Want to see IT full AI Analyst Report?
Gartner (IT) Risk Analysis
Risk Overview Q2, 2026
Source: the company's latest filing for the period ended Jun 30, 2026, filed Aug 04, 2026
Risk Change Over Time
- Share Price & Shareholder Rights - Risk 1Sustainability commitments, regulatory requirements or failure to meet stakeholder expectations in ESG could harm our reputation
We have set near-term environmental targets that have been approved by the Science-Based Targets Initiative (SBTi). Our ability to achieve these goals is subject to numerous risks outside of our control. In addition, standards and processes for measuring and reporting carbon emissions and other sustainability metrics may change over time, and may result in inconsistent data, or could result in significant revisions to our strategies and targets, or our ability to achieve them. Our failure or perceived failure to achieve them or continue practices that meet evolving, and sometimes conflicting, stakeholder expectations could harm our reputation, adversely affect our ability to attract and retain employees or clients and expose us to increased scrutiny from investors and regulatory authorities. We are also subject to evolving sustainability regulatory requirements relating to environmental, social, and governance matters that are being developed and formalized in Europe, the U.S., and elsewhere, which may include specific, target-driven frameworks and disclosure requirements. We cannot determine what final regulations will be enacted, modified, or reversed or what their ultimate impact on our business will be. Failure to comply with these requirements could result in claims and lawsuits, regulatory actions, or damage to our reputation, each of which may adversely affect our business, operations, financial condition, and results of operations. At the same time, we may also face negative commercial or reputational impacts from consumers who do not support sustainability-related initiatives or concerns.
Risk Highlights Q2, 2026
Risk Word Cloud
Risk Factors Full Breakdown - Total Risks 31
- Regulation - Risk 1Our sales to governments are subject to appropriations, complex compliance requirements and some may be terminated early.
We derive significant revenues from insights and consulting contracts with the United States government and its respective agencies, numerous state and local governments and their respective agencies, and foreign governments and their agencies. At December 31, 2025 and 2024, approximately $1.0 billion and $1.2 billion, respectively, of our outstanding revenue contracts were attributable to government entities. Our U.S. government contracts are subject to the approval of appropriations by the U.S. Congress to fund the agencies contracting for our services. Additionally, our contracts at the state and local levels, as well as foreign government contracts, are subject to various governmental authorizations and funding approvals and mechanisms. Certain of these contracts may be terminated at any time by the government entity without cause or penalty ("termination for convenience"). In addition, contracts with U.S. federal, state and local, and foreign governments and their respective agencies are subject to increasingly complex bidding procedures, compliance requirements, and efficiency considerations, as well as intense competition. Failure to adequately abide by these procedures and compliance requirements could result in an inability to contract with governments or their agencies, termination of existing contracts, penalties or fees with respect to existing contracts, or even suspension and debarment from doing future business with a government or agency, which would adversely impact our future business and operating results. Moreover, the demand for our products and services from U.S. government agencies is generally driven by the level of discretionary government program funding. In 2025, our revenues with U.S. federal government agencies declined approximately $58 million year over year, primarily due to reductions in discretionary spending. Further significant reduction in federal government spending, the absence of an agreement on the federal government budget, a partial or full federal government shutdown or a change in budgetary priorities could reduce demand for our products and services, cancel or delay federal projects, result in the closure of federal facilities and significant personnel reductions and have a material and adverse impact on our business, financial condition, results of operations and cash flows. As the current geopolitical environment remains unpredictable, we continue to monitor and evaluate the impact, both direct and indirect, of government actions that could adversely impact our business operations and financial performance.
- Regulation - Risk 2Our corporate compliance program cannot guarantee that we are in compliance with all applicable laws and regulations.
We operate in a number of countries, including emerging markets, and as a result we are required to comply with numerous, and in many cases, changing international and U.S. federal, state and local laws and regulations, including regulations relating to the ongoing Russia-Ukraine war. Accordingly, we have a corporate compliance program that includes the creation of appropriate policies defining employee behavior that mandate adherence to laws, employee training, annual affirmations, monitoring and enforcement. However, failure of any employee to comply with any of these laws, regulations or our policies, could result in a range of liabilities for the employee and for the Company, including, but not limited to, significant penalties and fines, sanctions and/or litigation, and the expenses associated with defending and resolving any of the foregoing, any of which could have a negative impact on our reputation and business.
- Regulation - Risk 3We face risks related to the regulation of AI and other evolving technologies.
The use of AI tools has led to the introduction of new laws and regulations in some of the areas where we operate. These laws and regulations vary between jurisdictions and are subject to change and evolving interpretations. As we expand our products and services and develop our business models, we have faced, and may continue to face, shifting regulations. Our ability to adopt new technologies, including AI, to innovate for our customers, manage our business and to protect our intellectual property could be adversely impacted by the evolving regulatory environment. For instance, the EU Artificial Intelligence Act ("EU AI Act") entered into force on August 1, 2024 and governs AI systems that impact individuals in the EU. Complying with the EU AI Act and similar emerging laws may impose significant costs on our business and may necessitate changes to certain business practices.
- Regulation - Risk 4Our failure to comply with complex U.S. and foreign laws and regulations could have a material adverse effect on our operations or financial condition.
Our business and operations may be conducted in countries where corruption has historically penetrated the economy. It is our policy to comply, and to require our local partners, distributors, agents, and those with whom we do business to comply, with all applicable anti-bribery and anti-corruption laws, such as the U.S. Foreign Corrupt Practices Act, the UK Bribery Act, regulations established by the Office of Foreign Assets Control and with applicable local laws of the foreign countries in which we operate. There can be no assurance that all of our employees, contractors and agents will comply with the Company's policies that mandate compliance with these laws. Any determination or allegations, even if unfounded, that we have violated or are responsible for violations of these laws, even if inadvertent, could be costly and disrupt our business, which could have a material adverse effect on our business, results of operations, financial condition, liquidity and cash flows, as well as on our reputation. In addition, continuously evolving data protection laws and regulations, such as the GDPR, CCPA and CPRA, LGPD, the Chinese Cybersecurity, Data Security and Personal Information laws and other new and proposed data protection laws, pose increasingly complex compliance challenges. We have implemented programs designed to address the GDPR, CCPA, CPRA and LGPD, as well as policies and processes to address the applicable Chinese data protection laws. More generally, we maintain and rely upon our comprehensive global data protection compliance program, which includes administrative, technical, and physical controls designed to safeguard our associates' and clients' personal data. The interpretation and application of these laws and regulations in the United States, the EU, China and elsewhere are often uncertain, inconsistent and ever changing. Our efforts to comply with these various laws and regulations could cause us to incur substantial costs or require us to change our business practices in a manner adverse to our business.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.