Cohen & Steers (CNS) Risk Analysis

Many aspects of our business involve risks of legal liability. Claims against us may arise in the ordinary course of business, including employment-related claims, and from time to time, we have and may continue to receive subpoenas or other requests for information or similar correspondence from various U.S. and non-U.S. governmental or regulatory authorities and third parties in connection with certain industry-wide, company-specific or other investigations or proceedings. In addition, certain funds we manage may become subject to lawsuits, any of which could potentially impact the investment returns of the applicable fund. We carry insurance in amounts and under terms that we believe are appropriate to cover potential liabilities related to litigation. However, we cannot guarantee that our insurance will cover all liabilities and losses to which we may be exposed, or that our insurance policies will continue to be available at acceptable terms and fees. As our insurance policies are due for renewal, we may need to assume higher deductibles or pay higher premiums, which would increase our expenses and reduce our net income.

Our business is dependent on the effectiveness of our information and cybersecurity policies and procedures to protect our network and telecommunications systems and the data that reside in or are transmitted through such systems. As part of our normal operations, we maintain and transmit confidential information about our clients' portfolios as well as proprietary information relating to our business operations and our employees. We maintain a system of internal controls for us and certain of our investment vehicles designed to provide reasonable assurance that malicious or fraudulent activity, including misappropriation of our assets, fraudulent financial reporting and unauthorized access to sensitive or confidential information is either prevented or timely detected and remediated. However, our technology systems may still be vulnerable to unauthorized access or may be corrupted by cyberattacks, computer viruses or other malicious software code, or authorized persons could inadvertently or intentionally release confidential or proprietary information. The nature of these threats and the techniques used by cyber criminals are constantly evolving, can originate from a wide variety of sources and are becoming increasingly sophisticated, including the use of artificial intelligence (AI) by threat actors to develop cyberattacks and the use of "ransomware", social engineering and phishing attacks, and may not be recognized until launched. Highly publicized security breaches continue to expose failures of companies to keep pace with the threats posed by cyber-attackers and have led to increased government, regulatory and media scrutiny. Cybersecurity has become a top priority of regulators around the world. Many jurisdictions in which we operate have, or are considering adopting, laws and regulations relating to data privacy, cybersecurity and protection of personal information. Our potential liability remains a concern, particularly given the continued and rapid development of privacy laws and regulations around the world, the lack of harmonization of such laws and regulations, and increased criminal and civil enforcement actions and private litigation. As new privacy-related laws and regulations are implemented, the time and resources needed for us to comply with such laws and regulations continues to increase and become a significant compliance workstream. Any inability, or perceived inability, by us to adequately address privacy concerns, or comply with applicable laws, regulations, policies, industry standards and guidance, contractual obligations or other legal obligations, even if unfounded, could result in significant regulatory and third-party liability, increased costs, disruption of our business and operations and a loss of client (including investor) confidence and other reputational damage. We cannot assure you that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages, breaches in our systems, or those of our third-party vendors and other contractors and consultants, or other cyber incidents that could have a material adverse effect upon our reputation, business, operations or financial condition. Although we take precautions to password-protect and encrypt all authorized electronic devices, if such devices are stolen, misplaced or left unattended, they may become vulnerable to hacking or other unauthorized use, creating a possible security risk. Our or our third-party service providers' systems may also be affected by, or fail as a result of, catastrophic events, such as fires, floods, hurricanes, tornadoes, acts of terrorism or power disruptions. Like other companies, we have experienced and will likely continue to experience cyber incidents, security threats and attacks. There can be no assurance that our efforts to maintain and monitor the security and integrity of our information technology systems will be effective at all times. Any breach or other failure of our or certain other parties' technology or security systems, including but not limited to those systems of our third-party intermediaries, service providers, key vendors and third parties with whom we do business, could result in the loss of valuable information, liability for stolen assets or information, remediation costs to repair damage caused by the incident, additional security costs to mitigate against future incidents, regulatory scrutiny and penalties and litigation costs resulting from the incident. In addition, our increased use of mobile and cloud computing technologies could increase these and other operational risks, and any failure by mobile or cloud technology service providers to adequately safeguard their systems could disrupt our operations and result in misappropriation, corruption or loss of confidential or proprietary information. For many companies, remote and/or hybrid in-office work arrangements have made their network and communication systems more vulnerable to cyberattacks and incursions, and there has been an overall increase in both the frequency and severity of cyber incidents as such vulnerabilities have been exploited. Use of a remote work environment subjects us to heightened risk of cyberattacks, unauthorized access or other privacy or data security incidents, both directly as well as indirectly through third-party intermediaries, service providers and key vendors that have access or other connections to our systems. Loss of confidential client information could harm our reputation, result in the termination of contracts by our existing clients, and subject us to litigation or liability under laws and agreements that protect confidential and personal data, resulting in increased costs and/or loss of revenues. We maintain a cyber insurance policy to help mitigate against certain potential losses relating to information security breaches. However, such insurance may only partially reimburse us for our losses, if at all, and if a claim is successful and exceeds or is not covered by our insurance policy, we may be required to pay a substantial amount to satisfy such successful claim.

