Our utilization rates are affected by a number of factors, including: • general economic conditions; 31 • our ability to transition consultants promptly from completed projects to new assignments, and to engage newly-hired consultants quickly in revenue-generating activities; • our ability to continually secure new business engagements, particularly because a portion of our work is project-based rather than recurring in nature; • our ability to forecast demand for our services and thereby maintain appropriate headcount in each of our geographies and workforces; • our ability to retain key colleagues and consulting professionals; • unanticipated changes in the scope of client engagements; • the potential for conflicts of interest that might require us to decline client engagements that we otherwise would have accepted; • our need to devote time and resources to sales, training, professional development and other non-billable activities; and • the potential disruptive impact of acquisitions and dispositions.
Our utilization rates are affected by a number of factors, including: • general economic conditions; • our ability to transition consultants promptly from completed projects to new assignments, and to engage newly-hired consultants quickly in revenue-generating activities; • our ability to continually secure new business engagements, particularly because a portion of our work is project-based rather than recurring in nature; • our ability to forecast demand for our services and thereby maintain appropriate headcount in each of our geographies and workforces; • our ability to retain key colleagues and consulting professionals; • unanticipated changes in the scope of client engagements; • the potential for conflicts of interest that might require us to decline client engagements that we otherwise would have accepted; • our need to devote time and resources to sales, training, professional development and other non-billable activities; and • the potential disruptive impact of acquisitions and dispositions.
For example, the war in Ukraine and the escalating conflict throughout the Middle East have resulted in worldwide geopolitical and macroeconomic uncertainty and may negatively impact other regional and global economic markets (including Europe, the Middle East and the U.S.), companies in other countries (particularly those that have done business with Russia or have substantial exposure to, or operations in, impacted countries) and various sectors, industries and markets for securities and commodities globally, such as oil and natural gas, and may increase financial market volatility and adversely impact regional and global economic markets, industries and companies.
For example, the war in Ukraine and the conflict throughout the Middle East have resulted in worldwide geopolitical and macroeconomic uncertainty and may negatively impact other regional and global economic markets (including Europe, the Middle East and the U.S.), companies in other countries (particularly those that have done business with Russia or have substantial exposure to, or operations in, impacted countries) and various sectors, industries and markets for securities and commodities globally, such as oil and natural gas, and may increase financial market volatility and adversely impact regional and global economic markets, industries and companies.
We are at risk of attack by a variety of adversaries, including nation states, state-sponsored organizations, organized crime and hackers, through use of increasingly sophisticated methods of attack, including the deployment of AI to find and exploit vulnerabilities, "deep fakes", long-term, persistent attacks (referred to as advanced persistent threats) and the use of the IT supply chain to introduce malware through software updates or compromised suppliers accounts or hardware.
We are at risk of attack by a variety of adversaries, including nation states, state-sponsored organizations, opportunistic attacks, and organized crime and hackers, through use of increasingly sophisticated methods of attack, including the deployment of AI to find and exploit vulnerabilities, "deep fakes", long-term, persistent attacks (referred to as advanced persistent threats) and the use of the IT supply chain to introduce malware through software updates or compromised suppliers accounts or hardware.
Macroeconomic or geopolitical conditions, such as a slower economic growth or recession, the war in Ukraine and the escalating conflict throughout the Middle East, inflationary pressures or supply chain challenges, could result in financial difficulties for our clients, which could cause clients to delay payments to us, request modifications to their payment arrangements that could increase our receivables balance or default on their payment obligations to us.
Macroeconomic or geopolitical conditions, such as a slower economic growth or recession, the war in Ukraine and the conflict throughout the Middle East, inflationary pressures or supply chain challenges, could result in financial difficulties for our clients, which could cause clients to delay payments to us, request modifications to their payment arrangements that could increase our receivables balance or default on their payment obligations to us.
Global economic conditions, including slower GDP growth or recession, inflationary pressure and foreign exchange rate volatility, may negatively impact businesses and financial institutions. Many of our clients, including 30 financial institutions, corporations, government entities and pension plans, have reduced expenses, including amounts spent on consulting services, and used internal resources instead of consultants during difficult economic periods.
Global economic conditions, including slower GDP growth or recession, inflationary pressure and foreign exchange rate volatility, may negatively impact businesses and financial institutions. Many of our clients, including financial institutions, corporations, government entities and pension plans, have reduced expenses, including amounts spent on consulting services, and used internal resources instead of consultants during difficult economic periods.
In our Consulting segment, we compete for business with numerous consulting firms and similar organizations, many of which also provide, or are affiliated with firms that provide, accounting, information systems, technology and financial services. Such competitors may be able to offer more comprehensive products and services to 23 potential clients, which may give them a competitive advantage.
In our Consulting segment, we compete for business with numerous consulting firms and similar organizations, many of which also provide, or are affiliated with firms that provide, accounting, information systems, technology and financial services. Such competitors may be able to offer more comprehensive products and services to potential clients, which may give them a competitive advantage.
This other compensation includes payment for (i) consulting and analytics services provided to insurers; (ii) administrative and other services provided to insurers (including underwriting services and services relating to the administration and management of quota shares, panels and other facilities); and (iii) contingent commissions, primarily at MMA and outside the U.S., paid by insurers based on factors such as volume or profitability.
This other compensation includes payment for (i) consulting and analytics services provided to insurers; (ii) administrative and other services provided to insurers (including underwriting services and services relating to the administration and management of quota shares, panels and other facilities); and (iii) contingent commissions, primarily at MMA and outside the 30 U.S., paid by insurers based on factors such as volume or profitability.
For example, laws in all 50 U.S. states generally require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a breach. In addition to government regulation, our agreements with certain third parties may require us to notify them in the event of a security breach.
For example, laws in all 50 U.S. states generally require businesses to provide notice under 20 certain circumstances to consumers whose personal information has been disclosed as a result of a breach. In addition to government regulation, our agreements with certain third parties may require us to notify them in the event of a security breach.
Moreover, we could be adversely affected if we fail to adequately plan for the succession of members of our senior management team or if our succession plans do not operate effectively. Across all of our businesses, our colleagues are critical to developing and retaining client relationships as well as performing the services on which our revenues are earned.
Moreover, we could be adversely affected if we fail to adequately plan for the succession of members of our senior management team or if our succession plans do not operate effectively. 22 Across all of our businesses, our colleagues are critical to developing and retaining client relationships as well as performing the services on which our revenues are earned.
Such a transaction could result in additional short-term revenue for Mercer to the extent we advise the client on the transaction, but a loss in longer term recurring revenue related to the plan. The profitability of our Consulting segment may decline if we are unable to achieve or maintain adequate utilization and pricing rates for our consultants.
