Item 1. Business

In the EU, various Directives and Regulations affect our international insurance operations. The Luxembourg insurance regulator, the Commissariat aux Assurances, is the insurance regulator for AIG Europe SA, which serves our European Economic Area (EEA) and Swiss policyholders. In addition, financial companies that operate in the EU are subject to a range of regulations enforced by the national regulators in each member state in which that firm operates. Solvency II governs the insurance industry’s solvency framework for the EU, including minimum capital and solvency requirements, governance requirements, risk management and public reporting standards applicable to AIG’s subsidiaries operating in the EU.

AIG’s operating insurance subsidiaries in Bermuda are regulated by the Bermuda Monetary Authority (BMA). Bermuda’s Insurance Act 1978, the applicable Codes of Conduct and related regulations impose solvency and liquidity standards and auditing and reporting requirements on Bermuda insurance companies and grant the BMA powers to supervise, investigate and intervene in the affairs of insurance companies. A variety of requirements and restrictions are imposed on our Bermuda operating insurance subsidiaries including: periodic financial reporting; corporate governance framework; solvency and financial performance; compliance with minimum enhanced capital requirements; minimum solvency margins and liquidity ratios; and limitations on dividends and distributions.

The Monetary Authority of Singapore (MAS) supervises AIG’s insurance subsidiary in Singapore. It has broad authority under the Insurance Act 1966 to regulate insurance business in Singapore as well as insurers, insurance intermediaries and related institutions. Our Singapore insurance operations are subject to minimum capital and solvency requirements as well as financial reporting, corporate governance and conduct of business requirements. The MAS has authority to conduct inspections and investigations on insurers and to administer sanctions for regulatory non-compliance. Our Singapore insurance subsidiary holds insurance entities in the Asia Pacific region. The MAS holds the Chief Executive Officer of the Singapore insurance subsidiary principally responsible for the management and conduct of the business of the subsidiary, including the business of its subsidiaries and overseas branches.

The Japan Financial Services Agency (JFSA) regulates AIG’s operating insurance subsidiaries and insurance holding company in Japan. The JFSA has extensive authority under the Insurance Business Act and related regulations to oversee licensing, sales practices, business conduct, investments, reserves and solvency, amongst other matters. Our Japanese insurance operations are required to maintain a minimum solvency margin ratio (SMR), which is a measure of capital adequacy. The failure to maintain an appropriate SMR, or comply with other similar indicators of financial health, could result in the JFSA imposing corrective actions on our operations.

FSB and IAIS

The Financial Stability Board (FSB) consists of representatives of national financial authorities of the G20 countries. The FSB is not a regulator but is focused primarily on promoting international financial stability. The FSB has issued a series of frameworks and recommendations to address such issues as systemic financial risk, financial group supervision, capital and solvency standards, effective recovery and resolution regimes, corporate governance including compensation, and a number of related issues associated with responses to the financial crisis.

The International Association of Insurance Supervisors (IAIS) represents insurance regulators and supervisors of more than 200 jurisdictions (including regions and states) in nearly 140 countries and seeks to promote globally consistent insurance industry supervision. The IAIS is not a regulator, but one of its activities is to develop insurance regulatory standards for use by local authorities across the globe. For example, the IAIS has adopted a Common Framework (ComFrame) for the Supervision of Internationally Active Insurance Groups (IAIGs). ComFrame assists regulators in addressing an IAIG’s risks by providing supervisory standards for areas such as group supervision, governance and internal controls, enterprise risk management, and recovery and resolution planning. We currently meet the criteria set forth to identify an IAIG, and the NYDFS, as our group-wide supervisor, has publicly disclosed us as an IAIG on the IAIS’ register of IAIGs.

While the FSB no longer identifies global systemically important insurers (G-SIIs); in its place the IAIS has adopted an enhanced set of supervisory policy measures for the assessment and mitigation of systemic risk in the insurance sector (Holistic Framework). The Holistic Framework recognizes that systemic risk can emanate from specific activities and exposures arising from either sector-wide trends or concentrations in individual insurers. The FSB has also been engaging with member jurisdictions in order to encourage greater adherence to its “Key Attributes for Effective Resolution Regimes for the Insurance Sector” to ensure that large, internationally active insurers can exit the market in an orderly fashion and avoid the need for taxpayer bailouts. Starting in December 2024 the FSB began publishing an annual list of insurers, including AIG, that are subject to resolution planning requirements.

