Tetra Tech (TTEK) Risk Analysis

Our engagements often involve large-scale, complex projects. The quality of our performance on such projects depends in large part upon our ability to manage the relationship with our clients and our ability to effectively manage the project and deploy appropriate resources, including third-party contractors and our own personnel, in a timely manner. We may commit to a client that we will complete a project by a scheduled date. We may also commit that a project, when completed, will achieve specified performance standards. If the project is not completed by the scheduled date or fails to meet required performance standards, we may either incur significant additional costs or be held responsible for the costs incurred by the client to rectify damages due to late completion or failure to achieve the required performance standards. The uncertainty of the timing of a project can present difficulties in planning the amount of personnel needed for the project. If the project is delayed or canceled, we may bear the cost of an underutilized workforce that was dedicated to fulfilling the project. In addition, performance of projects can be affected by a number of factors beyond our control, including unavoidable delays from government inaction, public opposition, inability to obtain financing, weather conditions, unavailability of materials, changes in the project scope of services requested by our clients, industrial accidents, environmental hazards and labor disruptions. To the extent these events occur, the total costs of the project could exceed our estimates, and we could experience reduced profits or, in some cases, incur a loss on a project, which may reduce or eliminate our overall profitability. Further, any defects or errors, or failures to meet our clients' expectations, could result in claims for damages against us. Failure to meet performance standards or complete performance on a timely basis could also adversely affect our reputation and client base.

Certain of our contracts require our employees travel to and work in high-risk countries that are undergoing political, social and economic upheavals resulting from war, civil unrest, criminal activity, acts of terrorism or public health crises. As a result, we risk loss of or injury to our employees and may be subject to costs related to employee death or injury, repatriation or other unforeseen circumstances. We may choose or be forced to leave a country with little or no warning due to physical security risks.

We depend on contractors and subcontractors in conducting our business. There is a risk that we may have disputes with our subcontractors arising from, among other things, the quality and timeliness of work performed by the subcontractor, client concerns about the subcontractor or our failure to extend existing task orders or issue new task orders under a subcontract. In addition, if a subcontractor fails to deliver on a timely basis the agreed-upon supplies, fails to perform the agreed-upon services or goes out of business, then we may be required to purchase the services or supplies from another source at a higher price, and our ability to fulfill our obligations as a prime contractor may be jeopardized. This may reduce the profit to be realized or result in a loss on a project for which the services or supplies are needed. We also rely on relationships with other contractors when we act as their subcontractor or joint venture partner. The absence of qualified subcontractors with which we have a satisfactory relationship could adversely affect the quality of our service and our ability to perform under some of our contracts. Our future revenue and growth prospects could be adversely affected if other contractors eliminate or reduce their subcontracts or teaming arrangement relationships with us, or if a government agency terminates or reduces these other contractors' programs, does not award them new contracts, or refuses to pay under a contract.

Our services involve significant risks of professional and other liabilities, which may substantially exceed the fees that we derive from our services. We maintain insurance coverage from third-party insurers as part of our overall risk management strategy and because some of our contracts require us to maintain specific insurance coverage limits. From time to time, we assume liabilities as a result of indemnification provisions contained in our service contracts. We cannot predict the magnitude of these potential liabilities. We are liable to pay such liabilities from our assets if and when the aggregate settlement or judgment amount exceeds our insurance policy limits. Further, our insurance may not protect us against liability because our policies typically have various exceptions to the claims covered and also require us to assume some costs of the claim even though a portion of the claim may be covered. A partially or completely uninsured claim, if successful and of significant magnitude, could have a material adverse effect on our liquidity. If any of our third-party insurers fail, suddenly cancel our coverage, or otherwise are unable to provide us with adequate insurance coverage, then our overall risk exposure and our operational expenses would increase and the management of our business operations would be disrupted. In addition, if we expand into new markets, we may not be able to obtain insurance coverage for these new activities or, if insurance is obtained, the dollar amount of any liabilities incurred could exceed our insurance coverage. There can be no assurance that any of our existing insurance coverage will be renewable upon the expiration of the coverage period or that future coverage will be affordable at the required limits.

We develop, install and maintain information technology systems for ourselves, as well as for customers. Client contracts for the performance of information technology services, as well as various privacy and securities laws, require us to manage and protect sensitive and confidential information, including federal and other government information, from disclosure. We also need to protect our own internal trade secrets and other business confidential information, as well as personal data of our employees and contractors, from disclosure. In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA") applies to personal information of consumers, business representatives, and employees who are California residents, and requires businesses to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for administrative fines and allows private litigants affected by certain data breaches to recover significant statutory damages. Other states, such as Virginia and Colorado, have also passed comprehensive privacy laws, and similar laws are being considered in several other states, as well as at the federal and local levels. Outside the United States, an increasing number of laws, regulations, and industry standards govern data privacy and security. For example, the European Union's General Data Protection Regulation ("EU GDPR"), the United Kingdom's GDPR, and Brazil's General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or "LGPD") (Law No. 13,709/2018) impose strict requirements for processing personal data. For example, the EU GDPR extends the scope of the European Union data protection laws to all companies processing data of European Union residents, regardless of the company's location. In the ordinary course of business, we may transfer personal data from Europe and other jurisdictions to the United States or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area ("EEA") and the United Kingdom ("UK") have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA and UK's standard contractual clauses, the UK's International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, the UK or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups.

