MSCI Inc.: 10-K Risk Factor Changes

We operate in highly competitive markets that continually change to meet client needs. To remain competitive, we must continually introduce new products and services; enhance existing products and services delivered through our own systems and through third-party platforms; collect, organize, analyze and protect large amounts of information to generate insights; and effectively generate client demand for new and enhanced products and services. We may not be successful in developing, introducing, implementing, marketing, pricing, launching or licensing new products or enhancements on a timely or cost-effective basis or without impacting the stability and efficiency of existing products and systems. Any new products and enhancements may not adequately meet the requirements of the marketplace or industry standards or achieve market acceptance. The process of developing and enhancing our products and services is complex and may become increasingly complex and expensive in the future, including due to the introduction of new technology, the costs of our workforce and the expectations of our clients. This process often requires effective collaboration across various functions and product lines, and ineffective or insufficient collaboration may harm our ability to meet our business objectives. In addition, our reputation could be harmed if we are perceived as not innovating rapidly enough to meet the changing needs of investors or their advisors. These changing needs include a greater expectation that information be delivered with a higher degree of customization and service quality. We must make long-term investments and commit significant resources before knowing whether these investments will eventually result in new or enhanced products and services that satisfy our clients’ needs and generate adequate revenues. We also incur costs to integrate existing products and services and transition clients to enhanced products and services, which also present execution risks and could lead to price reductions or other concessions. If we are unable to effectively manage the development of new or enhanced products and services, we may not be able to remain competitive and our business, financial condition or results of operations could be materially adversely affected.

We operate in highly competitive markets that continuously change to adapt to meet client needs. To remain competitive, we must continually introduce new products and services; enhance existing products and services, including through integration of products and services within MSCI and with third-party platforms; collect, organize, analyze and protect large amounts of information to generate insights; and effectively generate client demand for new and enhanced products and services. We may not be successful in developing, introducing, implementing, marketing, pricing, launching or licensing new products or enhancements on a timely or cost-effective basis or without impacting the stability and efficiency of existing products and systems. Any new products and enhancements may not adequately meet the requirements of the marketplace or industry standards or achieve market acceptance. The process of developing and enhancing our products and services is complex and may become increasingly complex and expensive in the future, including due to the introduction of new technology and client expectations. This process often requires effective collaboration across various functions and product lines, and ineffective or insufficient collaboration may harm our ability to meet our business objectives. In addition, our reputation could be harmed if we are perceived as not innovating rapidly enough to meet the changing needs of investors or their advisors. These changing needs include a greater expectation that information be delivered with a higher degree of personalization and service quality. We must make long-term investments and commit significant resources before knowing whether these investments will eventually result in new or enhanced products and services that satisfy our clients’ needs and generate adequate revenues. From time to time, we also incur costs to integrate existing products and services and transition clients to enhanced products and services, which also present execution risks and challenges and could lead to price reductions or other concessions. 22 22 22 Table of Contents Table of Contents If we are unable to effectively manage the development of new or enhanced products and services, we may not be able to remain competitive and our business, financial condition or results of operations could be materially adversely affected.

Our success depends on the knowledge, skills, experience and abilities of our employees, particularly our executives and other key employees. Although we do not believe that we are overly dependent upon any individual employee, the loss of any of our key employees and our inability to replace them with suitable candidates quickly or at all, as well as any negative market perception resulting from such loss, could have a material adverse effect on our business, financial condition or results of operations. We compete for talent across industries, including technology, engineering and financial services companies, and there is a limited pool of employees who have the skills and training needed to do our work, including with expertise in emerging technologies, such as AI. Competition for these employees is intense, and turnover may impact our objectives and place strain on our human resources teams. We may not be able to attract these employees or to develop and retain similar highly qualified personnel in the future. Rising compensation expenses could also adversely affect our ability to attract and retain high-quality employees. Competitors may offer more favorable working conditions or more attractive compensation packages. If our compensation programs do not adequately engage our key employees or are not competitive, or if we fail to attract, engage and retain the necessary qualified 29 29 29 Table of Contents Table of Contents personnel, the quality of our products and services as well as our ability to support and retain our clients and achieve business objectives may suffer.

The development, maintenance and support of our products and services are dependent upon the knowledge, skills, experience and abilities of our employees. Accordingly, we believe the success of our business depends to a significant extent upon the continued service of our executives and other key employees. Although we do not believe that we are overly dependent upon any individual employee, our management and other employees may terminate employment at any time, and the loss of any of our key employees and our inability to replace them with suitable candidates quickly or at all, as well as any negative market perception resulting from such loss, could have a material adverse effect on our business, financial condition or results of operations. We compete for key employees not only with other companies in our industry but also with companies in other industries, such as software services, engineering services and financial services companies, and there is a limited pool of employees who have the skills and training needed to do our work, including with expertise in emerging technologies, such as AI. Competition for these employees is intense, and employee turnover may impact our objectives and place strain on our human resources teams. We may not be able to attract these employees or to develop and retain similar highly qualified personnel in the future. Rising compensation expenses could also adversely affect our ability to attract and retain high-quality employees. Competitors may seek to attract talent by providing more favorable working conditions or offering significantly more attractive compensation packages. If our compensation programs do not adequately engage our key employees or are not competitive, or if we fail to attract, engage and retain the necessary qualified personnel, the quality of our products and services as well as our ability to support and retain our clients and achieve business objectives may suffer.

Competition exists across all markets for our products and services. Our competitors range from large companies with substantial resources to small, single-product businesses that are highly specialized. Larger competitors may have access to more resources and may be able to achieve greater economies of scale, and specialized competitors may be more effective in devoting technical, marketing and financial resources to compete with respect to a particular product or service. Some competitors may offer price incentives or different pricing structures that are more attractive to clients. The competitive landscape may also experience consolidation, which results in a narrower pool of competitors that are better capitalized or that are able to gain a competitive advantage through synergies. Barriers to entry may be low or declining in many markets, including for single-purpose product companies, supporting new competitors. For example, more broker-dealers, data suppliers, credit rating agencies or other market participants or vendors could begin developing their own content such as proprietary risk analytics, sustainability and climate data or indexes. Factors such as increases in the availability of free or relatively inexpensive information through internet sources or other low-cost delivery systems, advances in cloud computing, increased use of open source code, the ability of machine learning and other AI to process and organize large data sets, as well as client development of proprietary applications, have further reduced barriers to entry in some cases. Such developments may over time reduce the demand for, or clients’ willingness to pay for, certain of our products and services. We may experience pressures to reduce our fees, prolonged selling and renewal cycles, reduced client spending and increased cancellation rates on account of financial and budgetary pressures affecting our clients, including those resulting from weak or volatile economic or market conditions, the duration and long-term economic and societal consequences of the COVID-19 pandemic, 21 21 21 Table of Contents Table of Contents geopolitical conflicts and the inflationary environment, which may lead certain clients to reduce their overall spending on our products or services, including by seeking similar products or services at a lower cost than what we are able to provide, by consolidating their spending with fewer providers, by consolidating with other clients or by self-sourcing their information and analytical needs. Accordingly, competitive and market pressures may result in fewer clients or reduced sales, including as a result of client closures and consolidations, price reductions, prolonged selling and renewal cycles and increased operating costs, such as for marketing and product development, which could, individually or in the aggregate, result in a material adverse effect on our business, financial condition or results of operations.

Competition exists across all markets for our products and services. Our competitors range in size from large companies with substantial resources to small, single-product businesses that are highly specialized. Our larger competitors may have access to more resources and may be able to achieve greater economies of scale, and our specialized competitors may be more effective in devoting technical, marketing and financial resources to compete with us with respect to a particular product or service. Some competitors may offer price incentives or different pricing structures that are more attractive to clients. The competitive landscape may also experience consolidation in the form of mergers and acquisitions, joint ventures or strategic partnerships, which result in a narrower pool of competitors that are better capitalized or that are able to gain a competitive advantage through synergies. Barriers to entry may be low or declining in many of the markets for our products and services, including for single-purpose product companies, which could lead to the emergence of new competitors. For example, more broker-dealers, data suppliers, credit rating agencies or other market participants or vendors could begin developing their own content such as proprietary risk analytics, ESG and climate data or indexes. Recent developments, including increases in the availability of free or relatively inexpensive information through Internet sources or other low-cost delivery systems, advances in cloud computing, increased use of open source code, the ability of machine learning and other artificial intelligence systems to process and organize large data sets, as well as client development of proprietary applications in specific areas, have further reduced barriers to entry in some cases. Such developments may over time reduce the demand for, or clients’ willingness to pay for, certain of our products and services. We may experience pressures to reduce our fees on account of financial and budgetary pressures affecting our clients, including those resulting from weak or volatile economic or market conditions, including uncertainty regarding a global recession or significant financial-market event or crisis, the duration and long-term economic and societal consequences of the COVID-19 pandemic, the Russia-Ukraine conflict, the Israel-Hamas conflict or other geopolitical conflicts and the inflationary environment, which may lead certain clients to reduce their overall spending on our products or services, including by seeking similar products or services at a lower cost than what we are able to provide, by consolidating their spending with fewer providers, by consolidating with other clients or by self-sourcing certain of their information and analytical needs. Accordingly, competitive and market pressures may result in fewer clients or reduced sales, including as a result of client closures and consolidations, price reductions, prolonged selling and renewal cycles and increased operating costs, such as for marketing and product development, which could, individually or in the aggregate, result in a material adverse effect on our business, financial condition or results of operations.