Such a transaction could result in additional short-term revenue for Mercer to the extent we advise the client on the transaction, but a loss in longer term recurring revenue related to the plan. 32 The profitability of our Consulting segment may decline if we are unable to achieve or maintain adequate utilization and pricing rates for our consultants.
These disclosures, metrics and goals and any failure to accurately report or comply with federal, state or international ESG laws and regulations, or to achieve progress on our metrics and goals on a timely basis, or at all, may result in legal and regulatory proceedings against us and negatively impact our reputation.
These disclosures, metrics and sustainability goals and any failure to accurately report or comply with federal, state or international ESG laws and regulations, or achieve progress on our metrics and sustainability goals on a timely basis, or at all, may result in legal and regulatory proceedings against us and negatively impact our reputation.
For example, hackers have 24 increasingly targeted companies by attacking internet-connected industrial control and safety control systems. An extended outage could result in the loss of clients and a decline in our revenues. In the worst case, any manipulation of the control systems of critical infrastructure may even result in the loss of life.
For example, hackers have increasingly targeted companies by attacking internet-connected industrial control and safety control systems. An extended outage could result in the loss of clients and a decline in our revenues. In the worst case, any manipulation of the control systems of critical infrastructure may even result in the loss of life.
In addition, geopolitical conflict, such as the war in Ukraine and the escalating conflict throughout the Middle East, has resulted in, and may continue to result in, new and rapidly evolving trade sanctions, which may increase our costs, negatively impact our revenues or impose additional operational limitations on our businesses.
In addition, geopolitical conflict, such as the war in Ukraine and the conflict throughout the Middle East, has resulted in, and may continue to result in, new and rapidly evolving trade sanctions, which may increase our costs, negatively impact our revenues or impose additional operational limitations on our businesses.
These vendors and third parties may act or fail to act in ways that could harm our business; • Our inability to successfully recover should we experience a disaster or other business continuity or data recovery problem could cause material financial loss, loss of human capital, regulatory actions, reputational harm or legal liability; • We face risks when we acquire or dispose of businesses; • If we are unable to collect our receivables, our results of operations and cash flows could be adversely affected; • We may not be able to obtain sufficient financing on favorable terms; • Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate; 13 • Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business; • Our quarterly revenues and profitability may fluctuate significantly; • Credit rating downgrades would increase our financing costs and could subject us to operational risk; • Our current debt level could adversely affect our financial flexibility; • The current U.S. tax regime has provisions which have unintended consequences and may also impact our tax rate in varying degrees based on where our global income is earned; • We are exposed to multiple risks associated with the global nature of our operations; • Results in our Risk and Insurance Services segment may be adversely affected by a general decline in economic activity; • Volatility or declines in premiums and other market trends may significantly impede our ability to grow revenues and profitability; • Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on Marsh’s business, results of operations and financial condition; • Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, conflicts of interest, ESG and greenwashing, asset performance and regulatory compliance, that, if realized, could result in significant damage to our business; • Revenues for the services provided by our Consulting segment may decline for various reasons, including as a result of changes in economic conditions, the value of equity, debt and other asset classes, our clients’ or an industry's financial condition or government regulation or an accelerated trend away from actively managed investments to passively managed investments; • Factors affecting defined benefit pension plans and the services we provide relating to those plans could adversely affect Mercer; and • The profitability of our Consulting segment may decline if we are unable to achieve or maintain adequate utilization and pricing rates for our consultants.
These vendors and third parties may act or fail to act in ways that could harm our business; • Our inability to successfully recover should we experience a disaster or other business continuity or data recovery problem could cause material financial loss, loss of human capital, regulatory actions, reputational harm or legal liability; • We face risks when we acquire or dispose of businesses; • If we are unable to collect our receivables, our results of operations and cash flows could be adversely affected; • We may not be able to obtain sufficient financing on favorable terms; • Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate; 13 • Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business; • Our quarterly revenues and profitability may fluctuate significantly; • Credit rating downgrades would increase our financing costs and could subject us to operational risk; • Our current debt level could adversely affect our financial flexibility; • The current U.S. tax regime has provisions which have unintended consequences and may also impact our tax rate in varying degrees based on where our global income is earned; • We are exposed to multiple risks associated with the global nature of our operations; • Results in our Risk and Insurance Services segment may be adversely affected by a general decline in economic activity; • Volatility or declines in premiums and other market trends may significantly impede our ability to grow revenues and profitability; • Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on Marsh’s business, results of operations and financial condition; • Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, trading and execution risks, conflicts of interest, ESG and greenwashing, asset performance and regulatory compliance, that, if realized, could result in significant damage to our business; • Our businesses are subject to a number of risks related to the U.S. healthcare industry, including risks related to healthcare regulation and reputational damage from negative publicity; • Revenues for the services provided by our Consulting segment may decline for various reasons, including as a result of changes in economic conditions, the value of equity, debt and other asset classes, our clients’ or an industry's financial condition or government regulation or an accelerated trend away from actively managed investments to passively managed investments; • Factors affecting defined benefit pension plans and the services we provide relating to those plans could adversely affect Mercer; and • The profitability of our Consulting segment may decline if we are unable to achieve or maintain adequate utilization and pricing rates for our consultants.
As a U.S.-domiciled company, any such increases would likely have a disproportionate impact on us compared to our foreign-based competitors. 27 Global Operations We are exposed to multiple risks associated with the global nature of our operations. We conduct business globally.
As a U.S.-domiciled company, any such increases would likely have a disproportionate impact on us compared to our foreign-based competitors. Global Operations We are exposed to multiple risks associated with the global nature of our operations. We conduct business globally.
This narrow notification window is often too short to 20 fully validate the facts, and there is an increased risk of reporting a false alarm or immaterial breach, which may lead to reputational damage despite there not being an actual data breach.
This narrow notification window is often too short to fully validate the facts, and there is an increased risk of reporting a false alarm or immaterial breach, which may lead to reputational damage despite there not being an actual data breach.
In addition, our ability to obtain financing will depend in part upon prevailing conditions in credit and capital markets, which are beyond our control. 25 Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate.
In addition, our ability to obtain financing will depend in part upon prevailing conditions in credit and capital markets, which are beyond our control. Our defined benefit pension plan obligations could cause the Company's financial position, earnings and cash flows to fluctuate.
Further, we are at increased risk of a cyberattack during periods of heightened geopolitical conflict, such as the war in Ukraine and the escalating conflict throughout the Middle East, as diplomatic events and economic policies may trigger espionage or retaliatory cyber incidents.
Further, we are at increased risk of a cyberattack during periods of heightened geopolitical conflict, such as the war in Ukraine and the conflict throughout the Middle East, as diplomatic events and economic policies may trigger espionage or retaliatory cyber incidents.
