Investors Title Company (ITIC) Risk Analysis

Climate change, extreme weather conditions and catastrophic events, such as future pandemic diseases, natural disasters and terrorist attacks, could have a material adverse effect on the Company's future results of operations and financial condition. The Company's business operations could be impacted, including availability of key Company personnel or the Company's information technology systems, by volatility of real estate prices, significant climate migration, and disruptions to the real estate environment or financial markets. Given the unpredictable nature of these events with respect to size, severity, duration and geographic location, it is not currently possible to quantify the ultimate impact that they may have on the Company's business.

The Company derives a substantial portion of its income from its investment portfolio that primarily includes fixed maturity securities, equity securities and short-term investments. The Company's investment policy is designed to comply with regulatory requirements and to balance the competing objectives of asset quality and investment returns. The Company's investment portfolio is subject to risk from changes in general economic conditions, prices of marketable fixed maturity securities and equity securities, interest rates, liquidity, credit markets, and other external factors. The risk of loss is increased during periods of economic uncertainty and tight credit markets as these factors could limit the ability of some issuers to repay their debt obligations. Fixed maturity securities and equity securities are carried at estimated fair value on the Company's Consolidated Balance Sheets. Changes in the estimated fair value of fixed maturity securities are recorded as a component of accumulated other comprehensive income. Fixed maturity securities are regularly reviewed for differences between the cost and estimated fair value of each security for factors indicating impairment that would result in the value of the investment being written down. Unrealized holding gains and losses on equity securities are reported in the Consolidated Statements of Operations as net investment gains (losses), without regard to impairment. Changes in the estimated fair value of securities in the Company's investment portfolio could have a material adverse effect on the Company's results of operations and financial condition.

The Company relies on information technology ("IT") systems for a wide range of activities involved in the delivery of its products and services, including, but not limited to, the following: - process title insurance applications and policy issuances;- perform due diligence on land titles;- manage substantial cash, investment assets, bank deposits, trust assets and escrow account balances on behalf of the Company and its customers;- manage billing, collections and payables, including insurance premiums and agent commissions;- manage accounting and financial reporting; and - manage payroll and human resources information. The Company's IT systems may be disrupted or fail, and information stolen or otherwise misappropriated, for a number of reasons, including, but not limited to: - hacking, computer viruses, malware, ransomware or other cyberattacks;- software "bugs", hardware defects or human error;- natural disasters, like fires, or pandemics; or - power loss. Any of these events could disrupt operations both internally and externally, which may result in the loss of revenues. These events could also result in the unauthorized release of proprietary and/or non-public information, or even defalcation of corporate or client funds. Like all companies, the Company's IT systems have been, and likely will continue to be, the target of computer viruses, cyberattacks, phishing attacks and other malicious activity. While the Company has not experienced a known material breach to date, the occurrence or scope of such events is not always immediately apparent and there can be no assurance that the Company will not suffer additional attacks or incur serious financial consequences or expense in the future. The Company invests resources in maintaining the security of its systems and adapting to evolving security threats. There is, however, no guarantee that its security measures will be adequate to prevent all cyberattacks. There is similarly no guarantee that the Company's backup systems or disaster recovery procedures will be adequate to mitigate losses due to IT system disruptions in a timely fashion, and the Company may incur significant expense in correcting IT system emergencies. The Company's reputation may also be damaged in the event of a serious IT breach or failure. Furthermore, as technology develops, and as cybercriminals become more capable, the difficulty and expense of maintaining IT security and redundancy may increase. To the extent the Company's IT systems store non-public personal information, and information about its employees, security breaches may expose the Company to other serious liabilities and reputational harm if such data is misappropriated. Non-public personal information may include, but is not limited to, names, addresses, social security numbers, and banking information. Additionally, future or past business transactions (such as acquisitions or integrations) could expose the Company to additional cybersecurity risks and vulnerabilities, as the Company's systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. In conducting its business and delivering its products and services, the Company also utilizes service providers. These service providers and the IT systems they utilize are typically subject to similar types of risks that the Company faces. The Company provides certain of these service providers with data, including non-public personal information. There is no guarantee that the Company's due diligence or ongoing vendor oversight will be sufficient to ensure the integrity and security of the systems utilized by these service providers or the protection of the information that resides thereon. Furthermore, the Company is required by law and by certain contracts, particularly contracts with financial institutions, to notify various parties, consumers and customers in the event that confidential or personal information may have been or was accessed by unauthorized third parties. Such an event could potentially result in a breach of contract, and any required notifications could result in, among other things, the loss of customers, negative publicity, distraction of management, fines, lawsuits for breach of contract, regulatory inquiries or involvement and a decline in sales. The Company seeks to mitigate the financial risk associated with unauthorized disclosure of non-public information by maintaining cyber liability insurance coverage. As cybercriminals continue to become more sophisticated, the costs to insure against cyberattacks have risen and may continue to rise in the future. The Company's coverage under its cyber liability insurance policy may be insufficient to cover all losses that the Company may incur in connection with an unauthorized disclosure of non-public information. Any inability of the Company or its service providers to prevent or adequately respond to the issues described above could disrupt the Company's business, delay or impact the delivery of its products and services, inhibit its ability to retain existing customers or attract new customers, divert management's time and energy, otherwise harm its reputation and/or result in financial losses, litigation, regulatory inquiries, increased costs or other adverse consequences that could be material to the Company.