We have experienced significant revenue and earnings growth since we began operations. There can be no assurance that we will be able to maintain the levels of growth and profitability that we have experienced in the past. Factors that could affect our financial performance include higher than expected operating costs, including increased compensation costs, regulatory compliance costs, occupancy costs, selling and marketing costs, investments in geographic expansion, market data costs, software license costs, communication costs, travel costs, application development costs, professional fees, costs related to information technology infrastructure, cloud usage and other IT costs. If we cannot adjust to these costs, our operating results may fluctuate significantly or our anticipated profitability may be reduced. Additionally, macroeconomic conditions such as inflation, interest rates and currency fluctuations may increase our operating costs and create uncertainty for our clients, placing downward pressure on their budgets and reducing demand for our products and services. Prolonged sales cycles or shifts in client priorities, including consolidation, restructuring or changes in investment strategies, may lead to lower client retention. Evolving market dynamics, including increased competition or slower adoption of new offerings, may further challenge our ability to meet growth expectations. Additionally, there can be no assurance that our investments in our product development, selling and marketing efforts, or capital return or allocation strategies will achieve anticipated returns or result in growth or profit margins comparable to those we have experienced in the past. If we fail to effectively manage these challenges, our operating results could fluctuate significantly, and our financial condition may be materially adversely affected.

We have experienced significant revenue and earnings growth since we began operations. There can be no assurance that we will be able to maintain the levels of growth and profitability that we have experienced in the past. If we experience higher than expected operating costs, including increased compensation costs, regulatory compliance costs, occupancy costs, selling and marketing costs, investments in geographic expansion, market data costs, software license costs, communication costs, travel costs, application development costs, professional fees, costs related to information technology infrastructure, cloud usage and other IT costs, and we cannot adjust to these costs, our operating results may fluctuate significantly or our anticipated profitability may be reduced and our anticipated results of operations and financial position may be materially adversely affected. Additionally, there can be no assurance that we will be as successful in our product development, selling and marketing efforts, or capital return or allocation strategies as we have been in the past, or that such efforts will result in growth or profit margins comparable to those we have experienced in the past.

We evaluate the recoverability of recorded goodwill amounts annually or when evidence of potential impairment exists. Intangible assets are reviewed for impairment whenever events or changes in circumstances indicate that the carrying value of the asset may not be recoverable. These impairment tests are based on several factors requiring management’s judgment. In the recent past, we have completed a number of acquisitions. A prolonged or severe period of weakness in the business environment, financial markets, the performance of one or more of our recently acquired companies or reporting units or our common stock price, or a significant deviation from management’s assumptions, could result in impairments of goodwill or intangible assets. Such impairments could materially adversely affect our results of operations and financial position. In addition, if we are not successful in achieving anticipated revenue opportunities or operating efficiencies associated with acquisitions, our goodwill and intangible assets may become impaired.

We evaluate the recoverability of recorded goodwill amounts annually or when evidence of potential impairment exists. Intangible assets are reviewed for impairment whenever events or changes in circumstances indicate that the carrying value of the asset may not be recoverable. These impairment tests are based on several factors requiring management’s judgment. Changes in fair market valuations and our operating performance or business conditions, in general, could result in future impairments of goodwill or intangible assets which could materially adversely affect our results of operations. In addition, if we are not successful in achieving anticipated operating efficiencies associated with acquisitions, our goodwill and intangible assets may become impaired.

In the past, we have experienced interruptions and delays in the performance and delivery of certain products, including after we migrated applications and infrastructure to new data centers or other network infrastructure. While we have taken steps to mitigate such interruptions and delays, we cannot provide assurance that they will not occur again as part of future migration to new technologies, applications or processes (e.g., cloud migration), even after extensive testing, or if we experience significant growth of our customer base or increases in the number of products or services or in the speed at which we provide products and services. Such disruptions may result in cancellations and reduced demand for our products and services, resulting in decreased revenues, or in cost increases relating to our use of power and data storage. After adopting new technologies, applications and processes, we may experience unanticipated interruption and delay in the performance or delivery of certain products, services or client support. We may also incur increased operating expenses to recover data, repair, replace or remediate systems, equipment or facilities, and to protect ourselves from such disruptions. Accordingly, any significant failures, disruptions or instability affecting our information technology platform, providers, production and delivery systems, applications, processes or the internet could negatively affect our ability to distribute products and service our clients, damage our brand and reputation and result in litigation, which may have a material adverse effect on our business, financial condition or results of operations.

In the past, we have experienced unanticipated interruption and delay in the performance and delivery of certain products, including after we migrated applications and infrastructure to new data centers, database storage facilities or other network infrastructure located across multiple facilities globally. While we have taken steps to mitigate such interruptions and delays, we cannot provide assurance that they will not occur again in the future as part of migration efforts to new technologies, applications or processes (e.g., cloud migration), even after extensive testing of new systems, processes, applications and hardware, or if we experience significant growth of our customer base or increases in the number of products or services or in the speed at which we are required to provide products and services. Such disruptions may result in cancellations and reduced demand for our products and services, resulting in decreased revenues, or in cost increases relating to our use of power and data storage. After adopting new technologies, applications and processes, such as cloud computing, virtualization and agile software development, we may experience unanticipated interruption and delay in the performance and delivery of certain of our products, services and client support. We may also incur increased operating expenses to recover data, repair, replace or remediate systems, equipment or facilities, and to protect ourselves from such disruptions. Accordingly, any significant failures, disruptions or instability affecting our information technology platform, cloud providers, data centers, production and delivery systems, applications, processes or the Internet could negatively affect our ability to distribute our products effectively and to service our clients, damage our brand and reputation and result in litigation, which may have a material adverse effect on our business, financial condition or results of operations. 20 20 20 Table of Contents Table of Contents

We are subject to income taxes, and non-income taxes, across various jurisdictions. Significant judgment is required in determining our global provision for income taxes and other tax liabilities. Our income tax obligations are based in part on our corporate structure and intercompany arrangements. In the ordinary course of our global business, there are many intercompany transactions and calculations where the ultimate tax determination is uncertain, and tax authorities of the jurisdictions in which we operate may challenge our methodologies. Changes in tax laws could negatively impact our overall effective tax rate. Over the last several years, many jurisdictions and intergovernmental organizations have been discussing or are in the process of implementing proposals that may change aspects of the existing framework under which our tax obligations are determined in many of the jurisdictions in which we operate. Changes in tax laws, including the implementation of a 15% global minimum tax under OECD BEPS Pillar 2 and potential corporate tax rate increases in the U.S. and abroad, could materially affect our tax liabilities, effective tax rate and compliance costs. For instance, the expiration of certain U.S. Tax Cuts and Jobs Act provisions in 2026 and ongoing global adoption of minimum tax rules may increase our tax burden and operational complexity. In addition, heightened global tax transparency initiatives, such as country-by-country reporting and new FASB disclosure requirements, could increase tax controversy activity and investor scrutiny, further increasing our compliance costs and risks. We are regularly under audit by tax authorities. From time to time, we also face proceedings, investigations or inquiries related to tax matters. We may be subject to additional tax liabilities, as the jurisdictions in which we do business globally are increasingly focused on digital taxes and the treatment of remote workforces. Increased IRS funding may also result in greater audit activity targeting large multinationals, adding compliance burdens. Although we believe that our tax provisions are reasonable, there can be no assurance that the final determination of tax audits or tax disputes will not be different from what is reflected in our historical income tax provisions and accruals. To the extent we are required to pay amounts in excess of our reserves, such differences could have a material adverse effect on our Consolidated Statement of Income for a particular future period. In addition, an unfavorable tax settlement could require use of our cash and result in an increase in our effective tax rate in the period in which such resolution occurs and may have a material impact on our financial results. 27 27 27 Table of Contents Table of Contents

We are subject to income taxes, as well as non-income or indirect taxes, in the U.S. and various foreign jurisdictions. Significant judgment is required in determining our global provision for income taxes and other tax liabilities. Our income tax obligations are based in part on our corporate structure and intercompany arrangements. In the ordinary course of our global business, there are many intercompany transactions and calculations where the ultimate tax determination is uncertain, and tax authorities of the jurisdictions in which we operate may challenge our methodologies. Changes in domestic and international tax laws could negatively impact our overall effective tax rate. Over the last several years, many jurisdictions and intergovernmental organizations have been discussing or are in the process of implementing proposals that may change aspects of the existing framework under which our tax obligations are determined in many of the jurisdictions in which we operate. Recent pronouncements and directives related to this project include the implementation of a 15% global minimum tax in the near term. Many countries have begun to adopt these directives into their respective tax codes, with varying effective dates beginning January 1, 2024. Although we do not anticipate the directives to have a material impact on our financial results at this time, certain implementation details have yet to be developed and the enactment of certain of these changes has not yet taken effect in all jurisdictions in which we operate. As a result, these changes may have adverse tax consequences for us, may increase our compliance costs and may increase the amount of tax we are required to pay in certain jurisdictions. We are regularly under audit by tax authorities. From time to time, we also face proceedings, investigations or inquiries related to tax matters. We may be subject to additional tax liabilities as the jurisdictions in which we do business globally are increasingly focused on digital taxes and the treatment of remote workforces. Although we believe that our tax provisions are reasonable, there can be no assurance that the final determination of tax audits or tax disputes will not be different from what is reflected in our historical income tax provisions and accruals. To the extent we are required to pay amounts in excess of our reserves, such differences could have a material adverse effect on our Consolidated Statement of Income for a particular future period. In addition, an unfavorable tax settlement could require use of our cash and result in an increase in our effective tax rate in the period in which such resolution occurs and may have a material impact on our financial results. 28 28 28 Table of Contents Table of Contents

