BRK.B: 10-K Risk Factor Changes

Our insurance businesses are subject to regulation in the jurisdictions in which we operate. Such regulations may relate to, among other things, the types of business that can be written, the rates that can be charged for coverage, the level of capital that must be maintained and restrictions on the types and size of investments that can be made. Regulations may also restrict the timing and amount of dividend payments to Berkshire by these businesses. U.S. state insurance regulators and international insurance regulators are also actively developing various regulatory mechanisms to address the regulation of large internationally active insurance groups, including regulations concerning group capital, liquidity, governance and risk management. Accordingly, changes in regulations related to these or other matters or regulatory actions imposing restrictions on our insurance businesses may adversely impact our results of operations and restrict our ability to allocate capital.

Our railroad business conducted through BNSF is also subject to a significant number of laws and regulations with respect to rates and practices, taxes, railroad operations and a variety of health, safety, labor, environmental and other matters. Failure to comply with applicable laws and regulations could have a material adverse effect on BNSF’s business. Governments may change the legislative and/or regulatory framework within which BNSF operates, without providing any recourse for any adverse effects that the change may have on the business. Complying with legislative and regulatory changes may pose significant operating and implementation risks and require significant capital expenditures. BNSF can be exposed to significant litigation costs and losses arising from these matters and from ongoing business operations.

K-27

BNSF derives significant revenues from the transportation of energy-related commodities, including coal. Changes in government policies that limit, restrict or displace coal as a fuel source in generating electricity, or limit or restrict other commodities that BNSF transports, could adversely affect revenues and earnings. As a common carrier, BNSF is also required to transport toxic inhalation hazard chemicals and other hazardous materials. The release of hazardous materials could expose BNSF to significant claims, losses, penalties and environmental remediation obligations. Changes in the regulation of the rail industry could negatively impact BNSF’s ability to determine prices for rail services and to make capital improvements to its rail network, resulting in an adverse effect on our results of operations, financial condition and/or liquidity.

The U.S. freight transportation infrastructure is integrated. BNSF’s operations may be negatively affected by service disruptions of other entities, such as ports, passenger trains, and other railroads, which interchange with BNSF Railway. A prolonged service disruption at any of these entities could have adverse consequences on BNSF. Significant consolidation or integration involving participants within the freight transportation industry, including mergers among major rail carriers, may lead to operational disruptions across the rail network and broader supply chain, which could negatively impact BNSF’s operating results, financial condition and liquidity.

Our utilities and energy businesses operated under BHE are highly regulated by numerous federal, state, local and foreign governmental authorities in the jurisdictions in which they operate. These laws and regulations are complex, dynamic and subject to new interpretations or change. Regulations affect almost every aspect of our utilities and energy businesses. Regulations broadly apply and may limit management’s ability to independently make and implement decisions regarding numerous matters including: acquiring businesses; constructing, acquiring, disposing or retiring of operating assets; operating and maintaining generating facilities and transmission and distribution system assets; complying with pipeline safety and integrity and environmental requirements; setting rates charged to customers; establishing capital structures and issuing debt; managing and reporting transactions between our domestic utilities and our other subsidiaries and affiliates; and paying dividends or similar distributions. Failure to comply with or reinterpretations of existing regulations and new legislation or regulations, such as those relating to air quality, climate change, emissions performance standards, water quality, coal ash disposal and other environmental matters, or changes in the nature of the regulatory process may have a significant adverse impact on our financial results. Furthermore, our regulated energy subsidiaries are exposed to losses arising from wildfires and related litigation and judicial outcomes. The energy rates charged by our regulated energy subsidiaries to customers are based on the costs of the business and require regulatory approval. To the extent costs are not recoverable through approved rates, the operating results and financial condition of these businesses can be negatively impacted, perhaps materially.

BNSF requires significant ongoing capital investment to improve and maintain its railroad network so that transportation services can be safely and reliably provided to customers on a timely basis. BHE also requires significant capital to construct, operate and maintain generation, transmission and distribution systems to meet their customers’ needs and reliability criteria. System assets need to be operational for long periods of time to justify the financial investment. The operational or financial failure of capital projects may not be recoverable through rates that are charged to customers. Further, a significant portion of costs of capital improvements may be funded through debt. Restricted access to debt capital markets by BNSF or BHE could adversely affect the results of operations, liquidity and/or capital resources of these businesses.

Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

Berkshire recognizes that maintaining processes for identifying, assessing, and managing cybersecurity threats is important in dealing with its significant business risks. As such, Berkshire has implemented a framework for cybersecurity and cyber-related information management across Berkshire’s diverse groups of businesses. The framework permits each Berkshire Business Group (“Business Group”) to tailor solutions to identify, manage, and mitigate risks based on their own assessment of their unique cybersecurity risks in conjunction with each Business Group’s overall risk management processes. At the same time, the framework helps enable consistent and appropriate compliance in reporting material cyber events and risks across Berkshire.

Each Business Group’s Chief Information Security Officer (“CISO”) on at least an annual basis is to provide a report to the Business Group’s senior management, regarding the state of their cybersecurity program and its material cyber risks. These reports are also shared with Berkshire’s internal audit group to inform and enhance the overall risk management processes. In addition, each Business Group is required to maintain an incident reporting process to report significant cybersecurity events to Berkshire. Berkshire and its Business Groups engage and partner with a wide range of third parties to assess, audit, educate, implement, operate, protect, and remediate various cybersecurity related elements.

K-28

Berkshire and its Business Groups rely on third-party service providers for a variety of products and services to run their information systems. This dependence exposes Berkshire and the Business Groups, along with others who use these service providers, to the impact of a cyber-attack on their service providers. On occasion, a cyber-attack on a third-party service provider could have a significant financial, operational or reputational impact to Berkshire. Berkshire and its Business Groups continuously monitor the risks associated with its service providers.

The Audit Committee of Berkshire’s Board of Directors has responsibility for oversight of Berkshire’s cybersecurity risk management program. The Audit Committee receives periodic reports regarding the number of and impact from cybersecurity incidents reported through Berkshire’s cybersecurity incident reporting process. Additionally, the Audit Committee is updated on cybersecurity trends and related issues. Furthermore, the Audit Committee approves and receives updates on the workplan performed by Berkshire’s internal audit group that focuses on information technology and cybersecurity risks. This includes audit procedures related to internal and external penetration testing, attack simulations, vulnerability assessments, cybersecurity program reviews and other audits designed to investigate specific risks. The frequency of these updates is determined by the Audit Committee in conjunction with Berkshire’s senior management.

In addition to the Audit Committee’s oversight, the senior management of Berkshire’s Businesses Groups are responsible for the day-to-day operations of protecting their businesses’ information systems. Each Business Group is required to report significant cybersecurity events to Berkshire. Berkshire’s senior management reviews incident reports to determine whether a cyber incident report should be filed with the SEC.

Item 2. Description of Properties

The properties used by Berkshire’s business segments are summarized in this section. Berkshire’s railroad and utilities and energy businesses, in particular, utilize considerable physical assets in their businesses.