LDOS: 10-K Risk Factor Changes

From time to time, we pursue strategic acquisitions, investments and joint ventures. We also may enter into relationships with other businesses to expand our products or our ability to provide services. Any such transactions will depend in part upon the continued availability of targets or potential partners on favorable terms. These transactions require a significant investment of time and resources and may disrupt our business and distract our management from other responsibilities. Even if successful, these transactions could result in unfavorable public perception or reduce earnings for a number of reasons, including the amortization of intangible assets, impairment charges, adverse tax consequences, acquired operations that are not yet profitable, or the payment of additional consideration under earn-out arrangements if an acquisition performs better than expected. In addition, significant acquisitions, investments and joint ventures can be complex, costly and time-consuming. Acquisitions, investments and joint ventures pose many other risks that could adversely affect our reputation, operations, or financial results, including that: 30Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I uwe may not be able to identify, compete effectively for or complete suitable acquisitions and investments at prices we consider attractive; uwe may not be able to accurately estimate the financial effect of acquisitions and investments on our business or realize anticipated synergies, business growth, or profitability and may be unable to recover investments in any such acquisitions and investments; uwe may not be able to manage the integration process for acquisitions successfully, and the integration process may divert management time and focus from operating our business, including as a result of incompatible accounting, information management, or other control systems; uacquired technologies, capabilities, products, and service offerings, particularly those that are still in development when acquired, may not perform as expected, may have defects or may not be integrated into our business as expected; uwe may have trouble retaining key employees and customers of an acquired business; uwe may need to implement or improve controls, procedures and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies, including those relating to financial reporting, revenue recognition or other financial or control deficiencies; uwe may assume legal or regulatory risks, particularly with respect to smaller businesses that have immature business processes and compliance programs, or may be required to comply with additional laws and regulations or to engage in remediation efforts to cause the acquired company to comply with applicable laws and regulations, or result in liabilities resulting from the acquired company’s failure to comply with applicable laws or regulations; uwe may face litigation or material liabilities that were not identified or were underestimated as part of our due diligence or for which we are unable to receive a purchase price adjustment or reimbursement through indemnification, including intellectual property claims and disputes or claims from terminated employees, customers, former stockholders or other third parties, or there may be other unanticipated write-offs or charges; uwe may be required to spend a significant amount of cash or to incur debt, resulting in limitations on other potential uses for cash, increased fixed payment obligations or covenants or other restrictions on us, or issue shares of our common stock or convertible debt, resulting in dilution of ownership; uwe may not be able to influence the operations of our joint ventures effectively, or we may be exposed to certain liabilities if our joint venture partners do not fulfill their obligations; and uif our acquisitions, investments, or joint ventures fail, perform poorly, or their value is otherwise impaired for any reason, including contractions in credit markets and global economic conditions, our business and financial results could be adversely affected. In addition, we periodically divest businesses, including businesses that are no longer a part of our ongoing strategic plan. These divestitures similarly require a significant investment of time and resources, may disrupt our business, distract management from other responsibilities and may result in losses on disposal or continued financial involvement in the divested business, including through indemnification, guarantee or other financial arrangements, for a period of time following the transaction, which would adversely affect our financial results.

From time to time, we pursue strategic acquisitions, investments and joint ventures. We also may enter into relationships with other businesses to expand our products or our ability to provide services. These transactions require a significant investment of time and resources and may disrupt our business and distract our management from other responsibilities. Even if successful, these transactions could result in unfavorable public perception or reduce earnings for a number of reasons, including the amortization of intangible assets, impairment charges, adverse tax consequences, acquired operations that are not yet profitable, or the payment of additional consideration under earn-out arrangements if an acquisition performs better than expected. Acquisitions, investments and joint ventures pose many other risks that could adversely affect our reputation, operations, or financial results, including that: uwe may not be able to identify, compete effectively for or complete suitable acquisitions and investments at prices we consider attractive; uwe may not be able to accurately estimate the financial effect of acquisitions and investments on our business or realize anticipated synergies, business growth, or profitability and may be unable to recover investments in any such acquisitions and investments; uwe may not be able to manage the integration process for acquisitions successfully, and the integration process may divert management time and focus from operating our business, including as a result of incompatible accounting, information management, or other control systems; uacquired technologies, capabilities, products, and service offerings, particularly those that are still in development when acquired, may not perform as expected, may have defects or may not be integrated into our business as expected; uwe may have trouble retaining key employees and customers of an acquired business; uwe may need to implement or improve controls, procedures and policies at a business that prior to the acquisition may have lacked sufficiently effective controls, procedures and policies, including those relating to financial reporting, revenue recognition or other financial or control deficiencies; uwe may assume legal or regulatory risks, particularly with respect to smaller businesses that have immature business processes and compliance programs, or may be required to comply with additional laws and regulations or to engage in remediation efforts to cause the acquired company to comply with applicable laws and regulations, or result in liabilities resulting from the acquired company’s failure to comply with applicable laws or regulations; uwe may face litigation or material liabilities that were not identified or were underestimated as part of our due diligence or for which we are unable to receive a purchase price adjustment or reimbursement through indemnification, including intellectual property claims and disputes or claims from terminated employees, customers, former stockholders or other third parties, or there may be other unanticipated write-offs or charges; uwe may be required to spend a significant amount of cash or to incur debt, resulting in limitations on other potential uses for cash, increased fixed payment obligations or covenants or other restrictions on us, or issue shares of our common stock or convertible debt, resulting in dilution of ownership; uwe may not be able to influence the operations of our joint ventures effectively, or we may be exposed to certain liabilities if our joint venture partners do not fulfill their obligations; and uif our acquisitions, investments, or joint ventures fail, perform poorly, or their value is otherwise impaired for any reason, including contractions in credit markets and global economic conditions, our business and financial results could be adversely affected. In addition, we periodically divest businesses, including businesses that are no longer a part of our ongoing strategic plan. These divestitures similarly require a significant investment of time and resources, may disrupt our business, distract management from other responsibilities and may result in losses on disposal or continued financial involvement in the divested business, including through indemnification, guarantee or other financial arrangements, for a period of time following the transaction, which would adversely affect our financial results.

We must comply with laws and regulations relating to the formation, administration and performance of U.S. government contracts, which affect how we do business with our customers. Such laws and regulations may impose added costs on our business and our failure to comply with them may lead to civil or criminal penalties, termination of our U.S. government contracts, or suspension or debarment from contracting with federal agencies. For additional background on the regulations that apply to our business and the related compliance risks, see “Regulation” within Item 1 of this Annual Report on Form 10-K and the risk factor “Our business is subject to governmental review and investigation, which could adversely affect our financial position, operating results and growth prospects.” Government contract laws and regulations can impose terms or obligations that are different than those typically found in commercial transactions. One of the significant differences is that the U.S. Government may terminate any of our government contracts, not only for default based on our performance but also at its convenience. Generally, prime contractors have a similar right under subcontracts related to government contracts. If a contract is terminated for convenience, we typically would be entitled to receive payments for our allowable costs incurred and the proportionate share of fees or earnings for the work performed, but we would receive no payment or other consideration for the loss of revenue or profit associated with the future work that was cancelled. If a contract is terminated for default, the U.S. Government could seek the return of any amounts previously paid to us under the contract and also seek to recover from us any added costs for having another contractor complete the work, exposing us to liability and adversely affecting our ability to compete for future contracts and orders. In addition, the U.S. Government could terminate a prime contract under which we are a subcontractor, notwithstanding the fact that our performance and the quality of the products or services we delivered were consistent with our contractual obligations as a subcontractor. Similarly, the U.S. Government could indirectly terminate a program or contract by not funding it, or by reducing the amount of funding previously obligated to the program or contract. The decision to terminate programs or contracts for convenience or default could adversely affect our business and future financial performance. In addition, proposed comprehensive reforms to the Federal Acquisition Regulations, including those contemplated under Executive Order 14275, “Restoring Common Sense to Federal Procurement,” issued on April 15, 2025, could create uncertainty in our contracting environment and impact our business. These reforms may result in changes to procurement processes, evaluation criteria, cost allowability, compliance obligations, or reporting requirements that could increase our administrative burden and operating costs. Transition period or inconsistencies in the implementation of new rules may delay contract awards, complicate bid strategies, or require modifications to existing contracting practices. In addition, to the extent the proposed reforms ultimately expand the ability of commercial firms to compete for defense and other federal contracts, we may face heightened competition from new market entrants with different cost structures, procurement models, or technological approach, which could pressure our pricing, reduce our win rates, or erode our market share. If we are unable to adapt efficiently to revised federal procurement requirements, our competitiveness, performance under existing contracts, and financial results could be adversely affected. The Company continues to evaluate the potential impact for any proposed or contemplated reforms. 20Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

We must comply with laws and regulations relating to the formation, administration and performance of U.S. government contracts, which affect how we do business with our customers. Such laws and regulations may impose added costs on our business and our failure to comply with them may lead to civil or criminal penalties, termination of our U.S. government contracts, or suspension or debarment from contracting with federal agencies. For additional background on the regulations that apply to our business and the related compliance risks, see “Regulation” within Item 1 of this Annual Report on Form 10-K and the risk factor “Our business is subject to governmental review and investigation, which could adversely affect our financial position, operating results and growth prospects.” 20Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report 20Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report 20 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I Government contract laws and regulations can impose terms or obligations that are different than those typically found in commercial transactions. One of the significant differences is that the U.S. Government may terminate any of our government contracts, not only for default based on our performance but also at its convenience. Generally, prime contractors have a similar right under subcontracts related to government contracts. If a contract is terminated for convenience, we typically would be entitled to receive payments for our allowable costs incurred and the proportionate share of fees or earnings for the work performed, but we would receive no payment or other consideration for the loss of revenue or profit associated with the future work that was cancelled. If a contract is terminated for default, the U.S. Government could seek the return of any amounts previously paid to us under the contract and also seek to recover from us any added costs for having another contractor complete the work, exposing us to liability and adversely affecting our ability to compete for future contracts and orders. In addition, the U.S. Government could terminate a prime contract under which we are a subcontractor, notwithstanding the fact that our performance and the quality of the products or services we delivered were consistent with our contractual obligations as a subcontractor. Similarly, the U.S. Government could indirectly terminate a program or contract by not funding it, or by reducing the amount of funding previously obligated to the program or contract. The decision to terminate programs or contracts for convenience or default could adversely affect our business and future financial performance.

We are subject to income taxes in the U.S. and numerous foreign jurisdictions. Changes in U.S. (federal or state) or foreign tax laws and regulations, or their interpretation and application, including those with retroactive effect, could result in increases to our tax expense and adversely affect our financial results. On July 4, 2025, H.R.1 Reconciliation Act, commonly referred to as the One Big Beautiful Bill Act ("OBBBA") was enacted. The OBBBA includes significant provisions, such as the permanent extension of certain expiring provisions of the Tax Cuts and Jobs Act, modifications to the international tax framework and the restoration of favorable tax treatment for certain business deductions. The legislation has multiple effective dates, with certain provisions effective in 2025 and others implemented through 2027. The OBBBA had a material impact on our consolidated financial statements for fiscal 2025. See “Liquidity and Capital Resources” in “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” contained within this Annual Report on Form 10-K for additional information on the impact of this change. Significant judgment is required in determining our worldwide provision for income taxes. In the ordinary course of our business, there are many transactions and calculations where the ultimate tax determination is uncertain. We are regularly under audit by tax authorities. Although we believe that our tax estimates and tax positions are reasonable, they could be materially affected by many factors, including the final outcome of tax audits and related litigation, the introduction of new tax accounting standards, legislation, regulations, and related interpretations, our global mix of earnings, the realizability of deferred tax assets and changes in uncertain tax positions. An increase or decrease in our effective tax rate, or an ultimate determination that we owe more taxes than the amounts previously accrued, could have a material adverse impact on our financial condition and results of operations.

