Our risk management and internal control systems, as well as the risk management tools available to us, may not fully protect us against various risks inherent in our business.
We follow our comprehensive internal risk management framework and procedures to manage our risks, including, but not limited to, reputational, legal, regulatory, compliance, operational, market, liquidity, and credit risks. However, our risk management policies, procedures, and internal controls may not be adequate or effective in mitigating our risks or protecting us against unidentified or unanticipated risks. In particular, some methods of managing risks are based upon observed historical market behavior and our experience in the financial industry. These methods may fail to predict future risk exposures, which could be significantly greater than those indicated by our historical measures. Other risk management methods depend upon an evaluation of available information regarding operating and market conditions and other matters, which may not be accurate, complete, up-to-date, or properly evaluated. In addition, the capital markets are constantly developing, the information and experience that we rely on for our risk management methods may become quickly outdated as capital markets and regulatory environment continue to evolve. Although we have not experienced any material deficiencies or failure in our risk management and internal control systems and procedures since we commenced our current businesses in 2004 other than a material weakness in our internal control over financial reporting identified as of April 30, 2019 and 2020, any such deficiencies or failure in our risk management and internal control systems and procedures may adversely affect our ability to identify or report our deficiencies or non-compliance. For a discussion of risks relating to the material weakness in our internal control over financial reporting, see “—Risks Relating to Our Business and Industry—We have identified a material weakness in our internal control over financial reporting, and if we fail to implement and maintain an effective system of internal control to remediate our material weakness over financial reporting, we may be unable to accurately report our results of operations, meet our reporting obligations, or prevent fraud.” In addition, failure of our employees to effectively enforce such risk management and internal controls procedures, or any of the foregoing risks, may have a material and adverse effect on our business, financial condition and operating results.
Fraud or misconduct by our directors, officers, employees, shareholders, agents, clients, or other third parties could harm our reputation and business and may be difficult to detect and deter.
It is not always possible to detect and deter fraud or misconduct by our directors, officers, employees, shareholders, agents, clients or other third parties. The precautions that we take to detect and prevent such activity may not be effective in all cases, and we may suffer significant reputational harm and financial loss for any fraud misconduct by any of these individuals. The potential harm to our reputation and to our business caused by such fraud or misconduct is impossible to quantify.
There is a risk that our directors, officers, employees, shareholders, agents, clients or other third parties could engage in fraud or misconduct that materially and adversely affects our business, including a decrease in returns on our own invested capital. We are subject to a number of obligations and standards arising from our businesses. The violation of these obligations and standards by any of our directors, officers, employees, shareholders, agents, clients or other third parties could materially and adversely affect us and our investors. For example, our businesses require that we properly handle confidential information. If our directors, officers, employees, shareholders, agents, clients or other third parties were to improperly use or disclose confidential information, we could suffer serious harm to our reputation, financial position, and existing and future business relationships. If any of our directors, officers, employees, shareholders, agents, clients or other third parties were to engage in fraud or misconduct or were to be accused of such fraud or misconduct, our business and reputation could be materially and adversely affected.
We may be subject to litigation and regulatory investigations and proceedings and may not always be successful in defending ourselves against such claims or proceedings.
We face significant litigation and regulatory risks, especially operating in the financial services and insurance industries, including the risk of lawsuits and other legal actions relating to compliance of regulatory
31