Risk Factors - RLI

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

$RLI Risk Factor changes from 00/02/24/23/2023 to 00/02/23/24/2024

Item 1A. Risk Factors​Insurance Industry​Our results of operations and revenues may fluctuate as a result of many factors, including cyclical changes in the insurance industry, which may cause the price of our securities to be volatile.​The results of operations of companies in the property and casualty insurance industry historically have been subject to significant fluctuations and uncertainties. Our profitability can be significantly affected, and has been affected to varying degrees, by:​●Competitive pressures impacting our ability to write new business or retain existing business at an adequate rate,​●Rising levels of loss costs that we cannot anticipate at the time we price our coverages, including inflation in the cost of materials, delays that cause increased business interruption losses and social inflation, as influenced by higher jury verdicts,​15 Table of Contents●Volatile and unpredictable developments, including man-made, weather-related and other natural catastrophes, terrorist attacks or geopolitical events,​●Significant price changes of the commodities we insure,​●Changes in the availability and level of reinsurance capacity,​●Changes in the amount of losses resulting from new types of claims and new or changing judicial interpretations relating to the scope of insurers’ liabilities and​●The ability of our underwriters to accurately select and price risk and our claim personnel to appropriately deliver fair outcomes. Our profitability can be affected significantly by:​●Competitive pressures impacting our ability to write new business or retain existing business at an adequate rate,​●Rising levels of loss costs that we cannot anticipate at the time we price our coverages, including inflation in cost of materials, delays that cause increased business interruption losses and social inflation, as influenced by higher jury verdicts,​●Volatile and unpredictable developments, including man-made, weather-related and other natural catastrophes, terrorist attacks or significant price changes of the commodities we insure,​●Changes in the availability and level of reinsurance capacity,​●Changes in the amount of losses resulting from new types of claims and new or changing judicial interpretations relating to the scope of insurers’ liabilities and​●The ability of our underwriters to accurately select and price risk and our claim personnel to appropriately deliver fair outcomes. ​In addition, the demand for property and casualty insurance, both admitted and excess and surplus lines, can vary significantly, rising as the overall level of economic activity increases and falling as that activity decreases, causing our revenues to fluctuate. These fluctuations in results of operations and revenues may not reflect long-term results and may cause the price of our securities to be volatile.​A significant percentage of our premium revenues are sold through a few brokers and carrier partners and a loss of business provided by any of them could adversely affect us.​We market our insurance products through brokers, agents and carrier partners. In 2023, 42 percent of our gross premiums written were produced through six producer entities, while no other entity’s production exceeded 2 percent of our gross premiums written. Accordingly, our business is dependent on the willingness of these agents, brokers and carrier partners to recommend our products to their customers, who may also promote and distribute the products of our competitors. Loss of all or a substantial portion of the business written through these parties could have a material adverse effect on our business.​Our business is concentrated in several key states and a change in our business in one of those states could disproportionately affect our financial condition or results of operations.​Although we operate in all 50 states, 57 percent of our direct premiums earned were generated in four states in 2023: Florida – 20 percent; California – 17 percent; Texas – 11 percent; and New York – 9 percent.​Although we operate in all 50 states, 53 percent of our direct premiums earned were generated in four states in 2022: California – 17 percent; Florida – 14 percent; New York – 11 percent; and Texas – 11 percent. An interruption in our operations, or a negative change in the business environment, insurance market or regulatory environment in one or more of these states could have a disproportionate effect on our business and direct premiums earned.​We compete with a large number of companies in the insurance industry and their actions could ultimately impact our overall results.​We compete with a large number of companies in the insurance industry to underwrite premium and their actions could ultimately impact our overall results. ​We are vulnerable to the actions of other companies who may seek to write business without the appropriate regard for risk and profitability, especially during periods of intense competition for premium. We are vulnerable to the actions of other companies who may seek to write business without the appropriate regard for risk and profitability, especially during periods of intense competition for premium. During these times, it is very difficult to grow or maintain premium volume without sacrificing underwriting income.​We face competition from specialty insurance companies, underwriting agencies and intermediaries, as well as diversified financial services companies that are significantly larger than we are, and that have significantly greater financial, marketing, management and other resources. We may also face competition from new sources of capital such as institutional investors seeking access to the insurance market, sometimes referred to as alternative capital, which may depress pricing or limit our opportunities to write business. Some of these competitors also have stronger brand awareness than we do. We may incur increased costs in competing for premium. If we are unable to compete effectively in the markets we operate in or are not successful in expanding our operations into new markets, the amount of premium we write may decline, pressuring overall business results.