In addition to mitigating and remediating newly identified vulnerabilities, previously identified vulnerabilities must also be continuously addressed. Accordingly, we are at risk that cyberattackers exploit these known vulnerabilities before they have been communicated by vendors or addressed.
In addition to mitigating and remediating newly identified vulnerabilities, previously identified vulnerabilities must also be continuously addressed. Accordingly, we are at risk that cyberattackers exploit these vulnerabilities before they have been communicated by vendors or addressed.
These Consulting segment services frequently involve complex calculations and services, including (i) making assumptions about, and preparing estimates concerning, contingent future events, (ii) drafting and interpreting complex documentation governing pension plans, (iii) calculating benefits within complex pension structures, (iv) providing individual financial planning advice including investment advice and advice relating to cashing out of defined benefit pension plans, (v) providing investment advice, including guidance on asset allocation and investment strategy, and (vi) managing client assets, including the selection of investment managers and implementation of the client’s investment policy.
These Consulting segment services frequently involve complex calculations and services, including (i) making assumptions about, and preparing estimates concerning, contingent future events, (ii) drafting and interpreting complex documentation governing pension plans, (iii) calculating benefits within complex pension structures, (iv) providing individual financial planning advice including investment advice and advice relating to cashing out of defined benefit pension plans, (v) providing investment advice, including guidance on asset allocation and investment strategy, and (vi) managing client assets, including the selection of investment managers and implementation of a client’s investment policy and strategies.
We have a number of strategic initiatives involving investments in or partnerships with technology companies as part of our growth strategy, as well as investments in technology, including generative AI, and infrastructure to support our own systems.
We have a number of strategic initiatives involving investments in or 21 partnerships with technology companies as part of our growth strategy, as well as investments in technology, including generative AI, and infrastructure to support our own systems.
Such challenges include the increased mobility of colleagues in light of more flexible working models, market dislocation resulting from proposed and actual combinations in the industry, raids by competitors, and fostering an inclusive and diverse workplace.
Such challenges include the increased mobility of colleagues in light of more flexible working models, market dislocation resulting from proposed and actual combinations in the industry, raids by competitors, and fostering an inclusive workplace.
In addition, organizations that provide information to investors on corporate governance and related matters have developed ratings processes for evaluating companies on their approach to ESG matters, and unfavorable ratings of our company or our industries may lead to negative investor sentiment and the diversion of investment to other companies or industries, exclusion of our stock from ESG-oriented indices or investment funds or harm our relationships with regulators and the communities in which we operate.
Organizations that provide information to investors on corporate governance and related matters have also developed ratings processes for evaluating companies on their approach to ESG matters, and unfavorable ratings of our company or our industries may lead to negative investor sentiment and the diversion of investment to other companies or industries, exclusion of our stock from ESG-oriented indices or investment funds or harm our relationships with regulators and the communities in which we operate.
If a key employee were to join an existing competitor or form a competing company, some of our clients could choose to use the services of that competitor instead of our services.
If a key employee were to join an existing competitor or form a competing company, some of our clients could choose to use the services of a competitor instead of our services.
Disruptions may be the result of weather, natural disaster, war, terrorism, pandemic, or other natural or geopolitical events. Our systems are also subject to compromise from internal threats such as fraud, mistake, misconduct or other improper action by employees, vendors and other third parties with otherwise legitimate access to our systems.
Disruptions may be the result of weather, natural disaster, war, terrorism, pandemic, or other natural or geopolitical events. Our systems are also subject to compromise from internal threats such as fraud, mistakes, misconduct or other improper action by employees, vendors and other third parties with otherwise legitimate access to our systems.
Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, conflicts of interest, ESG and greenwashing, asset perfor mance and regulatory compliance, that, if realized, could result in significant damage to our business.
Mercer’s Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, trading and execution risks, conflicts of interest, ESG and greenwashing, asset perfor mance and regulatory compliance, that, if realized, could result in significant damage to our business.
While our internal generative AI tool, LenAI, was designed to meet our standards for data security and to address and mitigate the risks associated with this new technology, our use of generative AI in certain products and services may present risks and challenges that remain uncertain due to 21 the relative novelty of this technology.
While our internal generative AI tool, LenAI, was designed to meet our standards for data security and to address and mitigate the risks associated with this new technology, our use of generative AI in certain products, services and operations may present risks and challenges that remain uncertain due to the relative novelty of this technology.
SUMMARY RISK FACTORS Some of the factors that could materially and adversely affect our business, financial condition, results of operations or prospects, include the following: • Our results of operations and investments could be adversely affected by geopolitical or macroeconomic conditions; • We are subject to significant uninsured exposures arising from errors and omissions, breach of fiduciary duty and other claims; • We cannot guarantee that we are or will be in compliance with all current and potentially applicable U.S. federal and state or foreign laws and regulations, and actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate could have a material adverse effect on our business; • O ur business or reputation could be harmed by our reliance on third-party providers or introducers; • We may not be able to effectively identify and manage actual and apparent conflicts of interest; • We could incur significant liability or our reputation could be damaged if our information systems are breached or we otherwise fail to protect client or Company data or information systems; • The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (CCPA), could adversely affect our financial condition, operating results and our reputation; • Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change such as AI; • The loss of members of our senior management team or other key colleagues, or if we are unsuccessful in our efforts to attract, retain and develop talent, could have a material adverse effect on our business; • Failure to maintain our corporate culture, particularly in a hybrid work environment, could damage our reputation; • Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our environmental, social and governance (ESG) practices and disclosure may impose additional costs on us or expose us to new or additional risks; • We face significant competitive pressures in each of our businesses, including from disintermediation, as our competitive landscape continues to evolve; • We rely on a large number of vendors and other third parties to perform key functions of our business operations and to provide services to our clients.
SUMMARY RISK FACTORS Some of the factors that could materially and adversely affect our business, financial condition, results of operations or prospects, include the following: • Our results of operations and investments could be adversely affected by geopolitical or macroeconomic conditions; • We are subject to significant uninsured exposures arising from errors and omissions, breach of fiduciary duty and other claims; • We cannot guarantee that we are or will be in compliance with all current and potentially applicable U.S. federal and state or foreign laws and regulations, and actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate could have a material adverse effect on our business; • O ur business or reputation could be harmed by our reliance on third-party providers or introducers; • We may not be able to effectively identify and manage actual and apparent conflicts of interest; • We could incur significant liability or our reputation could be damaged if our information systems are breached or we otherwise fail to protect client or Company data or information systems; • The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (CCPA), Australia's CPS 234, as well as emerging AI-related laws such as the EU's AI Act, could adversely affect our financial condition, operating results and our reputation; • Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change such as AI; • The loss of members of our senior management team or other key colleagues, or if we are unsuccessful in our efforts to attract, retain and develop talent, could have a material adverse effect on our business; • Failure to maintain our corporate culture could adversely affect our business and reputation; • Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our environmental, social and governance (ESG) practices and disclosure may impose additional costs on us or expose us to new or additional risks; • We face significant competitive pressures in each of our businesses, including from disintermediation, as our competitive landscape continues to evolve; • We rely on a large number of vendors and other third parties to perform key functions of our business operations and to provide services to our clients.