We rely on third-party suppliers of data, applications and services, including data from stock exchanges and other suppliers (collectively, “Vendor Products”), and depend on the accuracy and quality of Vendor Products and the ability and willingness of such suppliers to deliver, support, enhance and develop new products on a timely and cost-effective basis. Additionally, we rely on clients to supply us with certain data for our products and services, and depend on the delivery, accuracy, quality and accessibility of such data. If Vendor Products include errors or design defects, are delayed, become incompatible with future versions of our products, are unavailable on acceptable terms or are not available at all, we may not be able to deliver our products and services. In addition, in the ordinary course of business, suppliers of Vendor Products are subject to various forms of cyber-attacks or other security incidents. Cyber-attacks, vulnerabilities in our suppliers’ software, systems or networks, failure of our suppliers’ safeguards, policies or procedures and other incidents related to our suppliers’ systems and networks may cause material interruptions or malfunctions in our or such suppliers’ websites, applications or data processing and delivery, or may compromise the confidentiality and integrity of affected information. In addition, certain of our suppliers are also our competitors, and they could change the terms of the data and products that they supply to us in order to gain competitive advantage against us. Some of our agreements with third-party suppliers allow them to cancel on short notice, and from time to time we receive notices from third-party suppliers threatening to terminate the provision of their products or services to us, and some data suppliers have terminated the provision of their data to us. Termination of the provision of Vendor Products by one or more of our significant suppliers or exclusion from, or restricted use of, or litigation in connection with Vendor Products could decrease the data and materials available for us to use and deliver to our clients. In addition, some of our competitors could enter into exclusive contracts with our data suppliers, including with certain stock exchanges, which could preclude us from receiving certain data or other materials or restrict us in our use of such data or other materials. Such exclusive contracts could hinder our ability to create our products and services or to provide our clients with the data or other products or services they prefer. Despite our efforts to comply with the licensing requirements of Vendor Products, there can be no assurance that third parties will not challenge our use, which could result in increased acquisition or licensing costs, loss of rights or costly legal actions. Our business could be materially adversely affected if we are unable to timely or effectively replace the data or functionality provided by Vendor Products that may become unavailable or fail to operate effectively for any reason. Our operating costs could increase if additional license fees are imposed, or current license fees increase or the efforts to incorporate enhancements to Vendor Products are substantial and we are unable to negotiate acceptable licensing arrangements with these suppliers or find alternative sources of equivalent products or services. If any of these risks materialize, they could have a material adverse effect on our business, financial condition or results of operations. We also rely on third-party vendors, including some competitors, to distribute our data to clients. Should any of our key vendors refuse to distribute our data for any reason or require that we pay them new or additional fees in connection with the distribution of our data, we would need to find alternative ways to distribute our data, which could increase costs, disrupt operations and have a material adverse effect on our business, financial condition or results of operations.

We rely on third-party suppliers of data, applications and services, including data from stock exchanges and other suppliers (collectively, “Vendor Products”), and depend on the accuracy and quality of Vendor Products and the ability and willingness of such suppliers to deliver, support, enhance and develop new Vendor Products on a timely and cost-effective basis, and respond to emerging industry needs and other changes in order to produce, deliver and develop our products and services. Additionally, we depend on clients to supply certain data in order to provide our services to them. Any failure to supply, errors or reduction in the amount, accuracy or quality of such data supplied from clients impairs our ability to provide them with our products and services. If Vendor Products include errors, design defects, are delayed, become incompatible with future versions of our products, are unavailable on acceptable terms or are not available at all, we may not be able to deliver our products and services. In addition, in the ordinary course of business, suppliers of Vendor Products are subject to various forms of cyber-attacks or other security incidents. Cyber-attacks, vulnerabilities in our suppliers’ software, systems or networks, failure of our suppliers’ safeguards, policies or procedures and other incidents related to our suppliers’ systems and networks may cause material interruptions or malfunctions in our or such suppliers’ websites, applications or data processing, or may compromise the confidentiality and integrity of affected information. In addition, certain of our suppliers are also our competitors, and they could change the terms of the data and products that they supply to us in order to gain competitive advantage against us. Some of our agreements with third-party suppliers allow them to cancel on short notice and from time to time we receive notices from third-party suppliers threatening to terminate the provision of their products or services to us, and some data suppliers have terminated the provision of their data to us. Termination of the provision of Vendor Products by one or more of our significant suppliers or exclusion from, or restricted use of, or litigation in connection with Vendor Products could decrease the data and materials available for us to use and deliver to our clients. In addition, some of our competitors could enter into exclusive contracts with our data suppliers, including with certain stock exchanges. If our competitors enter into such exclusive contracts, we may be precluded from receiving certain data or other materials from these suppliers or restricted in our use of such data or other materials, which would give our competitors a competitive advantage. Such exclusive contracts could hinder our ability to create our products and services or to provide our clients with the data or other products or services they prefer, which could lead to a decrease in our client base. Despite our efforts to comply with the licensing requirements of Vendor Products, there can be no assurance that third parties will not challenge our use, which could result in increased acquisition or licensing costs, loss of rights or costly legal actions. Our business could be materially adversely affected if we are unable to timely or effectively replace the data or functionality provided by Vendor Products that become unavailable or fail to operate effectively for any reason. Our operating costs could increase if additional license fees are imposed or current license fees increase or the efforts to incorporate enhancements to Vendor Products are substantial and we are unable to negotiate acceptable licensing arrangements with these suppliers or find alternative sources of equivalent products or services. If any of these risks materialize, they could have a material adverse effect on our business, financial condition or results of operations. We also rely on certain third-party vendors to distribute our data to clients. While some of our vendors generate revenue in connection with distributing our data, others do not derive a direct financial benefit. Should any of our key vendors refuse to distribute our data for any reason or require that we pay them new or additional fees in connection with the distribution of our data, we would need to find alternative ways to distribute our data or lose revenue or profitability for certain products, which may have a material adverse effect on our business, financial condition or results of operations.

A material portion of our revenues is concentrated in some of our largest clients. For the fiscal year ended December 31, 2024, our largest client organization by revenue, BlackRock, accounted for 10.2% of our consolidated operating revenues. For the fiscal year ended December 31, 2023, BlackRock accounted for 9.8% of our consolidated operating revenues. Our revenue growth depends on our ability to obtain new clients, quickly onboard our clients and deploy our products and services to them, sell additional services to existing clients and achieve and sustain a high level of renewal rates with respect to our existing licenses. Failure to achieve one or more of these objectives could have a material adverse effect on our business, financial condition or results of operations. A client’s activity with us may decrease for a variety of reasons, including the client’s level of satisfaction with our products and services; the effectiveness of our support services; the pricing of our products and services; the pricing and quality of competing products or services; client events such as mergers, acquisitions, restructurings, or business closures; or the effects of changes in economic conditions and the global capital markets. In addition, demand for our products may be impacted by cyclical market changes, regulatory uncertainty and political scrutiny, which could negatively affect client adoption and our financial performance. If we experience significant cancelations or reductions in licenses, either individually or in the aggregate, and we are unsuccessful in replacing those licenses, our business, financial condition or results of operations could be materially adversely affected. 17 17 17 Table of Contents Table of Contents

A material portion of our revenues is concentrated in some of our largest clients. For the fiscal year ended December 31, 2023, our largest client organization by revenue, BlackRock, accounted for 9.8% of our consolidated operating revenues. For the fiscal year ended December 31, 2022, BlackRock accounted for 10.3% of our consolidated operating revenues. Our revenue growth depends on our ability to obtain new clients, quickly onboard our clients and deploy our products and services to them, sell additional services to existing clients and achieve and sustain a high level of renewal rates with respect to our existing licenses. Failure to achieve one or more of these objectives could have a material adverse effect on our business, financial condition or results of operations. A client’s activity with us may decrease for a variety of reasons, including the client’s level of satisfaction with our products and services; the effectiveness of our support services; the pricing of our products and services; the pricing and quality of competing products or services; or the effects of changes in economic conditions and the global capital markets. If one or more of our largest clients cancels or reduces its licenses, or a significant number of our other clients cancel or reduce their licenses, and we are unsuccessful in replacing those licenses, our business, financial condition or results of operations could be materially adversely affected.

Our operations rely on the secure collection, retrieval, storage, transmission and other processing of confidential, sensitive, proprietary and other types of data and information that is managed internally and with third-party vendors and service providers. We and our vendors and service providers are subject to security risks, including cyber-attacks and other security incidents, such as phishing scams or other social engineering attacks, hacking, tampering, intrusions, viruses, malware (including ransomware) and denial-of-service attacks. Cybersecurity risks also may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. The use of mobile and cloud technologies, as well as remote work arrangements, may heighten these risks. In addition, failure by our clients, third-party vendors or service providers to notify us of cybersecurity incidents in a timely manner could lead to unauthorized access to our systems and data, resulting in material adverse effects on our business, operations, and financial results. We may be exposed to more targeted and more sophisticated cyber-attacks and other security incidents because of our role or prominence in the global marketplace, including our handling of client portfolio data, the composition of our indexes and ESG ratings. Additionally, although we conduct due diligence during acquisition processes, acquired businesses may not have invested as heavily in security measures and technology, and this may introduce additional security risk. In the past, we have experienced cyber-attacks of varying degrees, including denial-of-service attacks. There can be no assurance that there will not be material adverse effects relating to these types of incidents in the future, in particular as these types of incidents have generally become increasingly frequent, sophisticated, difficult to detect and difficult to successfully defend against, and we may see their frequency increased, and effectiveness enhanced, by the use of AI. As these threats continually evolve, we may be required to devote additional resources to modify or enhance our operational or security systems and networks and our cybersecurity program. Our security measures or those of our third-party providers may prove insufficient. Cyber-attacks, security incidents or third-party reports of perceived security vulnerability to our systems or networks, even if no intrusion has occurred, could damage our brand and reputation, result in litigation, regulatory actions, investigations, sanctions or other penalties, lead to loss of client confidence, which would harm our ability to retain clients and gain new clients, and result in financial losses. Any of the foregoing could lead to 19 19 19 Table of Contents Table of Contents unexpected or higher than estimated costs. We may also incur additional costs as we enhance and refine our internal processes and IT controls, policies, and procedures.