​A number of new, proposed or potential legislative or industry developments could further increase competition in our industry, including:​●An increase in capital-raising by companies in our lines of business, which could result in new entrants to our markets and an excess of capital in the industry,​16 Table of Contents●The deregulation of commercial insurance lines in certain states and the possibility of federal regulatory reform of the insurance industry, which could increase competition from standard carriers for our excess and surplus lines of insurance business,​●Programs in which state-sponsored entities provide property insurance in catastrophe-prone areas or other alternative market types of coverage,​●Changing practices, which may lead to greater competition in the insurance business and​●The emergence of Insurtech companies and the development of new technologies, which may lead to disruption of current business models and the insurance value chain.​A number of new, proposed or potential legislative or industry developments could further increase competition in our industry, including:​●An increase in capital-raising by companies in our lines of business, which could result in new entrants to our markets and an excess of capital in the industry,​●The deregulation of commercial insurance lines in certain states and the possibility of federal regulatory reform of the insurance industry, which could increase competition from standard carriers for our excess and surplus lines of insurance business,​●Programs in which state-sponsored entities provide property insurance in catastrophe-prone areas or other alternative market types of coverage,​●Changing practices, which may lead to greater competition in the insurance business and​●The emergence of Insurtech companies and the development of new technologies, which may lead to disruption of current business models and the insurance value chain. ​New competition from these developments could cause the supply and/or demand for insurance or reinsurance to change, which could affect our ability to price our coverages at attractive rates and thereby adversely affect our underwriting results.​A downgrade in our ratings from AM Best, Standard & Poor’s or Moody’s could negatively affect our business.​Financial strength ratings are an important factor in establishing the competitive position of insurance companies. Our insurance companies are rated for overall financial strength by AM Best, Standard & Poor’s and Moody’s. AM Best, Standard & Poor’s and Moody’s ratings are independent opinions of an insurer’s financial strength and ability to meet ongoing insurance policy and contract obligations, based on a comprehensive quantitative and qualitative analysis of balance sheet strength, operating performance, business profile and enterprise risk management. These financial strength ratings are based on factors relevant to policyholders, agents, insurance brokers and intermediaries and are not specifically related to securities issued by the company. The view of required capital may differ between rating agencies, as well as from RLI Corp.’s own view of desired capital. Our ratings are subject to periodic review by such firms, and the criteria used in the rating methodologies is subject to change. As such, we cannot assure we will continue to maintain of our current ratings.​All of our ratings were reviewed during 2023. AM Best reaffirmed its A+, Superior rating for the combined entity of RLI Ins., Mt. Hawley and CBIC (group-rated). Standard & Poor’s reaffirmed our A rating for the group of RLI Ins. Standard & Poor’s reaffirmed our rating for the group of RLI Ins. and Mt. Hawley. Moody’s reaffirmed our group rating of A2 for RLI Ins. and Mt. Hawley. If our ratings are significantly reduced from their current levels by AM Best, Standard & Poor’s or Moody’s, our competitive position in the industry, and therefore our business, could be adversely affected. A significant downgrade could result in a substantial loss of business, as policyholders might move to other companies with greater financial strength ratings.​We are subject to extensive governmental regulation, which may adversely affect our ability to achieve our business objectives. Moreover, if we fail to comply with these regulations, we may be subject to penalties, including fines and suspensions, which may adversely affect our financial condition, results of operations and reputation.​Most insurance regulations are designed to protect the interests of policyholders rather than shareholders and other stakeholders. These regulations, generally administered by a department of insurance in each state and territory in which we do business, relate to, among other things:​●Approval of policy forms and premium rates,​●Standards of solvency, including risk-based capital measurements,​●Licensing of insurers and their producers,​●Restrictions on agreements with our large revenue-producing agents,​●Cancellation and non-renewal of policies,​●Restrictions on the nature, quality and concentration of investments,​●Restrictions on the ability of our insurance company subsidiaries to pay dividends to the Company,​●Restrictions on transactions between insurance company subsidiaries and their affiliates,17 Table of Contents​●Restrictions on the size of risks insurable under a single policy,​●Requiring deposits for the benefit of policyholders,​●Requiring certain methods of accounting,​●Periodic examinations of our operations and finances,​●Prescribing the form and content of records of financial condition required to be filed and​●Requiring reserves for unearned premium, losses and other purposes. These regulations, generally administered by a department of insurance in each state and territory in which we do business, relate to, among other things:​●Approval of policy forms and premium rates,​●Standards of solvency, including risk-based capital measurements,18 Table of Contents​●Licensing of insurers and their producers,​●Restrictions on agreements with our large revenue-producing agents,​●Cancellation and non-renewal of policies,​●Restrictions on the nature, quality and concentration of investments,​●Restrictions on the ability of our insurance company subsidiaries to pay dividends to the Company,​●Restrictions on transactions between insurance company subsidiaries and their affiliates,​●Restrictions on the size of risks insurable under a single policy,​●Requiring deposits for the benefit of policyholders,​●Requiring certain methods of accounting,​●Periodic examinations of our operations and finances,​●Prescribing the form and content of records of financial condition required to be filed and​●Requiring reserves for unearned premium, losses and other purposes. ​These regulatory requirements may adversely affect or inhibit our ability to achieve some or all of our business objectives.