For example, these claims could include allegations related to losses from cyberattacks associated with policies where cyber risk was not specifically included or excluded in policies, commonly referred to as “silent cyber.” In our Consulting segment, where we increasingly act in a fiduciary capacity through our investments business, such claims could include allegations of damages arising from the provision of consulting, investment management (including, for example, from trading or other operational errors), actuarial, pension administration and other services.
For example, these claims could include allegations related to losses from cyberattacks associated with policies where cyber risk was not specifically included or excluded in policies, commonly referred to as “silent cyber.” In our Consulting segment, where we may act in a fiduciary capacity through our investments business, such claims could include allegations of damages arising from the provision of consulting, investment management (including, for example, from trading execution or other operational errors), actuarial, pension administration and other services.
The number of laws that apply to us keeps increasing and the interpretation of such laws is often uncertain and may be conflicting. 19 At the international level, we are subject to an increasing number of comprehensive privacy laws including, for example, those passed in Indonesia, the Kingdom of Saudi Arabia and India.
The number of laws that apply to us keeps increasing and the interpretation of such laws is often uncertain and may be conflicting. At the international level, we are subject to an increasing number of comprehensive privacy laws including, for example, those passed in Indonesia, the Kingdom of Saudi Arabia, India and Australia.
We post public privacy policies and other documentation regarding our collection, use, disclosure, cross-border transfer, retention, and other processing of personal information. Although we endeavor to comply with our published policies and other documentation, we may at times fail to do so or may be perceived to have failed to do so.
We post public privacy notices and other documentation regarding our collection, use, disclosure, cross-border transfer, retention, and other processing of personal information. Although we endeavor to comply with our published notices and other documentation, we may at times fail to do so or may be perceived to have failed to do so.
We have experienced data incidents and cybersecurity breaches, such as malware incursions (including computer viruses and ransomware), vulnerabilities in the software on which we rely, users exceeding their data access authorization, employee misconduct and incidents resulting from human error, such as emails sent to the wrong recipient, loss of portable and other data storage devices or misconfiguration of software or hardware resulting in inadvertent exposure of personal, sensitive, confidential or proprietary information.
We have experienced data incidents and cybersecurity breaches, such as malware incursions (including computer viruses and ransomware), vulnerabilities in the software on which we rely, users exceeding their data access authorization, employee misconduct and incidents resulting from human error, such as emails sent to the wrong recipient, loss of portable and other data storage devices or misconfiguration of software or hardware resulting in inadvertent exposure of personal, sensitive, confidential or proprietary information or reduction of system availability.
While we attempt to comply with applicable laws and regulations, there can be no assurance that we, our employees, our consultants and our contractors and other agents are in full compliance with such laws and regulations or interpretations at all times, or that we will be able to comply with any future laws or regulations.
While we attempt to comply with applicable laws and regulations, there can be no assurance that we, our colleagues, our consultants and our contractors and other agents are in full compliance with such laws and regulations or interpretations at all times, or that we will be able to comply with any future laws or regulations.
The amount of other compensation that we receive from insurance companies, separate from retail fees and commissions, has increased in the last several years, both on an underlying basis and through acquisition an d represented approximately 6% of Marsh's revenue in 2023.
The amount of other compensation that we receive from insurance companies, separate from retail fees and commissions, has increased in the last several years, both on an underlying basis and through acquisition an d represented approximately 6% of Marsh's revenue in 2024.
In addition to data protection and data privacy laws, foreign countries and U.S. states are enacting AI and cybersecurity laws and regulations.
In addition to data protection and data privacy laws, foreign countries and U.S. states are enacting cybersecurity laws and regulations.
If we fail to comply or are accused of failing to comply with applicable laws and regulations, including those referred to above, or new and evolving regulations regarding cybersecurity, AI or environmental, social and governance matters, we may become subject to investigations, criminal penalties, civil remedies or other consequences, including fines, injunctions, loss of an operating license or approval, increased scrutiny or oversight by regulatory authorities, the suspension of individual employees, limitations on engaging in a particular business or redress to clients or other parties, and we may become exposed to negative publicity or reputational damage.
If we fail to comply or are accused of failing to comply with applicable laws and regulations, including those referred to above, or new and evolving regulations regarding cybersecurity, AI or sustainability matters, we may become subject to investigations, criminal penalties, civil remedies or other consequences, including fines, injunctions, loss of an operating license or approval, increased scrutiny or oversight by regulatory authorities, the suspension of individual employees, limitations on engaging in a particular business or redress to clients or other parties, and we may become exposed to negative publicity or reputational damage.
We are at risk of a cyberattack involving a vendor or other third party, which could result in a breakdown of such third party’s data protection processes or the cyberattackers gaining access to our infrastructure or data through a supply chain attack.
We are at risk of a cyberattack involving a vendor or other third parties, which could result in a breakdown of such third party’s data protection processes or the cyberattackers gaining access to our infrastructure or data through a supply chain attack.
Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, contractors, service providers, vendors or other third parties with whom we do business fail to comply with our published policies and documentation.
Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, contractors, service providers, vendors or other third parties with whom we do business fail to comply with our published notices and documentation.
Mercer’s Investments business is subject to a number of risks, including risks related to litigation (both by clients and by plan participants, particularly as we increasingly act in a fiduciary capacity), liquidity and market volatility, an inability to obtain contractual limitations of liability for errors & omissions in certain jurisdictions or parts of our business, third-parties, our operations and technology (including the use of AI), trading errors, conflicts of interest, asset performance and regulatory compliance and scrutiny, which could arise in connection with these offerings.
Mercer’s Investments business is subject to a number of risks, including risks related to litigation (both by clients and by plan participants, particularly when we act in a fiduciary capacity), liquidity and market volatility, an inability to obtain contractual limitations of liability for errors & omissions in certain jurisdictions or parts of our business, third-parties, our operations and technology (including the use of AI), trading and execution errors, conflicts of interest, asset performance and regulatory compliance and scrutiny, which could arise in connection with these offerings.
Mercer's administration services include calculating benefits within complicated pension plan structures. Mercer's investments services include investment advice and management relating to defined benefit pension plan assets intended to fund present and future benefit obligations. Clients dissatisfied with our services have brought, and may bring, significant claims against us, particularly in the U.S. and the United Kingdom.
