Table of Contents Changes in tax laws of jurisdictions in which we operate could adversely impact our results of operations. Any significant interruption in the operation of our facilities, systems and business functions could result in a materially adverse effect on our operations . Any significant breach in our data security infrastructure could result in a materially adverse effect on our operations. Inability to detect and prevent significant employee or third party service provider misconduct, inadvertent errors and omissions, or exposure relating to functions performed on our behalf could result in a materially adverse effect on our operations. Federal, state or foreign tax legislation that would lessen or eliminate some or all of the tax attributes currently affecting us could adversely impact our results of operations. Other potential tax law changes, including further modification of the Federal corporate tax rate and the taxation of interest from municipal bonds, could materially and adversely affect our results of operations and the rate at which we discount certain reserves. Our business is highly dependent upon our ability to perform, in an efficient and uninterrupted manner, through our employees or vendor relationships, necessary business functions (such as internet support and 24-hour call centers), processing new and renewal business and processing and paying claims and other obligations. Our facilities and systems could become unavailable, inoperable, or otherwise impaired from a variety of causes, including, without limitation, natural events, such as hurricanes, tornadoes, windstorms, earthquakes, severe winter weather and fires, or other events, such as explosions, terrorist attacks, computer security breaches or cyber attacks, riots, hazardous material releases, medical epidemics, utility outages, interruptions of our data processing and storage systems or the systems of third-party vendors, or unavailability of communications facilities. Likewise, we could experience a significant failure or corruption of one or more of our information technology, telecommunications, or other systems for various reasons, including significant failures that might occur as existing systems are replaced or upgraded. The shut-down or unavailability of one or more of our systems or facilities for any reason could significantly impair our ability to perform critical business functions on a timely basis. In addition, because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such service exceeds capacity or a third-party system fails or experiences an interruption. If sustained or repeated, such events could result in a deterioration of our ability to write and process new and renewal business, provide customer service, pay claims in a timely manner, or perform other necessary business functions, including the ability to issue financial statements in a timely manner. This could result in a materially adverse effect on our business results, prospects and liquidity, as well as damage to customer goodwill. The foregoing risks could expose us to monetary and reputational damages. Potential exposures include substantially increased compliance costs and required computer system upgrades and security-related investments. A significant breach of our data security infrastructure may result from actions by our employees, vendors, third-party administrators or by unknown third parties. Such a breach could affect our data framework or cause a failure to protect the personal information of our customers, claimants or employees, or sensitive and confidential information regarding our business and may result in operational impairments and financial losses, as well as significant harm to our reputation. The breach of confidential information also could give rise to legal liability and regulatory action under data protection and privacy laws, as well as evolving regulation in this regard. Any such legal or regulatory action could have a material adverse effect on our operations. We may incur losses which arise from employees or third party service providers engaging in intentional misconduct, fraud, errors and omissions, failure to comply with internal guidelines, including with respect to underwriting authority, or failure to comply with regulatory requirements. Our controls may not be able to detect all possible circumstances of employee and third party service provider non-compliant activity and the internal structures in place to prevent this activity may not be effective in all cases. Any losses relating to such non-compliant activity could adversely affect our results of operations. 11