​In addition, regulatory authorities have relatively broad discretion to deny or revoke licenses for various reasons, including the violation of regulations. In some instances, we follow practices based on our interpretations of regulations or practices that we believe may be generally followed by the industry. These practices may turn out to be different from the interpretations of regulatory authorities. If we do not have the requisite licenses and approvals or do not comply with applicable regulatory requirements, insurance regulatory authorities could initiate investigations or other proceedings, fine the Company, preclude or temporarily suspend the Company from carrying on some or all of its activities or otherwise penalize the Company. This could adversely affect our ability to operate our business. Further, changes in the level of regulation of the insurance industry or changes in laws or regulations themselves or interpretations by regulatory authorities could adversely affect our ability to operate our business as currently conducted.​Our loss reserves are based on estimates and may be inadequate to cover our actual insured losses, which would negatively impact our profitability.​Significant periods of time often elapse between the occurrence of an insured loss, the reporting of the loss to the Company and the payment of that loss. To recognize liabilities for unpaid losses, we establish reserves as balance sheet liabilities representing estimates of amounts needed to pay reported and unreported losses and the related loss adjustment expenses. Loss reserves are estimates of the ultimate cost of claims and do not represent an exact calculation of liability. These estimates are based on historical information and on estimates of future trends that may affect the frequency and severity of claims that may be reported in the future.​Estimating loss reserves is a difficult, complex and inherently uncertain process involving many variables and subjective judgments. Changes in industry practices, and in legal, legislative, regulatory, judicial, social and other conditions under which we operate may require us to pay claims we did not intend to cover when we wrote the policies. Changes in industry practices, and in legal, legislative, regulatory, judicial, social and other conditions under which we 19 Table of Contentsoperate may require us to pay claims we did not intend to cover when we wrote the policies. These changes may serve to extend the time for making claims, extend coverage and increase damages. These changes may not become apparent until after we have issued policies or bonds that are affected by the changes and, consequently, we may not know the extent of our liability and the impact to our financial performance until many years after a policy or bond was issued. The effects of these and other coverage issues are difficult to predict and could have a materially adverse effect on our financial performance.​As part of the reserving process, we review historical data and consider the impact of various factors such as:​●Loss emergence and claim reporting patterns,​●Underlying policy terms and conditions,​●Business and exposure mix,​●Emerging coverage issues,​●Trends in claim frequency and severity,​●Changes in operations,​●Emerging economic and social trends,​18 Table of Contents●State reviver statutes that permit claims after a statute of limitation has expired,​●Court closures or increased time-to-trial,​●Inflation in amounts awarded by courts and juries and​●Changes in the regulatory and litigation environments.​As part of the reserving process, we review historical data and consider the impact of various factors such as:​●Loss emergence and cedant reporting patterns,​●Underlying policy terms and conditions,​●Business and exposure mix,​●Emerging coverage issues,​●Trends in claim frequency and severity,​●Changes in operations,​●Emerging economic and social trends,​●State reviver statutes that permit claims after a statute of limitation has expired,​●Court closures or increased time-to-trial,​●Inflation in amounts awarded by courts and juries and​●Changes in the regulatory and litigation environments. ​This process assumes that past experience, adjusted for the effects of current developments and anticipated trends, is an appropriate basis for predicting future events. It also assumes adequate historical or other data exists upon which to make these judgments. For more information on the estimates used in the establishment of loss reserves, see the Losses and Settlement Expenses section of our Critical Accounting Policies contained within Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations. For more information on the estimates used in the establishment of loss reserves, see the Loss and Settlement Expenses section of our Critical Accounting Policies contained within Item 7, Management’s Discussion and Analysis of Financial Condition and Results of Operations. However, there is no precise method for evaluating the impact of any specific factor on the adequacy of reserves and actual results are likely to differ from original estimates. If the actual amount of insured losses is greater than the amount we have reserved for these losses, our profitability could suffer.​Catastrophic losses are unpredictable and could cause the Company to suffer material financial losses.​Our insurance coverages include exposure to catastrophic events, particularly earthquakes on the West Coast and hurricanes and tropical storms affecting coastal regions of the United States.​Our insurance coverages include exposure to catastrophic events, particularly earthquakes on the West Coast and hurricanes and tropical storms affecting the continental U. Weather-related catastrophes may include meteorological events such as hurricanes, severe convective storms and winter weather; and climatological events such as drought, wildfires and heatwaves. In addition, catastrophe losses can occur from events such as lava flows in Hawaii and terrorist events in the United States.​The incidence and severity of catastrophes are inherently unpredictable. The extent of losses from a catastrophe is a function of both the total amount of insured values in the area affected by the event and the severity of the event. Most catastrophes are restricted to fairly specific geographic areas. However, hurricanes and earthquakes may produce significant damage in large, heavily populated areas. It is possible that a catastrophic event or multiple catastrophic events could cause the Company to suffer material financial losses. In addition, catastrophe claim costs may be higher than we originally estimate and could cause substantial volatility in our financial results for any fiscal quarter or year.