Mercer's administration services include calculating benefits within complicated pension plan structures. Mercer's investments services include investment advice and management relating to defined benefit pension plan assets intended to fund present and future benefit obligations. Clients dissatisfied with our services have brought, and may bring, significant claims against us, particularly in the U.S. and the U.K.
Outside the United States, contributions are generally based on statutory requirements and local funding practices, which may differ from measurements in accordance with U.S. GAAP. In the U.K., for example, the assumptions used to determine pension contributions are the result of legally-prescribed negotiations between the Company and the plan trustees.
Outside the U.S., contributions are generally based on statutory requirements and local funding practices, which may differ from measurements in accordance with U.S. GAAP. In the U.K., for example, the assumptions used to determine pension contributions are the result of legally- 26 prescribed negotiations between the Company and the plan trustees.
These include, among others, risks relating to: • economic and political conditions in the countries in which we operate; • client concentration in certain high-growth countries in which we operate; • the length of payment cycles and potential difficulties in collecting accounts receivable; • unexpected increases in taxes or changes in U.S. or foreign tax laws, rulings, policies or related legal and regulatory interpretations, including recent changes to the U.K. statutory rate; • the implementation of the Organization for Economic Cooperation and Development (OECD) international tax framework, including the implementation of the Pillar 2 minimum tax regime by key jurisdictions in 2024 and the Pillar 1 profit reallocation regime, which could have an adverse effect on our effective tax rate, tax payments and results of operations; • international initiatives to require multinational enterprises, like ours, to calculate and report profitability on a country-by-country basis, which could increase scrutiny by, or cause disagreements with, foreign tax authorities; • potential transfer pricing-related tax exposures that may result from the flow of funds among our subsidiaries and affiliates in the various jurisdictions in which we operate; • unexpected reassessment by tax authorities of interpretations of existing rules which may require companies to defend previously accepted positions and may create both new and prior-year exposures; • litigation arising from ongoing and future controversies with tax authorities; • permanent establishments created due to colleagues traveling to and doing work in countries where the Company has no presence, or living in such countries and working remotely post-pandemic, which are not properly compensated through transfer pricing; • our ability to obtain dividends or repatriate funds from our non-U.S. subsidiaries, including as a result of the imposition of currency controls and other government restrictions on repatriation in the jurisdictions in which our subsidiaries operate, fluctuations in foreign exchange rates and the imposition of withholding and other taxes on such payments; • geopolitical tensions, such as the war in Ukraine and the escalating conflict throughout the Middle East, in countries where we operate, international hostilities, international trade disputes, terrorist activities, natural disasters, pandemics, and infrastructure disruptions; • local investment or other financial restrictions that foreign governments may impose; • potential lawsuits, investigations, market studies, reviews or other activity by foreign regulatory or law enforcement authorities or legislatively appointed commissions, which may result in potential modifications to our businesses, related private litigation or increased scrutiny from U.S. or other regulators; • potential costs and difficulties in complying with a wide variety of foreign laws and regulations (including tax systems) administered by foreign government agencies, some of which may conflict with U.S. or other sources of law; • potential costs and difficulties in complying, or monitoring compliance, with foreign and U.S. laws and regulations that are applicable to our operations abroad, including trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, anti-corruption laws such as the U.S.
These include, among others, risks relating to: • economic and political conditions in the countries in which we operate; • client concentration in certain high-growth countries in which we operate; 28 • the length of payment cycles and potential difficulties in collecting accounts receivable; • unexpected increases in taxes or changes in U.S. or foreign tax laws, rulings, policies or related legal and regulatory interpretations, including recent changes to the U.K. statutory rate; • the implementation of the Organization for Economic Cooperation and Development (OECD) international tax framework, including the implementation of the Pillar 2 minimum tax regime and the Pillar 1 profit reallocation regime, potentially resulting in an adverse effect on our effective tax rate, tax payments and results of operations, particularly as key jurisdictions adopt these changes, either partially or in full, alongside potential shifts in tax laws in response to such implementation; • international initiatives to require multinational enterprises, like ours, to calculate and report profitability on a country-by-country basis, which could increase scrutiny by, or cause disagreements with, foreign tax authorities; • potential transfer pricing-related tax exposures that may result from the flow of funds among our subsidiaries and affiliates in the various jurisdictions in which we operate; • unexpected reassessment by tax authorities of interpretations of existing rules which may require companies to defend previously accepted positions and may create both new and prior-year exposures; • litigation arising from ongoing and future controversies with tax authorities; • permanent establishments created due to colleagues traveling to and doing work in certain countries, or living in such countries and working remotely post-pandemic, which are not properly compensated through transfer pricing; • our ability to obtain dividends or repatriate funds from our non-U.S. subsidiaries, including as a result of the imposition of currency controls and other government restrictions on repatriation in the jurisdictions in which our subsidiaries operate, fluctuations in foreign exchange rates and the imposition of withholding and other taxes on such payments; • geopolitical tensions, such as the war in Ukraine and the conflict throughout the Middle East, in countries where we operate, international hostilities, international trade disputes, terrorist activities, natural disasters, pandemics, and infrastructure disruptions; • local investment or other financial restrictions that foreign governments may impose; • potential lawsuits, investigations, market studies, reviews or other activity by foreign regulatory or law enforcement authorities or legislatively appointed commissions, which may result in potential modifications to our businesses, related private litigation or increased scrutiny from U.S. or other regulators; • potential costs and difficulties in complying with a wide variety of foreign laws and regulations (including tax systems) administered by foreign government agencies, some of which may conflict with U.S. or other sources of law; • potential costs and difficulties in complying, or monitoring compliance, with foreign and U.S. laws and regulations that are applicable to our operations abroad, including trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, anti-corruption laws such as the U.S.
Privacy violations, including unauthorized use disclosure or transfer of sensitive, personal or confidential client or Company data, whether through systems failure, employee negligence, fraud or misappropriation, by the Company, our vendors or other parties with whom we do business (if they fail to meet the standards we impose) could damage our reputation and subject us to significant litigation, monetary damages, regulatory enforcement actions, fines and criminal prosecution in one or more jurisdictions.
Privacy or AI-related legal or regulatory violations, including unauthorized use disclosure or transfer of sensitive, personal or confidential client or Company data, whether through systems failure, employee negligence, fraud or misappropriation, by the Company, our vendors or other parties with whom we do business (if they fail to meet the standards we impose) could damage our reputation and subject us to significant litigation, monetary damages, regulatory enforcement actions, fines and criminal prosecution in one or more jurisdictions where we operate.
Our control over and ability to monitor the cybersecurity practices of our third-party vendors and service providers, and other third parties with whom we do business, remains limited, and there can be no assurance that we can prevent, mitigate, or remediate the risk of any compromise or failure in the cybersecurity infrastructure owned or controlled by such third parties.
