Kelly Services (KELYA) Risk Analysis

Our success is directly dependent on our customers' demand for talent. As technology continues to evolve, an increasing number of tasks currently performed by people may be replaced by automation, robotics, machine learning, artificial intelligence ("AI"), and other technology advances outside of our control. These changes could result in a decreased demand for human labor. This trend poses a risk to the staffing industry, particularly in lower-skill job categories and to creative, administrative, customer support and clerical roles vulnerable to advances in artificial intelligence. Artificial intelligence is beginning to perform tasks previously handled by knowledge workers, including data entry, basic coding, document review, financial analysis, customer service, and administrative support. As these technologies become more sophisticated and widely adopted, demand for certain categories of professional and technical staff we provide may decline. While technology may create demand for new types of roles that increase the demand for our services, there is no guarantee that growth in emerging job categories will fully offset potential declines in overall staffing demand. If we are unsuccessful in responding to this potential shift in customer demand due to advancing technology, it could have a material adverse effect on our results of operations and financial condition.

We rely upon multiple information technology systems and networks, some of which are web-based or managed by third parties or open source, to process, transmit and store electronic information and to manage or support a variety of critical business processes and activities. Our networks and applications are increasingly accessed from locations and by devices not within our physical control and the specifics of our technology systems and networks may vary by geographic region. In the course of ordinary business, we may store or process proprietary or confidential information concerning our business and financial performance and current, past or prospective employees, customers, vendors and managed suppliers. The secure and consistent operation of these systems, networks and processes is critical to our business operations. Moreover, our workers may be exposed to, or have access to, similar information in the course of their customer assignments. We routinely experience cyberattacks, which may include the use or attempted use of malware, ransomware, computer viruses, phishing, social engineering schemes and other means of attempted disruption or unauthorized access. Advanced social engineering and impersonation techniques by criminal organizations and nation-state adversaries for the purposes of espionage, data theft, or system disruption have sought to exploit information technology job opportunities at many companies. Although we have not experienced a material attack of this nature, because our services involve providing talent solutions for information technology roles, we are at increased risk for this advanced type of attack, whether directly or through a supplier in our MSP services. Additionally, the rapid pace of change in information security and cyber security threats could result in a heightened threat level for us or companies in our industry without notice. The potential risk increases as we expand and publicize new services. In addition to cyberattacks, our systems and services are vulnerable to damage or disruption from technology or software failures, errors by our employees or our vendors, power outages, natural disasters, extreme weather, conflicts, or other unforeseen events, which could disrupt our business operations. Our relationships with third parties, including suppliers we manage, customers and vendors, create potential avenues for malicious actors to initiate a supply chain attack. Even in instances where we are not a target of a malicious actor, we could be exposed to risk due to our relationships and business processes with these third parties. The actions we take to reduce the risk of impairments to our operations or systems and breaches of confidential or proprietary data may not be sufficient to prevent or repel future cyber events or other impairments of our networks or information technologies, especially as cyberattacks become more sophisticated with advances in artificial intelligence. An event involving the destruction, modification, accidental or unauthorized release, or theft of sensitive information from systems related to our business, or an attack that results in damage to or unavailability of our key technology systems or those of critical vendors (e.g., ransomware), could result in damage to our reputation, fines, regulatory sanctions or interventions, contractual or financial liabilities, additional compliance and remediation costs, loss of employees or customers, loss of payment card network privileges, operational disruptions and other forms of costs, losses or reimbursements, any of which could materially adversely affect our operations or financial condition. Our cyber security and business continuity plans and those of our third parties with whom we do business, may not be effective in anticipating, preventing and effectively responding to all potential cyber risk exposures. Cyberattacks, even if unsuccessful, may damage or disrupt our systems and services or require us to take actions to protect our systems that could have a material adverse effect on our business, financial condition and results of operations. Our insurance coverage may not be sufficient to cover all such costs or consequences and there can be no assurance that any insurance that we now maintain will remain available under acceptable terms.

As a leading staffing and recruiting company, we are closely scrutinized by government agencies under U.S. and foreign competition laws. An increasing number of governments are enforcing competition laws and regulations, leading to increased scrutiny. Some jurisdictions also allow competitors or consumers to assert claims of anti-competitive conduct. The European Commission and its various competition authorities have targeted industry trade associations in which we participate, which could result in the assessment of fines against our business. Although we have safeguards in place to comply with competition laws, there can be no guarantee that such safeguards will be successful. Any government regulatory actions may result in fines and penalties or hamper our ability to provide cost-effective benefits to consumers and businesses, reducing the attractiveness of our services and the revenues that come from them. New competition law actions could be initiated. The outcome of such actions, or steps taken to avoid them, could adversely affect us in a variety of ways, including: - We may have to choose between withdrawing certain services from certain geographies to avoid fines or designing and developing alternative versions of those services to comply with government rulings, which may entail a delay in a service delivery. - Adverse rulings may act as precedent in other competition law proceedings.

Provisions in U.S. and foreign tax law could limit the use of tax credit and net operating loss carryforwards in the event of an ownership change. In general, an ownership change occurs under U.S. tax law if there is a change in the corporation's equity ownership that exceeds 50% over a rolling three-year period. If we experience an ownership change, inclusive of our Class A and Class B common stock, our tax credit and net operating loss carryforwards generated prior to the ownership change may be subject to annual limitations that could reduce, eliminate or defer their utilization. Such limitation could materially impact our financial condition and results of operations.

As we aim to expand the number of clients utilizing our higher margin specialty solutions in support of our growth strategy, we are highly reliant on individuals who possess specialized knowledge and skills to lead related specialty solutions and operations. Social, political and financial conditions can negatively impact the availability of qualified personnel. Competition for individuals with proven specialized knowledge and skills is intense and demand for these individuals is expected to remain strong in the foreseeable future. Our success is dependent on our ability to attract, develop and retain these employees.

We conduct our business in major markets throughout the world. Our operations outside the United States are subject to risks inherent in international business activities, including: - fluctuations in currency exchange rates;- restrictions or limitations on the transfer of funds;- government intrusions including asset seizures, expropriations or de facto control;- varying economic and geopolitical conditions;- differences in cultures and business practices;- differences in employment and tax laws and regulations;- differences in accounting and reporting requirements;- differences in labor and market conditions;- compliance with trade sanctions;- changing and, in some cases, complex or ambiguous laws and regulations; and - litigation, investigations and claims. Our operations outside the United States are reported in the applicable local currencies and then translated into U.S. dollars at the applicable currency exchange rates for inclusion in our consolidated financial statements. Exchange rates for currencies of these countries may fluctuate in relation to the U.S. dollar and these fluctuations may have an adverse or favorable effect on our operating results when translating foreign currencies into U.S. dollars.