We are subject to income taxes in the U.S. and numerous foreign jurisdictions. Changes in U.S. (federal or state) or foreign tax laws and regulations, or their interpretation and application, including those with retroactive effect, could result in increases in our tax expense and adversely affect our financial results. See “Liquidity and Capital Resources” in “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations” contained within this Annual Report on Form 10-K for additional information on the impact of this change. Significant judgment is required in determining our worldwide provision for income taxes. In the ordinary course of our business, there are many transactions and calculations where the ultimate tax determination is uncertain. We are regularly under audit by tax authorities. Although we believe that our tax estimates and tax positions are reasonable, they could be materially affected by many factors, including the final outcome of tax audits and related litigation, the introduction of new tax accounting standards, legislation, regulations, and related interpretations, our global mix of earnings, the realizability of deferred tax assets and changes in uncertain tax positions. An increase or decrease in our effective tax rate, or an ultimate determination that we owe more taxes than the amounts previously accrued, could have a material adverse impact on our financial condition and results of operations.

Many of the U.S. government programs in which we participate as a contractor or subcontractor extend for several years and include one or more base years and one or more option years. These programs are typically funded on an annual basis. Under our contracts, the U.S. government generally has the right not to exercise options to extend or expand our contracts and may otherwise terminate, cancel, modify or curtail our contracts at its convenience. Any decisions by the U.S. government to not exercise contract options or to terminate, cancel, modify, renew on less favorable terms or curtail our major programs or contracts would adversely affect our revenues, revenue growth and profitability. For example, as a result of the executive order titled "Prioritizing the Warfighter in Defense Contracting,” future contracts (including renewals) are expected to include provisions restricting stock buybacks and dividends during any period of underperformance, and restricting executive incentive compensation in a manner that is contingent on certain specified criteria, including on-time delivery of projects, increased production, and the facilitation of certain domestic investments and operating improvements. In addition, we have experienced performance issues under certain of our contracts. Some of our contracts involve developing complex systems and products to achieve challenging customer goals in a competitive procurement environment. As a result, we sometimes experience technological, schedule or other performance difficulties, which have in the past and may in the future result in delays, cost overruns and failures in our performance of these contracts. If a government customer terminates a contract for default, we may be exposed to liability, including for excess costs incurred by the customer in procuring undelivered services and products from another source. In addition, if the Secretary of War were to determine that any such delays, cost overruns or failures in our performance constitutes underperformance on our contract, we would be required to submit a remediation plan approved by our board within 15 days of such determination, and if such plan is determined to be insufficient or we are not otherwise able to remediate any such underperformance we could be subject to remedies from the Secretary of War including certain enforcement actions. Depending on the nature and value of the contract, a performance issue or termination for default could cause our actual results to differ from those anticipated and could harm our reputation.

Many of the U.S. government programs in which we participate as a contractor or subcontractor extend for several years and include one or more base years and one or more option years. These programs are typically funded on an annual basis. Under our contracts, the U.S. government generally has the right not to exercise options to extend or expand our contracts and may otherwise terminate, cancel, modify or curtail our contracts at its convenience. Any decisions by the U.S. government to not exercise contract options or to terminate, cancel, modify, renew on less favorable terms or curtail our major programs or contracts would adversely affect our revenues, revenue growth and profitability. In addition, we have experienced performance issues under certain of our contracts. Some of our contracts involve developing complex systems and products to achieve challenging customer goals in a competitive procurement environment. As a result, we sometimes experience technological, schedule or other performance difficulties, which have in the past and may in the future result in delays, cost overruns and failures in our performance of these contracts. If a government customer terminates a contract for default, we may be exposed to liability, including for excess costs incurred by the customer in procuring undelivered services and products from another source. Depending on the nature and value of the contract, a performance issue or termination for default could cause our actual results to differ from those anticipated and could harm our reputation.

35 Table of ContentsPART I Table of Contents PART I Table of Contents PART I

33 Table of ContentsPART I Table of Contents PART I Table of Contents PART I

As a government contractor and a provider of information technology services operating in multiple regulated industries and geographies, we and our service providers, suppliers and subcontractors collect, store, transmit, and otherwise process personal, confidential, proprietary, and sensitive information, including protected health information, personnel information, personal information, classified information, controlled unclassified information, intellectual property and financial information, concerning our business, employees, and customers. Therefore, we are continuously exposed to unauthorized attempts to compromise access, release or otherwise compromise such information through cyber-attacks and other 26Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I information security threats, including, among other things, physical break-ins, theft, denial-of-service attacks, worms, computer viruses, software bugs, malicious or destructive code, social engineering, phishing attacks and impersonating authorized users, credential stuffing, account takeovers, insider threats, malfeasance or improper access by employees or service providers, human error, fraud, use of AI, “bots” or other automation software, or other similar disruptions. We are also exposed to hackers who have requested “ransom” in exchange for not disclosing information or restoring access to information or systems. These techniques may be perpetrated by internal bad actors, such as employees or contractors, or by third parties (including traditional computer hackers, persons involved with well-funded organized crime or state-sponsored actors). Any electronic or physical break-in or other security breach or compromise of our information technology systems and networks or facilities, or those of our service providers, suppliers, joint ventures or subcontractors, may jeopardize the confidentiality, integrity or availability of information, including personal, confidential, proprietary or sensitive information, stored or transmitted through these systems and networks or stored in those facilities. This could lead to disruptions in mission-critical systems, unauthorized access to or release of personal, confidential, proprietary, sensitive or otherwise protected information and corruption of data or systems. We could also be subject to operational downtimes, delays and other detrimental impacts on our operations or ability to provide products and services to our customers. We are also increasingly subject to customer-driven cybersecurity certification requirements, including but not limited to CMMC, which are expected to be necessary to win future contracts. Security incidents could also result in liability, trigger other obligations under such contracts, or increase the difficulty of winning future contracts. Many statutory requirements, both in the U.S. and abroad, also include different obligations for companies to provide notice of information security incidents involving certain types of information (including obligations to notify affected individuals and regulators in the event of cybersecurity breaches involving certain personal information), which could result from breaches of our service providers, our suppliers or subcontractors. Although we have implemented policies, procedures and controls designed to protect against, detect and mitigate these threats and attacks, we and our service providers, suppliers, joint ventures, and subcontractors have faced and continue to face advanced and persistent attacks on our and their information systems. We cannot guarantee that future incidents will not occur, and if an incident does occur, our incident response planning may not prove fully adequate. We may also not be able to mitigate its impacts successfully. Techniques used by others to gain unauthorized access to personal, confidential, proprietary, or sensitive information or disrupt systems and networks for economic or strategic gain are constantly evolving, increasingly sophisticated, increasingly difficult to detect and successfully defend against and may see their frequency increased, and effectiveness enhanced, by the use of AI. Further, cybersecurity risks may be heightened as a result of ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries, or the ongoing conflict in the Middle East, which continues to expand. We do not control our service providers and our ability to monitor their cybersecurity is limited, so we cannot ensure the cybersecurity measures they take will be sufficient to protect any information we share with them. Due to applicable laws and regulations or contractual obligations, we may be held accountable for cybersecurity breaches or other information security incidents attributed to our service providers as they relate to the information we share with them. We seek to detect and investigate all information security incidents and to prevent their occurrence, prolongation, or recurrence. We continue to invest in and improve our threat protection, detection and mitigation policies, procedures and controls. In addition, we work with other companies in the industry and government participants on increased awareness and enhanced protections against information security and malicious insider threats. However, because of the evolving nature and sophistication of these security threats, which can be difficult to detect, there can be no assurance that our policies, procedures and controls, or those of our service providers, suppliers, or subcontractors, have protected against, detected, mitigated or will detect, prevent or mitigate, any of these threats and we cannot predict the full impact of any such past or future incident. We may be currently unaware of certain vulnerabilities or lack the capability to detect them, which may allow them to persist in our information technology environment over long periods, and, even if discovered, it could take considerable time for us to obtain full and reliable information about the extent, amount and type of information compromised, and our remediation efforts may not be completely successful. As cybersecurity threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate or remediate any information security vulnerabilities, cybersecurity breaches or other information security incidents. We may also experience similar security threats to the information technology systems we develop, install, or maintain under customer contracts. Although we work cooperatively with our customers and other business partners, including our service providers, suppliers, and subcontractors, to seek to minimize the potential for and impact of cyber-attacks and other security threats, we must rely on the safeguards put in place by those entities. See also the risk factor “Internal system or service failures, or failures in the systems or services of third parties on which we rely, could disrupt our business and impair our

As a government contractor and a provider of information technology services operating in multiple regulated industries and geographies, we and our service providers, suppliers and subcontractors collect, store, transmit, and otherwise process personal, confidential, proprietary, and sensitive information, including protected health information, personnel information, personal information, classified information, controlled unclassified information, intellectual property and financial information, concerning our business, employees, and customers. Therefore, we are continuously exposed to unauthorized attempts to compromise access, release or otherwise compromise such information through cyber-attacks and other information security threats, including, among other things, physical break-ins, theft, denial-of-service attacks, worms, computer viruses, software bugs, malicious or destructive code, social engineering, phishing attacks and impersonating authorized users, credential stuffing, account takeovers, insider threats, malfeasance or improper access by employees or service providers, human error, fraud, use of AI, “bots” or other automation software, or other similar disruptions. We are also exposed to hackers who have requested “ransom” in exchange for not disclosing information or restoring access to information or systems. These techniques may be perpetrated by internal bad actors, such as employees or contractors, or by third parties (including traditional computer hackers, persons involved with well-funded organized crime or state-sponsored actors). Any electronic or physical break-in or other security breach or compromise of our information technology systems and networks or facilities, or those of our service providers, suppliers, joint ventures or subcontractors, may jeopardize the confidentiality, integrity or availability of information, including personal, confidential, proprietary or sensitive information, stored or transmitted through these systems and networks or stored in those facilities. This could lead to disruptions in mission-critical systems, unauthorized access to or release of personal, confidential, proprietary, sensitive or otherwise protected information and corruption of data or systems. We could also be subject to operational downtimes, delays and other detrimental impacts on our operations or ability to provide products and services to our customers. We are also increasingly subject to customer-driven cybersecurity certification requirements, including but not limited to CMMC, which are expected to be necessary to win future contracts. Security incidents could also result in liability, trigger other obligations under such contracts, or increase the difficulty of winning future contracts. Many statutory requirements, both in the U.S. and abroad, also include different obligations for companies to provide notice of information security incidents involving certain types of information (including obligations to notify affected individuals and regulators in the event of cybersecurity breaches involving certain personal information), which could result from breaches of our service providers, our suppliers or subcontractors. Although we have implemented policies, procedures and controls designed to protect against, detect and mitigate these threats and attacks, we and our service providers, suppliers, joint ventures, and subcontractors have faced and continue to face advanced and persistent attacks on our and their information systems. We cannot guarantee that future incidents will not occur, and if an incident does occur, our incident response planning may not prove fully adequate. We may also not be able to mitigate its impacts successfully. Techniques used by others to gain unauthorized access to personal, confidential, proprietary, or sensitive information or disrupt systems and networks for economic or strategic gain are constantly evolving, increasingly sophisticated, increasingly difficult to detect and successfully defend against and may see their frequency increased, and effectiveness enhanced, by the use of AI. Further, cybersecurity risks may be heightened as a result of ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries, or the ongoing conflict in the Middle East, which continues to expand.

