Franklin Resources (BEN) Risk Analysis

There is uncertainty associated with the regulatory and compliance environments in which we operate. Our business is subject to extensive and complex, overlapping and/or conflicting, and frequently changing and increasing rules, regulations, policies and legal interpretations, around the world. Political and electoral changes, developments and conflicts have in the past introduced, and may in the future introduce, additional uncertainty. Our regulatory and compliance obligations impose significant operational and cost burdens on us and cover a broad range of requirements related to financial reporting and other disclosure matters, securities and other financial instruments, investment and advisory matters, accounting, tax, compensation, ethics, intellectual property, privacy and data protection, sanctions programs, and escheatment requirements. We may be adversely affected by a failure to comply with applicable laws, regulations and changes in the countries in which we operate.

We sell our products and offer our strategies and investment management and related services in many different regulatory jurisdictions around the world, and intend to continue to expand our operations internationally. As we do so, we will continue to face challenges to the adequacy of our resources, procedures and controls to operate our business consistently and effectively. In order to remain competitive, we must be proactive and prepared to implement necessary resources when growth opportunities present themselves, whether as a result of a business acquisition or rapidly increasing business activities in particular markets or regions. Local regulatory environments may vary widely in terms of scope, adequacy and sophistication. Similarly, local distributors, and their policies and practices as well as financial viability, may vary widely and they may be inconsistent or less developed or mature than other more internationally focused distributors. Growth of our international operations has involved and may continue to involve near-term increases in expenses, as well as additional capital costs, such as information systems and technology costs, and costs related to compliance with particular regulatory or other local requirements or needs. Local requirements or needs also may place additional demands on sales and compliance personnel and resources, such as meeting local language requirements, while also integrating personnel into an organization with a single operating language. Finding, hiring and retaining additional, well-qualified personnel and crafting and adopting policies, procedures and controls to address local or regional requirements remain challenges as we expand our operations internationally. Moreover, regulators in non-U.S. jurisdictions could also change their policies or laws in a manner that might restrict or otherwise impede our ability to distribute or authorize products or maintain their authorizations in their respective markets. Any of these local requirements, activities or needs could increase the costs and expenses we incur in a specific jurisdiction without any corresponding increase in revenues and income from operating in the jurisdiction. Certain laws and regulations both inside and outside the U.S. have extraterritorial application. This may lead to duplicative or conflicting legal or regulatory burdens and additional costs and risks.

Should we experience a local or regional disaster or other business continuity problem, such as an earthquake, hurricane, tsunami, terrorist attack, public health crisis, pandemic or other natural or man-made disaster, our continued success will depend, in part, on the safety and availability of our personnel, our office facilities and infrastructure, and the proper functioning of our technology, computer, telecommunication and other systems and operations that are critical to our business. While our operational size, the diversity of locations from which we operate, and our various back-up systems provide us with an advantage, should we experience a local or regional disaster or other business continuity event, we could still experience operational challenges, in particular depending upon how such a local or regional event may affect our personnel across our operations or with regard to particular aspects of our operations, such as key executives or personnel in our technology groups. Moreover, as we grow our operations in new geographic regions, the potential for particular types of natural or man-made disasters, political, economic or infrastructure instabilities, information, technology or security limitations or breaches, or other country- or region-specific business continuity risks increases. Past disaster recovery efforts have demonstrated that even seemingly localized events may require broader disaster recovery efforts throughout our operations and, consequently, we regularly assess and take steps to improve upon our existing business continuity plans. However, a disaster on a significant scale or affecting certain of our key operating areas within or across regions, or our inability to recover successfully following a disaster or other business continuity problem, could adversely impact our business and operations.

