Want to see III full AI Analyst Report?
Information Services Group (III) Risk Analysis
Risk Overview Q2, 2026
Risk Change Over Time
- Innovation / R&D - Risk 1The development, deployment, and use of artificial intelligence technologies, including generative AI, involve significant legal, regulatory, operational, ethical and commercial risks, any of which could materially and adversely affect our business, financial condition, results of operations and reputation.
We are increasing our use of AI across our service delivery, advisory offerings and internal operations. AI technologies are at an early stage of development and present uncertainties regarding reliability, accuracy, explainability, data governance and long-term economic viability. Although we are dedicating resources to AI-related investments, training and partnerships, we may be unable to develop, procure, implement, or maintain AI tools and capabilities in a manner that meets client requirements, complies with applicable laws or produces anticipated operational or financial benefits. AI systems may generate outputs that are inaccurate, biased, incomplete, unpredictable or otherwise unintended. Such outcomes could result in operational failures, adverse client impacts, misinformed decision-making, or reputational harm. Any failure by us-or by third parties whose tools or data we use-to appropriately design, test, validate, monitor or govern AI systems could expose us to contractual claims, indemnification demands, regulatory enforcement, litigation, financial penalties or other liabilities. The regulatory framework governing AI is rapidly evolving and varies significantly across jurisdictions in which we operate. New or amended laws, regulations, standards or guidance may impose additional obligations on the development, use, auditing or documentation of AI systems, restrict certain uses of AI, require enhanced disclosures, or create new liabilities. Compliance with such frameworks may require substantial investment in governance, controls, reporting processes and oversight mechanisms. Failure to comply-whether actual or perceived-may result in investigations, fines, operational restrictions, adverse publicity or loss of client trust. Our competitive position may be adversely affected by rapid technological change and heightened competition related to AI. Competitors, including global consultancies, technology vendors, hyperscalers and emerging AI-native firms, may introduce capabilities that exceed or supplant our own. Clients may accelerate internal development of AI capabilities that reduce demand for our services. AI and automation may also diminish the need for certain services currently provided by our personnel, and we may not be able to adjust our delivery model, pricing, staffing, training or organizational structure in a timely or cost-effective manner. In addition, our AI capabilities depend on access to third-party infrastructure, data sets, cloud environments, software, models and specialized hardware. Supply constraints, increased pricing, licensing limitations, service interruptions, security vulnerabilities and/or incidents, or changes in contractual terms could materially impair our ability to develop, deliver or support AI-related services. Uncertainties regarding ownership, licensing or permissible use of training data, model outputs or other intellectual property may expose us to disputes, forced modifications, operational delays or damages. Any of the foregoing factors-individually or collectively-could materially and adversely affect our business, financial condition, results of operations and reputation.
- Technology - Risk 2We are exposed to risks related to artificial intelligence.
We recognize that our use of AI introduces risks related to data protection, cybersecurity, model integrity, confidentiality and operational reliability. In particular, our use of AI technologies may expose us to errors, data quality issues, security vulnerabilities, or other harms, especially as these technologies can behave unpredictably, fail, or produce inaccurate or biased outputs. Failures in oversight, system design, or data quality could result in various harms to us or our clients, including, but not limited to, operational disruptions, security or privacy incidents, and/or reputational challenges. Because AI systems can be complex and difficult to fully evaluate or audit, we may be unable to detect errors or vulnerabilities in a timely manner. If we are unable to effectively implement, monitor, and manage these technologies, our business, financial condition, and results of operations could be adversely affected. In light of these risks, we have established governance processes intended to support the responsible evaluation, approval, deployment and monitoring of AI tools used in our internal operations and in client delivery. These processes include review mechanisms for higher-risk AI use cases, defined roles and responsibilities for management oversight, and coordination among our information security, legal, compliance and risk management functions. Our Board of Directors, through its designee, the Information Security Committee ("ISC"), receives periodic updates from management regarding emerging AI-related risks, regulatory developments, and the potential impact of AI on our operations, technology environment and risk profile. Management is responsible for implementing controls, policies, training and monitoring procedures relevant to AI technologies, including restrictions on the use of unapproved or public AI tools that may create confidentiality, cybersecurity or compliance risks. As AI technologies and associated global and domestic laws and regulations continue to evolve, we may be required to, among other things: enhance our governance frameworks, controls, documentation and reporting practices, increase our compliance costs; and/or limit our use of certain technologies. There can be no assurance that our processes will be sufficient to prevent or mitigate all AI-related risks, and failures or limitations in these processes could have a material adverse effect on our operations, reputation or regulatory posture. Moreover, any failure to comply with emerging AI regulatory frameworks could result in enforcement actions, fines, or other adverse consequences.