We have significant operations, including infrastructure, information technology systems, research facilities, and centers of excellence, located in regions that may be exposed to physical risks, such as hurricanes, earthquakes, other damaging storms, water levels, wildfires and other natural disasters, including places such as Alabama, Florida, California, and Texas. Our subcontractors and suppliers are also subject to physical risks that could affect their ability to deliver or perform under a contract, including as a result of disruptions to their workforce and critical industrial infrastructure needed for normal business operations. Although we maintain crisis management and disaster response plans, such events could make it difficult or impossible for us to deliver our services to our customers, could decrease demand for our services, could make existing customers unable or unwilling to fulfill their contractual requirements to us, including their payment obligations, and could cause us to incur substantial expense, including expenses or liabilities arising from potential litigation. If insurance or other risk transfer mechanisms are unavailable or insufficient to recover all costs or if we experience a significant disruption to our business due to a natural disaster, it could adversely affect our financial position, results of operations, and cash flows. There are also concerns over the risks of climate change and related environmental sustainability matters. In addition to physical risks, climate change risks include longer-term shifts in climate patterns, such as extreme heat, rising sea levels, and more frequent and prolonged drought. Increased frequency and severity of extreme weather events, which are widely associated with long-term climate change, could disrupt our operations, facilities and supply chain. Such events could disrupt certain of our operations or those of our customers or third parties on which we rely, including direct damage to assets and indirect impacts from supply chain disruption and market volatility. In addition, current and future reduction in government weather-monitoring or satellite data programs may diminish the predictability of extreme weather events and impair our ability to plan for and mitigation related operational risks. We could also incur significant costs to improve the climate resiliency of our infrastructure and supply chain and otherwise prepare for, respond to, and mitigate the effects of climate 28Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I change. Additionally, transitioning to a low-carbon economy may entail extensive policy, legal, technology and market initiatives. Such changes could result in laws, regulations or policies that significantly increase our direct and indirect operational and compliance burdens, which could adversely affect our financial condition and results of operations. We monitor developments in climate change-related laws, regulations and policies for their potential effect on us. However, we currently are not able to accurately predict the materiality of any potential costs associated with such developments. In addition, our reputation and customer relationships may be negatively impacted as a result of our practices and policies, actual or perceived, related to climate change, including our involvement, or our customers’ involvement, in certain industries or projects associated with causing or exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change.

We have significant operations, including infrastructure, information technology systems, research facilities, and centers of excellence, located in regions that may be exposed to physical risks, such as hurricanes, earthquakes, other damaging storms, water levels, wildfires and other natural disasters, including places such as Alabama, Florida, California, and Texas. Our subcontractors and suppliers are also subject to physical risks that could affect their ability to deliver or perform under a contract, including as a result of disruptions to their workforce and critical industrial infrastructure needed for normal business operations. Although we maintain crisis management and disaster response plans, such events could make it difficult or impossible for us to deliver our services to our customers, could decrease demand for our services, could make existing customers unable or unwilling to fulfill their contractual requirements to us, including their payment obligations, and could cause us to incur substantial expense, including expenses or liabilities arising from potential litigation. If insurance or other risk transfer mechanisms are unavailable or insufficient to recover all costs or if we experience a significant disruption to our business due to a natural disaster, it could adversely affect our financial position, results of operations, and cash flows. There are also concerns over the risks of climate change and related environmental sustainability matters. In addition to physical risks, climate change risks include longer-term shifts in climate patterns, such as extreme heat, rising sea levels, and more frequent and prolonged drought. Such events could disrupt certain of our operations or those of our customers or third parties on which we rely, including direct damage to assets and indirect impacts from supply chain disruption and market volatility. We could also incur significant costs to improve the climate resiliency of our infrastructure and supply chain and otherwise prepare for, respond to, and mitigate the effects of climate change. Additionally, transitioning to a low-carbon economy may entail extensive policy, legal, technology and market initiatives. Such changes could result in laws, regulations or policies that significantly increase our direct and indirect operational and compliance burdens, which could adversely affect our financial condition and results of operations. We monitor developments in climate change-related laws, regulations and policies for their potential effect on us. However, we currently are not able to accurately predict the materiality of any potential costs associated with such developments. In addition, our reputation and customer relationships may be negatively impacted as a result of our practices and policies, actual or perceived, related to climate change, including our involvement, or our customers’ involvement, in certain industries or projects associated with causing or exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change.

We are subject to various laws and regulations in the U.S. and globally relating to data privacy and security. These laws and regulations are complex, constantly evolving, and may be subject to significant change in the future. In addition, the application, interpretation and enforcement of these laws and regulations are often uncertain, particularly in new and rapidly evolving areas of technology, and may differ in material respects among jurisdictions, interpreted and applied inconsistently among jurisdictions or in a manner that is inconsistent with our current policies and practices, all of which can make compliance challenging and costly, and expose us to related risks and liabilities. In the U.S., numerous federal, state, and local data privacy and security laws and regulations govern the collection, sharing, use, retention, disclosure, security, storage, sale, transfer, and other processing of personal information, including protected health information. Numerous other states also are enacting or considering, comprehensive state-level data privacy and security laws. The U.S. Congress has considered, and will likely in the future consider, additional data privacy and security legislation, to which we may become subject if passed. As a contractor supporting defense, health care, and national security customers, we are also subject to additional, specific regulatory compliance requirements relating to data privacy and security. Under DFARS and other federal regulations, we are required to implement the security and privacy controls in National Institute of Standards and Technology Special Publications on certain of our networks and information technology systems. To the extent that we do not comply with applicable security and control requirements, and there is unauthorized access or disclosure of sensitive information (including personal information), this could potentially result in a contract termination or loss of intellectual property, which could materially and adversely affect our business and financial results and lead to reputational harm. We are also subject to the CMMC requirements, which require successful assessment by a third party against specified cyber controls in order to be eligible for contract awards. To the extent we are unable to achieve or maintain certification at the level required for a particular contract award, we will be unable to bid on such contract awards or follow-on awards for existing work with the DoW, which could adversely impact our revenue and our profitability. We may also be subject to additional emerging and as yet unspecified cybersecurity requirements under the FAR and other federal regulations. Should we or our supply chain fail to implement these new requirements, this may adversely affect our ability to receive awards or execute on relevant government programs. The overarching complexity of data privacy and security laws and regulations around the world poses a compliance challenge that could manifest in costs, damages, or liability in other forms as a result of failure to implement proper programmatic controls, failure to adhere to those controls, or the breach of applicable data privacy and security requirements by us, our employees, our business partners (including our service providers, suppliers or subcontractors) or our customers. We also expect that there will continue to be new proposed laws, regulations, and industry standards concerning data privacy and security, and we cannot yet determine the impact such future laws, regulations and standards, or amendments to or re-interpretations of existing laws, regulations or standards, may have on our business. Any failure or perceived failure by us, our service providers, suppliers, subcontractors, or other business partners to comply with applicable laws, regulations, our public privacy policies and other public statements about data privacy and security and other obligations in these areas could result in regulatory or government actions lawsuits against us (including civil claims, such as representative actions and other class action-type litigation), legal liability, monetary penalties, fines, sanctions, damages and other costs, orders to cease or change our processing of data, changes to our business practices, diversion of internal resources, and harm to our reputation,

We are subject to various laws and regulations in the U.S. and globally relating to data privacy and security. These laws and regulations are complex, constantly evolving, and may be subject to significant change in the future. In addition, the application, interpretation and enforcement of these laws and regulations are often uncertain, particularly in new and rapidly evolving areas of technology, and may differ in material respects among jurisdictions, interpreted and applied inconsistently among jurisdictions or in a manner that is inconsistent with our current policies and practices, all of which can make compliance challenging and costly, and expose us to related risks and liabilities. In the U.S., numerous federal, state, and local data privacy and security laws and regulations govern the collection, sharing, use, retention, disclosure, security, storage, transfer, and other processing of personal information, including protected health information. Numerous other states also are enacting or considering, comprehensive state-level data privacy and security laws. As a contractor supporting defense, health care, and national security customers, we are also subject to additional, specific regulatory compliance requirements relating to data privacy and security. Under DFARS and other federal regulations, we are required to implement the security and privacy controls in National Institute of Standards and Technology Special Publications on certain of our networks and information technology systems. To the extent that we do not comply with applicable security and control requirements, and there is unauthorized access or disclosure of sensitive information (including personal information), this could potentially result in a contract termination or loss of intellectual property, which could materially and adversely affect our business and financial results and lead to reputational harm. We will also be subject to numerous emerging and as yet unspecified cybersecurity requirements under the FAR and through federal regulation, to include the DOD Cybersecurity Maturity Model Certification (“CMMC”) program, which, once implemented, will require successful assessment by a third party against specified cyber controls. Should we or our supply chain fail to implement these new requirements, this may adversely affect our ability to receive awards or execute on relevant government programs. We are in the process of evaluating our readiness against these new requirements and while we have confidence we will meet or

We generate revenues under various types of contracts, including cost-reimbursement, FPIF, T&M, FPLOE and FFP contracts. Our earnings and profitability may vary materially depending on changes in the proportionate amount of revenues derived from each type of contract, the nature of services or products provided, the achievement of performance objectives, and the stage of performance at which the right to receive fees, particularly under incentive-fee and award-fee contracts, is finally determined. Cost-reimbursement and T&M contracts are generally less profitable than FFP contracts. Our operating results in any period may also be affected, positively or negatively, by customers’ variable purchasing patterns of our more profitable proprietary products. Our profitability is adversely affected when we incur contract costs that we cannot bill to our customers. To varying degrees, each of our contract types involves some risk of underestimating the costs and resources necessary to fulfill the contract. While FFP contracts allow us to benefit from cost savings, these contracts also increase our exposure to the risk of cost overruns. Revenues from FFP contracts represented approximately 43% of our total revenues for fiscal 2025. When making proposals on these types of contracts, we rely heavily on our estimates of costs and timing to complete the associated projects, as well as assumptions regarding technical issues. In each case, our failure to accurately estimate costs or the resources and technology needed to perform our contracts or to effectively manage and control our costs during performance could result, and in some instances has resulted, in reduced profits or losses. More generally, any increased or unexpected costs or unanticipated delays in the performance of our contracts, including costs and delays caused by contractual disputes or other factors outside of our control, such as performance failures of our subcontractors, rising inflationary pressures, and fluctuations in interest rates, natural disasters or other force majeure events, could make our contracts less profitable than expected or unprofitable.