Our operations rely on the secure collection, retrieval, storage, transmission and other processing of confidential, sensitive, proprietary and other types of data and information that is managed internally and with third-party vendors. We and our vendors are subject to security risks, including cyber-attacks and other security incidents, such as phishing scams or other social engineering attacks, hacking, tampering, intrusions, viruses, malware (including ransomware) and denial-of-service attacks. Cybersecurity risks also may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. In some cases, these risks are heightened when employees are working remotely. Our and our vendors’ use of mobile and cloud technologies may also increase our risk for such threats. We may be exposed to more targeted and more sophisticated cyber-attacks and other security incidents aimed at accessing certain information on our systems and networks because of our role or prominence in the global marketplace, including client portfolio data, the composition of our indexes and MSCI ESG Research ratings of corporate issuers. Any such threats may cause material interruptions or malfunctions in our or our vendors’ products or services, networks, systems, websites, applications, data or data processing, or may otherwise compromise the availability, confidentiality or integrity of data or information in our possession. Additionally, while we conduct due diligence during the acquisition process, acquired businesses may not have invested as heavily in security measures and technology, and this may introduce additional security risk. In the past, we have experienced cyber-attacks of varying degrees, including denial-of-service attacks. There can be no assurance that there will not be material adverse effects relating to these types of incidents in the future, in particular as these incidents have generally become increasingly frequent, sophisticated, difficult to detect and difficult to successfully defend against and may see their frequency increased, and effectiveness enhanced, by the use of AI. Our security measures or those of our third-party providers, including any cloud-based technologies, may prove insufficient depending upon the attack or threat posed. Cyber-attacks, security incidents or third-party reports of perceived security vulnerability to our systems or networks, even if no intrusion has occurred, could damage our brand and reputation, result in litigation, regulatory actions, investigations, sanctions or other penalties, lead to loss of client confidence, which would harm our ability to retain clients and gain new ones, and lead to financial losses and reputational damage. Any of the foregoing could lead to unexpected or higher than estimated costs. We may also incur additional costs as a result of increasing and refining our internal processes and IT controls and policies and procedures related to security, processing integrity and confidentiality or privacy.

We rely on open source code to develop software and to incorporate it in our products and internal systems. The use of open source code may entail greater risks than third-party commercial software, as open source licensors generally do not provide warranties or other protections regarding infringement claims, the quality of the code or the security of the code. Certain open source licenses provide that if we combine our proprietary code with open source code and distribute it in a certain manner, we could be required to release the source code to the public, potentially allowing our competitors to create similar products and putting us at a competitive disadvantage. Additionally, the terms of many open source code licenses are ambiguous and have not been interpreted by U.S. courts, increasing the risk of unanticipated restrictions or conditions on our use of such software. Therefore, we could be required to seek licenses from third parties on terms that are not commercially feasible, to make portions of our proprietary code publicly available to re-engineer our products or systems, to discontinue licensing certain products, or to take other remedial action that could divert resources. We could also be subject to suits by parties claiming breach of the terms of licenses, which could be costly for us to defend. Any of these requirements could materially adversely affect our business, financial condition or results of operations.

We rely on open source code to develop software and to incorporate it in our products and internal systems. The use of open source code may entail greater risks than the use of third-party commercial software, as open source licensors generally do not provide warranties or other contractual protections regarding infringement claims, the quality of the code or the security of the code. Some open source licenses provide that if we combine our proprietary code with open source code and distribute it in a certain manner, we could be required to release the source code of our proprietary applications to the public. This would allow our competitors to create similar products with less development effort and time and ultimately put us at a competitive disadvantage. Additionally, the terms of many open source code licenses are ambiguous and have not been interpreted by U.S. courts, and there is a risk that open source software licenses could be construed in a manner that imposes unanticipated restrictions or conditions on our use of such software. Therefore, we could be required to seek licenses from third parties on terms that are not commercially feasible, to make generally available portions of our proprietary code, to re-engineer our products or systems, to discontinue the licensing of our products if re-engineering could not be accomplished on a timely or cost-effective basis, or to take other remedial action that could divert resources away from our development efforts. We could also be subject to suits by parties claiming breach of the terms of licenses, which could be costly for us to defend. Any of these requirements could materially adversely affect our business, financial condition or results of operations.

We provide certain full-year financial guidance and long-term targets to the public based upon our assumptions regarding our expected financial performance, which depend on numerous factors, including market conditions, client demand and the successful execution of our business strategy, that may not always prove to be accurate and may vary from actual results. In addition, uncertainty regarding macroeconomic factors such as inflation, interest rates, currency fluctuations or geopolitical instability could impact our ability to forecast our expected financial performance. Our ability to forecast financial performance may also be impacted by delays in product launches, slower-than-expected client adoption of our products and services or greater-than-anticipated cancellations. Revising financial guidance or long-term targets, or failing to meet the financial guidance or achieve the long-term targets that we provide, may negatively affect investor confidence, leading to volatility in the market value of our common stock and other securities. Additionally, repeated revisions or significant deviations from public guidance and long-term targets may harm our reputation and credibility with investors, analysts and other stakeholders, potentially impacting our access to capital markets or increasing our cost of capital.

We provide certain full-year financial guidance and long-term targets to the public based upon our assumptions regarding our expected financial performance that may not always prove to be accurate and may vary from actual results. In addition, uncertainty regarding macroeconomic factors such as inflation could impact our ability to forecast costs, which inform our financial guidance and long-term targets. If we fail to meet the full-year financial guidance or achieve the long-term targets that we provide, or if we find it necessary to revise such guidance or targets, the market value of our common stock or other securities could be adversely affected.

Many of our products, systems and processes involve the collection, retrieval, storage, transmission and processing of proprietary, third-party and client confidential information. We also handle personal information of our employees in connection with their employment. We rely on complex processes and IT controls along with policies, procedures and training to protect this information, including sensitive client data such as material non-public information and client portfolio data, against unauthorized access or disclosure. In addition, we believe that when we change the composition of our indexes or if we expect to change the methodologies that govern our indexes, in some cases, those changes can have an indirect effect on the prices of constituent securities and on certain indexed investment products as a result of trading activity related to tracking our indexes. The foreknowledge of these changes could be determined to be material non-public information. Similarly, our ESG ratings and ratings changes could potentially impact the companies and entities that we rate, including the price of their securities and the price of other securities that reference their securities. If our processes, confidentiality policies, conflict of interest policies or information barrier procedures fail or are insufficient, including as a result of intentional or unintentional human error, manual process failure, system error or other failure, then unauthorized release of, access to, or disclosure or misappropriation of data, including material non-public information or other confidential information (e.g., certain client portfolio data, index composition data, or ESG rating data), could harm our brand and reputation, lead to litigation, regulatory actions or penalties, and result in a loss of client confidence, which could have a material adverse effect on our business, financial condition or results of operations.

Many of our products, as well as our internal systems and processes, involve the collection, retrieval, storage, transmission and other processing, through a variety of channels, of proprietary, third-party and client confidential information. We also handle personal information of our employees in connection with their employment. We rely on a complex system of internal processes and IT controls along with policies, procedures and training to protect this information, including sensitive client data such as material non-public information and client portfolio data that may be provided to us or hosted on our systems and networks, against unauthorized access or disclosure. In addition, we believe that when we change the composition of our indexes or if we expect to change the methodologies that govern our indexes, in some cases the changes can have an indirect effect on the prices of constituent securities and on certain indexed investment products as a result of trading activity related to tracking our indexes. The foreknowledge of these changes could also be deemed to be material non-public information. As the usage and types of uses of our ESG ratings increase, the ratings and changes to the ratings in some cases could also potentially have an impact on the companies that we rate, the price of their securities and the price of other securities that reference their securities. If our internal processes, confidentiality policies, conflict of interest policies or information barrier procedures fail or are insufficient, including as a result of human error or manual processes, system error, other inadvertent release or other failure, or if an 19 19 19 Table of Contents Table of Contents employee purposely circumvents or violates our internal controls, policies or procedures, then unauthorized access to, or disclosure or misappropriation of data, including material non-public information or other confidential information (e.g., certain index composition data, methodologies or ESG rating data), our brand and reputation may suffer and we may become subject to litigation, regulatory actions, sanctions or other penalties, leading to a loss of client confidence, which could have a material adverse effect on our business, financial condition or results of operations.

