Fidelity National Information Services Inc.: 10-K Risk Factor Changes

We may face pricing pressure in obtaining and retaining our clients. Larger clients in particular may use their negotiating leverage to seek price reductions from us when they renew a contract, when a contract is extended, or when the client's business has significant volume changes. Larger clients may also reduce services if they decide to move services in-house. Further, our smaller and mid-size clients may also exert pricing pressure, particularly upon renewal, due to competition or other economic needs or pressures being experienced by the client. On some occasions, this pricing pressure results in lower revenue from a client than we had anticipated based on our previous agreement with that client. This reduction in revenue could adversely affect our business, financial condition or results of operations. 14 14 14 Table of Contents Table of Contents

We may face pricing pressure in obtaining and retaining our clients. Larger clients in particular may use their negotiating leverage to seek price reductions from us when they renew a contract, when a contract is extended, or when the client's business has significant volume changes. Larger clients may also reduce services if they decide to move services in-house. Further, our smaller and mid-size clients may also exert pricing pressure, particularly upon renewal, due to competition or other economic needs or pressures being experienced by the client. On some occasions, this pricing pressure results in lower revenue from a client than we had anticipated based on our previous agreement with that client. This reduction in revenue could adversely affect our business, operating results and financial condition.

As of December 31, 2023, goodwill aggregated to $17.0 billion, or 31% of total assets, and intangible assets aggregated to $1.8 billion, or 3% of total assets. Current accounting rules require goodwill to be assessed for impairment at least annually or whenever changes in circumstances indicate potential impairment and require intangible assets with finite useful lives to be reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. Factors that may be considered a change in circumstance include significant underperformance relative to historical or projected future operating results, a significant decline in our stock price and market capitalization, and negative industry or economic trends. If worldwide or U.S. economic conditions decline significantly with prolonged negative impacts to bank spending and consumer behavior, or if other business or market changes significantly impact our outlook, then the remaining carrying amount of our goodwill and other intangible assets may no longer be recoverable, and we may be required to record an impairment charge, which would have a negative impact on our results of operations. We will continue to monitor the fair value of our reporting units and other intangible assets as well as our market capitalization and the impact of any prolonged economic downturn on our business to determine the likelihood of impairment.

As of December 31, 2022, goodwill aggregated to $34.3 billion, or 54% of total assets, and intangible assets aggregated to $9.0 billion, or 14% of total assets. Current accounting rules require goodwill to be assessed for impairment at least annually or whenever changes in circumstances indicate potential impairment and require intangible assets with finite useful lives to be reviewed for impairment whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. Factors that may be considered a change in circumstance include significant underperformance relative to historical or projected future operating results, a significant decline in our stock price and market capitalization, and negative industry or economic trends. Pursuant to our annual goodwill impairment test that we began conducting in November 2022 with a quantitative analysis as of October 1, 2022, as supplemented by a further analysis measured as of December 31, 2022, we recorded a total goodwill impairment charge of $17.6 billion in the fourth quarter of 2022 for the Merchant reporting unit. In the fourth quarter of 2020, we recorded $94 million in goodwill impairment related to certain non-strategic businesses in the Corporate and Other segment. For all other reporting units for all periods presented, goodwill was not impaired. If worldwide or U.S. economic conditions continue to decline significantly with negative impacts to bank spending and consumer behavior, or if other business or market changes impact our outlook, then the remaining carrying amount of our goodwill and other intangible assets may no longer be recoverable, and we may be required to record a further impairment charge, which would have a negative impact on our results of operations. We will continue to monitor the fair value of our reporting units and other intangible assets as well as our market capitalization and the impact of any economic downturn on our business to determine if there is any further impairment in future periods.