We generate revenues under various types of contracts, including cost-reimbursement, FPIF, T&M, FPLOE and FFP contracts. Our earnings and profitability may vary materially depending on changes in the proportionate amount of revenues derived from each type of contract, the nature of services or products provided, the achievement of performance objectives, and the stage of performance at which the right to receive fees, particularly under incentive-fee and award-fee contracts, is finally determined. Cost-reimbursement and T&M contracts are generally less profitable than FFP contracts. Our operating results in any period may also be affected, positively or negatively, by customers’ variable purchasing patterns of our more profitable proprietary products. Our profitability is adversely affected when we incur contract costs that we cannot bill to our customers. To varying degrees, each of our contract types involves some risk of underestimating the costs and resources necessary to fulfill the contract. While FFP contracts allow us to benefit from cost savings, these contracts also increase our exposure to the risk of cost overruns. Revenues from FFP contracts represented approximately 43% of our total revenues for fiscal 2024. When making proposals on these types of contracts, we rely heavily on our estimates of costs and timing to complete the associated projects, as well as assumptions regarding technical issues. In each case, our failure to accurately estimate costs or the resources and technology needed to perform our contracts or to effectively manage and control our costs during performance could result, and in some instances has resulted, in reduced profits or losses. More generally, any increased or unexpected costs or unanticipated delays in the performance of our contracts, including costs and delays caused by contractual disputes or other factors outside of our control, such as performance failures of our subcontractors, rising inflationary pressures, and fluctuations in interest rates, natural disasters or other force majeure events, could make our contracts less profitable than expected or unprofitable. 26Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report 26Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report 26 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

We rely on our teaming relationships with other prime contractors and subcontractors, who are also often our competitors in other contexts, to submit bids for large procurements or other opportunities where we believe the combination of services and products provided by us and other companies will help us to win and perform the contract. Our future revenues and growth prospects could be adversely affected if other contractors eliminate or reduce their contract relationships with us or if the U.S. government terminates or reduces these other contractors’ programs, does not award them new contracts, or refuses to pay under a contract. Companies that do not have access to U.S. government contracts may perform services as our subcontractor, and that experience could enhance such companies’ prospect of securing a future position as a prime U.S. government contractor, which could increase competition for future contracts and impair our ability to perform on contracts. We may have disputes with our subcontractors arising from, among other things, the quality and timeliness of work performed by the subcontractor, customer concerns about the subcontractor, our failure to extend existing task orders or issue new task orders under a subcontract, our hiring of a subcontractor’s personnel or the subcontractor’s failure to comply with applicable law. If any of our subcontractors fail to meet their contractual obligations in a timely manner or have regulatory compliance or other problems, our ability to fulfill our obligations as a prime contractor or higher tier subcontractor may be jeopardized. Compliance with the requirements of the recent executive order titled "Prioritizing the Warfighter in Defense Contracting” may be complex, costly and time-consuming, and our subcontractors may not have the necessary resources to ensure compliance. Significant losses could arise in future periods and subcontractor performance deficiencies could result in our termination for default. A termination for default could eliminate a revenue source, expose us 32Leidos Holdings, Inc. Annual Report 32Leidos Holdings, Inc. Annual Report 32Leidos Holdings, Inc. Annual Report 32 Leidos Holdings, Inc. Annual Report 32Leidos Holdings, Inc. Annual Report 32Leidos Holdings, Inc. Annual Report 32 Leidos Holdings, Inc. Annual Report 32Leidos Holdings, Inc. Annual Report 32 Leidos Holdings, Inc. Annual Report 32 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I to liability and have an adverse effect on our ability to compete for future contracts and task orders, especially if the customer is an agency of the U.S. government.

We rely on our teaming relationships with other prime contractors and subcontractors, who are also often our competitors in other contexts, to submit bids for large procurements or other opportunities where we believe the combination of services and products provided by us and other companies will help us to win and perform the contract. Our future revenues and growth prospects could be adversely affected if other contractors eliminate or reduce their contract relationships with us or if the U.S. government terminates or reduces these other contractors’ programs, does not award them new contracts, or refuses to pay under a contract. Companies that do not have access to U.S. government contracts may perform services as our subcontractor, and that experience could enhance such companies’ prospect of securing a future position as a prime U.S. government contractor, which could increase competition for future contracts and impair our ability to perform on contracts. We may have disputes with our subcontractors arising from, among other things, the quality and timeliness of work performed by the subcontractor, customer concerns about the subcontractor, our failure to extend existing task orders or issue new task orders under a subcontract, our hiring of a subcontractor’s personnel or the subcontractor’s failure to comply with applicable law. If any of our subcontractors fail to meet their contractual obligations in a timely manner or have regulatory compliance or other problems, our ability to fulfill our obligations as a prime contractor or higher tier subcontractor may be jeopardized. Significant losses could arise in future periods and subcontractor performance deficiencies could result in our termination for default. A termination for default could eliminate a revenue source, expose us to liability and have an adverse effect on our ability to compete for future contracts and task orders, especially if the customer is an agency of the U.S. government.

Our business is highly competitive, and we compete with larger companies with greater name recognition, financial resources, and a larger technical staff. We also compete with smaller, more specialized companies that can concentrate their resources on particular areas. Additionally, we compete with the U.S. government’s own capabilities and federal non-profit contract research centers. For example, some customers, including the DoW, are turning to commercial contractors, rather than traditional defense contractors, for some products and services, and may utilize small business contractors or source 18Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I work internally rather than hiring a contractor. The markets in which we operate are characterized by rapidly changing customer needs and technology and our success depends on our ability to invest in and develop products and services that address such needs. To remain competitive, we must consistently provide high value differentiated solutions to our customers that incorporate technology, superior service, and performance to our customers on a cost-effective basis while understanding customer priorities and maintaining customer relationships. Our competitors may be able to provide our customers with different or greater capabilities or technologies or better contract terms than we can provide, including technical qualifications, past contract experience, geographic presence, price and the availability of qualified professional personnel, or be willing to accept more risk or lower profitability in competing for contracts. Some of our competitors have made or could make acquisitions of businesses or establish teaming or other agreements among themselves or third parties, which could allow them to offer more competitive and comprehensive solutions. As a result of such acquisitions or arrangements, our current or potential competitors may be able to accelerate the adoption of new technologies that better address customer needs, devote more significant resources to bring these products and services to market, initiate or withstand substantial price competition, develop and expand their product and service offerings more quickly than we do or limit our access to certain suppliers. These competitive pressures in our market or our failure to compete effectively may result in fewer orders, reduced revenue and margins, and loss of market share. Further industry consolidation may also impact customers’ perceptions of the viability of smaller or even mid-size software firms and, consequently, customers’ willingness to purchase from such firms.

Our business is highly competitive, and we compete with larger companies with greater name recognition, financial resources, and a larger technical staff. We also compete with smaller, more specialized companies that can concentrate their resources on particular areas. Additionally, we compete with the U.S. government’s own capabilities and federal non-profit contract research centers. For example, some customers, including the DoD, are turning to commercial contractors, rather than traditional defense contractors, for some products and services, and may utilize small business contractors or source work internally rather than hiring a contractor. The markets in which we operate are characterized by rapidly changing customer needs and technology and our success depends on our ability to invest in and develop products and services that address such needs. To remain competitive, we must consistently provide high value differentiated solutions to our customers that incorporate technology, superior service, and performance to our customers on a cost-effective basis while understanding customer priorities and maintaining customer relationships. Our competitors may be able to provide our customers with different or greater capabilities or technologies or better contract terms than we can provide, including technical qualifications, past contract experience, geographic presence, price and the availability of qualified professional personnel, or be willing to accept more risk or lower profitability in competing for contracts. Some of our competitors have made or could make acquisitions of businesses or establish teaming or other agreements among themselves or third parties, which could allow them to offer more competitive and comprehensive solutions. As a result of such acquisitions or arrangements, our current or potential competitors may be able to accelerate the adoption of new technologies that better address customer needs, devote more significant resources to bring these products and services to market, initiate or withstand substantial price competition, develop and expand their product and service offerings more quickly than we do or limit our access to certain suppliers. These competitive pressures in our market or our failure to compete effectively may result in fewer orders, reduced revenue and margins, and loss of market share. Further industry consolidation may also impact customers’ perceptions of the viability of smaller or even mid-size software firms and, consequently, customers’ willingness to purchase from such firms.

The funding of U.S. government programs is subject to an annual congressional budget authorization and appropriations process. In years when the U.S. government does not complete its appropriations before the beginning of the new fiscal year on October 1, government operations are typically funded pursuant to a “continuing resolution,” which allows federal government agencies to operate at spending levels approved in the previous appropriations cycle but does not authorize new spending initiatives. To the extent the U.S. Congress is unable to approve the annual federal budget before the expiration of a continuing resolution, funding for new projects may not be available and funding on contracts we are already performing may be delayed. If Congressional efforts to approve such funding fail, and Congress is unable to craft a long-term agreement on the U.S. government’s ability to incur indebtedness in excess of its current limits, the U.S. government may not be able to fulfill its current funding obligations and there could be significant disruption to all discretionary programs, which would have corresponding impacts on us and our industry. The use of a continuing resolution at prior-year funding levels may limit new contract starts, cancellation of planned new initiatives, constrain production rate increases, delay awards or extensions, and introduce funding uncertainty that could affect bidding, scheduling and profitability. In addition, a failure to complete the budget process and fund government operations pursuant to a continuing resolution may result in a U.S. government shutdown, which could result in us incurring substantial costs without reimbursement under our contracts. If a prolonged government shutdown were to occur, it could result in program cancellations, disruptions and/or stop work orders and could limit the U.S. government’s ability to effectively progress programs and to make timely payments, and our ability to perform on our U.S. government contracts and successfully compete for new work. The delay or cancellation of key programs or the delay of contract payments may have a material adverse effect on our revenue and operating results. In addition, when supplemental appropriations are required to operate the U.S. government or fund specific programs and the passage of legislation needed to approve any supplemental appropriation bill is delayed, the overall funding environment for our business could be adversely affected. We continuously review our operations in an attempt to identify programs potentially at risk from continuing resolutions or failure by the U.S. government to complete its appropriations process so that we can consider appropriate contingency plans. From time to time, we have experienced a decline in revenues in our fourth quarter as a result of this annual appropriations cycle, and we could experience similar declines in revenues from future delays in the appropriations process. When the U.S. government fails to complete its appropriations process or provide for a continuing resolution, a full or partial federal government shutdown may result. A federal government shutdown could, in turn, result in our incurrence of substantial labor or other costs without reimbursement under customer contracts, the delay or cancellation of key programs, or the delay, or cancellation of contract payments, which could have a negative effect on our cash flows and adversely affect our future results of operations. Congress appropriates funds on an annual fiscal year basis for many programs, even though the program performance period may extend over several years. Consequently, programs are often partially funded initially, and additional funds are committed only as Congress makes further appropriations. If we incur costs in excess of funds obligated

The funding of U.S. government programs is subject to an annual congressional budget authorization and appropriations process. In years when the U.S. government does not complete its appropriations before the beginning of the new fiscal year on October 1, government operations are typically funded pursuant to a “continuing resolution,” which allows federal government agencies to operate at spending levels approved in the previous appropriations cycle but does not authorize new spending initiatives. When the U.S. government operates under a continuing resolution, delays can occur in the procurement of the products, services and solutions that we provide and may result in new initiatives being canceled. From time to time, we have experienced a decline in revenues in our fourth quarter as a result of this annual appropriations cycle, and we could experience similar declines in revenues from future delays in the appropriations process. When the U.S. government fails to complete its appropriations process or provide for a continuing resolution, a full or partial federal government shutdown may result. A federal government shutdown could, in turn, result in our incurrence of substantial labor or other costs without reimbursement under customer contracts, the delay or cancellation of key programs, or the delay, or cancellation of contract payments, which could have a negative effect on our cash flows and adversely affect our future results of operations. Congress appropriates funds on an annual fiscal year basis for many programs, even though the program performance period may extend over several years. Consequently, programs are often partially funded initially, and additional funds are committed only as Congress makes further appropriations. If we incur costs in excess of funds obligated on a contract, we may be at risk for reimbursement of those costs unless or until additional funds are obligated to the contract. In addition, if and when supplemental appropriations are required to operate the U.S. government or fund specific programs and passage of legislation needed to approve any supplemental appropriations bill is delayed, the overall funding environment for our business could be adversely affected.