Our global operations and any future expansion are expected to continue to place significant demands on our personnel, management and other resources, and there can be no assurance that we will effectively attract, develop and retain qualified personnel and effective leaders across locations; operate our physical facilities and information technology infrastructure; scale our legal and compliance infrastructure; develop and maintain appropriate operational and financial systems, procedures and controls; integrate acquired businesses; or otherwise adequately manage our global operations and any future expansion. Our global operations and our ability to deliver our services to our clients also expose us to political, economic, legal, operational, reputational, franchise and other risks resulting from operating in many countries, including risks of possible capital controls, exchange controls, customs duties, sanctions compliance, tax penalties, levies or assessments, legal uncertainty, broad regulatory discretion and other restrictive governmental actions, as well as the outbreak of hostilities or political and governmental instability. As we operate in multiple jurisdictions, our ability to repatriate cash to the U.S. could also be impacted by foreign currency controls, restrictions on cash transfers, or limits on converting currency or paying dividends from non-U.S. subsidiaries, as well as adverse tax consequences. In addition, the majority of our employees are located in offices outside of the U.S., and a number of those employees are located in emerging market locations. The cost of establishing and maintaining these offices, including costs related to information technology, as well as the costs of attracting, training and retaining employees in these locations may be higher, or may increase at a faster rate, than we anticipate. Additionally, social and health conditions, such as public health epidemics impacting the global economy or our employees, may have a material adverse effect on our business, financial condition or results of operations. The laws and regulations in many countries applicable to our business are uncertain and evolving, and it may be difficult or costly for us to determine and remain compliant with the exact requirements of local laws in every market. Our inability to maintain 22 22 22 Table of Contents Table of Contents consistent internal policies and procedures across our offices and remain in compliance with local laws in a particular market could have a significant and negative effect not only on our businesses in that market but also on our reputation. Demand for our products and services is still nascent in many parts of the world, particularly in emerging markets, where risk management and sustainability and climate integration practices are less established. In addition, the data required to model local securities in some emerging markets might be difficult to source and local investment product nuances may be difficult or costly to model. If we do not appropriately tailor our products and services to fit the needs of the local market, we may be unable to effectively grow sales of our products and services. Any failure to effectively manage expansion or to effectively manage our business globally could damage our brand and reputation, result in increased costs and litigation and have a material adverse effect on our business, financial condition or results of operations.

Our global operations and any future expansion are expected to continue to place significant demands on our personnel, management and other resources. In our existing global operations or any future expansion, including as a result of acquisition, there can be no assurance that we will effectively attract, engage and retain qualified personnel, develop and retain effective leadership in all our locations; operate and expand our physical facilities and information technology, legal and compliance infrastructure; develop and maintain appropriate operational and financial systems, procedures and controls; integrate acquired businesses; or otherwise adequately manage our global operations and any future expansion. Our global operations and our ability to deliver our services to our clients also expose us to political, economic, legal, operational, reputational, franchise and other risks that are inherent in operating in many countries, including risks of possible capital controls, exchange controls, customs duties, sanctions compliance, tax penalties, levies or assessments, legal uncertainty, broad regulatory discretion and other restrictive governmental actions, as well as the outbreak of hostilities (including the Russia-Ukraine conflict and the Israel-Hamas conflict) or political and governmental instability in certain of the countries or regions in which we conduct operations. The majority of our employees are located in offices outside of the U.S., and a number of those employees are located in emerging market locations. The cost of establishing and maintaining these offices, including costs related to information technology infrastructure, as well as the costs of attracting, training and retaining employees in these locations may be higher, or may increase at a faster rate, than we anticipate. Additionally, social and health conditions, such as public health epidemics impacting the global economy and our employees, may have a material adverse effect on our business, financial condition or results of operations. The laws and regulations in many countries applicable to our business are uncertain and evolving, and it may be difficult or costly for us to determine and remain compliant with the exact requirements of local laws in every market. Our inability to maintain consistent internal policies and procedures across our offices and remain in compliance with local laws in a particular market could have a significant and negative effect not only on our businesses in that market but also on our reputation. Demand for our products and services is still nascent in many parts of the world, particularly in emerging market locations where risk management and ESG and climate integration practices are often not fully developed. In addition, the data required to model local securities in some emerging markets might be difficult to source and local investment product nuances may be difficult or costly to model. If we do not appropriately tailor our products and services to fit the needs of the local market, we may be unable to effectively grow sales of our products and services in some locations outside of the U.S. There can be no assurances that demand for our products and services will develop in these countries. Any failure to effectively manage expansion or to effectively manage the business globally could damage our brand and reputation, result in increased costs and litigation and have a material adverse effect on our business, financial condition or results of operations.

Failure to comply with any applicable laws, rules, orders, regulations, codes or other requirements could subject us to litigation, regulatory actions, sanctions, fines or other penalties, as well as damage our brand and reputation. The financial services industry, within which we and many of our clients operate, is subject to extensive laws, rules and regulations, with direct regulation of certain of our products in some jurisdictions. These laws, rules and regulations are complex, evolve frequently and sometimes quickly and unexpectedly, and are subject to administrative interpretation and judicial construction in ways that are difficult to predict, and could materially adversely affect our business or our clients’ businesses. Additionally, we may be required to comply with multiple and potentially conflicting laws, rules or regulations in various jurisdictions, which could, individually or in the aggregate, result in materially higher compliance costs to us. Laws, rules or regulations could require changes to the way we license and price our products and services. In addition, various government and regulatory bodies from time to time may make inquiries and conduct investigations into our compliance with applicable laws and regulations and our business practices, including those related to our regulated activities and other matters. Changes to the laws, rules and regulations applicable to our clients could limit our clients’ ability to use our products and services or could otherwise impact our clients’ demand for our products and services. As such, to the extent our clients become subject to certain laws, rules or regulations, we may incur higher costs in connection with modifying our products or services. If laws, rules or regulations restrict our clients’ or vendors’ ability or willingness to provide data to us, or impose new compliance obligations or restrictions on how we access and use such data, our ability to continue to produce products and services, or the costs associated with doing so, could be negatively affected. The regulatory requirements and regulatory developments that most significantly impact us are described below: •Regulation Affecting Benchmarks. Compliance with regulations affecting benchmarks or their uses, as well as related technical standards and guidance, could negatively impact our business and results of operations. Benchmarks, which include the indexes we provide, are subject to regulations that may require changes in our business practices, product offerings or our ability to offer indexes in certain jurisdictions. Such impacts could include, without limitation, increased costs, including direct regulatory costs; diminished intellectual property rights; constraints on the fees we charge; constraints on our ability to meet contractual commitments with data providers; or constraints on how we offer our products. Any of these factors could have a material adverse effect on our index products. For example, the EU Benchmark Regulation (“EU BMR”) and UK Benchmarks Regulation (“UK BMR”) impose distinct requirements. Following Brexit, the EU BMR provides a transition period until December 31, 2025, allowing EU-regulated entities to use benchmarks from non-EU administrators, while the UK BMR extends this period to December 31, 2030 for non-UK administrators. Diverging interpretations or future amendments to these regulations may increase compliance burdens and operational complexity. Additionally, guidance issued by the European Securities and Markets Authority (“ESMA”) may affect benchmark administrators and their clients. For instance, the ESMA Guidelines on ETFs and other UCITS Issues impose disclosure requirements for indexes used in UCITS funds, such as making index constituents and their respective weightings easily accessible free of charge to investors on a delayed and periodic basis. These requirements could increase the compliance obligations for benchmark administrators, affect the eligibility of certain indexes for use in UCITS funds and influence the demand for specific products. 23 23 23 Table of Contents Table of Contents Globally, the benchmark industry faces heightened scrutiny and potential new regulations. The International Organization of Securities Commissions (IOSCO) has recommended that benchmark administrators voluntarily publicly disclose whether they comply with its principles for financial benchmarks. Other jurisdictions have also indicated they may consider potential benchmark regulation or conduct reviews of the benchmark industry. For instance, the EU is amending the scope of the EU BMR and regulation is being considered or developed in India and South Africa. Heightened scrutiny and regulatory attention on benchmarks and index providers from regulators, policymakers, and the media in the EU, U.S., and other regions could result in negative publicity or comments about the role or influence of our company or the index industry, which could harm our reputation and credibility. Further, laws, rules or regulations affecting users of our indexes, such as sanctions that prohibit users of our indexes from investing or transacting in securities included in our indexes, can have an indirect impact on our indexes, including their construction and composition. •ESG Ratings. The EU has adopted a new regulation requiring market participants providing ESG ratings in the EU to become authorized and supervised by ESMA, and certain of our ESG products are in scope for the regulation. A number of other jurisdictions, including the UK, Japan, Hong Kong SAR, Taiwan, India and Singapore, have completed, or are in the process of developing, legislation and/or codes of conduct for ESG rating and/or data providers. Regulatory regimes or initiatives relating to ESG ratings and data providers could impose significant compliance burdens and costs on our ESG and Climate products and services. Furthermore, the potential for inconsistent or conflicting requirements across jurisdictions may create implementation challenges, increase compliance risks and result in inadvertent noncompliance, which could materially impact our operations and reputation. •Data Privacy and AI Regulation. Laws, rule, regulations and standards governing privacy, data collection, and AI impact our ability to collect, manage, store, and use personal data and other information. We operate across jurisdictions with differing and often conflicting data privacy laws, including extraterritorial requirements, which continue to expand in scope and complexity. Compliance with these laws requires significant resources to ensure data security and regulatory adherence. Furthermore, we frequently have privacy compliance requirements as a result of our contractual obligations with counterparties. Emerging AI regulations, such as the European Union’s Artificial Intelligence Act, introduce new requirements for transparency, fairness and oversight of AI systems. These regulations may directly affect our operations, including the use of AI in hiring, employee performance monitoring and client-facing applications, by requiring audits, documentation and human oversight. Compliance with evolving AI regulatory frameworks may increase costs, impact our product development, restrict the use of certain applications of AI and expose us to liability for violations of applicable laws, regulations or contracts. •Investment Advisers Act. Except for certain products provided by MSCI ESG Research LLC and certain of its designated foreign affiliates, we believe our products and services do not constitute or provide investment advice as contemplated by the Advisers Act. See Part I, Item 1. “Business—Regulation” above. The Advisers Act imposes fiduciary duties, recordkeeping and reporting requirements, disclosure requirements, limitations on agency and principal transactions between an adviser and advisory clients, as well as general anti-fraud prohibitions. Changes in legal or regulatory requirements or changes to our product lines could require additional entities in our corporate family to register as investment advisers or comply with similar requirements in other jurisdictions. In the U.S., the SEC has sought public comment on the role of certain third-party information providers to the asset management industry, including index providers and model providers, and whether information providers are acting as investment advisers under the Advisers Act. If our index business were to be deemed an investment adviser, we could be deemed a fiduciary to our clients, increasing the costs and complexity of our business. This could also conflict with obligations under other benchmark regulations. The SEC has also proposed a rule that would prohibit SEC-registered investment advisers from outsourcing certain services or functions to service providers that do not meet minimum due diligence, monitoring and record-keeping requirements, and index providers, among others, are identified as service providers that could fall within the scope of the proposed requirements. If adopted, this rule could result in additional compliance obligations for our business. Our ability to comply with applicable laws and regulations depends on maintaining an effective compliance program, which can be time-consuming and costly, as well as on our ability to attract and retain qualified compliance personnel. In some instances, in connection with the provision of data and services, we have incurred additional costs to implement processes and systems at the request of our clients to ensure their use of our data complies with applicable financial regulations. For example, a U.S. Executive Order prohibiting many of our clients from transacting in the securities of certain Chinese companies resulted in our decision to remove these companies from relevant indexes to support our clients’ needs for indexes to be replicable in investment portfolios. To 24 24 24 Table of Contents Table of Contents the extent that our clients are subject to increased regulation, we may be indirectly impacted, leading to higher costs that could reduce the profitability of certain products. Additionally, there has been increased attention on and scrutiny of index providers and ESG ratings and data providers by politicians, regulators, policymakers and the media. This heightened attention may result in new or expanded regulations, investigations or other regulatory actions, which could increase compliance costs, impose operational constraints, or otherwise materially adversely affect our business, financial condition, or results of operations.