​We use models to help assess exposure to catastrophic events against established thresholds. Models include underlying assumptions based on a limited set of actual events and cannot contemplate all possible catastrophe scenarios. In addition, models are revised periodically, which could change modeled losses. The losses we might incur from an actual catastrophe could be higher than our expectation of losses generated from modeled catastrophe scenarios, which could have a materially adverse effect on our results of operations and financial condition. To address uncertainty related to catastrophe models, we also monitor against thresholds using non-modeled scenarios.​Changing climate and weather conditions may adversely affect our financial condition or profitability.20 Table of Contents​Changing climate and weather conditions may adversely affect our financial condition or profitability. ​Climate change is a complex and evolving issue and we cannot predict the cumulative impact it may have on our results of operations or financial condition at this time. The effects on the Company could include:​●Changes in the frequency, severity and location of weather-related catastrophes, which may result in higher levels of losses,​●Additional uncertainty in third party catastrophe models, which could impair our ability to assess exposure and adequately price the catastrophe risks we insure,​●Flooding of coastal property, resulting from rising sea levels, making certain geographic areas uninhabitable, reducing demand for insurance products we offer in those areas,​●Increased losses from weather-related catastrophes may make it more difficult to obtain reinsurance at desired levels, or more expensive to acquire reinsurance coverage, which may reduce the amount of business we write and the revenues we generate,​●A transition from carbon-based energy to other sources of energy may decrease demand for insurance coverage we provide to the industries that produce or use carbon-based energy, decrease the availability of reinsurance available for 19 Table of Contentscoverages we provide for those industries, or increase claims and losses related to those industries, any of which could affect our profitability,​●Changes in legislation, regulation and court decisions could increase our compliance costs, impose liability on policyholders that we did not contemplate when we underwrote policies, or limit our ability to sell insurance coverage to certain policyholders and​●Losses on our invested assets that could have a material adverse impact on our results of operations and financial condition. The effects on the Company could include:​●Changes in the frequency, severity and location of weather-related catastrophes, which may result in higher levels of losses,​●Additional uncertainty in third party catastrophe models, which could impair our ability to assess exposure and adequately price the catastrophe risks we insure,​●Flooding of coastal property, resulting from rising sea levels, making certain geographic areas uninhabitable, reducing demand for insurance products we offer in those areas,​●Increased losses from weather-related catastrophes may make it more difficult to obtain reinsurance at desired levels, or more expensive to acquire reinsurance coverage, which may reduce the amount of business we write and the revenues we generate,​●A transition from carbon-based energy to other sources of energy may decrease demand for insurance coverage we provide to the industries that produce or use carbon-based energy, decrease the availability of reinsurance available for coverages we provide for those industries, or increase claims and losses related to those industries, any of which could affect our profitability,​●Changes in legislation, regulation and court decisions could increase our compliance costs, impose liability on policyholders that we did not contemplate when we underwrote policies, or limit our ability to sell insurance coverage to certain policyholders and​●Losses on our invested assets that could have a material adverse impact on our results of operations and financial condition. ​Our reinsurers may not pay on losses in a timely fashion, or at all, which may increase our costs and have an adverse effect on our business.​We purchase reinsurance to transfer part of the risk we have assumed (known as ceding) to a reinsurance company in exchange for part of the premium we receive in connection with the risk. Although reinsurance makes the reinsurer liable to the Company to the extent the risk is transferred or ceded to the reinsurer, it does not relieve the Company (the reinsured) of its liability to its policyholders. Accordingly, we bear credit risk with respect to our reinsurers. That is, our reinsurers may not pay claims made by the Company on a timely basis, or they may not pay some or all of these claims for a variety of reasons. Either of these events would increase our costs and could have a material adverse effect on our business.​If we cannot obtain adequate reinsurance protection for the risks we have underwritten or at prices we deem acceptable, we may be exposed to greater losses from these risks or we may reduce the amount of business we underwrite, which would reduce our revenues.​Market conditions beyond our control determine the availability and cost of the reinsurance protection that we purchase. In addition, the historical results of reinsurance programs and the availability of capital also affect the availability of reinsurance. Our reinsurance agreements are generally subject to annual renewal. We cannot be sure that we can maintain our current reinsurance protection, obtain other reinsurance facilities in adequate amounts and at favorable rates, or diversify our exposure among an adequate number of high-quality reinsurance partners. If we are unable to renew our expiring facilities or obtain new reinsurance facilities on terms we deem acceptable, either our net loss exposures would increase, which could increase the volatility of our results, or we would have to reduce the level of our underwriting commitments when possible, which would reduce our revenues. Many of the bonds we issue, particularly in the energy sector, are non-cancelable and may expose the Company to greater losses, should the surety reinsurance coverage we are able to secure be reduced or become unavailable.​Financial and Investment​Adverse changes in the economy could lower the demand for our insurance products and could have an adverse effect on the revenue and profitability of our operations.