Volatile, negative, or uncertain economic conditions, an increase in the likelihood of a recession, or concerns about these or other similar risks may negatively impact our customers’ ability and willingness to fund their projects. For example, declines in state and local tax revenues, as well as other economic declines, may result in lower government spending. Our customers reducing, postponing, or canceling spending on projects in respect of which we provide services may reduce demand for our services quickly and with little warning, which could have a material adverse effect on our business, results of operations, and financial condition. Moreover, instability in the credit or capital markets in the U.S. and related market-wide reduction in liquidity, or concerns or rumors about events of these kinds or similar risks, could affect the availability of credit or our credit ratings, making it relatively difficult or expensive to obtain additional capital at competitive rates, on commercially reasonable terms or in sufficient amounts, or at all, thus making it more difficult or expensive for us to access funds or refinance our existing indebtedness, or obtain financing for strategic projects and acquisitions. Such instability could also cause counterparties, including vendors, suppliers, and subcontractors, to be unable to perform their obligations or to breach their obligations to us under our contracts with them. In addition, instability in the credit or capital markets could negatively impact our customers’ ability to fund their projects and, therefore, utilize our services, which could have a material adverse effect on our business, results of operations, and financial condition.

Volatile, negative, or uncertain economic conditions, an increase in the likelihood of a recession, or concerns about these or other similar risks may negatively impact our customers’ ability and willingness to fund their projects. For example, declines in state and local tax revenues, as well as other economic declines, may result in lower government spending. Our customers reducing, postponing, or canceling spending on projects in respect of which we provide services may reduce demand for our services quickly and with little warning, which could have a material adverse effect on our business, results of operations, and financial condition.

Any system or service disruptions, including those caused by ongoing projects to improve our information technology systems and networks and the delivery of services, whether through our shared services organization or outsourced services, if not anticipated and appropriately mitigated, could materially and adversely affect our business including, among other things, an adverse effect on our ability to perform on contracts, bill our customers for work performed on our contracts, collect the amounts that have been billed and produce accurate financial statements in a timely manner. We, and the service providers, suppliers and subcontractors on which we rely, are also subject to systems failures, including network, software or hardware failures, whether caused by us, third-party service providers, cybersecurity threats, malicious insiders, software bugs or errors, natural disasters, power shortages, terrorist attacks, pandemics or other events, which could cause loss of data and interruptions or delays in our business, cause us to incur remediation costs, subject us to claims and damage our reputation. In addition, the failure or disruption of our communications, or those of our service providers, suppliers or subcontractors, could cause us to interrupt or suspend our operations or otherwise adversely affect our business. Our property and business interruption insurance may be inadequate to compensate us for all losses resulting from any system or operational failure or disruption.

Any system or service disruptions, including those caused by ongoing projects to improve our information technology systems and networks and the delivery of services, whether through our shared services organization or outsourced services, if not anticipated and appropriately mitigated, could materially and adversely affect our business including, among other things, an adverse effect on our ability to perform on contracts, bill our customers for work performed on our contracts, collect the amounts that have been billed and produce accurate financial statements in a timely manner. We, and the service providers, suppliers and subcontractors on which we rely, are also subject to systems failures, including network, software or hardware failures, whether caused by us, third-party service providers, cybersecurity threats, malicious insiders, software bugs or errors, natural disasters, power shortages, terrorist attacks, pandemics or other events, which could cause loss of data and interruptions or delays in our business, cause us to incur remediation costs, subject us to claims and damage our reputation. In addition, the failure or disruption of our communications, or those of our service providers, suppliers or subcontractors, could cause us to interrupt or suspend our operations or otherwise adversely affect our business. Our property and business 28Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report 28Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report 28 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I interruption insurance may be inadequate to compensate us for all losses resulting from any system or operational failure or disruption.

We expect that a majority of the business that we seek in the foreseeable future will be awarded through a competitive bidding process. The U.S. government has increasingly relied on contracts that are subject to a continuing competitive bidding process, including GSA Schedule and other multi-award contracts, which has resulted in greater competition and increased pricing pressure. The competitive bidding process involves substantial costs, including labor cost and managerial time to prepare bids and proposals for contracts that may not be awarded to us, may be split among competitors, or that may be awarded but for which we do not receive meaningful task orders, and several risks, including the risk of inaccurately estimating the resources and costs that will be required to fulfill any contract we win. Following contract award, we may encounter significant expense, delay, contract modifications, or even cancellation of the contract award as a result of our competitors protesting the award of contracts to us. Any resulting loss or delay of start-up and funding of work under protested contract awards may adversely affect our revenues and profitability. In addition, multiple-award contracts require that we make sustained post-award efforts to obtain task orders under the contract. As a result, we may not be able to obtain these task orders or recognize revenues under these multiple-award contracts. We are also experiencing increased competition, which impacts our ability to obtain contracts; see the risk factor “We face intense competition that can impact our ability to obtain contracts and, therefore, affect our future revenues and growth prospects.” Our failure to compete effectively in this procurement environment would adversely affect our revenues and profitability.

We expect that a majority of the business that we seek in the foreseeable future will be awarded through a competitive bidding process. The U.S. government has increasingly relied on contracts that are subject to a continuing competitive bidding process, including GSA Schedule and other multi-award contracts, which has resulted in greater competition and increased pricing pressure. The competitive bidding process involves substantial costs, including labor cost and managerial time to prepare bids and proposals for contracts that may not be awarded to us, may be split among competitors, or that may be awarded but for which we do not receive meaningful task orders, and several risks, including the risk of inaccurately estimating the resources and costs that will be required to fulfill any contract we win. Following contract award, we may encounter significant expense, delay, contract modifications, or even cancellation of the contract award as a result of our competitors protesting the award of contracts to us. Any resulting loss or delay of start-up and funding of work under protested contract awards may adversely affect our revenues and profitability. In addition, multiple-award contracts require that we make sustained post-award efforts to obtain task orders under the contract. As a result, we may not be able to obtain these task orders or recognize revenues under these multiple-award contracts. We are also experiencing increased competition, which impacts our ability to obtain contracts; see the risk factor “We face intense competition that can impact our ability to obtain contracts and, therefore, affect our future revenues and growth prospects.” Our failure to compete effectively in this procurement environment would adversely affect our revenues and profitability. 18Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report 18Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report 18 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

We are subject to and may become a party to various other litigation, claims, investigations, audits, enforcement actions, arbitrations, or other legal proceedings that arise from time to time in the ordinary course of our business. Adverse judgments or settlements in some or all of these legal disputes may result in significant monetary damages, penalties, or injunctive relief against us. Any claims or litigation could be costly to defend, and even if we are successful or fully indemnified or insured, they could damage our reputation and make it more difficult to compete effectively or obtain adequate insurance in the future, and responding to any action may result in a significant diversion of management’s attention and resources. Litigation and other claims are subject to inherent uncertainties and management’s view of these matters may change in the future. For a description of our current legal proceedings, see “Item 3. Legal Proceedings” along with “Note 21—Commitments and Contingencies” of the notes to the consolidated financial statements contained within this Annual Report on Form 10-K. 22Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

We are subject to and may become a party to various other litigation, claims, investigations, audits, enforcement actions, arbitrations, or other legal proceedings that arise from time to time in the ordinary course of our business. Adverse judgments or settlements in some or all of these legal disputes may result in significant monetary damages, penalties, or injunctive relief against us. Any claims or litigation could be costly to defend, and even if we are successful or fully indemnified or insured, they could damage our reputation and make it more difficult to compete effectively or obtain adequate insurance in the future, and responding to any action may result in a significant diversion of management’s attention and resources. Litigation and other claims are subject to inherent uncertainties and management’s view of these matters may change in the future. For a description of our current legal proceedings, see “Item 3. Legal Proceedings” along with “Note 21—Commitments and Contingencies” of the notes to the consolidated financial statements contained within this Annual Report on Form 10-K.

Some provisions of our certificate of incorporation and bylaws may delay, discourage, or prevent a merger or acquisition that our stockholders may consider favorable, including transactions in which stockholders might receive a premium for their shares. These restrictions, which may also make it more difficult for our stockholders to elect directors not endorsed by our current directors and management, include mergers and certain other business combinations between a related person and us requiring approval by the holders of a majority of the voting power of such securities that are not owned by the related person unless approved by a majority of continuing directors or certain other exceptions; our stockholders may not act by written consent; our Board may issue, without stockholder approval, shares of undesignated preferred stock, the terms of which may be determined by the Board; and we are also subject to certain restrictions on business combinations under Section 203 of the Delaware General Corporation Law, which imposes additional requirements for business combinations, and may prevent our stockholders from receiving the benefit from any premium to the market price of our common stock offered by a bidder in a takeover context.

Some provisions of our certificate of incorporation and bylaws may delay, discourage, or prevent a merger or acquisition that our stockholders may consider favorable, including transactions in which stockholders might receive a premium for their shares. These restrictions, which may also make it more difficult for our stockholders to elect directors not endorsed by our current directors and management, include mergers and certain other business combinations between a related person and 36Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I us requiring approval by the holders of a majority of the voting power of such securities that are not owned by the related person unless approved by a majority of continuing directors or certain other exceptions; our stockholders may not act by written consent; our Board may issue, without stockholder approval, shares of undesignated preferred stock, the terms of which may be determined by the Board; and we are also subject to certain restrictions on business combinations under Section 203 of the Delaware General Corporation Law, which imposes additional requirements for business combinations, and may prevent our stockholders from receiving the benefit from any premium to the market price of our common stock offered by a bidder in a takeover context.

This risk factor summary contains a high-level summary of risks associated with our business. It does not contain all of the information that may be important to you, and you should read this risk factor summary together with the more detailed discussion of risks and uncertainties set forth following this summary. A summary of our risks includes, but is not limited to, the following: uWe depend on government agencies as our primary customers and if our reputation or relationships with these agencies were harmed, our future revenues and growth prospects could be adversely affected. uA decline in the U.S. government budget, changes in spending or budgetary priorities or delays in contract awards may significantly and adversely affect our future revenues and limit our growth prospects. uBecause we depend on U.S. government contracts, a delay in the completion of the U.S. government’s budget and appropriations process could delay procurement of the products, services and solutions we provide and adversely affect our future revenues. uDue to the competitive process to obtain contracts and the likelihood of bid protests, we may be unable to achieve or sustain revenue growth and profitability. uThe U.S. government may terminate, cancel, modify, renew on less favorable terms or curtail our contracts at any time prior to their completion and, if we do not replace them, this may adversely affect our future revenues and profitability. uWe face intense competition that can impact our ability to obtain contracts and therefore affect our future revenues and growth prospects. uDeterioration of economic conditions or weakening in credit or capital markets may have a material adverse effect on our business, results of operations and financial condition. uWe cannot predict the consequences of current or future geopolitical events, but they may adversely affect the markets in which we operate and our results of operations. uGlobal supply chain issues and inflationary pressures have disrupted supply and increased the prices of goods and services, which could raise the costs associated with providing our services, diminish our ability to compete for new contracts or task orders and reduce customer buying power.