The success of our business depends largely on the experience, expertise and continued service of our senior executives and senior investment professionals. The loss of any such persons, or our failure to adequately prepare for the retention of such persons or to effectively implement related succession plans, could materially adversely affect our business, strategic initiatives and financial condition. While we have succession plans in place and continue to review and update those plans, there is no guarantee that their implementation or execution will operate as intended or otherwise be effective. In addition, we do not carry "key person" or similar insurance that would provide us with proceeds in the event of the death or disability of any of our employees. In addition, legal and regulatory restrictions on the terms or enforceability of non-competition, employee non-solicitation, confidentiality and similar restrictive covenant clauses could make it more difficult to retain qualified personnel. The loss of any senior executives or senior investment professionals could impair or limit our ability to successfully execute our business strategy or adversely affect our ability to retain existing and attract new client assets. Further, the departure of a portfolio manager could cause clients in investment strategies overseen by such manager to withdraw funds from, or reconsider the allocation of additional funds to, such strategies, and cause consultants and other intermediaries to discontinue recommendations of such strategies, any of which would reduce our assets under management, investment advisory fees and net income.

Our growth strategy includes the expansion of our business and diversification beyond our existing core products and services. As part of the implementation of our strategy, we have emphasized the development of broader real assets strategies, such as our private real estate investment strategy. We also continue to prioritize the expansion of our geographical presence and capabilities as well as product and service offerings outside the U.S. Significant fixed costs and other expenses have been incurred to support the development and launch of new strategies, investment vehicles and products (including exchange-traded funds and rights offerings), to expand the availability and marketability of our existing strategies and products, to grow our potential client base and to enhance our infrastructure, including additional office space, technology, operations and personnel. Developing and implementing new investment strategies and products may require significant upfront management time and attention, the hiring and retention of highly-compensated personnel and ongoing marketing and other support. Such strategies and products may also require substantial seed capital commitments and other financial resources or obligations, including potential subsidies or advancements of operating expenses for an extended period of time, which may not be recovered in part or at all, any of which may expose us to potential losses. New products often must be in the marketplace for a period of time and undergo a certain amount of asset portfolio construction in order to generate a track record sufficient to attract significant inflows and enable platform placement at key distributors and intermediaries. In addition, launches of new strategies or products, including private real estate investing, and adjustments to existing strategies or products in connection with our growth strategy, may in some cases be based on anticipated legal, regulatory, financial or accounting treatment that may not be realized within the timeframe or in the form expected, or at all. The success of our business strategy and future growth is contingent upon our ability to continue to support and invest in the development of new strategies and products, to generate sufficient assets under management and fee revenue at the levels and within the timeframe anticipated in order to support the compensation and other costs and expenses underlying such new strategies and products, to expand the availability of our existing strategies and products and to successfully manage multiple offices and navigate legal and regulatory systems both domestically and internationally. The effectiveness of our operations outside the U.S. may also depend in part on our ability to identify, establish, launch, adequately staff and properly license new or alternate international office locations, either opportunistically or in response to regional conditions. The upfront and ongoing costs of adequately supporting our growth and initiatives will have an effect on our operating margin and other financial results.

