What the changes say
- CNA updated its risk disclosures to emphasize growing artificial intelligence integration and evolving cyber threats across vendors and operations.
What changed since the prior 10-K
New
- NewOperational Risks
Further, should we experience future cyber incidents, or should industry trends drive rate increases resulting from growth in volume and significance of cyber incidents broadly, we may incur higher costs for cybersecurity insurance coverage
Future cyber incidents or broader industry trends may increase our costs for cybersecurity insurance coverage.
Dropped
- Dropped
or eliminate the program, which could adversely affect our business by increasing our exposure to terrorism losses, or by lowering our business volume through efforts to avoid that exposure. For a further discussion of TRIPRA, see Part II, Item 7, MD&A - Catastrophes and Related Reinsurance
- Dropped
The COVID-19 pandemic, including new or emerging variants, other potential pandemics and related measures to mitigate the spread of the foregoing may continue to have adverse impacts on our business, results of operations and financial condition and could be material
- DroppedOperational Risks
limitations of any statistical analysis. Further, climate change may make modeled outcomes less certain or produce new, non-modeled risks
Reworded
- 62% rewrittenOperational Risks
Any significant breach in our data security infrastructure or our vendors’ facilities or systems could disrupt business, cause financial losses and damage our reputation, and insurance coverage may not be available for claims related to a breach
Expanded AI risks to include vendors and third-party administrators, and added that insurance coverage for data breaches may be unavailable.
- 51% rewrittenOperational Risks
We use analytical models to assist our decision making in key areas such as pricing, reserving, catastrophe risks and capital modeling and may be adversely affected if actual results differ materially from the model outputs and related analyses
Removed a sentence regarding model effectiveness degradation due to operational errors and assumptions.
- 35% rewritten
Morbidity and persistency experience can be volatile and may be negatively affected by many factors including policyholder behavior, judicial decisions regarding policy terms, socioeconomic factors, cost of care inflation, changes in health trends and advances in medical care
Added the increasingly adverse impact of social inflation, particularly legal activity and judicial decisions, on the long-term care portfolio.
- 35% rewrittenOperational Risks
Inability to detect and prevent significant employee or third-party service provider misconduct, inadvertent errors and omissions, or exposure relating to functions performed on our behalf could result in a materially adverse effect on our business, results of operations and financial condition
Added that new technologies like AI in third-party or internal processes may introduce control complexity and greater risk.
- 31% rewrittenStrategic Risks
We may be adversely affected by technological changes or disruptions in the insurance marketplace
Clarified that competitive disadvantage arises if peer utilization of AI is more effective than our own AI usage.
- 24% rewritten
We are vulnerable to material losses from natural and man-made disasters
No substantive changes detected in the provided text comparison.
All 21 risk factors
Headings as the filing states them, in filing order.
Other
- 01If we determine that our recorded insurance reserves are insufficient to cover our estimated ultimate unpaid liability for claim and claim adjustment expenses, we may need to increase our insurance reserves which would result in a charge to our earnings
- 02Our actual experience could vary from the key assumptions used to determine future policy benefit reserves for long-term care policies
- 03Morbidity and persistency experience can be volatile and may be negatively affected by many factors including policyholder behavior, judicial decisions regarding policy terms, socioeconomic factors, cost of care inflation, changes in health trends and advances in medical care35% rewritten
- 04We are vulnerable to material losses from natural and man-made disasters24% rewritten
- 05We have exposures related to asbestos and environmental pollution (A&EP) claims, which could result in material losses
Strategic Risks
- 06We face intense competition in our industry; we may be adversely affected by the cyclical nature of the property and casualty business and by the evolving landscape of our distribution network
- 07Our underwriting strategies currently rely on the effectiveness of reinsurance arrangements and we accordingly face risks relating to reinsurance, including obtaining reinsurance at a cost or on terms and conditions we deem acceptable, reinsurance counterparty risk and ineffective reinsurance coverage
- 08We may be adversely affected by technological changes or disruptions in the insurance marketplace31% rewritten
- 09We face considerable competition within our industry for qualified, specialized talent and any significant inability to attract and retain talent may adversely affect the execution of our business strategies
- 10We are controlled by a single stockholder which could result in potential conflicts of interest
Financial Risks
- 11We may incur significant realized and unrealized investment losses and volatility in net investment income arising from changes in the financial markets
Operational Risks
- 12We use analytical models to assist our decision making in key areas such as pricing, reserving, catastrophe risks and capital modeling and may be adversely affected if actual results differ materially from the model outputs and related analyses51% rewritten
- 13Any significant interruption in the operation of our business functions, facilities or systems or our vendors' facilities or systems could result in a materially adverse effect on our operations
- 14Any significant breach in our data security infrastructure or our vendors’ facilities or systems could disrupt business, cause financial losses and damage our reputation, and insurance coverage may not be available for claims related to a breach62% rewritten
- 15Further, should we experience future cyber incidents, or should industry trends drive rate increases resulting from growth in volume and significance of cyber incidents broadly, we may incur higher costs for cybersecurity insurance coverageNew
- 16Inability to detect and prevent significant employee or third-party service provider misconduct, inadvertent errors and omissions, or exposure relating to functions performed on our behalf could result in a materially adverse effect on our business, results of operations and financial condition35% rewritten
- 17Loss of key vendor relationships and issues relating to the transitioning of vendor relationships could compromise our ability to conduct business
- 18We are subject to capital adequacy requirements and, if we are unable to maintain or raise sufficient capital to meet these requirements, regulatory agencies may restrict or prohibit us from operating our business
- 19Our insurance subsidiaries, upon whom we depend for dividends in order to fund our corporate obligations, are limited by insurance regulators in their ability to pay dividends
- 20Rating agencies may downgrade their ratings of us, thereby adversely affecting our ability to write insurance at competitive rates or at all and increasing our cost of capital
- 21For further discussion of our ratings, see the Ratings subsection within the Liquidity and Capital Resources section of MD&A in Item 7
Other CNA Financial 10-Ks
- FY2024 10-K risk factors23 risks
CNA Financial faces primary risks from long-term care policy reserve volatility, natural and man-made catastrophes, and investment market fluctuations.
Filed Feb 11, 2025
About this page
The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.