This risk factor summary contains a high-level summary of risks associated with our business. It does not contain all of the information that may be important to you, and you should read this risk factor summary together with the more detailed discussion of risks and uncertainties set forth following this summary. A summary of our risks includes, but is not limited to, the following: uWe depend on government agencies as our primary customers and if our reputation or relationships with these agencies were harmed, our future revenues and growth prospects could be adversely affected. uA decline in the U.S. government budget, changes in spending or budgetary priorities or delays in contract awards may significantly and adversely affect our future revenues and limit our growth prospects. uBecause we depend on U.S. government contracts, a delay in the completion of the U.S. government’s budget and appropriations process could delay procurement of the products, services and solutions we provide and adversely affect our future revenues. uDue to the competitive process to obtain contracts and the likelihood of bid protests, we may be unable to achieve or sustain revenue growth and profitability. uThe U.S. government may terminate, cancel, modify, renew on less favorable terms or curtail our contracts at any time prior to their completion and, if we do not replace them, this may adversely affect our future revenues and profitability. uWe face intense competition that can impact our ability to obtain contracts and therefore affect our future revenues and growth prospects. uDeterioration of economic conditions or weakening in credit or capital markets may have a material adverse effect on our business, results of operations and financial condition. uWe cannot predict the consequences of current or future geopolitical events, but they may adversely affect the markets in which we operate and our results of operations. uGlobal supply chain issues and inflationary pressures have disrupted supply and increased the prices of goods and services, which could raise the costs associated with providing our services, diminish our ability to compete for new contracts or task orders and reduce customer buying power. uOur failure to comply with various complex procurement rules and regulations could result in our being liable for penalties, including termination of our U.S. government contracts, disqualification from bidding on future U.S. government contracts and suspension or debarment from U.S. government contracting. uThe U.S. government may adopt new contract rules and regulations or revise its procurement practices in a manner adverse to us at any time. uApplication of the U.S. government's organizational conflict of interest (OCI) rules could limit our ability to successfully compete for new contracts or task orders, which would adversely affect our results of operations. uAs a U.S. government contractor, our partners and we are subject to reviews, audits and cost adjustments by the U.S. government, which could adversely affect our profitability, cash position or growth prospects if resolved unfavorably to us. uOur business is subject to governmental review and investigation, which could adversely affect our financial position, operating results and growth prospects. uInvestigations, audits, claims, disputes, enforcement actions, litigation, arbitration or other legal proceedings could require us to pay potentially large damage awards or penalties and could be costly to defend, which would adversely affect our cash balances and profitability, and could damage our reputation. uOur business and operations expose us to numerous legal and regulatory requirements, and any violation of these requirements could harm our business. uOur business is subject to complex and evolving laws and regulations regarding data privacy and security which could subject us to investigations, claims or monetary penalties against us, require us to change our business practices or otherwise adversely affect our revenues and profitability. uMisconduct of employees, subcontractors, agents, suppliers, business partners or joint ventures and others working on our behalf could cause us to lose existing contracts or customers and adversely affect our ability to obtain new contracts and could have a material adverse impact on our business, reputation and future results.

Revenues under contracts with the DoW and U.S. Intelligence Community, either as a prime contractor or subcontractor to other contractors, represented approximately 49% of our total revenues for fiscal 2025 and 2023, and 48% of our total revenues for fiscal 2024. U.S. government and DoW spending levels are difficult to predict and subject to significant risk. Laws and plans adopted by the U.S. government relating to, along with pressures on and uncertainty surrounding the U.S. federal budget, potential changes in budgetary priorities, including initiatives aimed at improving governmental efficiency, and defense spending levels, the appropriations process and the permissible federal debt limit, could adversely affect the funding for individual programs and delay purchasing or payment decisions by our customers. Considerable uncertainty exists regarding how future budget and program decisions will unfold, including the defense spending priorities of the U.S. Presidential Administration and Congress and what challenges potential budget reductions will present for us and our industry generally. In particular, the federal budget and debt ceiling are expected to continue to be the subject of considerable debate, which could have a significant impact on defense spending broadly and our programs in particular. The budget environment, including budget caps mandated by the Budget Control Act of 2011 (the “BCA”) for fiscal years 2022 and 2023, which were reinstituted with established budget caps for 2024 and 2025 under The Fiscal Responsibility Act of 2023, and uncertainty surrounding the debt ceiling and the appropriations process, remain significant short and long-term risks for the Company. Considerable uncertainty exists regarding how future budget and program decisions will unfold, including the defense spending priorities of the current administration and Congress, what challenges budget reductions (required by the BCA and otherwise) will present for the defense industry and whether annual appropriations bills for all agencies will be enacted in a timely manner. Current U.S. government spending levels for defense-related or other programs may not be sustained. Future spending and program authorizations may not increase or may decrease or shift to programs in areas where we do not provide services or are less likely to be awarded contracts. Such changes in spending authorizations and budgetary priorities may occur as a result of uncertainty surrounding the federal budget and the federal government’s ability to meet its debt obligations, changes in the priorities of the U.S. Presidential Administration, increasing political pressure and legislation, shifts in spending priorities from defense-related or other programs as a result of competing demands for federal funds, the number and intensity of military conflicts or other factors. For example, the conflicts between Russia and Ukraine and in the Middle East have resulted in increased security assistance to each of Ukraine and Israel to help preserve their territorial integrity, secure their borders, and with respect to the Russia/Ukraine conflict, improve interoperability with NATO. Changes in the priorities 16Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I of the U.S. Presidential Administration in respect thereto could have an adverse impact on our results. In addition, if government funding relating to our contracts with the U.S. government or DoW becomes unavailable, or is reduced or delayed, or planned orders are reduced, our contracts or subcontracts under such programs may be terminated or adjusted by the U.S. government or the prime contractor. Our operating results could also be adversely affected by spending caps or changes in the U.S. government or the DoW’s budgetary priorities, as well as delays in program starts or the award of contracts or task orders under contracts. The U.S. government also conducts periodic reviews of U.S. defense strategies and priorities, which may shift DoW or other budgetary priorities, reduce overall U.S. government spending, or delay contract or task order awards for defense-related or other programs from which we would otherwise expect to derive a significant portion of our future revenues. In addition, changes to the federal or DoW acquisition system and contracting models could affect whether and how we pursue certain opportunities and the terms under which we are able to do so. A significant decline in overall U.S. government spending, including in the areas of national security, intelligence, homeland security, and health and civilian services, a significant shift in its spending priorities, the substantial reduction or elimination of particular defense-related programs or significant delays in contract or task order awards for large programs could adversely affect our future revenues and results of operations and limit our growth prospects. In addition, our ability to grow in advanced technology areas, such as hypersonics programs, space systems, maritime and undersea systems, and classified programs, will also be affected by the overall budget environment, whether development programs transition to production and the timing of such transition, all of which are dependent on U.S. Government authorization and funding.

Revenues under contracts with the DoD and U.S. Intelligence Community, either as a prime contractor or subcontractor to other contractors, represented approximately 48% of our total revenues for fiscal 2024, 49% of our total revenues for fiscal 2023 and 44% of our total revenues for fiscal 2022. U.S. government and DoD spending levels are difficult to predict and subject to significant risk. Laws and plans adopted by the U.S. government relating to, along with pressures on and uncertainty surrounding the U.S. federal budget, potential changes in budgetary priorities and defense spending levels, the appropriations process and the permissible federal debt limit, could adversely affect the funding for individual programs and delay purchasing or payment decisions by our customers. Considerable uncertainty exists regarding how future budget and program decisions will unfold, including the defense spending priorities of the U.S. Presidential Administration and Congress and what challenges potential budget reductions will present for us and our industry generally. Current U.S. government spending levels for defense-related or other programs may not be sustained. Future spending and program authorizations may not increase or may decrease or shift to programs in areas where we do not provide services or are less likely to be awarded contracts. Such changes in spending authorizations and budgetary priorities may occur as a result of uncertainty surrounding the federal budget and the federal government’s ability to meet its debt obligations, changes in the priorities of the U.S. Presidential Administration as a result of the recent election cycle, increasing political pressure and legislation, shifts in spending priorities from defense-related or other programs as a result of competing demands for federal funds, the number and intensity of military conflicts or other factors. For example, the conflicts between Russia and Ukraine and in the Middle East have resulted in increased security assistance to each of Ukraine and Israel to help preserve their territorial integrity, secure their borders, and with respect to the Russia/Ukraine conflict, improve interoperability with NATO. Changes in the priorities of the U.S. Presidential Administration in respect thereto could have an adverse impact on our results. In addition, if government funding relating to our contracts with the U.S. government or DoD becomes unavailable, or is reduced or delayed, or planned orders are reduced, our contracts or subcontracts under such programs may be terminated or adjusted by the U.S. government or the prime contractor. Our operating results could also be adversely affected by spending caps or changes in the U.S. government or the DoD’s budgetary priorities, as well as delays in program starts or the award of contracts or task orders under contracts.

Not every risk or liability we face is or can be protected by insurance, and for those risks we insure, the limits of coverage that are reasonably obtainable may not be sufficient to cover all actual losses or liabilities incurred. We are limited in the amount of insurance we can obtain to cover certain risks, such as cybersecurity risks and natural hazards, including earthquakes, fires,

Not every risk or liability we face is or can be protected by insurance, and for those risks we insure, the limits of coverage that are reasonably obtainable may not be sufficient to cover all actual losses or liabilities incurred. We are limited in the amount of insurance we can obtain to cover certain risks, such as cybersecurity risks and natural hazards, including earthquakes, fires, and extreme weather conditions, some of which can be worsened by climate change and pandemics. If any of our third-party insurers fail, become insolvent, cancel our coverage or otherwise are unable to provide us with adequate insurance coverage or renew our insurance coverage on favorable terms, then our overall risk exposure and our operational expenses would increase, and the management of our business operations would be disrupted. Our insurance may be insufficient to protect us from significant product and other liability claims or losses. Moreover, there is a risk that commercially available liability insurance will not continue to be available to us at a reasonable cost, if at all. In some circumstances, we are entitled to certain legal protections or indemnifications from our customers through contractual provisions, laws, regulations, or otherwise. However, these protections are not always available, can be difficult to obtain, are typically subject to certain terms or limitations, including the availability of funds, and may not be sufficient to cover all losses or liabilities incurred. If liability claims or losses exceed our current or available insurance coverage, customer indemnifications, or other legal protections, our business, financial position, operating results and prospects may be harmed. Any significant claim may have an adverse effect on our industry and market reputation, leading to a substantial decrease in demand for our products and services and reduced revenues, making it more difficult for us to compete effectively, and could affect the cost and availability of insurance coverage at adequate levels in the future.

We are routinely subject to governmental investigations relating to compliance with various laws and regulations with respect to our role as a contractor to federal, state and local government customers and in connection with performing services in countries outside the United States. If a review or investigation identifies improper or unlawful activities, we may be subject to disgorgement of profits, fines, damages, litigation, civil or criminal penalties, exclusion from sales channels or sales opportunities, injunctions, or administrative sanctions, including the termination of contracts, the triggering of price reduction clauses, suspension of payments, suspension or debarment from doing business with governmental agencies or other consequences. We may suffer harm to our reputation if allegations of impropriety are made against us, which would impair our ability to win new contract awards or receive contract renewals. Penalties and sanctions are not uncommon in our industry. If we incur a material penalty or administrative sanction or otherwise suffer harm to our reputation, our revenues, profitability, cash position and future prospects could be adversely affected. More generally, increases in scrutiny and investigations into business practices and major programs supported by contractors from government organizations, legislative bodies, or agencies may lead to increased legal costs and may harm our reputation, revenues, profitability and growth prospects. For a description of our current legal proceedings, see “Item 3. Legal Proceedings” along with “Note 21—Commitments and Contingencies” of the notes to the consolidated financial statements contained within this Annual Report on Form 10-K.

