Company: AHL
Filing Date: 2025-03-19
Form Type: 20-F
Source: 0001267395-25-000019
Chunk: 44

Company: ASPEN INSURANCE HOLDINGS LTD
Filing Date: 2025-03-19
Form: 20-F
Item: Item 3
Chunk 44
---
 assurance that these processes and procedures will effectively control all known risks or effectively identify unforeseen risks, or that our employees and third-party agents will effectively implement them. Loss may result from, among other things, fraud, errors, failure to document transactions properly, failure to obtain proper internal authorization, failure to comply with underwriting or other internal guidelines or failure to comply with regulatory requirements. Loss from these risks could adversely affect our business, results of operations and financial condition. In addition, insurance policies that we have in place with third parties may not protect us in the event that we experience a significant loss from these risks.

A failure in our data security and/or technology systems or infrastructure or those of third parties, including those caused by security breaches or cyber-attacks or through the incorporation of artificial intelligence (“ AI”), could disrupt our business, damage our reputation and cause losses.

Our operations rely on the secure processing, storage, and transmission of confidential and other information and assets, including in our computer systems and networks. Our business, including our ability to adequately price products and services, establish reserves, provide an effective and secure service to our customers, value our investments and report our financial results in a timely and accurate manner, depends significantly on the integrity, availability and timeliness of the data we maintain, as well as the data and assets held through third-party outsourcers, service providers and systems. Cybersecurity and technology threats can include phishing scams, account takeovers, introductions of malware (including ransomware), attempts at electronic break-ins, and the computerized submission of fraudulent and/or duplicative payment requests. Any such breaches or interference (including attempted breaches or interference) by third parties or by insiders that may occur in the future could have a material adverse impact on our business, reputation, financial condition or results of operations.

Ta b le of Contents

In an effort to ensure the integrity of such data, we implement new security measures and systems and improve or upgrade our existing security measures and systems on a continuing basis. Although we have implemented administrative and technical controls and take protective actions to reduce the risk of cyber incidents and to protect our information technology and assets, and we endeavor to modify such procedures as circumstances warrant and negotiate agreements with third-party providers to protect our assets, such measures may be insufficient to prevent, among other things, unauthorized access, computer viruses, malware or other malicious code or cyber-attack, catastrophic events, system failures and disruptions (including in relation to new security measures and systems), employee errors or malfeasance, third-party (including outsourced