Our control over and ability to monitor the cybersecurity practices of our third-party vendors and service providers, and other third parties with whom we do business, remains limited, and there can be no assurance that we can prevent, mitigate, or remediate the risk of any compromise or failure in the development processes or cybersecurity infrastructure or IT controls owned or controlled by such third parties.
Our business depends on our ability to obtain payment from our clients of the amounts they owe us for the work we perform. As of December 31, 2023, our receivables for our commissions and fees were approximately $5.8 billion, or approximately one-quarter of our total annual revenues, and portions of our receivables are increasingly concentrated in certain businesses and geographies.
Our business depends on our ability to obtain payment from our clients of the amounts they owe us for the work we perform. As of December 31, 2024, our receivables for our commissions and fees were approximately $6.5 billion, or approximately one-quarter of our total annual revenues, and portions of our receivables are increasingly concentrated in certain businesses and geographies.
The inability to implement, maintain and upgrade adequate safeguards could have a material adverse effect on our business. Our information systems must be continually updated, patched, and upgraded to protect against known vulnerabilities. The volume of new software vulnerabilities has increased markedly, as has the criticality of patches and other mitigation and remedial measures.
The inability to implement, maintain and upgrade adequate safeguards could have a material adverse effect on our business. Our information systems must be continually updated, patched, and upgraded to protect against known vulnerabilities. The volume of new software and infrastructure vulnerabilities continues to increase markedly, as has the criticality of patches and other mitigation and remedial measures.
Adverse regulatory, legal or other developments could have a material adverse effect on our business and expose the Company to negative publicity and reputational harm. RISKS RELATING TO OUR CONSULTING SEGMENT Our Consulting segment, conducted through Mercer and Oliver Wyman Group, represented 38% of our total revenue in 2023. Our businesses in this segment are subject to particular risks.
Adverse regulatory, legal or other developments could have a material adverse effect on our business and expose the Company to negative publicity and reputational harm. RISKS RELATING TO OUR CONSULTING SEGMENT Our Consulting segment, conducted through Mercer and Oliver Wyman Group, represented 37% of our total revenue in 2024. Our businesses in this segment are subject to particular risks.
In 2023, approximately 53% of the Company's total revenue was generated from operations outside the U.S., and over one-half of our employees were located outside the U.S. In addition, we conduct our operations through four separate businesses. Potential conflicts of interest may arise across our businesses given the significant volume of our engagements.
In 2024, approximately 52% of the Company's total revenue was generated from operations outside the U.S., and over one-half of our employees were located outside the U.S. In addition, we conduct our operations through four separate businesses. Potential conflicts of interest may arise across our businesses given the significant volume of our engagements.
Our information technology systems and information security control systems, and those of our numerous third-party providers, as well as the control systems of critical infrastructure they rely on, such as power grids, and undersea cables, are potentially vulnerable to unauthorized access, damage or interruption from a variety of external threats, including software bugs, physical attack, cyberattacks, computer viruses and other malware, malicious or destructive code, ransomware, social engineering attacks (including phising and digital or telephonic impersonation), hacking, denial-of-service attacks and other types of data and systems-related modes of attack.
Our information technology systems and information security control systems, and those of our numerous third-party providers, as well as the control systems of critical infrastructure they rely on, such as power grids, and undersea cables, are potentially vulnerable to unauthorized access, damage or interruption from a variety of external threats, including software bugs, physical attack, cyberattacks, computer viruses and other malware, malicious or destructive code, ransomware, social engineering attacks (including phishing, business e-mail compromise and digital or telephonic impersonation), hacking theft, denial-of-service attacks and other types of data and systems-related modes of attack.
We could experience significant financial and reputational harm if our information systems are breached, sensitive client or Company data are compromised, surreptitiously modified, rendered inaccessible for any period of time or maliciously made public, or if we fail to make adequate or timely disclosures to the public, law enforcement agencies or regulators following any such event, whether due to delayed discovery or a failure to follow existing protocols. 17 Cyberattacks are increasing in frequency and evolving in nature.
We could experience significant financial and reputational harm if our information systems are breached, sensitive client or Company data are compromised, surreptitiously modified, rendered inaccessible for any period of time or maliciously made public, or if we fail to make adequate or timely disclosures to the public, 17 law enforcement agencies or regulators following any such event, whether due to delayed discovery or a failure to follow existing protocols.
Mercer may also be perceived as making inaccurate or misleading statements regarding the investment strategies of our offerings or investments with respect to ESG or sustainability, commonly referred to as “greenwashing,” or recommending certain asset managers to clients or offering delegated solutions to an investment consulting client, solely to enhance its own compensation or due to other perceived conflicts of interest.
Mercer may also be perceived as making inaccurate or misleading statements regarding the investment strategies of our offerings or investments with respect to ESG or sustainability, commonly referred to as “greenwashing,” or recommending certain asset managers to clients or offering delegated solutions a potential or existing client, solely to enhance its own compensation or due to other conflicts of interest.
Credit rating downgrades would increase our financing costs and could subject us to operational risk. Currently, the Company's senior debt is rated A- by S&P, A3 by Moody's and A- by Fitch. The Company carries a Stable outlook with S&P, Moody's and Fitch.
Credit rating downgrades would increase our financing costs and could subject us to operational risk. Currently, the Company's senior debt is rated A- by S&P, A3 by Moody's and A- by Fitch. The Company's short-term debt is currently rated A-2 by S&P, P-2 by Moody's, and F-2 by Fitch.The Company carries a Stable outlook with S&P, Moody's and Fitch.
Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business. Approximately 53% of our total revenue reported in 2023 was from business outside of the U.S.
Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business. Approximately 52% of our total revenue reported in 2024 was from business outside of the U.S.
These include: • the number of client engagements during a quarter; • the possibility that clients may decide to delay or terminate a current or anticipated project as a result of factors unrelated to our work product or progress; • fluctuations in capacity and utilization rates and clients' ability to terminate engagements without penalty; • our net colleague hires and related compensation and benefits expense; • potential limitations on the clients or industries we serve resulting from increased regulation or changing stakeholder expectations on ESG issues; 26 • the impact of changes in accounting standards or in our accounting estimates or assumptions; • the impact on us or our clients of changes in legislation, regulation and legal guidance or interpretations in the jurisdictions in which we operate, in particular as a result of increased regulatory activity and enforcement; • seasonality due to the impact of regulatory deadlines, policy renewals and other timing factors to which our clients are subject; • the success of our acquisitions or investments; • macroeconomic factors such as changes in foreign exchange rates, interest rates and global public and private capital markets, particularly in the case of Mercer, where fees in its investments business and certain other business lines are derived from the value of assets under management, advisement or administration; and • general economic conditions, including factors beyond our control affecting economic conditions such as global health crises or pandemics, severe weather, climate change, geopolitical unrest such as the war in Ukraine and the escalating conflict throughout the Middle East, protests and riots or other catastrophic events, since our results of operations are directly affected by the levels of business activity of our clients, which in turn are affected by the level of economic activity in the industries and markets that they serve.