Technological changes in the title insurance industry are driven primarily by evolution in technology, competitive factors and regulatory changes. These changes have resulted in faster information delivery and efficient, highly automated production processes. The inability of the Company to manage, develop or successfully implement new systems or technological changes could negatively impact profitability.

Competition for skilled and experienced personnel in the Company's industry is high, and the success of the Company is substantially dependent on its ability to attract and retain such personnel. The Company may have difficulty hiring and retaining the necessary marketing and management personnel to support future growth plans. Also, the Company's results of operations and financial condition could be adversely affected if it is unsuccessful in attracting and retaining new agents.

The competitive positions of title insurance companies rely partly on ratings published by independent rating services. Government-sponsored entities and lending institutions utilize these ratings, among other items, to evaluate a title insurer's strength and stability. The Company's title insurance subsidiaries are currently rated by A.M. Best Company and Demotech, Inc. The ratings issued by independent rating agencies are not credit ratings, but represent the opinion of the individual rating agency regarding the title insurance subsidiaries' financial strength, operating performance, and ability to meet policyholder obligations. These insurer ratings are subject to periodic review and there can be no assurance that the Company's insurance subsidiaries will maintain their current respective ratings. A significant downgrade in the ratings of either of the Company's insurance subsidiaries could negatively impact the ability to compete for new business, retain existing business and maintain the necessary licenses to operate as title insurance companies in various states.

The title insurance industry is highly competitive with only a few insurers comprising a large percentage of the market. Key competitive factors are quality of service, price within regulatory parameters, expertise, timeliness and the financial strength and size of the insurer. Title insurance underwriters compete for premiums by choosing various distribution channels which may include company-owned operations, independent agents and agency relationships with real estate attorneys, subsidiaries of community and regional lending institutions, realtors, builders and other settlement service providers. Title insurance underwriters compete for agents on the basis of service, technology and commission levels. Some title insurers currently have greater financial resources, larger distribution networks and more extensive computerized databases of property records and information than the Company. The number and size of competing companies varies in the different geographic areas in which the Company operates, and any reductions to current regulatory barriers within any of the different geographic areas could increase the number of competitors entering into the title insurance market. Competition among the major providers of title insurance or the acceptance of alternative products to traditional title products by the regulatory authorities and the marketplace could adversely affect the Company's operations and financial condition. Competition for exchange services comes from other title insurance companies and agents, banks, attorneys, and other independently-owned, qualified intermediaries that offer exchange services. Key elements that affect competition are price, expertise, timeliness and quality of service and the financial strength and size of the exchange service provider. Exchange services are not a regulated industry; there is no market data available regarding the Company's market position in this industry.