​21 Table of ContentsFinancial and Investment​Adverse changes in the economy could lower the demand for our insurance products and could have an adverse effect on the revenue and profitability of our operations. ​Factors such as business revenue, construction spending, government spending, the volatility and strength of the capital markets and inflation can all affect the business and economic environment. These same factors affect our ability to generate revenue and profits. Insurance premiums in our markets are heavily dependent on our customer revenues, payroll, value of goods transported, miles traveled and number of new projects initiated. In an economic downturn characterized by higher unemployment, declines in construction spending and reduced corporate revenues, the demand for insurance products is adversely affected. Adverse changes in the economy may lead our customers to have less need or desire for insurance coverage, to cancel existing insurance policies, to modify coverage or to not renew with the Company, all of which affect our ability to generate revenue. In addition, as approximately a third of our business relates to the construction industry, our results of operations could be significantly impacted in an economic downturn if the construction industry is affected disproportionally.​Access to capital and market liquidity may adversely affect our ability to take advantage of business opportunities as they arise.​Our ability to grow our business depends, in part, on our ability to access capital when needed. We cannot predict capital market liquidity or the availability of capital. We also cannot predict the extent and duration of future economic and market disruptions, the impact of government interventions into the market to address these disruptions and their combined impact on our industry, business and investment portfolios. If our company needs capital but cannot raise it, our business and future growth could be adversely affected.​20 Table of ContentsWe are an insurance holding company and therefore may not be able to receive adequate or timely dividends from our insurance subsidiaries.​We are an insurance holding company and therefore may not be able to receive adequate or timely dividends from our insurance subsidiaries. ​RLI Corp. is the holding company for our three insurance operating companies. At the holding company level, our principal assets are the shares of capital stock of our insurance company subsidiaries. We rely largely on dividends from our insurance company subsidiaries to meet our obligations for paying principal and interest on outstanding debt, corporate expenses and dividends to RLI Corp. shareholders. Dividend payments to RLI Corp. from our principal insurance subsidiary are restricted by state insurance laws as to the amount that may be paid without prior approval of the IDOI. As a result, we may not be able to receive dividends from such subsidiary at times and in amounts necessary to pay RLI Corp. obligations and desired dividends to shareholders. Ordinary dividends, which may be paid by our principal insurance subsidiary without prior regulatory approval, are subject to certain limitations based upon income, surplus and earned surplus. The maximum ordinary dividend distribution from our principal insurance subsidiary in a rolling 12-month period is limited by Illinois law to the greater of 10 percent of RLI Ins. policyholder surplus as of December 31 of the preceding year, or the net income of RLI Ins. for the 12-month period ending December 31 of the preceding year. Ordinary dividends are further restricted by the requirement that they be paid from earned surplus. Any dividend distribution in excess of the ordinary dividend limits is deemed extraordinary and requires prior approval (or non-disapproval) from the IDOI. Because the limitations are based upon a rolling 12-month period, the presence, amount and impact of these restrictions vary over time.​We may not be able to, or might not choose to, continue paying dividends on our common stock.​We have a history of paying regular, quarterly dividends and have paid annual special dividends since 2010.​We have a history of paying regular, quarterly dividends and in recent years have paid special dividends. The payment of either type of dividend to our shareholders in the future is not guaranteed, is at the discretion of our board of directors and will depend on our results of operations, financial condition and other factors deemed relevant by our board of directors. Any determination to pay either type of dividend to our stockholders in the future will be at the discretion of our board of directors and will depend on our results of operations, financial condition and other factors deemed relevant by our board of directors. Our ability to pay dividends depends largely on our subsidiaries’ earnings and operating capital requirements, and is subject to the regulatory, contractual and other constraints of our subsidiaries, including the effect of any such dividends or distributions on the AM Best rating or other ratings of our insurance subsidiaries. In addition, we may choose to retain capital to support growth or further mitigate risk, instead of returning excess capital to our shareholders.​Our investment results and, therefore, our financial condition may be impacted by changes in the business, financial condition or operating results of the entities in which we invest, as well as changes in interest rates, government monetary policies, general economic conditions, liquidity and overall market conditions.​We invest the premiums we receive from customers until they are needed to pay expenses or policyholder claims. Funds remaining after paying expenses and claims remain invested and are included in retained earnings. The value of our investment portfolio can fluctuate as a result of changes in the business, financial condition or operating results of the entities in which we invest. In addition, fluctuations can result from changes in interest rates, credit risk, government monetary policies, liquidity of holdings and general economic conditions. In addition, fluctuations can result from changes in interest rates, credit risk, government monetary policies, liquidity of holdings and 22 Table of Contentsgeneral economic conditions. The equity portfolio will fluctuate with movements in the overall stock market. While the equity portfolio has been constructed to have lower downside risk than the market, the portfolio is positively correlated with movements in domestic stocks. The bond portfolio is affected by interest rate changes and movement in credit spreads. We attempt to mitigate our interest rate and credit risks by constructing a well-diversified portfolio of high-quality securities with varied maturities. These fluctuations may negatively impact our financial condition.​Operational​Our success will depend on our ability to maintain and enhance effective operating procedures and manage risks on an enterprise-wide basis.