Failure to comply with any applicable laws, rules, orders, regulations, codes or other requirements could subject us to litigation, regulatory actions, sanctions, fines or other penalties, as well as damage our brand and reputation. The financial services industry, within which we and many of our clients operate, is subject to extensive laws, rules and regulations at the federal and state levels, as well as by foreign governments, with some jurisdictions regulating indexes directly. These laws, rules and regulations are complex, evolve frequently and sometimes quickly and unexpectedly, and are subject to administrative interpretation and judicial construction in ways that are difficult to predict, and could materially adversely affect our business and our clients’ businesses. Uncertainty caused by political change globally heightens regulatory uncertainty. Additionally, we may be required to comply with multiple and potentially conflicting laws, rules or regulations in various jurisdictions, which could, individually or in the aggregate, result in materially higher compliance costs to us. It is possible that laws, rules or regulations could cause us to restrict or change the way we license and price our products and services across our offerings, including if data or information from one offering is used in another offering, or could impose additional costs on us. In addition, various government and regulatory bodies from time to time may 23 23 23 Table of Contents Table of Contents make inquiries and conduct investigations into our compliance with applicable laws and regulations and our business practices, including those related to our regulated activities and other matters. Changes to the laws, rules and regulations applicable to our clients could limit our clients’ ability to use our products and services or could otherwise impact our clients’ demand for our products and services. As such, to the extent that our clients become subject to certain laws, rules or regulations, we may incur higher costs in connection with modifying our products or services. To the extent that we rely on our clients and vendors to provide data for our products and services and certain laws, rules or regulations impact our clients’ and vendors’ ability or willingness to provide that data to us or regulate the fees for which such data can be provided, our ability to continue to produce our products and services or the related costs could be negatively impacted. The regulations and regulatory developments that most significantly impact us are described below: •Regulation Affecting Benchmarks. Compliance efforts associated with regulations affecting benchmarks or their uses and any related technical standards and guidance could have a negative impact on our business and results of operations. In particular, compliance requirements could lead to a change in our business practices, product offerings or our ability to offer indexes in certain jurisdictions, including the EU, including without limitation, by increasing our costs of doing business, including direct costs paid to regulators, diminishing our intellectual property rights, impacting the fees we can charge for our indexes, imposing constraints on our ability to meet contractual commitments to our data providers, imposing constraints on how we offer our products or causing our data providers to refuse to provide data to us, any of which could have a material adverse effect on our index products. For example, the benchmark industry is subject to regulations in the EU, such as the EU Benchmark Regulation (“EU BMR”), and in the UK. The benchmark industry is also subject to increased scrutiny and potential new or increased regulation in various other jurisdictions. Additionally, the European Securities and Markets Authority (“ESMA”) issues guidance from time to time regarding interpretations of the EU BMR. The ESMA Guidelines on ETFs and other UCITS Issues limit the types of indexes that can be used as the basis of Undertakings for Collective Investment in Transferable Securities (“UCITS”) funds and require, among other things, index constituents, together with their respective weightings, to be made easily accessible free of charge, such as via the internet, to investors and prospective investors on a delayed and periodic basis. The International Organization of Securities Commissions (“IOSCO”) recommends that benchmark administrators, on a voluntary basis, publicly disclose whether they comply with the principles for financial benchmarks published by IOSCO. Other jurisdictions have also indicated they may consider potential benchmark regulation or conduct reviews of the benchmark industry. For instance, the UK FCA launched a market study into how competition is working in the markets for benchmarks and indices. In addition, in October 2023, the EU Commission published a proposal for a regulation to amend the EU BMR. The Commission proposes that the scope of the EU BMR should be limited to qualifying benchmarks. Under the proposal, only administrators of these qualifying benchmarks would continue to be subject to the EU BMR. The heightened attention and scrutiny on benchmarks and index providers by regulators, policymakers and the media in the EU, the U.S. and other jurisdictions around the world could also result in negative publicity or comments about the role or influence of our company or the index industry generally, which could harm our reputation and credibility. Further, laws, rules, regulations and orders affecting users of our indexes can have an indirect impact on our indexes, including their construction and composition, such as sanctions that prohibit users of our indexes from investing or transacting in securities included in our indexes. •ESG Ratings. In June 2023, the European Commission published a proposal for regulation on the transparency and integrity of ESG rating activities, potentially requiring market participants providing ESG ratings to become authorized and supervised by ESMA, and we expect some of our ESG products to be in scope for the developing regulation. In addition, in July 2023, the Securities and Exchange Board of India (“SEBI”) finalized regulation governing the provision of qualifying ESG ratings, with providers required to register with SEBI and meet certain minimum requirements. A number of other countries, including the UK, Japan, Hong Kong SAR and Singapore, have completed, or are in the process of developing, legislation and/or codes of conduct for ESG rating and data providers. IOSCO has also asked regulators to consider focusing more attention on the use of ESG ratings and data products. Regulatory regimes or initiatives relating to ESG ratings and data providers could impose significant compliance burdens and costs on our ESG and Climate products and services. Furthermore, regulation in multiple jurisdictions may be inconsistent, which could create implementation challenges and result in inadvertent noncompliance. •Data Privacy Legislation. Laws, regulations, standards or contractual obligations relating to privacy or data collection and use affect our ability to collect, manage, aggregate, store, transfer, use and otherwise process personal data and other information. We operate in an environment in which there are different and potentially conflicting 24 24 24 Table of Contents Table of Contents privacy or data collection laws and regulations in effect in the various U.S. states and foreign jurisdictions in which we operate, and we must understand and comply with each law and standard in each of these jurisdictions while ensuring the data is secure. Global laws in this area are rapidly increasing in the scale and depth of their requirements and are also often extra-territorial in nature. In addition, a wide range of regulators and private actors are seeking to enforce these laws across regions and borders. Furthermore, we frequently have privacy compliance requirements as a result of our contractual obligations with counterparties. There could also be a material adverse impact on our direct marketing due to the enactment of new legislation or regulation, or simply a change in practices, arising from public concern over privacy issues. Restrictions or bans could be placed, or penalties could be levied, relating to the collection, management, aggregation, storage, transfer, use and other processing of information that is currently legally available, in which case our costs related to handling information could increase materially. •Investment Advisers Act. Except with respect to certain products provided by MSCI ESG Research LLC and certain of its designated foreign affiliates, we believe our products and services do not constitute or provide investment advice as contemplated by the Advisers Act. See Part I, Item 1. “Business—Government Regulation” above. The Advisers Act imposes fiduciary duties, recordkeeping and reporting requirements, disclosure requirements, limitations on agency and principal transactions between an adviser and advisory clients, as well as general anti-fraud prohibitions. Future developments in our product lines or changes to current laws, rules, regulations or interpretations could cause this status to change, requiring other entities in our corporate family to register as investment advisers under the Advisers Act or comply with similar laws or requirements in states or foreign jurisdictions. In the U.S., the SEC has sought public comment on the role of certain third-party information providers to the asset management industry, including index providers and model providers, and whether, under particular facts and circumstances, information providers are acting as investment advisers under the Advisers Act. The specific questions in the SEC’s request for comment demonstrate that the SEC is considering whether, and to what extent, information providers, including index providers, should register as investment advisers and be subject to all aspects of the Advisers Act. The SEC’s request for comment is far-reaching and could lead to regulation pursuant to the Advisers Act or other framework. If our index business were to be deemed an investment adviser, we could be deemed a fiduciary to our clients, increasing the costs and complexity of our business. In addition, aspects of this regulatory framework may be at odds with our obligations under other benchmark regulations. The SEC has also proposed a rule that would prohibit SEC-registered investment advisers from outsourcing certain services or functions to service providers that do not meet minimum requirements. This proposed rule would impose on investment advisers due diligence, monitoring and record-keeping requirements of their service providers, and index providers, among others, are identified as service providers that could fall within the scope of the proposed requirements. This proposed rule could therefore impose additional requirements on our business. •Brexit. The United Kingdom (“UK”) exited the European Union (“EU”) on January 31, 2020 (commonly referred to as “Brexit”) and the UK’s membership in the EU single market ended on December 31, 2020. One of our subsidiaries is authorized as a UK benchmark administrator regulated by the UK FCA, we have significant operations in the EU and certain members of our senior management team are based in the UK. As a result, uncertainties related to Brexit and the new relationship between the UK and EU, potential changes in EU regulation, divergent interpretations by the UK of any replicated EU laws or additional regulation in the UK could increase our costs of doing business, or in some cases, affect our ability to do business, which could have a material adverse effect on our business, financial condition or results of operations. Specifically, the EU BMR currently provides for a transition period until December 31, 2025, allowing EU supervised entities to continue to utilize benchmarks provided by non-EU administrators. The UK Benchmarks Regulation currently provides a transitional period for third-country benchmarks to December 31, 2030 allowing UK supervised entities to continue to utilize benchmarks provided by non-UK administrators. Our ability to comply with applicable laws and regulations depends upon the maintenance of an effective compliance system which can be time consuming and costly, as well as our ability to attract and retain qualified compliance personnel. In some instances, in connection with the provision of data and services, we have incurred additional costs to implement processes and systems at the request of our clients to ensure that the products and services that they in turn provide to their clients using our data are compliant with the financial regulations to which our clients may be subject. For example, a U.S. Executive Order prohibiting many of our clients from transacting in the securities of certain Chinese companies resulted in our decision to remove these companies from relevant indexes in order to support our clients’ needs that our indexes meet their objective to be replicable in investment portfolios. To the extent that our clients are subject to increased regulation, we may be indirectly impacted and could incur increased costs that could have a negative impact on the profitability of certain products. Additionally, there has been increased attention on and scrutiny of index providers and ESG ratings and data providers by politicians, regulators, policymakers and the media, which could create negative publicity that could harm our reputation or credibility 25 25 25 Table of Contents Table of Contents as well as result in new or additional regulation that could increase our costs and have a negative impact on our business, financial condition or results of operations. For instance, in July 2023, we received a letter from a Select Committee of the U.S. House of Representatives, asking us to respond to a range of questions regarding MSCI indexes that include securities of Chinese companies. Additional scrutiny or regulatory action could have a material adverse effect on our business, financial condition or results of operations.