The investment management industry is highly competitive, and investors are increasingly fee sensitive. We compete against a large number of investment products offered by other investment management companies, investment dealers, banks and insurance companies, and many institutions we compete with have greater infrastructure and financial resources than us. We compete with these firms on the basis of investment performance, diversity of products, investments in available property assets, distribution capability, scope and quality of services, reputation and the ability to develop and successfully launch new investment strategies and products to meet the changing needs of investors and generate strong returns. In the case of new strategy and product launches (including exchange-traded funds), our lack of available long-term records of prior investment performance, or investment "track records," may put us at a competitive disadvantage until such records are established. In addition, the investment management industry is facing transformative pressures and trends from a variety of different sources including increased fee pressure; a continued shift away from actively managed equity and fixed income strategies towards alternative, passive and smart beta strategies; increased demands from clients and distributors for client engagement and services; a trend towards institutions developing fewer relationships and partners and reducing the number of investment managers they work with; and increased regulatory activity and scrutiny of many aspects of the investment management industry. Further, advances in technology, including through AI capabilities, automation and digital wealth and distribution tools, as well as growing client interest for enhanced digital interaction with their investment portfolios, may require us to adapt our strategy, business and operations to address these trends and pressures. Our competitive position may weaken if we are unable to meet these client priorities. Our actively managed investment strategies compete not only against other active strategies but also against similarly positioned passive strategies. Market demand for index funds and other passive strategies, and the broad availability of investment options to meet these demands, reduces opportunities for active managers and may contribute to fee compression. In the event that competitors charge lower fees for substantially similar products, we may be forced to compete on the basis of price to attract and retain clients. In order to maintain our current fee structure in a competitive environment, we must be able to provide clients with investment returns and service commensurate with the level of fees we charge. To the extent current or potential clients decide to invest in products sponsored by our competitors, the sales of our products as well as our market share, revenue and net income could decline.

Our reputation is important to the success of our business. We believe the Cohen & Steers brand has been, and continues to be, well received globally both in our industry and with our clients, reflecting the fact that our brand, like our business, is based in part on trust and confidence. Our reputation may be harmed by a number of factors, including, but not limited to, poor investment performance, operational failures, errors or unintended consequences associated with our use of AI and machine learning technologies, cyber incidents, negative publicity, the dissemination by current or former clients of unfavorable opinions about our services, changes in key members of an investment team or in our senior management and the imposition of legal or regulatory sanctions or penalties in connection with our business activities. Third-party financial intermediaries, advisors or consultants may remove our investment products from recommended lists due to poor performance or for other reasons. In addition, we must routinely address and manage actual or potential conflicts of interest, as well as the perception of conflicts of interest, among our disparate business lines and/or among us and our clients, employees and/or affiliates, investment vehicles or joint venture partners. While we have policies, controls and disclosure protocols in place to manage and address actual or potential conflicts of interest, identifying and mitigating conflicts of interest can be complex and subject to regulatory scrutiny. Addressing conflicts of interest is complex and difficult, and we may fail or appear to fail to deal appropriately with such conflicts. Actual, potential or perceived conflicts could give rise to investor or client dissatisfaction, adverse publicity, litigation or regulatory enforcement actions or penalties, any of which may harm our business reputation and reduce the fees we earn and our revenue. Moreover, environmental, social and governance related activities have been the subject of increased focus by certain investors, legislators and regulators in the asset management industry, and an inability to meet applicable requirements or expectations may adversely impact our reputation and business. If our reputation is harmed, existing clients and investors may reduce amounts held in, or withdraw entirely from, funds or accounts that we manage, or funds or accounts may terminate their relationship with us. In addition, reputational harm may cause us to lose current employees and we may be unable to attract new ones with similar qualifications or skills, which could negatively affect our operations. If we fail to address, or appear to fail to address, successfully and promptly, the underlying causes of any reputational harm, we may be unsuccessful in repairing any damage to our reputation and our future business prospects would likely be affected, and the loss of client relationships could reduce our assets under management, revenue and earnings.