​Operational risk and losses can result from, among other things, fraud, errors, failure to document transactions properly, failure to obtain proper internal authorization, failure to comply with regulatory requirements, information technology failures or external events. We continue to enhance our operating procedures and internal controls to effectively support our business and our regulatory and reporting requirements. The NAIC and state legislatures have increased their focus on risks within an insurer’s holding company system that may pose enterprise risk to insurers. The Illinois legislature has adopted the Risk Management and Own Risk and Solvency Assessment (ORSA) Law, which requires domestic insurers to maintain a risk management framework and establishes a legal requirement for domestic insurers to conduct an ORSA in accordance with the NAIC’s ORSA Guidance Manual. The ORSA Law also provides that, no less than annually, an insurer must submit an ORSA summary report. Under the Illinois insurance holding company laws, on an annual basis, we are also required to file an enterprise risk report with the IDOI, which is intended to identify the material risks within our insurance holding company system that could pose enterprise risk to our insurance company subsidiaries. We operate within an enterprise risk management (ERM) framework designed to assess and monitor our risks. However, assurance that we can effectively review and monitor all risks or that all of our employees will operate within the ERM framework cannot be 21 Table of Contentsguaranteed. Assurances that our ERM framework will result in the Company accurately identifying all risks and accurately limiting our exposures based on our assessments also cannot be guaranteed.​We may not be able to effectively start up or integrate new product opportunities.​Our ability to grow our business depends, in part, on our creation, implementation or acquisition of new insurance products that are profitable and fit within our business model. Our ability to grow profitably requires that we identify market opportunities, which may include acquisitions, and that we attract and retain underwriting and claims expertise to support that growth. New product launches, as well as resources to integrate business acquisitions are subject to many obstacles, including ensuring we have sufficient business and system processes, determining appropriate pricing, obtaining reinsurance, assessing opportunity costs and regulatory burdens and planning for internal infrastructure needs. New product launches, as well as resources to integrate business acquisitions are subject to many obstacles, including ensuring we have sufficient business and systems processes, determining appropriate pricing, obtaining reinsurance, assessing opportunity costs and regulatory burdens and planning for internal infrastructure needs. If we cannot effectively or accurately assess and overcome these obstacles, or we improperly implement new insurance products, our ability to grow profitably could be impaired.​We may be unable to attract and retain qualified key employees.​We depend on our ability to attract and retain experienced underwriting and claim talent, who have deep knowledge of the niche business we write, and other skilled employees. If we cannot attract or retain top-performing executive officers, underwriters and other employees, the quality of their performance decreases or we fail to implement succession plans for our key employees, we may be unable to maintain our current competitive position in the markets in which we operate or expand our operations into new markets.​We rely on third-party vendors for a number of key components of our business.​We contract with a number of third-party vendors to support our business. For example, we have license agreements for software that we use to model natural catastrophes, process claims, and manage policies, producers and financial processes. The vendors range from large national companies, who are dominant in their area of expertise and would be difficult to quickly replace, to smaller or start-up vendors with leading technology, but with shorter operating histories and fewer financial resources. Failures of certain vendors to provide services could adversely affect our ability to deliver products and services to our customers, disrupting our business and causing the Company to incur significant expense. If one or more of our vendors fail to protect personal information of our customers, claimants or employees, we may incur operational impairments, or could be exposed to litigation, compliance costs or reputational damage. We maintain a vendor management program to establish procurement policies and to monitor vendor risk, including the security and stability of our critical vendors.​Any significant interruption in the operation of our facilities, systems and business functions could adversely affect our financial condition and results of operations.​23 Table of ContentsAny significant interruption in the operation of our facilities, systems and business functions could adversely affect our financial condition and results of operations. ​We rely on multiple computer systems to interact with producers and customers, issue policies, pay claims, run modeling functions, assess insurance risks and complete various important internal processes including accounting and bookkeeping. Our business is highly dependent on our ability to access these systems to perform necessary business functions. Additionally, some of these systems may include or rely upon third-party systems not located on our premises. Any of these systems may be exposed to unplanned interruption, unreliability or intrusion from a variety of causes, including among others, storms and other natural disasters, terrorist attacks, cyber attacks, utility outages or complications encountered as existing systems are replaced or upgraded. Any of these systems may be exposed to unplanned interruption, unreliability or intrusion from a variety of causes, including among others, storms and other natural disasters, terrorist attacks, utility outages or complications encountered as existing systems are replaced or upgraded. ​Any such issues could materially impact our company, including the impairment of information availability, compromise of system integrity/accuracy, misappropriation of confidential information, reduction of our volume of transactions and interruption of our general business. Although we believe our computer systems are secure and continue to take steps to ensure they are protected against such risks, we cannot guarantee such problems will not occur. If they do, interruption to our business and damage to our reputation and related costs, could be significant, which could impair our profitability.