An element of our growth strategy is growth through acquisitions, strategic partnerships and investments. There can be no assurance that we will be able to identify and execute transactions with suitable strategic partners, investment opportunities or attractive acquisition candidates at acceptable terms. In addition, strategic transactions may impact our cash position, and we may require additional debt or equity financing for future acquisitions and doing so may be made more difficult by the terms of our existing indebtedness. Our ability to achieve the expected returns or synergies from our acquisitions, strategic partnerships and investments depends, in part, on our ability to successfully integrate offerings, data, technology, functions and personnel from acquired businesses. We cannot guarantee that we will be successful in integrating acquired businesses, that our acquired businesses will perform at the levels we anticipate or that our strategic partnerships and investments will advance our long-term growth strategy. Our past and future acquisitions, strategic partnerships and investments may subject us to unanticipated risks or liabilities, including the potential to disrupt our operations, or increase our reliance on third parties, which may result in future disruptions if those partnerships are unsuccessful or discontinued or the content or level of support provided by strategic partners is diminished. If we undertake multiple acquisitions or partnerships within a short period, the associated risks, such as integration challenges or operational disruptions, may increase. Failure to complete or execute these transactions successfully, or to identify growth opportunities, could harm our brand, reputation, and long-term growth, and materially impact our business, financial condition, or results of operations.

An element of our growth strategy is growth through acquisitions, strategic partnerships and investments. Despite our efforts to continue pursuing such transactions, there can be no assurance that we will be able to identify and execute transactions with suitable strategic partners, investment opportunities or attractive acquisition candidates at acceptable terms. In addition, strategic transactions may impact our cash position, and we may require additional debt or equity financing for future acquisitions and doing so may be made more difficult by the terms of our existing indebtedness. 29 29 29 Table of Contents Table of Contents Our ability to achieve the expected returns and synergies from our past and future acquisitions, strategic partnerships and investments depends, in part, upon our ability to effectively leverage or integrate the offerings, technology, sales, administrative functions and personnel of these businesses. We cannot provide assurance that we will be successful in integrating acquired businesses, that our acquired businesses will perform at the levels we anticipate or that our strategic partnerships and investments will advance the long-term growth strategy of our company. Our past and future acquisitions, strategic partnerships and investments may subject us to unanticipated risks or liabilities, including the potential to disrupt our operations. Additionally, strategic partnerships may increase our reliance on third parties, which may result in future disruptions if those partnerships are unsuccessful or discontinued or the content or level of support provided by strategic partners is diminished. If we experience a high level of acquisition, strategic partnership or investment-related activity within a limited period of time, the probability that certain of these risks would occur would likely increase. In addition, if we are unsuccessful in completing acquisitions of other businesses or assets, executing strategic partnerships or investments, or if such opportunities for expansion do not arise, our brand or reputation could suffer, and our future growth, business, financial condition or results of operations could be materially adversely affected.

We currently incorporate, and expect to continue to incorporate, AI technologies, including generative AI, into our products and operations, and these uses of AI may become significantly more important over time. There are significant and evolving risks involved in utilizing AI, and there is no assurance that our usage of AI will help our products and operations become more effective, efficient or profitable, or otherwise achieve our intended outcomes. Our use of AI will require additional resources and costs to develop and maintain products, comply with emerging regulations, address ethical and reputational considerations, and manage technical, operational and competitive risks. Our competitors or other third parties may incorporate AI into their products and operations more quickly or more successfully than us, which could impair our ability to compete effectively. Additionally, the models underlying our use of AI technologies may be incorrectly or inadequately designed or implemented. Further, if the content, analyses, or recommendations produced by AI are, or are perceived to be biased, inaccurate, misleading, poor-quality, unethical or otherwise deficient or flawed, any of which may not be easily detectable, our business may be adversely affected. Client or third-party use of AI could potentially result in reduction or replacement of our products or solutions. The use of AI may involve third-party information with unclear intellectual property rights or interests. If we do not have sufficient rights to use the data or other material or content that AI technologies utilize or generate, we may incur liability through the violation of applicable laws and regulations, third-party intellectual property, privacy or other rights or contracts to which we are a party. In addition, intellectual property ownership rights, including copyright, of generative and other AI output, have not been fully interpreted by courts or regulations. The use of AI may also result in cyber-attacks or other security incidents, including those that 20 20 20 Table of Contents Table of Contents implicate confidential or personal information (e.g., propriety, third-party, employee or client information). The use of third-party AI by our employees, contractors or partners could also result in the inadvertent disclosure of confidential or personal information, risking our intellectual property rights, competitive position and reputation. Laws and regulations applicable to AI, including intellectual property, data privacy and security, consumer protection, competition and equal opportunity laws, continue to develop and may be inconsistent from jurisdiction to jurisdiction. Because AI is complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI. These risks include the possibility of enhanced governmental or regulatory scrutiny, litigation or other legal liability, compliance issues, ethical concerns, negative consumer perceptions, confidentiality or security risks, as well as other factors. Any of these issues could materially adversely affect our business, financial condition or results of operations.

We currently incorporate, and expect to continue to incorporate, AI solutions into our products and operations, and these uses may become more important in our operations over time. Our competitors or other third parties may incorporate AI into their products and operations more quickly or more successfully than us, which could impair our ability to compete effectively. Additionally, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be deficient, inaccurate or biased, any of which may not be easily detectable, our business may be adversely affected. AI algorithms may use third-party information with unclear intellectual property rights or interests. If we do not have sufficient rights to use the data or other material or content that the AI solutions utilize or generate, we may incur liability through the violation of applicable laws and regulations, third-party intellectual property, privacy or other rights, or contracts to which we are a party. In addition, intellectual property ownership rights, including copyright, of generative and other AI output, have not been fully interpreted by courts or regulations. The use of AI applications may also result in cyber-attacks or other security incidents or a failure to protect confidential information (e.g., propriety, third-party, employee or client information). Laws and regulations applicable to AI, including intellectual property, data privacy and security, consumer protection, competition, and equal opportunity laws, continue to develop and may be inconsistent from jurisdiction to jurisdiction. Because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI. Any of these issues could materially adversely affect our business, financial condition or results of operations.