Changes in market and global economic conditions, including elevated interest rates, volatile equity markets, rapid and unpredictable changes in technology, slowing growth and rising inflation as well as client and governmental policy responses thereto, and geopolitical risks such as regional armed conflicts, trade policy unpredictability, shifting foreign policy positions and alliances and government shutdowns, could adversely affect the value of our assets under management, which would reduce the fees we earn and our revenue. Investor interest in and the valuation of our real estate investment strategies and preferred securities strategies can be adversely affected by changes in interest rates, particularly if interest rates increase substantially and quickly. Investor redemptions or a decline in the absolute or relative performance or value of such securities, or the attractiveness of portfolios or investment strategies utilizing such securities, would have an adverse effect on the assets we manage and our revenue. In addition, higher interest rates would increase any debt service costs incurred under the Credit Agreement, which bears interest at a variable rate that tracks interest rate changes. Although we may enter into derivative instruments to mitigate the impact of interest rate fluctuations on client assets, there is no assurance that such derivative instruments will be effective. Our assets under management are concentrated in the U.S., Asia Pacific and European equity markets. Equity securities may decline in value as a result of many global, regional or issuer-specific economic or market factors, including changes in interest rates, inflation, an issuer's actual or perceived financial condition and growth prospects, investor perception of an industry, geography or sector, changes in currency exchange rates and changes in regulations. In addition, national and international geopolitical risks and events, including the armed conflict between Russia and Ukraine and ongoing conflicts in the Middle East, tensions between the U.S. and China, deglobalization trends and changes in national industrial and trade policies and national elections in countries such as the U.S., Taiwan and India, and recent political and military developments in Venezuela, have caused and may continue to cause volatility in the global financial markets and economy. Such volatility has led and may continue to lead to the disruption of global supply chains, tariffs, labor shortages, sudden fluctuations in commodity prices and energy costs, greater political instability and the implementation of sanctions and heightened cybersecurity concerns, any or all of which may create severe long-term macroeconomic challenges, limit liquidity opportunities or lead to higher costs. Any declines in the equity markets, or in market segments in which our investment products and strategies are concentrated, could reduce the value of our seed investments and/or our assets under management, revenue and earnings. Changes related to the development, adoption or implementation of AI technologies may be difficult to anticipate, may occur rapidly and may materially alter competitive dynamics, operating models and cost structures, which may materially reduce market share and levels of demand for products, services or offerings for companies in the sectors in which we invest. Any such company or sector-level disruptions, dislocations, or volatility due to the introduction of AI tools and technologies may negatively affect our investment performance. In January 2026, the United States undertook military and law-enforcement actions in Venezuela in connection with criminal proceedings against senior Venezuelan officials, including Venezuelan President Nicolás Maduro, and publicly indicated its intent to support a political transition. The resulting geopolitical uncertainty, including the risk of further conflict, civil unrest, sanctions changes and disruption to regional energy and capital markets, may increase volatility in global financial markets and adversely affect economic conditions relevant to our investments. During 2024 and 2025, the Federal Reserve Board reduced the federal funds rate, which had been raised significantly during 2022 and 2023 to combat rising inflation in the U.S., and while further interest rate reductions remain possible, continued inflationary pressures and elevated interest rates may negatively affect our investment opportunities, the value of our investments and the relative attractiveness of and demand for our strategies, including our preferred securities and fixed income investments and strategies.