​Technology breaches or failures, including but not limited to cyber security incidents, could disrupt our operations, result in the loss of critical and confidential information and expose us to additional liabilities, which could adversely impact our reputation and results of operations.​Global cyber security threats can range from uncoordinated individual attempts to gain unauthorized access to our information technology systems, and those of our business or service providers, to sophisticated and targeted measures known as advanced persistent threats. Like other companies, RLI Corp. is also subject to insider threats that may impact the confidentiality, integrity or availability of our data. We, as well as our business partners and service providers, employ measures to prevent, detect, address, mitigate and recover from these threats (including employee training, access controls, data encryption, vulnerability assessments, continuous monitoring of information technology networks and systems and maintenance of backup and protective systems). We, as well as our business partners and service providers, employ measures to prevent, detect, address and mitigate these threats (including access controls, data encryption, vulnerability assessments, continuous monitoring of information technology networks and systems and maintenance of backup and protective systems). 22 Table of ContentsHowever, cyber security incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. However, cyber security incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. Security breaches could expose the Company to a risk of loss or misuse of Company or third-party confidential information, litigation and potential liability. Security breaches could expose the Company to a risk of loss or misuse of our or our customers’ information, litigation and potential liability. In addition, cyber incidents that impact the availability, reliability, speed, accuracy or other proper functioning of our technology systems could impact our operations. We may not have the resources or technical sophistication to anticipate or prevent every type of cyber attack. A significant cyber incident, including system failure, security breach, disruption by malware or other damage could interrupt or delay our operations, result in a violation of applicable privacy and other laws, damage our reputation, cause a loss of customers or give rise to remediation costs, monetary fines and other penalties, which could be significant. We have cyber insurance, but it is possible that the coverage we have in place would not entirely protect the Company in the event that we experienced a cyber security incident, interruption or widespread failure of our information technology systems.​If we are unable to keep pace with the technological advancements in the insurance industry, our ability to compete effectively could be impaired.​24 Table of ContentsIf we are unable to keep pace with the technological advancements in the insurance industry, our ability to compete effectively could be impaired. ​Our operations rely upon complex and expensive information technology systems for interacting with policyholders, brokers and other business partners. The pace at which information systems must be upgraded is continually increasing, requiring an ongoing commitment of significant resources to maintain or upgrade to current standards and serve our customers. If we are unable to keep pace with the advancements being made in technology, our ability to compete with other insurance companies who have advanced technological capabilities will be negatively affected. Furthermore, if we are unable to effectively update or replace our key legacy technology systems as they become obsolete, or as emerging technology renders them competitively inefficient, our competitive position, security and our cost structure could be adversely affected.​Epidemics, pandemics and public health outbreaks could adversely affect our business, including revenues, profitability, results of operations and/or cash flows, in a manner and to a degree that could be material.​Epidemics, pandemics and public health outbreaks, including the ongoing coronavirus (COVID-19) pandemic, could adversely affect our business, including revenues, profitability, results of operations and/or cash flows, in a manner and to a degree that could be material. ​Epidemics, pandemics and other public health outbreaks, such as the COVID-19 pandemic, generally result in significant disruptions in economic activity and financial markets.​Epidemics, pandemics and other public health outbreaks generally result in significant disruptions in economic activity and financial markets. The cumulative effects on the Company could include, without limitation:​●Reduced demand for our insurance policies due to reduced economic activity, which could negatively impact our revenues,​●Reduced cash flows from our policyholders, delaying premium payments,​●Increased costs and disruption of operations due to employees working remotely or unavailability of our employees,​●Increased claims, losses, litigation and related expenses,​●Legislative, regulatory and judicial actions in response to the public health outbreak, including, but not limited to, actions prohibiting us from cancelling insurance policies in accordance with our policy terms, requiring us to cover losses when our underwriting intent in those policies was not to provide coverage or was to exclude coverage, ordering us to provide premium refunds, granting extended grace periods for payment of premiums and providing for extended periods of time to pay premiums that are past due,​●Policyholder losses from pandemic-related claims could be greater than our reserves for those losses,​●Volatility and declines in financial markets could reduce the fair market value, or result in the impairment, of invested assets held by the Company and​●Changes in interest rates, which could reduce future investment results.​Although we have investigated and closed a substantial number of COVID-19-related claims without payment, state and federal courts could rule that such claims are covered under our policies. Court decisions upholding our position that these COVID-19 related claims are not covered under our policies could also be overturned on appeal. These actions could result in an increase in claims and paid losses, which could have a materially adverse effect on our financial performance. Such appellate court decisions may take several years to become final and their ultimate outcome remains uncertain at this time.​23 Table of ContentsWe may suffer losses from litigation, which could materially and adversely affect our financial condition and business operations.