To the extent that any of MSCI’s operating segments, product lines or MSCI as a whole suffers a reputational or other loss in credibility, it could have a material adverse effect on our business, financial condition or results of operations. Factors that have affected or could affect our credibility include: real or perceived conflicts of interest; the adequacy, completeness and editorial independence of our index composition and ESG rating and assessment processes and decisions; the influence, attempted influence or appearance of influence of third parties, including governments, politicians, political and other advocacy groups and large investors or asset owners, on our editorial decisions; the performance of companies relative to their ESG ratings, index inclusion, risk characteristics or other MSCI content or analytics; the timing and nature of changes to our indexes or ESG ratings and assessments; disagreement with our methodologies or models, including for calculating indexes, value-at-risk and other risk measures, climate metrics, and ESG ratings and assessments, data, information and analysis; and the accuracy and completeness of our or third-party data, including data voluntarily disclosed by the investment community, corporate issuers and others that is utilized in our products. We may also face public or media scrutiny concerning politically or socially sensitive topics, which could lead to negative media coverage, reputational harm or increased government or regulatory scrutiny, even if such claims lack merit. Views expressed by the media, politicians, other government officials or representatives, regulators, political and other advocacy groups or other third parties regarding our company, our industry or our role in the investment process—including allegations or suggestions that we have biases, lack independence or encourage investment in, or divestment from, certain companies, countries or regions or in support of certain causes or trends—and the impact of political and geo-political tensions relating to countries, industries, companies or issues relevant to our products and services, such as the inclusion of certain Chinese companies in our indexes or the focus on ESG or sustainable investing and climate considerations, could negatively impact our reputation and credibility. Such negative attention or scrutiny could also increase the risk of shareholder activism, including proposals seeking changes to our governance practices, corporate strategy or product offerings. In some cases, our sustainability and climate offerings, such as our country and company ESG ratings, our controversies assessments or our Net-Zero Tracker, may insert MSCI into a public spotlight or a public debate regarding the environment, climate change, social concerns, political issues, geo-political matters, governance practices or corporate responsibility. Scrutiny around ESG and climate topics has increased, with anti-ESG and anti-climate advocacy groups, political leaders and industry organizations criticizing ESG or climate-focused products and services. Anti-ESG and anti-climate sentiment may impact demand for our products, limit our ability to retain clients or lead to heightened scrutiny of our methodologies or content. Additionally, legislation, litigation, investigations or regulatory action or enforcement activities aimed at curbing ESG or climate investing practices or penalizing institutions perceived as prioritizing ESG or climate considerations could further increase reputational risks to us and reduce the marketability of our products. In addition, increased regulatory and political focus on ESG and climate-related practices has impacted our clients. Certain of our clients use our ESG and climate data, tools and indexes to benchmark ESG investment performance and to construct and manage ETFs and other indexed financial products. These institutional investors are increasingly the subject of additional disclosure requirements, as well as media and political scrutiny, that are focused on preventing “greenwashing” (i.e., holding out an investment product as having “green” or “sustainable” characteristics when this is not, in fact, the case). Our products, and the use of our products by these institutions, could draw MSCI into debates about and criticisms of greenwashing. 16 16 16 Table of Contents Table of Contents Factors affecting our reputation and credibility also include perception of our own sustainability and corporate responsibility policies or practices, including as a result of failure to meet publicly disclosed sustainability-related targets or goals, failure to comply with mandatory sustainability disclosure requirements or misalignment with evolving market standards or the methodologies and standards used in our own products and ESG ratings. Certain of our own corporate responsibility policies and practices are based on third-party frameworks and stakeholder expectations, and our adherence to these frameworks may change due to business developments, policy changes or other factors, drawing scrutiny of our corporate responsibility policies and practices. Scrutiny of MSCI competitors could also damage the reputation of the industries that we operate in and, therefore, harm the reputation of the Company or certain of our products. In addition, we believe that MSCI’s corporate culture and reputation positively contribute to our ability to attract and retain talent, and that reputational damage could negatively affect our hiring, employee engagement and retention. Damage to our reputation, brand or credibility could have a material adverse effect on our business, financial condition or results of operations.

To the extent that any of MSCI’s operating segments or product lines or MSCI as a whole suffers a reputational or other loss in credibility, it could have a material adverse impact on MSCI’s business, financial condition or results of operations. Real or perceived factors that may have already affected credibility, or which could potentially have an impact in this regard, include: the appearance of a conflict of interest; the adequacy, completeness and editorial independence of our index composition and ESG rating and assessment processes and decisions; the influence, attempted influence or appearance of influence of third parties, including governments, politicians and large investors or asset owners, on our editorial decisions; the performance of companies relative to their ESG ratings, index inclusion, risk characteristics or other MSCI content or analytics; the timing and nature of changes to our indexes or ESG ratings and related assessments; disagreement with our methodologies or models, including for calculating indexes, value-at-risk and other risk measures, ESG ratings and assessments, data, information and analysis; the accuracy and completeness of our or third-party data, including data voluntarily disclosed by the investment community, corporate issuers and others that is utilized in our products; views expressed by the media, politicians, other government officials or representatives, regulators or other third parties regarding our company or our industry or our role in the investment process, including allegations or suggestions that we encourage investment in certain companies, countries or regions or in support of certain causes or trends; and the impact of political tensions relating to countries, industries, companies or issues relevant to our products and services, such as the inclusion of certain Chinese companies in our indexes or the focus on sustainable or ESG investing and climate considerations in our products. In some cases, our ESG and Climate offerings, such as our country and company ESG ratings or our Net-Zero Tracker, may insert MSCI into a public spotlight or a public debate regarding the environment, climate change, social concerns, governance practices or corporate responsibility. In addition, our position as a leading source of ESG research, ratings, data and assessments may at times become contentious, politicized or controversial and lead to disputes with companies or investors or other interested stakeholders and create negative media or regulatory attention. In addition, there has been increased regulatory and political focus on ESG-related practices of asset managers. Certain of our clients make use of our ESG data and tools as well as our ESG indexes to benchmark ESG investment performance and to construct and manage ETFs and other indexed financial products. These institutional investors are increasingly the subject of additional disclosure requirements, as well as media and political scrutiny, that are focused on preventing asset managers from “greenwashing” (i.e., holding out an investment product as having “green” or “sustainable” characteristics when this is not, in fact, the case). Use of our products by these investors could draw MSCI into debates about and criticisms of greenwashing. Factors affecting our reputation and credibility also include perception of our own sustainability and corporate responsibility policies or practices, including as a result of failure to meet publicly disclosed sustainability-related targets or goals, or misalignment with evolving market standards or the methodologies and standards used in our own products and ESG ratings. 17 17 17 Table of Contents Table of Contents Errors and other actions by MSCI competitors could also damage the reputation of the industries that we operate in and, therefore, harm the reputation of the Company or certain of our products. In addition, we believe that MSCI’s corporate culture and reputation positively contribute to our ability to attract and retain talent, and that reputational damage could negatively affect our hiring, employee engagement and retention. Damage to our reputation, brand or credibility could have a material adverse effect on MSCI’s business, financial condition or results of operations.

We depend heavily on the capacity, reliability and security of our information technology systems, networks and platforms and their components, including our data centers, cloud providers and other third-party vendors and service providers, production and delivery systems as well as the internet, to create and deliver our products and service our clients. Our employees also depend on these systems, networks, platforms and providers for internal use. Factors affecting the availability of our products and services and our information technology systems and networks, such as loss of service, operational failures, human error, terrorist attacks, geopolitical instability, climate-related events (e.g., hurricanes, floods or other natural disasters), outbreak of pandemic or contagious disease, power loss, telecommunications failures, technical breakdowns, internet failures or cyber-attacks, could impair our or our third-party service provider systems’ operations or interrupt their availability for extended periods of time or impact the availability of our or our third-party service provider’s personnel. Our ability to effectively use the internet, including for remote work, may also be impaired due to infrastructure failures, service outages, cyber attacks or increased government regulation. Disruptions, failures, or slowdowns in our operations, or those of our third-party vendors and service providers, could reduce confidence in our products and services, damage our brand and reputation, result in litigation, or negatively affect our ability to distribute products to clients, including managed services or real-time index data. While we generally perform cybersecurity due diligence on key vendors and service providers, our ability to monitor their practices is limited, and vulnerabilities or incidents affecting their software, systems, or networks could introduce risks to our operations. Additionally, newly acquired businesses may 18 18 18 Table of Contents Table of Contents not have invested in technology and resilience to the same extent as we have, and integration of their systems could introduce vulnerabilities that impact us. There is no assurance that we will be able to successfully defend against such disruptions or that our disaster recovery or business continuity plans, or those of our third-party service providers (including cloud providers), will be effective in mitigating the risks and associated costs, which could be exacerbated by our shift to an increasingly remote working environment. While we maintain insurance coverage intended to address certain aspects of cybersecurity and data protection risks, such coverage may not include, or may not be sufficient to cover, all or a majority of any costs or other losses resulting from cyber-attacks or other security incidents. Any of these factors could have a material impact on our business, financial condition, or results of operations.

Any failures, disruptions, instability or vulnerabilities in our information technology architecture, platforms, vendors and service providers, production and delivery systems, software, code, networks, the Internet or other systems or applications may disrupt our operations, cause our products or services to be unavailable or fail and impose delays or additional costs in deploying our products or services, or impose conditions or restrictions on our ability to commercialize our products or services or keep them confidential and result in reputational and other harm and have a material adverse effect on our business, financial condition or results of operations. We depend heavily on the capacity, reliability and security of our information technology systems, networks and platforms and their components, including our data centers, cloud providers and other vendors and service providers, production and delivery systems as well as the Internet, to create and deliver our products and service our clients. Our employees also depend on these systems, networks, platforms and providers for internal use. Factors affecting the availability of our products and services and our information technology systems and networks, such as loss of service from third parties, operational or execution failures, human error, terrorist or other attacks, geopolitical instability or unrest, climate or weather related events (e.g., hurricanes, floods or other natural disasters), outbreak of pandemic or contagious disease, power loss, telecommunications failures, technical breakdowns, Internet failures or malicious attacks exploiting security vulnerabilities, could impair our or our third-party service provider systems’ operations or interrupt their availability for extended periods of time or impact the availability of our or our third-party service provider’s personnel. Our ability to effectively use the Internet, including our remote work force’s ability to access the Internet, may also be impaired due to infrastructure failures, service outages at third-party Internet providers, malicious attacks exploiting security vulnerabilities or increased government regulation. Disruptions, failures or slowdowns that could occur with respect to our operations, including to our information technology systems, networks and platforms, our electronic delivery systems or the Internet, could reduce confidence in our products and services, damage our brand and reputation, result in litigation and negatively affect our ability to distribute our products effectively and to service our clients, including delivering managed services or delivering real-time index data. To the extent we grow through acquisitions, newly acquired businesses may not have invested in technology and resilience to the same extent as we have. As their systems are integrated into ours, a vulnerability could be introduced that could impact us. There is no assurance that we will be able to successfully defend against such disruptions or that our disaster recovery or business continuity plans, or those of our third-party service providers (including cloud providers), will be effective in mitigating the risks and associated costs, which could be exacerbated by our shift to an increasingly remote working environment, and which could have a material impact on our business, financial condition or results of operations.