These include: • the number of client engagements during a quarter; • the possibility that clients may decide to delay or terminate a current or anticipated project as a result of factors unrelated to our work product or progress; • fluctuations in capacity and utilization rates and clients' ability to terminate engagements without penalty; • our net colleague hires and related compensation and benefits expense; • potential limitations on the clients or industries we serve resulting from increased regulation or changing stakeholder expectations on ESG issues; • the impact of changes in accounting standards or in our accounting estimates or assumptions; • the impact on us or our clients of changes in legislation, regulation and legal guidance or interpretations in the jurisdictions in which we operate, particularly in the U.S. as a result of the shift in the presidential administration; • seasonality due to the impact of regulatory deadlines, policy renewals and other timing factors to which our clients are subject; • the success of our acquisitions or investments; • occurrence of any significant natural disaster or other insured events including any potential reputational harm to the insurance industry following such event; • macroeconomic factors such as changes in foreign exchange rates, interest rates and global public and private capital markets, particularly in the case of Mercer, where fees in its investments business and 27 certain other business lines are derived from the value of assets under management, advisement or administration; and • general economic conditions, including factors beyond our control affecting economic conditions such as global health crises or pandemics, severe weather, climate change, geopolitical unrest such as the war in Ukraine and the conflict throughout the Middle East, protests and riots or other catastrophic events, since our results of operations are directly affected by the levels of business activity of our clients, which in turn are affected by the level of economic activity in the industries and markets that they serve.
The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (CCPA), could adversely affect our financial condition, operating results and our reputation.
The costs to comply with, or our failure to comply with, U.S. and foreign laws related to privacy, data security and data protection, such as the EU's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (CCPA), Australia's CPS 234, as well as emerging AI-related laws such as the EU's AI Act, could adversely affect our financial condition, operating results and our reputation.
A downgrade to a rating below investment-grade could result in greater operational risks through increased operating costs and increased competitive pressures. Our current debt level could adversely affect our financial flexibility. As of December 31, 2023, we had total consolidated debt outstanding of approximately $13.5 billion.
A downgrade to a rating below investment-grade could result in greater operational risks through increased operating costs and increased competitive pressures. Our current debt level could adversely affect our financial flexibility. At December 31, 2024, we had total consolidated debt outstanding of approximately $19.9 billion.
In either case, our business, financial condition and results of operations could be materially adversely affected. Mercer’s Investments business also could be adversely affected by an accelerated shift away from actively managed investments to passively managed investments with associated lower fees.
In either case, our business, financial condition and results of operations could be materially adversely affected. Mercer’s Investments business also could be adversely affected by an accelerated shift away from actively managed investments to passively managed investments with associated lower fees, as well as fee compression from the competitive environment.
Given the complexity of operationalizing the various privacy laws mentioned above, the maturity level of proposed compliance frameworks and the continued lack of certainty on how to implement their requirements, we and our clients are at risk of enforcement actions taken by data protection authorities around the world or litigation from consumer advocacy groups acting on behalf of data subjects.
Given the complexity of operationalizing the various privacy, data security, data protection and AI laws and regulations mentioned above, the complexity of proposed compliance frameworks and the continued lack of certainty on how to implement their requirements, we and our clients are at risk of enforcement actions taken by applicable regulators or authorities around the world or litigation from third parties, including consumer advocacy groups acting on behalf of data subjects.
The risk of business disruption is more pronounced in certain geographic areas, including major metropolitan centers, like New York or London, where we have significant operations and approximate ly 3,700 and 5,700 colleagues i n those respective locations, and in certain countries and regions in which we operate that are subject to higher potential threat of terrorist attacks or military conflicts.
The risk of business disruption is more pronounced in certain geographic areas, including major metropolitan centers, like New York or London, where we have significant operations and approximate ly 3,900 and 5,800 colleagues in those respective locations, and in certain countries and regions, such as India, in which we operate or are investing additional capabilities that are subject to higher potential threat of terrorist attacks or military conflicts.
In addition, we have migrated certain data, and may increasingly migrate data, to the cloud where it is hosted by third-party providers. Some of these vendors and third parties also have direct access to our systems or data.
We also use hundreds of IT vendors and software providers to maintain and secure our global information systems infrastructure. In addition, we have migrated certain data, and may increasingly migrate data, to the cloud where it is hosted by third-party providers. Some of these vendors and third parties also have direct access to our systems or data.
There is a risk that Mercer will fail to properly or timely implement a client’s investment policy or direction, which could cause an incorrect or untimely allocation of client assets among asset classes, asset managers, or strategies.
There is a risk that Mercer will fail to properly or timely implement or execute a client’s investment policy or strategy or instruction, which could cause an incorrect or untimely allocation of client assets among asset classes, asset managers, or strategies or result in a trading error.
Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our environmental, social and governance (ESG) practices and disclosure may impose additional costs on us or expose us to new or additional risks.
Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our environmental, social and governance (ESG) practices and disclosure may impose additional costs on us or expose us to new or additional risks. There is continued focus, including from governmental organizations, regulators, investors, colleagues and clients, on ESG and sustainability issues.
Bribery Act 2010; 28 • limitations or restrictions that foreign or U.S. governments and regulators may impose on the products or services we sell, the methods by which we sell our products and services and the manner in which and the amounts we are compensated; • potential limitations or difficulties in protecting our intellectual property in various foreign jurisdictions; • limitations that foreign governments may impose on the conversion of currency or the payment of dividends or other remittances to us from our non-U.S. subsidiaries; • engaging and relying on third parties to perform services on behalf of the Company; and • potential difficulties in monitoring employees in geographically dispersed locations.
Bribery Act 2010; • limitations or restrictions that foreign or U.S. governments and regulators may impose on the products or services we sell, the methods by which we sell our products and services and the manner in which and the amounts we are compensated; • potential limitations or difficulties in protecting our intellectual property in various foreign jurisdictions; • limitations that foreign governments may impose on the conversion of currency or the payment of dividends or other remittances to us from our non-U.S. subsidiaries; • engaging and relying on third parties to perform services on behalf of the Company; and • potential difficulties in monitoring employees in geographically dispersed locations. 29 RISKS RELATING TO OUR RISK AND INSURANCE SERVICES SEGMENT Our Risk and Insurance Services segment, conducted through Marsh and Guy Carpenter, represented 63% of the Company's total revenue in 2024.
In particular, high-profile data breaches at major companies continue to be disclosed regularly, which is leading to even greater regulatory scrutiny and fines at the highest levels they have ever been. These fines are not limited to data breaches and regulators are increasingly focusing on other data processing activities including those related to ad-tech and “data subject” rights.
