material risks within our insurance holding company system that could pose enterprise risk to our insurance company subsidiaries. We operate within an enterprise risk management (ERM) framework designed to assess and monitor our risks. However, assurance that we can effectively review and monitor all risks or that all of our employees will operate within the ERM framework cannot be

Current wording

Operational risk and losses can result from, among other things, fraud, errors, failure to document transactions properly, failure to obtain proper internal authorization, failure to comply with regulatory requirements, information technology failures or external events. We continue to enhance our operating procedures and internal controls to effectively support our business and our regulatory and reporting requirements. The NAIC and state legislatures have increased their focus on risks within an insurer’s holding company system that may pose enterprise risk to insurers. The Illinois legislature has adopted the Risk Management and Own Risk and Solvency Assessment (ORSA) Law, which requires domestic insurers to maintain a risk management framework and establishes a legal requirement for domestic insurers to conduct an ORSA in accordance with the NAIC’s ORSA Guidance Manual. The ORSA Law also provides that, no less than annually, an insurer must submit an ORSA summary report. Under the Illinois insurance holding company laws, on an annual basis, we are also required to file an enterprise risk report with the IDOI, which is intended to identify the material risks within our insurance holding company system that could pose enterprise risk to our insurance company subsidiaries. We operate within an enterprise risk management (ERM) framework designed to assess and monitor our risks. However, assurance that we can effectively review and monitor all risks or that all our employees will operate within the ERM framework cannot be guaranteed. Assurances that our ERM framework will result in the Company accurately identifying all risks and accurately limiting our exposures based on our assessments also cannot be guaranteed.

Previous wording

However, cyber security incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. Security breaches could expose the Company to a risk of loss or misuse of Company or third-party confidential information, litigation and potential liability. In addition, cyber incidents that impact the availability, reliability, speed, accuracy or other proper functioning of our technology systems could impact our operations. We may not have the resources or technical sophistication to anticipate or prevent every type of cyber attack. A significant cyber incident, including system failure, security breach, disruption by malware or other damage could interrupt or delay our operations, result in a violation of applicable privacy and other laws, damage our reputation, cause a loss of customers or give rise to remediation costs, monetary fines and other penalties, which could be significant. We have cyber insurance, but it is possible that the coverage we have in place would not entirely protect the Company in the event that we experienced a cyber security incident, interruption or widespread failure of our information technology systems.

Current wording

Global cyber security threats can range from uncoordinated individual attempts to gain unauthorized access to our information technology systems, and those of our business or service providers, to sophisticated and targeted measures known as advanced persistent threats. Like other companies, RLI Corp. is also subject to insider threats that may impact the confidentiality, integrity or availability of our data. We, as well as our business partners and service providers, employ measures to prevent, detect, address, mitigate and recover from these threats (including employee training, access controls, data encryption, vulnerability assessments, continuous monitoring of information technology networks and systems and maintenance of backup and protective systems). However, cyber security incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. Security breaches could expose the Company to a risk of loss or misuse of Company or third-party confidential information, litigation and potential liability. In addition, cyber incidents that impact the availability, reliability, speed, accuracy or other proper functioning of our technology systems could impact our operations. We may not have the resources or technical sophistication to anticipate or prevent every type of cyber attack. A significant cyber incident, including system failure, security breach, disruption by malware or other damage could interrupt or delay our operations, result in a violation of applicable privacy and other laws, damage our reputation, cause a loss of customers or give rise to remediation costs, monetary fines and other penalties, which could be significant. We have cyber insurance, but it is possible that the coverage we have in place would not entirely protect the Company in the event that we experienced a cyber security incident, interruption or widespread failure of our information technology systems.

Previous wording

Our operations rely upon complex and expensive information technology systems for interacting with policyholders, brokers and other business partners. The pace at which information systems must be upgraded is continually increasing, requiring an ongoing commitment of significant resources to maintain or upgrade to current standards and serve our customers. If we are unable to keep pace with the advancements being made in technology, our ability to compete with other insurance companies who have advanced technological capabilities will be negatively affected. Furthermore, if we are unable to effectively update or replace our key legacy technology systems as they become obsolete, or as emerging technology renders them competitively inefficient, our competitive position, security and our cost structure could be adversely affected.

Current wording

Our operations rely upon complex and expensive information technology systems for interacting with policyholders, brokers and other business partners. The pace at which information systems must be upgraded is continually increasing, requiring an ongoing commitment of significant resources to maintain or upgrade to current standards and serve our customers. If we are unable to keep pace with the advancements being made in technology, such as the use of artificial intelligence systems, our ability to compete with other insurance companies who have advanced technological capabilities will be negatively affected. Furthermore, if we are unable to effectively update or replace our key legacy technology systems as they become obsolete, or as emerging technology renders them competitively inefficient, our competitive position, security and our cost structure could be adversely affected.

Previous wording

Epidemics, pandemics and other public health outbreaks, such as the COVID-19 pandemic, generally result in significant disruptions in economic activity and financial markets. The cumulative effects on the Company could include, without limitation:

Current wording

Epidemics, pandemics and other public health outbreaks generally result in significant disruptions in economic activity and financial markets. The cumulative effects on the Company could include, without limitation:
Rearranged current paragraphs (1)

Current report — wording carried from elsewhere

We invest the premiums we receive from customers until they are needed to pay expenses or policyholder claims. Funds remaining after paying expenses and claims remain invested and are included in retained earnings. The value of our investment portfolio can fluctuate as a result of changes in the business, financial condition or operating results of the entities in which we invest. In addition, fluctuations can result from changes in interest rates, credit risk, government monetary policies, liquidity of holdings and
Rearranged previous paragraphs (2)

Previous report — wording carried elsewhere

guaranteed. Assurances that our ERM framework will result in the Company accurately identifying all risks and accurately limiting our exposures based on our assessments also cannot be guaranteed.

Previous report — wording carried elsewhere

Global cyber security threats can range from uncoordinated individual attempts to gain unauthorized access to our information technology systems, and those of our business or service providers, to sophisticated and targeted measures known as advanced persistent threats. Like other companies, RLI Corp. is also subject to insider threats that may impact the confidentiality, integrity or availability of our data. We, as well as our business partners and service providers, employ measures to prevent, detect, address, mitigate and recover from these threats (including employee training, access controls, data encryption, vulnerability assessments, continuous monitoring of information technology networks and systems and maintenance of backup and protective systems).