We are routinely subject to governmental investigations relating to compliance with various laws and regulations with respect to our role as a contractor to federal, state and local government customers and in connection with performing services in countries outside the United States. If a review or investigation identifies improper or unlawful activities, we may be subject to disgorgement of profits, fines, damages, litigation, civil or criminal penalties, exclusion from sales channels or sales opportunities, injunctions, or administrative sanctions, including the termination of contracts, the triggering of price reduction clauses, suspension of payments, suspension or debarment from doing business with governmental agencies or other consequences. We may suffer harm to our reputation if allegations of impropriety are made against us, which would impair our ability to win new contract awards or receive contract renewals. Penalties and sanctions are not uncommon in our industry. If we incur a material penalty or administrative sanction or otherwise suffer harm to our reputation, our revenues, profitability, cash position and future prospects could be adversely affected. More generally, increases in scrutiny and investigations into business practices and major programs supported by contractors from government organizations, legislative bodies, or agencies may lead to increased legal costs and may harm our reputation, revenues, profitability and growth prospects. For a description of our current legal proceedings, see “Item 3. Legal Proceedings” along with “Note 21—Commitments and Contingencies” of the notes to the consolidated financial statements contained within this Annual Report on Form 10-K. 22Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report 22Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report 22 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

We conduct our business in various currencies, including the U.S. dollar, the British pound and the Australian dollar. Changes in foreign currency exchange rates could reduce our revenues, increase our costs or otherwise adversely affect our financial results reported in U.S. dollars. We may from time to time enter into foreign currency contracts, foreign currency borrowings or other techniques intended to hedge a portion of our foreign currency exchange rate risks. These hedging activities may not completely offset the adverse financial effects of unfavorable movements in foreign currency exchange rates during the 36Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report 36Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report 36 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I time hedges are in place. Any of these risks might have an adverse impact on our business operations and our financial position, results of operations or cash flows.

We conduct our business in various currencies, including the U.S. dollar, the British pound and the Australian dollar. Changes in foreign currency exchange rates could reduce our revenues, increase our costs or otherwise adversely affect our financial results reported in U.S. dollars. We may from time to time enter into foreign currency contracts, foreign currency borrowings or other techniques intended to hedge a portion of our foreign currency exchange rate risks. These hedging activities may not completely offset the adverse financial effects of unfavorable movements in foreign currency exchange rates during the time hedges are in place. Any of these risks might have an adverse impact on our business operations and our financial position, results of operations or cash flows.

We derive a portion of our revenues from programs with the U.S. government and its agencies that are subject to security restrictions (e.g., contracts involving classified information and classified programs), which preclude the dissemination of information and technology that is classified for national security purposes under applicable law and regulation. In general, access to classified information, technology, facilities, or programs requires appropriate personnel security clearances, is subject to additional contract oversight and potential liability, and may also require appropriate facility clearances and other specialized infrastructure. In the event of a security incident involving classified information, technology, facilities, programs, or personnel holding clearances, we may be subject to legal, financial, operational and reputational harm. We are limited in our ability to provide information about these classified programs, their risks or any disputes or claims relating to such programs. As a result, investors have less insight into our classified business or our business overall. However, historically the business risks associated with our work on classified programs have not differed materially from those of our other government contracts.

We derive a portion of our revenues from programs with the U.S. government and its agencies that are subject to security restrictions (e.g., contracts involving classified information and classified programs), which preclude the dissemination of information and technology that is classified for national security purposes under applicable law and regulation. In general, access to classified information, technology, facilities, or programs requires appropriate personnel security clearances, is subject to additional contract oversight and potential liability, and may also require appropriate facility clearances and other specialized infrastructure. In the event of a security incident involving classified information, technology, facilities, programs, or personnel holding clearances, we may be subject to legal, financial, operational and reputational harm. We are limited in our ability to provide information about these classified programs, their risks or any disputes or claims relating to such programs. As a result, investors have less insight into our classified business or our business overall. However, historically the business risks associated with our work on classified programs have not differed materially from those of our other government contracts. 30Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report 30Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report 30 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

We utilize AI in connection with our business. There are significant risks involved in using AI and no assurance can be provided that our use of AI will enhance our products or services, produce the intended results, or keep pace with our competitors. For example, AI algorithms may be flawed, insufficient, of poor quality, rely upon incorrect or inaccurate data, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable; AI has been known to produce false or “hallucinatory” inferences or outputs; our use of AI can present ethical issues and may subject us to new or heightened legal, regulatory, ethical, or other challenges; and inappropriate or controversial data practices by developers and end-users, or other factors adversely affecting public opinion of AI, could impair the acceptance of AI solutions, including those incorporated in our products and services. If the AI tools that we use are deficient, inaccurate, or controversial, we could incur operational inefficiencies, competitive harm, legal liability, brand or reputational harm, or other adverse impacts on our business and financial results. Additionally, if any of our employees, contractors, consultants, vendors or service providers use any third-party AI-powered software in connection with our business or the services they provide to us, it may lead to the inadvertent disclosure or incorporation of our confidential information into publicly available training sets, which may impact our ability to realize the benefit of, or adequately maintain, protect and enforce our intellectual property or confidential information, harming our

We utilize artificial intelligence, including generative artificial intelligence, machine learning, and similar tools and technologies that collect, aggregate, analyze, or generate data or other materials or content (collectively, “AI”) in connection with our business. There are significant risks involved in using AI and no assurance can be provided that our use of AI will enhance our products or services, produce the intended results, or keep pace with our competitors. For example, AI algorithms may be flawed, insufficient, of poor quality, rely upon incorrect or inaccurate data, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable; AI has been known to produce false or “hallucinatory” inferences or outputs; our use of AI can present ethical issues and may subject us to new or heightened legal, regulatory, ethical, or other challenges; and inappropriate or controversial data practices by developers and end-users, or other factors adversely affecting public opinion of AI, could impair the acceptance of AI solutions, including those incorporated in our products and services. If the AI tools that we use are deficient, inaccurate, or controversial, we could incur operational inefficiencies, competitive harm, legal liability, brand or reputational harm, or other adverse impacts on our business and financial results. If we do not have sufficient rights to use the data or other material or content on which the AI tools we use rely, we also may incur liability through the violation of applicable laws and regulations, third-party intellectual property, data privacy, or other rights, or contracts to which we are a party. In addition, AI regulation is rapidly evolving worldwide as legislators and regulators increasingly focus on these powerful emerging technologies. The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, data privacy and security, consumer protection, competition, and equal opportunity laws, and are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations. AI is the subject of ongoing review by various U.S. governmental and regulatory agencies, and various U.S. states and other foreign jurisdictions are applying, or are considering applying, their platform moderation, data privacy, and security laws and regulations to AI or are considering general legal frameworks for AI. For example, the EU’s Artificial Intelligence Act (the “AI Act”), which entered into force on August 1, 2024, establishes, among other things, a risk-based governance framework for regulating AI systems operating in the EU. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational, or technological risks that may arise relating to the use of AI.

13 Table of ContentsPART I Table of Contents PART I Table of Contents PART I uOur failure to comply with various complex procurement rules and regulations could result in us being liable for penalties, including termination of our U.S. government contracts, disqualification from bidding on future U.S. government contracts and suspension or debarment from U.S. government contracting. uThe U.S. government may adopt new contract rules and regulations or revise its procurement practices in a manner adverse to us at any time. uApplication of the U.S. government's organizational conflict of interest (OCI) rules could limit our ability to successfully compete for new contracts or task orders, which would adversely affect our results of operations. uAs a U.S. government contractor, our partners and we are subject to reviews, audits and cost adjustments by the U.S. government, which could adversely affect our profitability, cash position or growth prospects if resolved unfavorably to us. uOur business is subject to governmental review and investigation, which could adversely affect our financial position, operating results and growth prospects. uInvestigations, audits, claims, disputes, enforcement actions, litigation, arbitration or other legal proceedings could require us to pay potentially large damage awards or penalties and could be costly to defend, which would adversely affect our cash balances and profitability, and could damage our reputation. uOur business and operations expose us to numerous legal and regulatory requirements, and any violation of these requirements could harm our business. uOur business is subject to complex and evolving laws and regulations regarding data privacy and security which could subject us to investigations, claims or monetary penalties against us, require us to change our business practices or otherwise adversely affect our revenues and profitability. uMisconduct of employees, subcontractors, agents, suppliers, business partners or joint ventures and others working on our behalf could cause us to lose existing contracts or customers and adversely affect our ability to obtain new contracts and could have a material adverse impact on our business, reputation and future results. uA failure to attract, retain, and develop talent with critical skills, including our leadership team, would adversely affect our ability to execute our strategy and may disrupt our operations. uWe may not realize the full amounts reflected in our backlog as revenues, which could adversely affect our expected future revenues and growth prospects. uOur earnings and profitability may vary based on the mix of our contracts and may be adversely affected by our failure to estimate and manage costs, time and resources accurately. uWe use estimates in recognizing revenues, and if we make changes to estimates used in recognizing revenues, our profitability may be adversely affected. uCybersecurity breaches and other information security incidents could negatively impact our business and financial results, impair our ability to effectively provide our services to our customers and cause harm to our reputation or competitive position. uInternal system or service failures, or failures in the systems or services of third parties on which we rely, could disrupt our business and impair our ability to effectively provide our services and products to our customers, which could damage our reputation and adversely affect our revenues and profitability. uCustomer systems failures could damage our reputation and adversely affect our revenues and profitability. uOur success depends, in part, on our ability to work with complex and rapidly changing technologies to meet the needs of our customers. uWe utilize artificial intelligence, which could expose us to liability or adversely affect our business, especially if we are unable to compete effectively with others in adopting artificial intelligence. uWe have classified contracts with the U.S. government, which may limit investor insight into portions of our business. uWe have made and continue to make acquisitions, investments, joint ventures and divestitures that involve numerous risks and uncertainties. uJoint ventures, other strategic alliances, and strategic business transactions may not achieve intended results. We may experience operational challenges in integrating or segregating assets for such a venture or transaction. 14Leidos Holdings, Inc. Annual Report 14Leidos Holdings, Inc. Annual Report 14Leidos Holdings, Inc. Annual Report 14 Leidos Holdings, Inc. Annual Report 14Leidos Holdings, Inc. Annual Report 14Leidos Holdings, Inc. Annual Report 14 Leidos Holdings, Inc. Annual Report 14Leidos Holdings, Inc. Annual Report 14 Leidos Holdings, Inc. Annual Report 14 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I uGoodwill represents a significant asset on our balance sheet and any impairment of this asset could negatively impact our results of operations, and shareholders’ equity. uWe depend on our teaming arrangements and relationships with other contractors and subcontractors. If we are not able to maintain these relationships, or if these parties fail to satisfy their obligations to us or the customer, our revenues, profitability and growth prospects could be adversely affected. uWe could incur significant liabilities and suffer negative publicity if our inspection or detection systems fail to detect bombs, explosives, weapons, contraband or other threats. uWe face risks associated with our international business. uChanges in tax laws and regulations or exposure to additional tax liabilities could adversely affect our financial results.