A significant portion of our revenue is derived from transaction processing fees. The global transaction processing industries depend heavily upon the overall level of consumer, business and government spending. Any change in economic factors, including a sustained deterioration in general economic conditions or consumer confidence, particularly in the U.S., or inflation and increases in interest rates in key countries in which we operate may adversely affect consumer spending, consumer debt levels and credit and debit card usage, and as a result, adversely affect our financial performance by reducing the number or average purchase amount of transactions that we service. In addition, the direct and indirect effects of geopolitical conflicts, such as the Russia-Ukraine war and the conflict between Israel and Hamas, have adversely affected, and worsening or future conflicts could materially adversely affect, global economic activity and transaction processing volumes. When there is a slowdown or downturn in the economy, a drop in stock market levels or trading volumes, or an event that disrupts the financial markets, our business and financial results may suffer for a number of reasons. Customers may react to worsening conditions by reducing or delaying their capital expenditures in general or by specifically reducing or delaying their information technology spending. In addition, customers may seek to curtail trading operations or to lower their costs by renegotiating vendor contracts. Moreover, competitors may respond to market conditions by lowering prices and attempting to lure away our customers to lower-cost solutions. Any further protective trade policies or actions taken by the U.S. may also result in other countries reducing, or making more expensive, services permitted to be provided by U.S.-based companies. Lengthening sales cycles observed in 2022, particularly for large Banking transactions with a total contract value in excess of $50 million, persisted during most of 2023, which we believe resulted from economic uncertainty, and have had, and may continue to have, an adverse effect on our results of operations. If any of these circumstances remain in effect for an extended period of time, there could be a material adverse effect on our business, financial condition or results of operations.

A significant portion of our revenue is derived from transaction processing fees. The global transaction processing industries depend heavily upon the overall level of consumer, business and government spending. Any change in economic factors, including a sustained deterioration in general economic conditions or consumer confidence, particularly in the U.S., or inflation and increases in interest rates in key countries in which we operate may adversely affect consumer spending, consumer debt levels and credit and debit card usage, and as a result, adversely affect our financial performance by reducing the number or average purchase amount of transactions that we service. Rising interest rates, inflation, and slowing economic growth in the U.S. and Europe began to negatively affect revenue growth and profitability in 2022, particularly in our Merchant Solutions segment. These effects began to accelerate in the fourth quarter of 2022 and are expected to continue to adversely affect our future financial performance. These expectations contributed to our fourth quarter 2022 goodwill impairment in our Merchant reporting unit, and further deterioration in macroeconomic conditions beyond our current expectations could contribute to further impairment. Additionally, supply chain issues globally can slow down the provision of parts for our products, such as chips in EMV cards, and could adversely impact revenue. In addition, the direct and indirect effects of geopolitical conflicts, such as the Russia-Ukraine war, have adversely affected, and worsening or future conflicts could materially adversely affect, global economic activity and transaction processing volumes. 14 14 14 Table of Contents Table of Contents When there is a slowdown or downturn in the economy, a drop in stock market levels or trading volumes, or an event that disrupts the financial markets, our business and financial results may suffer for a number of reasons. Customers may react to worsening conditions by reducing or delaying their capital expenditures in general or by specifically reducing or delaying their information technology spending. In addition, customers may seek to curtail trading operations or to lower their costs by renegotiating vendor contracts. Moreover, competitors may respond to market conditions by lowering prices and attempting to lure away our customers to lower-cost solutions. Any further protective trade policies or actions taken by the U.S. may also result in other countries reducing, or making more expensive, services permitted to be provided by U.S.-based companies. During 2022, we began to experience lengthening sales cycles, particularly in Banking Solutions and Capital Markets, which we believe resulted from economic uncertainty and which has had, and is expected to continue to have, an adverse effect on our results of operations. If any of these circumstances remain in effect for an extended period of time, there could be a material adverse effect on our financial results.

We are involved in various litigation matters in the ordinary course of business, including in some instances class-action cases and patent infringement litigation. If we are unsuccessful in our defense of litigation matters, we may be forced to pay damages and/or change our business practices, any of which could have an adverse effect on our business, financial condition or results of operations.

We are involved in various litigation matters in the ordinary course of business, including in some instances class-action cases and patent infringement litigation. If we are unsuccessful in our defense of litigation matters, we may be forced to pay damages and/or change our business practices, any of which could have an adverse effect on our business and results of operations.

One of the goals of our ongoing Future Forward initiative is to achieve significant cost savings across the enterprise. We have reiterated a cash savings target of $1 billion, of which over 75 percent represents run-rate cash savings, on a continuing operations basis exiting 2024. We may not be able to achieve this cost savings target on our desired timeframe, or at all, for many reasons, including contractual constraints, potential operational disruptions to our business, or unanticipated business costs or inefficiencies. If we are unable to achieve the financial goals set by Future Forward, or if our efforts as part of Future Forward result in unintended disruptions to our business, our business, financial condition or results of operations could be adversely affected.