In particular, high-profile data breaches at major companies continue to be disclosed regularly, which is leading to even greater regulatory scrutiny and significant fines, which are not limited to data breaches as regulators increasingly focus on other data processing activities, including those related to ad-tech and “data subject” rights.
Failure to maintain our corporate culture, particularly in a hybrid work environment, could damage our reputation. We strive to foster a culture in which our colleagues act with integrity and feel comfortable speaking up about potential misconduct.
Failure to maintain our corporate culture could adversely affect our business and reputation. We strive to foster a culture in which our colleagues act with integrity and feel comfortable speaking up about potential misconduct.
Moreover, the laws and regulations to which we are subject may conflict among the various jurisdictions and countries in which we operate, which increases the likelihood of our businesses being non-compliant in one or more jurisdictions. In addition, we may be responsible for the legal and regulatory liabilities of companies that we acquire.
Moreover, the laws and regulations to which we are subject may conflict among the various jurisdictions and countries in which we operate, which increases the likelihood of our businesses being non-compliant in one or more jurisdictions.
In particular, heightened 22 demand for, and scrutiny of, ESG and sustainable-related products, funds, investment strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, commonly referred to as "greenwashing" or that we have otherwise run afoul of regulation.
In addition, heightened regulatory scrutiny of ESG and sustainability-related products, funds, investment strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, or that we have otherwise run afoul of regulation.
We face significant competitive pressures in each of our businesses, including from disintermediation, as our competitive landscape continues to evolve. As a global professional services firm, the Company faces competition in each of its businesses, and the competitive landscape continues to change and evolve.
As a global professional services firm, the Company faces competition in each of its businesses, and the competitive landscape continues to change and evolve.
At the U.S. state level, we are subject to laws and regulations related to privacy, such as the CCPA which introduced concepts such as transparency and rights like access and deletion, that have been enacted by over a dozen states with many more on the verge of enacting such laws.
At the U.S. state level, we are subject to laws and regulations related to privacy, such as the CCPA, which introduced concepts such as transparency and rights like access and deletion, that have been enacted by over twenty states with more such laws expected to pass in future years.
As we do not control many of the actions of these third parties, we are subject to the risk that their decisions or operations may adversely impact us and replacing these service providers could create significant delay in services or operations and additional expense.
Many of these providers are located outside the U.S., which exposes us to business disruptions and political risks inherent when conducting business outside of the U.S. 24 As we do not control many of the actions of these third parties, we are subject to the risk that their decisions or operations may adversely impact us and replacing these service providers could create significant delay in services or operations and additional expense.
We may not be able to respond quickly or effectively to regulatory, legislative and other developments, and these changes may in turn impair our ability to offer our existing or planned products and services and increase our cost of doing business.
Additionally, due to the ongoing fast pace of legislative and regulatory activity, we may not be able to respond quickly or effectively to new legislative, regulatory and other developments. These changes may also impair our ability to offer our existing or planned products and services and increase our cost of doing business in various countries.
Moreover, as ESG reporting standards continue to evolve, including with guidance from the International Sustainability Standards Board (ISSB) and the European Sustainability Reporting Standards (ESRS) under the Corporate Sustainability Reporting Directive (CSRD), we continue to evaluate and update our public disclosures in these areas, including refining our disclosure of metrics and goals in accordance with the guidance and our own ESG assessments and priorities.
As these ESG reporting requirements and standards evolve, we continue to evaluate and update our public disclosures in these areas, including refining our disclosure of metrics and sustainability goals in accordance with the guidance and our own ESG assessments and priorities.
Highly publicized data 18 security breaches, such as the October 2023 attack on Okta may embolden malicious actors to target the IT supply chain and providers of business software.
Highly publicized data security breaches, such as the October 2023 attack on Okta, may embolden malicious actors to target the IT supply chain and providers of business software. In addition, we depend on our third-party vendors to keep software current.
We collect data from client and individuals located all over the world and leverage systems and teams to process it. As a result, we are subject to a variety of laws and regulations in the U.S., Europe and around the world regarding privacy, data protection, data security and cyber security. These laws and regulations are continuously evolving and developing.
As a result, we are subject to a variety of laws and regulations in the U.S., Europe and around the world regarding privacy, data protection, data security and cyber security. These laws and regulations are continuously evolving and developing.
We rely on the efficient, uninterrupted and secure operation of complex information technology systems and networks to operate our business and securely process, transmit and store electronic information. In the normal course of business, we also share electronic information with our vendors and other third parties.
We rely on the efficient, uninterrupted and secure operation of complex information technology systems and networks to operate our business and securely process, transmit and store electronic information.
Many statutory requirements, both in the U.S. and abroad, include obligations for companies to notify individuals of security breaches involving certain personal information, which could result from breaches experienced by us or our vendors.
Failure to comply with some of these obligations, especially those related to data retention requirements, could expose us to regulatory fines and other penalties. Many statutory requirements, both in the U.S. and abroad, include obligations for companies to notify individuals of security breaches involving certain personal information, which could result from breaches experienced by us or our vendors.
If we are unable to achieve and maintain adequate billing rates for all of our services, our margins and profitability could decline. 29 Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on our business, results of operations and financial condition.
Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on our business, results of operations and financial condition.
The Company has significant defined benefit pension obligations to its current and former employees, totaling approximately $12.2 billion, and related plan assets of approximately $13.5 billion, at December 31, 2023 on a U.S. GAAP basi s.
The Company has significant defined benefit pension obligations to its current and former employees, totaling approximately $11.4 billion, and related plan assets of approximately $12.6 billion, at December 31, 2024 in accordance with U.S. GAAP.
We currently utilize the services of hundreds of third-party providers to meet the needs of our clients around the world. There is a risk that our third-party providers or introducers engage in business practices that are prohibited by our internal policies or violate applicable laws and regulations, such as the U.S. Foreign Corrupt Practices Act and the U.K. Anti-Bribery Act.
There is a risk that our third-party providers or introducers engage in business practices that are prohibited by our internal policies or violate applicable laws and regulations, such as the U.S. Foreign Corrupt Practices Act and the U.K. Anti-Bribery Act. We may not be able to effectively identify and manage actual and apparent conflicts of interest.
Geopolitical and macroeconomic conditions, including from multiple major wars, escalating conflict throughout the Middle East and rising tension in the South China Sea, slower GDP growth or recession, lower interest rates, capital markets volatility and inflation affect our clients' businesses and the markets they serve.
Geopolitical and macroeconomic conditions, including from multiple major wars and global conflicts, slower GDP growth or recession, lower interest rates, capital markets volatility, inflation and changes in insurance premium rates affect our clients' businesses and the markets they serve.