Risk Highlights Q2, 2026
Risk Word Cloud
Risk Factors Full Breakdown - Total Risks 40
- Accounting & Financial Operations - Risk 1Our operating results may fluctuate significantly from period to period as a result of factors outside of our control.
Our revenues and operating results may vary significantly from accounting period to accounting period due to factors including: - fluctuations in revenues earned on contracts;- commencement, completion or termination of engagements during any particular period;- additions and departures of key advisors;- transitioning of advisors from completed projects to new engagements;- seasonal trends;- introduction of new services by us or our competitors;- changes in fees, pricing policies or compensation arrangements by us or our competitors;- strategic decisions by us, our clients or our competitors, such as acquisitions, divestitures, spin-offs, joint ventures, strategic investments or changes in business strategy;- global economic and political conditions and related risks, including acts of terrorism, war, pandemics, inflation, slowing growth, rising interest rates and recession; and - conditions in the travel industry that could prevent our advisors from traveling to client sites.
- Accounting & Financial Operations - Risk 2Our contracts with contingent-based revenue may cause unusual variations in our operating results.
As part of our strategy, from time to time, we earn incremental revenues, in addition to hourly or fixed-fee billings, which are contingent on the attainment of certain contractual milestones or objectives. Because it is uncertain when the milestones or objectives will be achieved, if ever, any such incremental revenues may cause unusual variations in quarterly revenues and operating results. Also, whether any contractual milestones or objectives are achieved may become subject to dispute.
- Accounting & Financial Operations - Risk 3Failure to maintain effective internal control over financial reporting could adversely affect our business and the market price of our common stock.
Pursuant to rules adopted by the SEC implementing Section 404 of the Sarbanes Oxley Act of 2002, we are required to assess the effectiveness of our internal control over financial reporting and provide a management report on our internal control over financial reporting in all annual reports. This report contains, among other matters, a statement as to whether or not our internal control over financial reporting is effective and the disclosure of any material weaknesses in our internal control over financial reporting identified by management. The Committee of Sponsoring Organizations of the Treadway Commission (COSO) provides a framework for companies to assess and improve their internal control systems. Auditing Standard No. 5 provides the professional standards and related performance guidance for auditors to attest to, and report on, management's assessment of the effectiveness of internal control over financial reporting under Section 404. Management's assessment of internal control over financial reporting requires management to make subjective judgments and some of the judgments will be in areas that may be open to interpretation. Therefore, our management's report on our internal control over financial reporting may be difficult to prepare, and our auditors may not agree with our management's assessment. While we currently believe our internal control over financial reporting is effective, we are required to comply with Section 404 on an annual basis. If, in the future, we identify one or more material weaknesses in our internal control over financial reporting during this continuous evaluation process, our management will be unable to assert such internal control is effective. Therefore, if we are unable to assert that our internal control over financial reporting is effective in the future, or if our auditors are unable to express an opinion on the effectiveness of our internal control, our investors could lose confidence in the accuracy and completeness of our financial reports, which could have an adverse effect on our business and the market price of our common stock.
- Accounting & Financial Operations - Risk 4Our actual operating results may differ significantly from our guidance.
From time to time, we release guidance regarding our future performance that represents our management's estimates as of the date of release. This guidance, which consists of forward-looking statements, is prepared by our management and is qualified by, and subject to, the assumptions and the other information contained or referred to in the release. Our guidance is not prepared with a view toward compliance with published guidelines of the Public Company Accounting Oversight Board (United States) and neither our independent registered public accounting firm nor any other independent expert or outside party compiles or examines the guidance and, accordingly, no such person or firm expresses any opinion or any other form of assurance with respect thereto. Guidance is based upon a number of assumptions and estimates that, while presented with numerical specificity, is inherently subject to significant business, economic and competitive uncertainties and contingencies, many of which are beyond our control and are based upon specific assumptions with respect to future business decisions, some of which will change. The principal reason that we release this data is to provide a basis for our management to discuss our business outlook with analysts and investors. We do not accept any responsibility for any projections or reports published by any such persons. Guidance is necessarily speculative in nature, and it can be expected that some or all of the assumptions of the guidance furnished by us will not materialize or will vary significantly from actual results. Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release. Actual results will vary from the guidance and the variations may be material. Investors should also recognize that the reliability of any forecasted financial data diminishes the farther in the future that the data is forecast. In light of the foregoing, investors are urged to put any guidance in context and not to place undue reliance on it. Any failure to successfully implement our operating strategy or the occurrence of any of the events or circumstances set forth in this Annual Report on Form 10-K could result in the actual operating results being different than the guidance, and such differences may be adverse and material.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.