We recently announced an initiative, initially branded as our Enterprise Transformation Program and now branded as Future Forward, intended to achieve significant cost savings across the enterprise. As recently announced, we have increased the cash savings target under Future Forward, from $500 million to $1,250 million (prior to the effects of the proposed spin-off of our Merchant business, which we believe will reduce the available savings) through the end of 2024. We may not be able to achieve this cost savings target on our desired timeframe, or at all, for many reasons, including contractual constraints, potential operational disruptions to our business, or unanticipated business costs or inefficiencies. If we are unable to achieve the financial goals set by Future Forward, or if our efforts as part of Future Forward result in unintended disruptions to our business, our business, financial condition and results of operations could be adversely affected.

Our tax returns and positions are subject to review and audit by federal, state, local and international taxing authorities. An unfavorable outcome to a tax audit could result in higher tax expense and could negatively impact our effective tax rate, financial position, results of operations and cash flows in the current and/or future periods. On December 15, 2022, the European Union ("EU") Member States formally adopted the EU’s Pillar Two Directive, which generally provides for a minimum effective tax rate of 15%, as established by the Organization for Economic Co-operation and Development Pillar Two Framework that was supported by over 130 countries worldwide. The EU effective dates are January 1, 2024, and January 1, 2025, for different aspects of the directive. A significant number of countries are also implementing similar legislation. We are monitoring developments, including countries that have enacted legislation, and do not currently expect a material adverse impact to the financial statements. We will continue to evaluate Pillar Two legislation and other future tax law changes that could result in negative impacts. In addition, tax-law amendments in the U.S. and other jurisdictions could significantly impact how U.S. multinational corporations are taxed. Although we cannot predict whether or in what form such legislation will pass, if enacted it could have an adverse effect on our business and financial results.

Our tax returns and positions are subject to review and audit by federal, state, local and international taxing authorities. An unfavorable outcome to a tax audit could result in higher tax expense and could negatively impact our effective tax rate, financial position, results of operations and cash flows in the current and/or future periods. Unfavorable future tax law changes could result in negative impacts. In addition, tax-law amendments in the U.S. and other jurisdictions could significantly impact how U.S. multinational corporations are taxed. Although we cannot predict whether or in what form such legislation will pass, if enacted it could have an adverse effect on our business and financial results.