We are highly dependent upon the use of various proprietary and third-party information and security technology, software applications, external third-party services and other technology systems, and remote equipment and connectivity infrastructure, to access critical business systems necessary to operate our business. We are also dependent on the continuity and effectiveness of our information and cybersecurity infrastructure, management oversight and reporting framework, policies, procedures and capabilities to protect our computer and telecommunications systems and the data that reside on or are transmitted through them and contracted third-party systems. We use technology and third-party providers on a daily basis in our business to, among other things, support our business continuity and operations, process and transmit confidential communications, store and maintain confidential and proprietary data including personal employee and/or client data, obtain securities pricing information, process client transactions, and provide reports and other services to our clients. In addition, developments in our use of process automation and artificial intelligence further heighten our dependency on technology. Any disruptions, inaccuracies, mismanagement, delays, theft, systems failures, data security or privacy breaches, cybersecurity threats, incidents, attacks or other cyber-related fraud, or other security breaches in these and other processes, could subject us to significant client dissatisfaction and losses and damage our reputation. We and our third-party providers have been, and we expect to continue to be, the subject of these types of risks, breaches and/or attacks, as well as attempts to co-opt our brand. Ongoing advances in technology, including generative artificial intelligence, as well as the malicious use of such technology, could further heighten the risks to our business. Although we take protective measures, including measures to secure and protect information through system security technology and our internal security procedures, as well as measures to assess third-party provider security posture and controls, we can provide no assurance that any of these measures will prove effective or comply with evolving information security standards, particularly given the evolving nature and sophistication of cyber and technology threats and attacks. The technology systems we use or rely on, including those provided and/or leveraged by third-party providers, remain vulnerable to denial of service attacks, unauthorized access, computer viruses, human error and other events and circumstances that may have a security impact, such as an external or internal hacker attack by one or more cyber criminals (including through the use of social engineering, phishing attacks, malware, ransomware and other methods and activities maliciously designed to obtain and exploit confidential information and to cause system and service disruption and other damage) and to our personnel or vendors inadvertently or recklessly causing release of confidential information, which could materially harm our operations and reputation. System disruptions, failures or breaches of the technology we use or the security infrastructure we rely upon, including third-party applications and services, or our failure to properly manage, mitigate, disclose or communicate a cybersecurity incident, could result in: (i) material financial loss or costs, (ii) delays in clients' ability to access account information or in our ability to process transactions, (iii) the unauthorized disclosure or modification of sensitive or confidential client and business information, (iv) loss of valuable information, (v) breach of client and vendor contracts, (vi) liability for stolen assets, information or identity, (vii) remediation costs to repair damage caused by the failure or breach, (viii) additional security and organizational costs to mitigate against future incidents, (ix) reputational harm, (x) loss of confidence in our business and products, (xi) liability for failure to review and disclose applicable incidents or provide relevant updated disclosure properly and timely, (xii) regulatory investigations or actions, and/or (xiii) legal claims, litigation, and liability costs, any one or more of which may be material. Moreover, loss or unauthorized disclosure or transfer of confidential and proprietary data or confidential customer identification information could further harm our reputation and subject us to liability under laws that protect confidential data and personal information, resulting in increased costs or a decline in our revenues or common stock price. Further, although we take precautions to password protect and encrypt our laptops and sensitive information on our mobile electronic devices, if such devices are stolen, misplaced or left unattended, they may become vulnerable to hacking or other unauthorized use, creating a possible security risk, which may require us to incur additional administrative costs and/or take remedial actions. In addition, failure to manage and operate properly the data centers and third-party cloud storage and computing application services we use could have an adverse impact on our business. Although we have in place certain disaster recovery plans, we may experience system delays and interruptions as a result of natural disasters, power failures, acts of war, and third-party failures.

We compete with numerous investment management companies, securities brokerage and investment banking firms, insurance companies, banks, hedge fund firms and other financial management institutions. Our products also compete with products offered by these competitors, as well as with other financial products. The periodic establishment of new investment management companies and other competitors increases the competition that we face. At the same time, consolidation in the financial services industry has created stronger competitors with greater financial resources and broader distribution channels than our own. Competition is based on various factors, including, among others, business reputation, investment performance, product mix and offerings, business trends and strategic considerations, investor goals and preferences, service quality and innovation, distribution relationships, fees charged, and legal and product requirements and restrictions. Further, although we may offer certain types of ETFs, to the extent that there is a trend among existing or potential clients in favor of lower-fee index and other ETFs, it may favor our competitors who may offer such products that are more established or on a larger scale than we do. Additionally, competing securities broker-dealers and banks, upon which we rely to distribute and sell certain of our funds and other products, also may sell their own proprietary funds and products, which could limit the distribution of our products. To the extent that existing or potential clients, including securities broker-dealers, decide to invest in or distribute the products of our competitors, the sales of our products as well as our market share, revenues and income could decline. Our ability to attract and retain AUM is also dependent on the relative investment performance of our products, offering a mix of products and strategies that meets investor demands, and our ability to maintain our investment management fees and pricing structure at competitive levels.