Clients are increasingly looking to pass on contractual obligations to us, which may include service level, information and cyber-security requirements and audit rights. Many of our clients in the financial services sector are also subject to regulations and requirements to adopt risk management processes commensurate with the level of risk and complexity of their third-party relationships (including as required under the European Union ("EU") Digital Operational Resilience Acts ("DORA")), and provide rigorous oversight of relationships that involve certain "critical activities," some of which may be deemed to be provided by us. Any failure on our part to comply with the specific provisions in client contracts, including having appropriate information security capabilities, could result in the imposition of various penalties, which may include termination of contracts, service credits, suspension of payments, contractual penalties, adverse monetary judgments, and, in the case of government contracts, suspension from future government contracting. Even if the outcome of any claims brought against us were ultimately favorable, such a claim would require the time and attention of our management, personnel, as well as financial and other resources and potentially pose a significant disruption to our normal business operations and reputational damage.