The statements contained in this Form 10-K or in our other documents or in oral presentations or other management statements that are not purely historical are forward-looking statements within the meaning of the U.S. federal securities laws. Statements that are not historical facts, as well as other statements about our expectations, beliefs, intentions, or strategies regarding the future, or other characterizations of future events or circumstances, are forward-looking statements. Forward-looking statements include statements about anticipated financial outcomes, including any earnings outlook or projections, projected revenue or expense synergies or dis-synergies, business and market conditions, outlook, foreign currency exchange rates, deleveraging plans, expected dividends and share repurchases of the Company, the Company's sales pipeline and anticipated profitability and growth, plans, strategies and objectives for future operations, strategic value creation, risk profile and investment strategies, any statements regarding future economic conditions or performance and any statements with respect to the Worldpay Sale or any agreements or arrangements entered into in connection with such transaction, the expected financial and operational results of the Company, and expectations regarding the Company's business or organization after the separation of the Worldpay Merchant Solutions business. These statements may be identified by words such as "expect," "anticipate," "intend," "plan," "believe," "will," "should," "could," "would," "project," "continue," "likely," and similar expressions, and include statements reflecting future results or outlook, statements of outlook and various accruals and estimates. These statements relate to future events and our future results and involve a number of risks and uncertainties. Forward-looking statements are based on management's beliefs as well as assumptions made by, and information currently available to, management. Actual results, performance or achievement could differ materially from these forward-looking statements. The risks and uncertainties to which forward-looking statements are subject include the following, without limitation: •changes in general economic, business and political conditions, including those resulting from COVID-19 or other pandemics, a recession, intensified or expanded international hostilities, acts of terrorism, increased rates of inflation or interest, changes in either or both the United States and international lending, capital and financial markets or currency fluctuations; 25 25 25 Table of Contents Table of Contents •the risk that acquired businesses will not be integrated successfully or that the integration will be more costly or more time-consuming and complex than anticipated; •the risk that cost savings and synergies anticipated to be realized from acquisitions may not be fully realized or may take longer to realize than expected or that costs may be greater than anticipated; •the risks of doing business internationally; •the effect of legislative initiatives or proposals, statutory changes, governmental or applicable regulations and/or changes in industry requirements, including privacy and cybersecurity laws and regulations; •the risks of reduction in revenue from the elimination of existing and potential customers due to consolidation in, or new laws or regulations affecting, the banking, retail and financial services industries or due to financial failures or other setbacks suffered by firms in those industries; •changes in the growth rates of the markets for our solutions; •the amount, declaration and payment of future dividends is at the discretion of our Board of Directors and depends on, among other things, our investment opportunities, results of operations, financial condition, cash requirements, future prospects, and other factors that may be considered relevant by our Board of Directors, including legal and contractual restrictions; •the amount and timing of any future share repurchases is subject to, among other things, our share price, our other investment opportunities and cash requirements, our results of operations and financial condition, our future prospects and other factors that may be considered relevant by our Board of Directors and management; •failures to adapt our solutions to changes in technology or in the marketplace; •internal or external security or privacy breaches of our systems, including those relating to unauthorized access, theft, corruption or loss of personal information and computer viruses and other malware affecting our software or platforms, and the reactions of customers, card associations, government regulators and others to any such events; •the risk that implementation of software, including software updates, for customers or at customer locations or employee error in monitoring our software and platforms may result in the corruption or loss of data or customer information, interruption of business operations, outages, exposure to liability claims or loss of customers; •the risk that partners and third parties may fail to satisfy their legal obligations to us; •risks associated with managing pension cost, cybersecurity issues, IT outages and data privacy; •the reaction of current and potential customers to communications from us or regulators regarding information security, risk management, internal audit or other matters; •risks associated with the expected benefits and costs of the separation of the Worldpay Merchant Solutions business, including the risk that the expected benefits of the transaction or any contingent purchase price will not be realized within the expected timeframe, in full or at all, or that dis-synergies may be greater than anticipated; •the risk that the costs of restructuring transactions and other costs incurred in connection with the separation of the Worldpay business will exceed our estimates or otherwise adversely affect our business or operations; •the impact of the separation of Worldpay on our businesses, including the impact on relationships with customers, governmental authorities, suppliers, employees and other business counterparties; •the risk that the earnings from our minority stake in the Worldpay business will be less than we anticipate; •the risk that policies and resulting actions of the current administration in the U.S. may result in additional regulations and executive orders, as well as additional regulatory and tax costs; •competitive pressures on pricing related to the decreasing number of community banks in the U.S., the development of new disruptive technologies competing with one or more of our solutions, increasing presence of international competitors in the U.S. market and the entry into the market by global banks and global companies with respect to certain competitive solutions, each of which may have the impact of unbundling individual solutions from a comprehensive suite of solutions we provide to many of our customers; •the failure to innovate in order to keep up with new emerging technologies, which could impact our solutions and our ability to attract new, or retain existing, customers; •an operational or natural disaster at one of our major operations centers; •failure to comply with applicable requirements of payment networks or changes in those requirements; •fraud by bad actors; and •other risks detailed elsewhere in the "Risk Factors" section and other sections of this report and in our other filings with the SEC. Other unknown or unpredictable factors also could have a material adverse effect on our business, financial condition, results of operations and prospects. Accordingly, readers should not place undue reliance on these forward-looking statements. These forward-looking statements are inherently subject to uncertainties, risks and changes in circumstances that are difficult to predict. Except as required by applicable law or regulation, we do not undertake (and expressly disclaim) any obligation and do not intend to publicly update or review any of these forward-looking statements, whether as a result of new information, future events or otherwise. 26 26 26 Table of Contents Table of Contents