15 Table of ContentsPART I Table of Contents PART I Table of Contents PART I uA failure to attract, retain, and develop talent with critical skills, including our leadership team, would adversely affect our ability to execute our strategy and may disrupt our operations. uWe may not realize the full amounts reflected in our backlog as revenues, which could adversely affect our expected future revenues and growth prospects. uOur earnings and profitability may vary based on the mix of our contracts and may be adversely affected by our failure to estimate and manage costs, time and resources accurately. uWe use estimates in recognizing revenues, and if we make changes to estimates used in recognizing revenues, our profitability may be adversely affected. uCybersecurity breaches and other information security incidents could negatively impact our business and financial results, impair our ability to effectively provide our services to our customers and cause harm to our reputation or competitive position. uInternal system or service failures, or failures in the systems or services of third parties on which we rely, could disrupt our business and impair our ability to effectively provide our services and products to our customers, which could damage our reputation and adversely affect our revenues and profitability. uCustomer systems failures could damage our reputation and adversely affect our revenues and profitability. uOur success depends, in part, on our ability to work with complex and rapidly changing technologies to meet the needs of our customers. uWe utilize artificial intelligence, which could expose us to liability or adversely affect our business, especially if we are unable to compete effectively with others in adopting artificial intelligence. uWe have classified contracts with the U.S. government, which may limit investor insight into portions of our business. uWe have made and continue to make acquisitions, investments, joint ventures and divestitures that involve numerous risks and uncertainties. uGoodwill represents a significant asset on our balance sheet and any impairment of this asset could negatively impact our results of operations, and shareholders’ equity. uWe depend on our teaming arrangements and relationships with other contractors and subcontractors. If we are not able to maintain these relationships, or if these parties fail to satisfy their obligations to us or the customer, our revenues, profitability and growth prospects could be adversely affected. uWe could incur significant liabilities and suffer negative publicity if our inspection or detection systems fail to detect bombs, explosives, weapons, contraband or other threats. uWe face risks associated with our international business. uChanges in tax laws and regulations or exposure to additional tax liabilities could adversely affect our financial results. 16Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report 16Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report 16 Leidos Holdings, Inc. Annual Report Table of ContentsPART I Table of Contents PART I Table of Contents PART I

21 Table of ContentsPART I Table of Contents PART I Table of Contents PART I As a result of increased scrutiny on contractors and U.S. government agencies, audits and reviews are conducted rigorously and the applicable standards are strictly interpreted, increasing the likelihood of an audit or review resulting in an adverse outcome. A finding of material weakness in our business system audits or other reviews can result in the suspension of payments or lower billing rates to our U.S. government customers until the material weakness is corrected and the DCMA accepts our remediations. Government audits and reviews may conclude that our practices are not consistent with applicable laws and regulations and result in adjustments to contract costs and mandatory customer refunds. Such adjustments can be applied retroactively, which could result in significant customer refunds. Our receipt of adverse audit findings or the failure to obtain an “approved” determination of our various business systems from the responsible U.S. government agency could significantly and adversely affect our business, including our ability to bid on new contracts and our competitive position in the bidding process. A determination of noncompliance could also result in the U.S. government imposing penalties and sanctions against us, including reductions of the value of contracts, contract modifications reflecting less favorable terms or termination, withholding of payments, the loss of export/import privileges, administrative or civil judgments and liabilities, criminal judgments or convictions, liabilities and consent or other voluntary decrees or agreements, other sanctions, the assessment of penalties, fines or compensatory, treble or other damages or non-monetary relief or actions, suspension or debarment, suspension of payments and increased government scrutiny that could negatively impact our reputation, delay or adversely affect our ability to invoice and receive timely payment on contracts, perform contracts or compete for contracts with the U.S. government. As of January 2, 2026, indirect cost audits by the DCAA remain open for fiscal 2023 and subsequent fiscal years. Although we have recorded contract revenues based upon our estimate of costs that we believe will be approved upon final audit or review, we cannot predict the outcome of any ongoing or future audits or reviews and adjustments and, if future adjustments exceed our estimates, our profitability may be adversely affected.

U.S. government contractors (including their subcontractors and others with whom they do business) operate in a highly regulated environment and are routinely audited and reviewed by the U.S. government and its agencies, including the DCAA, DCMA, the DoD Inspector General, and others. These agencies review a contractor’s performance on government contracts, cost structure, indirect rates and pricing practices, compliance with applicable contracting and procurement laws, regulations, terms, and standards, and the adequacy of our systems and processes in meeting government requirements. They also review the adequacy of the contractor’s compliance with government standards for its business systems, including a contractor’s accounting system, earned value management system, estimating system, materials management and accounting system, property management system, and purchasing system. As a result of increased scrutiny on contractors and U.S. government agencies, audits and reviews are conducted rigorously and the applicable standards are strictly interpreted, increasing the likelihood of an audit or review resulting in an adverse outcome. A finding of significant control deficiencies in our business system audits or other reviews can result in the suspension of payments or lower billing rates to our U.S. government customers until the control deficiencies are corrected and the DCMA accepts our remediations. Government audits and reviews may conclude that our practices are not consistent with applicable laws and regulations and result in adjustments to contract costs and mandatory customer refunds. Such adjustments can be applied retroactively, which could result in significant customer refunds. Our receipt of adverse audit findings or the failure to obtain an “approved” determination of our various business systems from the responsible U.S. government agency could significantly and adversely affect our business, including our ability to bid on new contracts and our competitive position in the bidding process. A determination of noncompliance could also result in the U.S. government imposing penalties and sanctions against us, including reductions of the value of contracts, contract modifications reflecting less favorable terms or termination, withholding of payments, the loss of export/import privileges, administrative or civil judgments and liabilities, criminal judgments or convictions, liabilities and consent or other voluntary decrees or agreements, other sanctions, the assessment of penalties, fines or compensatory, treble or other damages or non-monetary relief or actions, suspension or debarment, suspension of payments and increased government scrutiny that could negatively impact our reputation, delay or adversely affect our ability to invoice and receive timely payment on contracts, perform contracts or compete for contracts with the U.S. government. As of January 3, 2025, indirect cost audits by the DCAA remain open for fiscal 2022 and subsequent fiscal years. Although we have recorded contract revenues based upon our estimate of costs that we believe will be approved upon final audit or review, we cannot predict the outcome of any ongoing or future audits or reviews and adjustments and, if future adjustments exceed our estimates, our profitability may be adversely affected.

27 Table of ContentsPART I Table of Contents PART I Table of Contents PART I ability to effectively provide our services and products to our customers, which could damage our reputation and adversely affect our revenues and profitability.” The occurrence of any unauthorized access to, attacks on cybersecurity breaches of other information security threats to our or our service providers’, suppliers’ or subcontractors’ information technology infrastructure, systems or networks or data, or our failure to make adequate or timely disclosure to the public, regulators, or law enforcement agencies following any such event, could disrupt our infrastructure, systems, or networks or those of our customers, impair our ability to provide services to our customers and may jeopardize the security of data collected, stored, transmitted or otherwise processed through our information technology infrastructure, systems and networks. As a result, we could be exposed to claims, fines, penalties, loss of revenues, product development delays, compromise, corruption, or loss of confidential, proprietary, or sensitive information (including personal information or technical business information), contract terminations and damages, remediation costs and other costs and expenses, regulatory investigations or sanctions, indemnity obligations, and other potential liabilities. Any of the foregoing could adversely affect our reputation, ability to win work on sensitive contracts or loss of current and future contracts (including sensitive U.S. government contracts), business operations and financial results. While we have insurance against some cyber-risks and attacks, our insurer may deny coverage as to any future claim, our insurance coverage may not be sufficient to offset the impact of a material loss event, and such insurance may increase in cost or cease to be available on commercial terms in the future.

27 Table of ContentsPART I Table of Contents PART I Table of Contents PART I We do not control our service providers and our ability to monitor their cybersecurity is limited, so we cannot ensure the cybersecurity measures they take will be sufficient to protect any information we share with them. Due to applicable laws and regulations or contractual obligations, we may be held accountable for cybersecurity breaches or other information security incidents attributed to our service providers as they relate to the information we share with them. We seek to detect and investigate all information security incidents and to prevent their occurrence, prolongation, or recurrence. We continue to invest in and improve our threat protection, detection and mitigation policies, procedures and controls. In addition, we work with other companies in the industry and government participants on increased awareness and enhanced protections against information security and malicious insider threats. However, because of the evolving nature and sophistication of these security threats, which can be difficult to detect, there can be no assurance that our policies, procedures and controls, or those of our service providers, suppliers, or subcontractors, have protected against, detected, mitigated or will detect, prevent or mitigate, any of these threats and we cannot predict the full impact of any such past or future incident. We may be currently unaware of certain vulnerabilities or lack the capability to detect them, which may allow them to persist in our information technology environment over long periods, and, even if discovered, it could take considerable time for us to obtain full and reliable information about the extent, amount and type of information compromised, and our remediation efforts may not be completely successful. As cybersecurity threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate or remediate any information security vulnerabilities, cybersecurity breaches or other information security incidents. We may also experience similar security threats to the information technology systems we develop, install, or maintain under customer contracts. Although we work cooperatively with our customers and other business partners, including our service providers, suppliers, and subcontractors, to seek to minimize the potential for and impact of cyber-attacks and other security threats, we must rely on the safeguards put in place by those entities. See also the risk factor “Internal system or service failures, or failures in the systems or services of third parties on which we rely, could disrupt our business and impair our ability to effectively provide our services and products to our customers, which could damage our reputation and adversely affect our revenues and profitability.” The occurrence of any unauthorized access to, attacks on cybersecurity breaches of other information security threats to our or our service providers’, suppliers’ or subcontractors’ information technology infrastructure, systems or networks or data, or our failure to make adequate or timely disclosure to the public, regulators, or law enforcement agencies following any such event, could disrupt our infrastructure, systems, or networks or those of our customers, impair our ability to provide services to our customers and may jeopardize the security of data collected, stored, transmitted or otherwise processed through our information technology infrastructure, systems and networks. As a result, we could be exposed to claims, fines, penalties, loss of revenues, product development delays, compromise, corruption, or loss of confidential, proprietary, or sensitive information (including personal information or technical business information), contract terminations and damages, remediation costs and other costs and expenses, regulatory investigations or sanctions, indemnity obligations, and other potential liabilities. Any of the foregoing could adversely affect our reputation, ability to win work on sensitive contracts or loss of current and future contracts (including sensitive U.S. government contracts), business operations and financial results. While we have insurance against some cyber-risks and attacks, our insurer may deny coverage as to any future claim, our insurance coverage may not be sufficient to offset the impact of a material loss event, and such insurance may increase in cost or cease to be available on commercial terms in the future.

23 Table of ContentsPART I Table of Contents PART I Table of Contents PART I all of which could adversely affect our business, financial condition and results of operations. We may also incur substantial expenses in implementing and maintaining compliance with such laws, regulations, and other obligations. For additional background on the data privacy and security laws that apply to our business and the related compliance risks, see “Regulation” within Item 1 of this Annual Report on Form 10-K.

23 Table of ContentsPART I Table of Contents PART I Table of Contents PART I exceed requirements, to the extent we do not, we will be unable to bid on such contract awards, which could adversely impact our revenue and our profitability. The overarching complexity of data privacy and security laws and regulations around the world poses a compliance challenge that could manifest in costs, damages, or liability in other forms as a result of failure to implement proper programmatic controls, failure to adhere to those controls, or the breach of applicable data privacy and security requirements by us, our employees, our business partners (including our service providers, suppliers or subcontractors) or our customers. We also expect that there will continue to be new proposed laws, regulations, and industry standards concerning data privacy and security, and we cannot yet determine the impact such future laws, regulations and standards, or amendments to or re-interpretations of existing laws, regulations or standards, may have on our business. Any failure or perceived failure by us, our service providers, suppliers, subcontractors, or other business partners to comply with applicable laws, regulations, our public privacy policies and other public statements about data privacy and security and other obligations in these areas could result in regulatory or government actions lawsuits against us (including civil claims, such as representative actions and other class action-type litigation), legal liability, monetary penalties, fines, sanctions, damages and other costs, orders to cease or change our processing of data, changes to our business practices, diversion of internal resources, and harm to our reputation, all of which could adversely affect our business, financial condition and results of operations. We may also incur substantial expenses in implementing and maintaining compliance with such laws, regulations, and other obligations. For additional background on the data privacy and security laws that apply to our business and the related compliance risks, see “Regulation” within Item 1 of this Annual Report on Form 10-K.