Our operations are dependent on our ability to protect our personnel, offices and technology infrastructure against damage from catastrophic or business continuity events that could have a significant disruptive effect on our operations. We and our third-party intermediaries, service providers and key vendors could experience a local or regional disaster, such as an epidemic or pandemic, weather event such as an earthquake, flood, hurricane or fire, terrorist attack, security breach, power loss and other failure of technology or telecommunications systems or operations. Events like these could threaten the safety and welfare of our workforce, cause the loss of client data or cause us to experience material adverse interruptions to our operations. Infectious illness outbreaks or other adverse public health developments in countries where we or our clients or investors operate, as well as restrictive measures implemented to control such outbreaks, could adversely affect the economies of many nations or the global economy, the financial condition of individual issuers or companies and capital markets, in ways that are not within our control and cannot be foreseen. A sustained decline in the performance of or demand for the portfolios and strategies we manage as a result of negative market, financial and economic conditions caused by catastrophic events could adversely impact our assets under management and the fees we earn, and these conditions could lead us to experience operational issues and interruptions, require us to incur significant additional costs and negatively impact our business. Significant portions of our business operations and those of our critical third-party service providers are concentrated in a few geographic areas, including New York and New Jersey. Critical operations that are geographically concentrated include portfolio management, trading operations, information technology, data centers, investment administration and portfolio accounting services for our products as well as corporate accounting systems. Should we, or any of our critical service providers, experience a significant local or regional disaster or other significant business disruption, our ability to remain operational will depend in part on the safety and availability of our personnel and our office facilities as well as on the proper functioning of our network, telecommunication and other related systems and operations. We cannot ensure that our backup systems and contingency plans will be adequate under all circumstances or that material interruptions and disruptions will not occur. In addition, we rely to varying degrees on outside vendors for disaster recovery support, and we cannot guarantee that these vendors will be able to perform in an adequate and timely manner. Failure by us or any of our critical service providers to maintain up-to-date business continuity plans, including system backup facilities, would impede our ability to operate in the event of a significant business disruption, which could result in financial losses to the Company and our clients and investors.

The financial industry continues to be impacted by innovation, technological changes and changing customer preferences, including the deployment of new technologies based on AI and machine-learning that are becoming increasingly competitive with and may disrupt more traditional business models. If we do not effectively deploy AI technologies or anticipate and adapt to these changes, or if our competitors implement AI technology more quickly or efficiently, our competitive position may suffer, and these impacts would adversely affect our business and financial condition. Our business could also be affected by technological changes in the industries or markets in which we invest that negatively impact the values of assets in which we invest and adversely affect our business and financial condition. We use AI in our business, operations and investment processes for a variety of reasons, including with the objectives of increasing efficiency, enhancing alpha generation and supporting innovation as we meet clients' evolving needs and to enable us to compete more effectively, and these technologies have become more important in our operations over time. Our use of these technologies may result in new or expanded risks and liabilities, including due to increasing governmental or regulatory scrutiny, litigation, compliance issues, ethical concerns, intellectual property, confidentiality or security risks, such as the unauthorized disclosure of confidential or sensitive data or the development of sophisticated cyberattacks, including deepfakes and social engineering, and reputational harm, as well as other factors that could adversely affect our business and financial condition. In addition, our personnel, third-party intermediaries, service providers and key vendors could improperly utilize AI technologies while carrying out their responsibilities, which could result in a disruption in the use of their systems or services. The use of AI may lead to unintended consequences, including generating content that is factually inaccurate, misleading or otherwise flawed, which could harm our reputation and business and expose us to risks related to such inaccuracies or flaws. Additionally, our business could be affected by regulatory and legal requirements through new rules and restrictions around technological advancements that could increase the cost of compliance when employing these technological changes. Broad regulatory obligations applicable to AI and machine-learning are uncertain and developing, which heightens the potential risk that such technologies may pose to us. In order to reduce these new and expanded risks and liabilities, we could choose to limit some of our activities related to such technologies, which could harm our funds' financial performance or increase fund expenses.