The statements contained in this Form 10-K or in our other documents or in oral presentations or other management statements that are not purely historical are forward-looking statements within the meaning of the U.S. federal securities laws. Statements that are not historical facts, including statements about anticipated financial outcomes, including any earnings guidance or projections, projected revenue or expense synergies or dis-synergies, business and market conditions, outlook, foreign currency exchange rates, deleveraging plans, expected dividends and share repurchases of the Company and, following the proposed spin-off, of the Merchant Solutions business, the Company's and the Merchant Solutions business' sales pipeline and anticipated profitability and growth, the outcome of our previously announced comprehensive assessment, as well as other statements about our expectations, beliefs, intentions, or strategies regarding the future, or other characterizations of future events or circumstances, including statements with respect to certain assumptions and strategies of the Company and the Merchant Solutions business following the proposed spin-off, the anticipated benefits of the spin-off, and the expected timing of completion of the spin-off are forward-looking statements. These statements may be identified by words such as "expect," "anticipate," "intend," "plan," "believe," "will," "should," "could," "would," "project," continue," "likely," and similar expressions, and include statements reflecting future results or guidance, statements of outlook and various accruals and estimates. These statements relate to future events and our future results and involve a number of risks and uncertainties. In addition, the amount of the goodwill impairment charge described elsewhere in this Form 10-K is based in part on estimates of future performance, so such disclosures should also be considered a forward-looking statement. Forward-looking statements are based on management's beliefs as well as assumptions made by, and information currently available to, management. Actual results, performance or achievement could differ materially from these forward-looking statements. The risks and uncertainties to which forward-looking statements are subject include the following, without limitation: •changes in general economic, business and political conditions, including those resulting from COVID-19 or other pandemics, a recession, intensified international hostilities, including the Russia-Ukraine war, acts of terrorism, increased rates of inflation or interest, changes in either or both the United States and international lending, capital and financial markets or currency fluctuations; •the risk of losses in the event of defaults by merchants (or other parties) to which we extend credit in our card settlement operations or in respect of any chargeback liability, either of which could adversely impact liquidity and results of operations; •the risk that acquired businesses will not be integrated successfully or that the integration will be more costly or more time-consuming and complex than anticipated; •the risk that cost savings and synergies anticipated to be realized from acquisitions may not be fully realized or may take longer to realize than expected; 27 27 27 Table of Contents Table of Contents •the risks of doing business internationally; •the effect of legislative initiatives or proposals, statutory changes, governmental or applicable regulations and/or changes in industry requirements, including privacy and cybersecurity laws and regulations; •the risks of reduction in revenue from the elimination of existing and potential customers due to consolidation in, or new laws or regulations affecting, the banking, retail and financial services industries or due to financial failures or other setbacks suffered by firms in those industries; •changes in the growth rates of the markets for our solutions; •the amount, declaration and payment of future dividends is at the discretion of our Board of Directors and depends on, among other things, our investment opportunities, results of operations, financial condition, cash requirements, future prospects, and other factors that may be considered relevant by our Board of Directors, including legal and contractual restrictions; •the amount and timing of any future share repurchases is subject to, among other things, our share price, our other investment opportunities and cash requirements, our results of operations and financial condition, our future prospects and other factors that may be considered relevant by our Board of Directors and management; •failures to adapt our solutions to changes in technology or in the marketplace; •internal or external security breaches of our systems, including those relating to unauthorized access, theft, corruption or loss of personal information and computer viruses and other malware affecting our software or platforms, and the reactions of customers, card associations, government regulators and others to any such events; •the risk that implementation of software, including software updates, for customers or at customer locations or employee error in monitoring our software and platforms may result in the corruption or loss of data or customer information, interruption of business operations, outages, exposure to liability claims or loss of customers; •uncertainties as to the timing of the potential separation of the Merchant Solutions business or whether it will be completed; •risks associated with the impact, timing or terms of the proposed spin-off; •risks associated with the expected benefits and costs of the proposed spin-off, including the risk that the expected benefits of the proposed spin-off will not be realized within the expected timeframe, in full or at all, and the risk that conditions to the proposed spin-off will not be satisfied and/or that the proposed spin-off will not be completed within the expected timeframe, on the expected terms or at all; •the expected qualification of the proposed spin-off as a tax-free transaction for U.S. federal income tax purposes, including whether or not an IRS ruling will be obtained; •the risk that any consents or approvals required in connection with the proposed spin-off will not be received or obtained within the expected timeframe, on the expected terms or at all; •risks associated with expected financing transactions undertaken in connection with the proposed spin-off and risks associated with indebtedness incurred in connection with the proposed spin-off, including the potential inability to access or reduced access to the capital markets or increased cost of borrowings, including as a result of a credit rating downgrade; •the risk that dis-synergy costs, costs of restructuring transactions and other costs incurred in connection with the proposed spin-off will exceed our estimates or otherwise adversely affect our business or operations; •the impact of the proposed spin-off on our businesses and the risk that the proposed spin-off may be more difficult, time-consuming or costly than expected, including the impact on our resources, systems, procedures and controls, diversion of management’s attention and the impact on relationships with customers, governmental authorities, suppliers, employees and other business counterparties; •the reaction of current and potential customers to communications from us or regulators regarding information security, risk management, internal audit or other matters; •the risk that policies and resulting actions of the current administration in the U.S. may result in additional regulations and executive orders, as well as additional regulatory and tax costs; •competitive pressures on pricing related to the decreasing number of community banks in the U.S., the development of new disruptive technologies competing with one or more of our solutions, increasing presence of international competitors in the U.S. market and the entry into the market by global banks and global companies with respect to certain competitive solutions, each of which may have the impact of unbundling individual solutions from a comprehensive suite of solutions we provide to many of our customers; •the failure to innovate in order to keep up with new emerging technologies, which could impact our solutions and our ability to attract new, or retain existing, customers; •an operational or natural disaster at one of our major operations centers; •failure to comply with applicable requirements of payment networks or changes in those requirements; •fraud by merchants or bad actors; and •other risks detailed elsewhere in the "Risk Factors" section and other sections of this report and in our other filings with the SEC. 28 28 28 Table of Contents Table of Contents Other unknown or unpredictable factors also could have a material adverse effect on our business, financial condition, results of operations and prospects. Accordingly, readers should not place undue reliance on these forward-looking statements. These forward-looking statements are inherently subject to uncertainties, risks and changes in circumstances that are difficult to predict. Except as required by applicable law or regulation, we do not undertake (and expressly disclaim) any obligation and do not intend to publicly update or review any of these forward-looking statements, whether as a result of new information, future events or otherwise.

