■ Signiifcant matters: Failure to respond ■ Resilience of member ifrms: Failure of promptly and appropriately to a signiifcant a signiifcant member ifrm to withstand an issue in a member ifrm that could have economic, regulatory or political shock, or security-, technology- or client-related complete adequate contingency planning implications for the broader network ■ Technology resilience and availability: Failure to ■ Regulations and/or public policy: Risk of manage critical system availability, impacting the a regulatory change that would hamper our ability to service clients and manage the business ability to operate in a sustainable way ■ People: Failure to attract, retain and train ■ Data strategy and management: Failure appropriate talent to ensure resources can be to manage and maintain ifrm or third- deployed rapidly in order to realise opportunities party data in line with compliance and and make adequate plans for workforce-related regulatory standards changes such as automation; and failure to have the right skills in place to meet clients’ changing ■ Information and cyber security: Failure to needs. In the context of the COVID-19 pandemic, manage the security of ifrm or third-party resilience with regard to people includes the information, causing legal, reputational and need to respond to the health emergency, adopt brand damage to the network different virtual and socially distanced business practices, and address the challenges of ensuring Network resilience: a successful ‘return to ofifce’ strategy ■ Black swan events: Failure to prepare Market risks: for market events with network-wide implications which require an immediate ■ Technology-enabled disruption: Failure to response, such as a regulatory change or a prepare for and respond to disruption, including macroeconomic disruption like a pandemic. bringing new services and solutions to the market with speed and agility ■ Green swan events: Failure to prepare for environmental events with network-wide ■ Strategy execution: Failure to ensure implications in terms of immediate/disaster relevance and meet client expectations due to response, reputational damage and incomplete implementation of core elements of potential macroeconomic impact the network strategy