​We may suffer losses from litigation, which could materially and adversely affect our financial condition and business operations. ​We continually face risks associated with litigation of various types, including general commercial and corporate litigation, and disputes relating to bad faith allegations that could result in the Company incurring losses in excess of policy limits. We are party to a variety of litigation matters throughout the year. Litigation is subject to inherent uncertainties, and if there were an unfavorable outcome, it could have a material adverse impact on our results of operations and financial position in the period in which the outcome occurs. Even if an unfavorable outcome does not materialize, we still may face substantial expense and disruption associated with the litigation.​Anti-takeover provisions affecting the Company could prevent or delay a change of control that is beneficial to you.​Provisions of our certificate of incorporation and by-laws, as well as applicable Delaware law, federal and state regulations and insurance company regulations may discourage, delay or prevent a merger, tender offer or other change of control that holders of our securities may consider favorable. Some of these provisions impose various procedural and other requirements that could make it more difficult for shareholders to affect certain corporate actions. These provisions could:​●Have the effect of delaying, deferring or preventing a change in control of the Company,​●Discourage bids for our securities at a premium over the market price,​●Adversely affect the market price, the voting and other rights of the holders of our securities or​●Impede the ability of the holders of our securities to change our management.​In particular, we are subject to Section 203 of the Delaware General Corporation Law which, under certain circumstances, restricts our ability to engage in a business combination, such as a merger or sale of assets, with any shareholder that, together with affiliates, owns 15 percent or more of our common stock, which similarly could prohibit or delay the accomplishment of a change of control transaction.​In particular, we are subject to Section 203 of the Delaware General Corporation Law which, under certain circumstances, restricts our ability to engage in a business combination, such as a merger or sale of assets, with any stockholder that, together with 25 Table of Contentsaffiliates, owns 15 percent or more of our common stock, which similarly could prohibit or delay the accomplishment of a change of control transaction. ​Item 1B. Unresolved Staff Comments​None.​Item 1C.​Item 1B. Cybersecurity​Risks from cybersecurity threats or incidents (cybersecurity risks) are assessed, identified and managed by the Company in a manner that is consistent with leading cybersecurity frameworks, including the National Institute of Standards and Technology Cybersecurity Framework (NIST Framework). The Company’s approach to cybersecurity risk management is generally based on the five core functions contained within the NIST Framework organizing structure: identify, protect, detect, respond and recover.​As of the date of this report, risks from cybersecurity threats or incidents have not materially affected, nor are they reasonably likely to materially affect, the Company’s business strategy, results of operations or financial condition. However, in light of emerging and changing cybersecurity threats and vulnerabilities, the Company cannot guarantee that it will not be a victim of a cybersecurity attack in the future that could materially affect the Company. See Item 1A, Risk Factors for more information.​The RLI Corp.​RLI Corp. Board of Directors provides oversight for cybersecurity risks primarily through its audit committee. The Company’s chief information officer (CIO), who also serves as the Company’s chief information security officer (CISO), along with the head of the Company’s IT security department, present quarterly to the audit committee on cybersecurity risks and the Company’s strategies and actions to assess and manage those risks. Additionally, the board receives periodic updates on emerging cybersecurity issues and developments through director education provided by the Company and third-party experts, detailed reviews provided by the CIO/CISO and the Company’s head of IT security on select cyber security topics, and “table top” simulations of a cybersecurity event.​Management oversight of cybersecurity risks is provided through the Company’s risk committee, which is chaired by the chief executive officer and comprised of members of senior management. Among its responsibilities, the risk committee identifies the Company’s material risks and reviews the strategies, processes and controls in place to facilitate the understanding, identification, prevention, measurement, reporting and mitigation of those risks. The risk committee meets quarterly and reviews the Company’s 24 Table of Contentscurrent assessment of cybersecurity risks conducted by the Company’s CIO/CISO and IT security department based on leading cybersecurity frameworks. The risk committee also periodically conducts a detailed review of cybersecurity risks.​The Company’s IT security department, which operates under general oversight of the Company’s CIO/CISO, is responsible for day-to-day assessment and management of cybersecurity risks, including efforts to prevent and, if necessary, mitigate the effects of a cybersecurity incident. The Company’s CIO/CISO has 25 years of technology and technology leadership experience, including 13 years serving as a CISO in the insurance industry. ​The Company maintains a Cybersecurity Incident Response Plan (CIRP) providing a framework for identifying, evaluating and escalating potential or actual cybersecurity events. The CIRP assigns responsibilities and provides a workflow between the Company’s IT security department; members of an Executive Cybersecurity Committee comprised of the chief executive officer and senior management; and the board of directors regarding the detection, assessment and response to a cybersecurity event.​The Company’s internal audit department routinely engages third-party cybersecurity consultants to conduct network security audits. The Company also engages other third-party consultants in a number of areas to support the assessment, identification and management of cybersecurity risks, including risk assessments, log monitoring, threat intelligence, system penetration testing, training and incident response, among others. The Company performs cybersecurity due diligence and monitoring of third-party vendors, which may include the review of System and Organization Control (SOC) reports or the results of a security questionnaire to identify the cybersecurity controls and protections maintained by a third party.​.