We are unable to predict whether or when high profile digital banking security breaches will occur and if they occur, whether consumers will reduce their digital banking service. If consumers reduce digital banking services, and we are not able to adapt to offer our clients alternative technologies, then our revenue and related earnings could be adversely affected.

We are unable to predict whether or when high profile card payment or digital banking security breaches will occur and if they occur, whether consumers will transact less on their payment cards or reduce their digital banking service. If consumers transact less on cards issued by our clients or reduce digital banking services, and we are not able to adapt to offer our clients alternative technologies, then our revenue and related earnings could be adversely affected.

The market for our solutions is intensely competitive. Our competitors in Banking and Capital Markets vary in size and in the scope and breadth of the solutions and services they offer. Some of our competitors have substantial resources. We face direct competition from third parties, and because many of our larger potential clients have historically developed their key applications in-house and therefore view their system requirements from a make-versus-buy perspective, we also often compete against our potential clients' in-house capacities. In addition, the markets in which we compete have recently attracted increasing competition from smaller start-ups with emerging technologies which are receiving increasing investments as well as global banks (and businesses controlled by combinations of global banks) and global internet companies that are introducing competitive solutions and services into the marketplace, particularly in the payments area. Emerging technologies and increased competition may also have the effect of unbundling bank solutions and result in displacing solutions we are currently providing from our legacy systems. International competitors are also now targeting and entering the U.S. market with greater force. There can be no assurance that we will be able to compete successfully against current or future competitors or that the 13 13 13 Table of Contents Table of Contents competitive pressures we face in the markets in which we operate will not materially adversely affect our business, financial condition, or results of operations.