We engage in consulting, engineering, program management and technical services that can result in substantial injury or damages that may expose us to legal proceedings, investigations and disputes. For example, in the ordinary course of our business, we may be involved in legal disputes regarding personal injury claims, employee or labor disputes, professional liability claims and general commercial disputes involving project cost overruns and liquidated damages as well as other claims. In addition, in the ordinary course of our business, we frequently make professional judgments and recommendations about environmental and engineering conditions of project sites for our clients, and we may be deemed to be responsible for these judgments and recommendations if they are later determined to be inaccurate. For example, as discussed elsewhere in this report, the USAO filed complaints against TtEC in the NDCA alleging violations of the False Claims Act, Comprehensive Environmental Response, Compensation, and Liability Act of 1980, as amended ("CERCLA") and common law, and several ancillary claims brought by third-party private plaintiffs arising from the same services provided by TtEC on the same project are ongoing. Any unfavorable legal ruling against us could result in substantial monetary damages or even criminal violations. We maintain insurance coverage as part of our overall legal and risk management strategy to minimize our potential liabilities; however, insurance coverage contains exclusions and other limitations that may not cover our potential liabilities. Generally, our insurance program covers workers' compensation and employer's liability, general liability, automobile liability, professional errors and omissions liability, property and contractor's pollution liability (in addition to other policies for specific projects). Our insurance program includes deductibles or self-insured retentions for each covered claim that may increase over time. In addition, our insurance policies contain exclusions that insurance providers may use to deny or restrict coverage. Excess liability and professional liability insurance policies provide for coverage on a "claims-made" basis, covering only claims actually made and reported during the policy period currently in effect. If we sustain liabilities that exceed or that are excluded from our insurance coverage, or for which we are not insured, it could have a material adverse impact on our financial condition, results of operations and cash flows.

A substantial portion of our revenue is derived from contracts with agencies and departments of federal, state and local governments. Each year, client funding for some of our U.S. government contracts may directly or indirectly rely on government appropriations or public-supported financing. Legislatures may appropriate funds for a given project on a year-by-year basis, even though the project may take more than one year to perform. In addition, public-supported financing such as U.S. state and local municipal bonds may be only partially raised to support existing projects. Similarly, an economic downturn may make it more difficult for governments to fund projects. In addition to the state of the economy and competing political priorities, public funds and the timing of payment of these funds may be influenced by, among other things, curtailments in the use of government contracting firms, increases in raw material costs, delays associated with insufficient numbers of government staff to oversee contracts, budget constraints, the timing and amount of tax receipts and the overall level of government expenditures. If adequate funding is not available or is delayed, then our profits and revenue could decline.

U.S. government contracts are awarded through a competitive procurement process. The U.S. federal government has increasingly relied upon multi-year contracts with pre-established terms and conditions, such as indefinite delivery/indefinite quantity ("IDIQ") contracts, which generally require those contractors who have previously been awarded the IDIQ to engage in an additional competitive bidding process before a task order is issued. As a result, new work awards tend to be smaller and of shorter duration, since the orders represent individual tasks rather than large, programmatic assignments. In addition, we believe that there has been an increase in the award of federal contracts based on a low-price, technically acceptable criteria emphasizing price over qualitative factors, such as past performance. As a result, pricing pressure may reduce our profit margins on future federal contracts. Moreover, even if we are qualified to work on a government contract, we may not be awarded the contract because of existing government policies designed to protect small businesses and under-represented minority contractors. Our inability to win or renew government contracts during competitive procurement processes could harm our operations and significantly reduce or eliminate our profits.

In recent years, there has been significant litigation involving intellectual property rights in technology industries. We may face from time to time, allegations that we or a supplier or customer have violated the rights of third parties, including patent, trademark and other intellectual property rights. If, with respect to any claim against us for violation of third-party intellectual property rights, we are unable to prevail in the litigation or retain or obtain sufficient rights or develop non-infringing intellectual property or otherwise alter our business practices on a timely or cost-efficient basis, our business, financial condition or results of operations may be adversely affected. Any infringement, misappropriation or related claims, whether or not meritorious, are time consuming, divert technical and management personnel and are costly to resolve. As a result of any such dispute, we may have to develop non-infringing technology, pay damages, enter into royalty or licensing agreements, cease utilizing products or services or take other actions to resolve the claims. These actions, if required, may be costly or unavailable on terms acceptable to us.