The market for our solutions is intensely competitive. Our competitors in Banking and Capital Markets vary in size and in the scope and breadth of the solutions and services they offer. Some of our competitors have substantial resources. We face direct competition from third parties, and because many of our larger potential clients have historically developed their key applications in-house and therefore view their system requirements from a make-versus-buy perspective, we also often compete against our potential clients' in-house capacities. In addition, the markets in which we compete have recently attracted increasing competition from smaller start-ups with emerging technologies which are receiving increasing investments as well as global banks (and businesses controlled by combinations of global banks) and global internet companies that are introducing competitive solutions and services into the marketplace, particularly in the payments area. Emerging technologies and increased competition may also have the effect of unbundling bank solutions and result in displacing solutions we are currently providing from our legacy systems. International competitors are also now targeting and entering the U.S. market with greater force. There can be no assurance that we will be able to compete successfully against current or future competitors or that the competitive pressures we face in the markets in which we operate will not materially adversely affect our business, financial condition, and results of operations. In the Merchant business, our competitors include financial institutions and well-established payment processing companies. In this business, our U.S. competitors that are financial institutions or are affiliated with financial institutions may not incur the sponsorship costs we incur for registration with the payment networks. Accordingly, these competitors may be able to offer more attractive fees to our current and prospective clients or other services that we do not provide. Competition could result in a loss of existing clients and greater difficulty attracting new clients. Furthermore, if competition causes us to reduce the fees we charge in order to attract or retain clients, there is no assurance we can successfully control our costs in order to maintain our profit margins. One or more of these factors could have a material adverse effect on FIS' business, financial condition and results of operations. As the Merchant industry fragments into new non-traditional payment and asset types, siloed expertise, new geographies and different markets, our competitors in this segment are increasing in number and type. FIS is currently facing new competitive pressure from non-traditional payment processors, including payment facilitators and other embedded payment solution providers, which has had and is expected to continue to have an adverse effect on our Merchant revenue and margins in 2023, as well as from other parties entering the payments industry, which may compete in one or more of these areas. These competitors have significant financial resources and robust networks and are highly regarded by consumers. If these competitors gain a greater share of total electronic payments transactions, or if we are unable to successfully react to changes in the industry spurred by the entry of these new market participants or to allocate sufficient capital to enable our Merchant business to successfully make acquisitions and pursue growth plans in response to industry changes, then it could have a further material adverse effect on FIS' business, financial condition and results of operations. For more detail, see "Item 1. Business, Competition."

Cybersecurity is fundamental to FIS' complex, global business. FIS and its vendors and technology partners electronically receive, process, store and transmit sensitive and confidential information of FIS' clients, such clients' customers and business partners. FIS collects consumer personal data, such as names and addresses, Social Security Numbers, driver’s license numbers, financial account numbers, transactional history, cardholder data and payment history records. Such information is necessary to support our clients' transaction processing and to conduct our check authorization and collection businesses. Our information systems are dependent upon hardware, software, and other technological components that are both developed by FIS and provided by third parties. These components sometimes require patches, updates, or remediation of known or potential vulnerabilities. Implementation challenges in timely completing these tasks can lead to security vulnerabilities that expose FIS, its systems and data to potential compromise or interruption. The uninterrupted operation of information systems operated by FIS and others, as well as the confidentiality of the customer/consumer information that resides on such systems, is critical to the successful operation of FIS. For that reason, security or privacy breaches are some of the principal operational risks FIS faces as a provider of services to financial institutions and businesses, and, like other such providers, FIS is a regular target of third-party attempts to identify and exploit system vulnerabilities and/or penetrate or bypass our security measures in order to gain unauthorized access to our networks and systems. If FIS fails to maintain an adequate security infrastructure, adapt to emerging security threats (such as the use of artificial intelligence by threat actors in furtherance of cyber attacks), identify security vulnerabilities, prevent unauthorized access, identity theft or other cybersecurity risks (e.g., distributed denial of service, ransomware, and other cyber attacks), manage vendor or supply chain cybersecurity risks, or implement sufficient security standards and technology to protect against security or privacy breaches, the confidentiality of the information FIS 12 12 12 Table of Contents Table of Contents secures could be compromised. Unauthorized access to or abuse of authorized access to the computer systems or databases of FIS or our vendors could result in the theft or publication of confidential information and personal data, the deletion or modification of records, disruption of service delivery, installation of malware, and the potential need to pay ransom, or otherwise cause interruptions in FIS’ operations. These issues in turn could give rise to legal actions from clients and/or such clients' customers, regulatory investigation or enforcement activity, losses and expenses associated with such events, and damage to FIS' reputation. Because FIS serves a diverse client base with different technology and service needs, we must continue to work to enhance our ability to manage the risks from the resulting diversity in potential security attacks. As a provider of services to financial institutions and businesses, FIS is bound by many of the same limitations on disclosure of the information FIS receives from clients as apply to the clients themselves. If FIS fails to comply with these regulations and industry security requirements, including those imposed by the payment card industry through its digital security standards and other rules, it could be exposed to damages from legal actions from clients and/or their customers, governmental proceedings, governmental notice requirements, and the imposition of significant fines or prohibitions on providing services. FIS is a highly regulated entity and is subject to a myriad of complex, evolving regulations and standards, including cybersecurity and privacy laws, regulations and industry standards. In addition, if more restrictive privacy laws, data protection rules or industry security requirements are adopted in the future on the federal or state level, or by a non-U.S. jurisdiction in or from which we serve clients, or by a specific industry body, those changes could have an adverse impact on FIS through increased costs or by imposing changes or inefficiencies on business processes. A material privacy or security incident may trigger SEC disclosure obligations, other applicable disclosure requirements, or be disclosed publicly even if there is no legally required disclosure. Incident disclosure may increase the risks of lawsuits or government enforcement action related to incidents, increase attention to malicious actors, and lead to greater regulatory scrutiny more generally. The occurrence of any such incidents, and the related responses (if any) by regulators or third parties, may result in adverse publicity and reputational harm to us. If FIS is unable, or appears to be unable, to prevent cybersecurity or privacy breaches, we risk reputational damage. Our existing clients could lose confidence in FIS' systems and thus choose to terminate their agreements with FIS. Such reputational harm could also inhibit FIS' ability to attract new clients; potentially increase government, regulatory, or media scrutiny; or give rise to new regulatory requirements that adversely affect FIS' ability to do business in one or more parts of the world.

Cybersecuity is fundamental to FIS' global, complex business. FIS electronically receives, processes, stores and transmits sensitive business information of its clients. In addition, FIS collects personal consumer data, such as names and addresses, social security numbers, driver's license numbers, cardholder data and payment history records. Such information is necessary to support our clients' transaction processing and to conduct our check authorization and collection businesses. The uninterrupted operation of information systems, as well as the confidentiality of the customer/consumer information that resides on such systems, is critical to the successful operation of FIS. For that reason, cybersecurity is one of the principal operational risks FIS faces as a provider of services to financial institutions. If FIS fails to maintain an adequate security infrastructure, adapt to emerging security threats, or implement sufficient security standards and technology to protect against security breaches, the confidentiality of the information FIS secures could be compromised. Unauthorized access to the computer systems or databases of FIS could result in the theft or publication of confidential information, the deletion or modification of records, damages from legal actions from clients and/or their customers, or otherwise cause interruptions in FIS' operations and damage to its reputation. These risks are greater with increased information transmission over the internet, the increasing level of sophistication posed by cyber criminals, nation state-sponsored cyber attacks and the integration of FIS systems with those of acquired companies. As a provider of services to financial institutions and a provider of card processing services, FIS is bound by the same limitations on disclosure of the information FIS receives from clients as apply to the clients themselves. If FIS fails to comply with these regulations and industry security requirements, it could be exposed to damages from legal actions from clients and/or their customers, governmental proceedings, governmental notice requirements, and the imposition of significant fines or prohibitions on card processing services. FIS is a highly regulated entity and is subject to a myriad of complex, evolving regulations, including cybersecurity regulations. In addition, if more restrictive privacy laws, rules or industry security requirements are adopted in the future on the federal or state level, or by a specific industry body, they could have an adverse impact on FIS through increased costs or restrictions on business processes. Any inability to prevent security or privacy breaches, or the perception that such breaches may occur, could cause existing clients to lose confidence in FIS' systems and terminate their agreements with FIS, inhibit FIS' ability to attract new clients, result in increasing regulation, or bring about other adverse consequences from the government agencies that regulate FIS.