As part of ComFrame, the IAIS also developed a risk-based global Insurance Capital Standard (ICS) applicable to IAIGs. The IAIS formally adopted the ICS at its annual general meeting in December 2024. The ICS is intended to be applied as a group-wide prescribed capital requirement, defined as a solvency control level above which the supervisor does not intervene on capital adequacy grounds. In parallel, the United States developed the Aggregation Method (AM) as an alternative approach to the consolidated ICS group-capital calculation. Following a comparability assessment, the IAIS determined in November 2024 that the AM delivers comparable outcomes to the ICS and therefore provides the basis for implementation of the ICS. The AM will be implemented in the United States through the GCC.

AIG | 2024 Form 10-K			9

ITEM 1 | Business

The standards issued by the FSB and/or the IAIS are not binding on the United States or other jurisdictions around the world unless and until the appropriate local governmental bodies or regulators adopt laws or regulations implementing such standards.

PRIVACY, DATA PROTECTION, CYBERSECURITY AND ARTIFICIAL INTELLIGENCE REQUIREMENTS

We are subject to various laws and regulations that require financial institutions and other businesses to protect and safeguard personal and other sensitive information and provide notice of their practices relating to the collection, disclosure and other processing of personal information. We also are subject to U.S. federal and state laws and regulations requiring notification to affected individuals and regulators of a data breach. Below we highlight a few key applicable privacy, data protection, cybersecurity and artificial intelligence (AI) laws and regulations.

In the European Union, the EU Digital Operational Resilience Act (DORA) will require covered entities, including insurance intermediaries, reinsurance intermediaries and ancillary insurance intermediaries to comply with a wide range of organizational and technical requirements to identify, manage and mitigate operational risk arising from use of network and information systems and, in particular, the use of third party information and communication technology service providers. Covered entities were required to comply with DORA by January 17, 2025.

In October 2017, the NAIC adopted the Insurance Data Security Model Law (NAIC Data Security Model Law), which, among other things, requires insurers, insurance producers and other entities required to be licensed under state insurance laws to develop and maintain a written information security program, conduct risk assessments, and oversee the data security practices of third-party service providers. As of December 31, 2024, more than 20 jurisdictions had adopted the NAIC Data Security Model Law. In addition, on March 1, 2019, the NYDFS’s cybersecurity regulation became fully effective, requiring covered financial institutions, including insurance entities licensed in New York, to, among other things, implement a cybersecurity program designed to protect information systems. On November 1, 2023, the NYDFS published amendments to this cybersecurity regulation, which include additional obligations for large insurers including enhanced and updated governance, risk assessment, and technology requirements, new notification obligations, and clarifying changes regarding enforcement.

The State of California enacted the California Consumer Privacy Act of 2018 (CCPA), which went into effect as of January 1, 2020, and imposes significant privacy obligations on businesses handling data related to California residents. The law has a number of exceptions; it does not apply to personal information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (GLBA) and implementing regulations or the California Financial Information Privacy Act (FIPA). The California Privacy Rights Act (CPRA) passed in November 2020 became effective January 1, 2023 and amends the CCPA to create additional privacy rights and obligations in California. A number of other states, including Colorado, Connecticut, Texas and Virginia also enacted comprehensive consumer data privacy laws and many other states have proposed similar laws, albeit with similar exemptions for entities and/or data governed by the GLBA.

These privacy laws impose requirements on covered businesses that are similar to those imposed by the CCPA with respect to privacy notices, data subject rights and data security standards.

The Securities and Exchange Commission (SEC) requires that registrants disclose any material cybersecurity incident on Form 8-K within four business days of determining that the incident the registrant has experienced is material. Periodic disclosures of, among other things, (i) details on the company’s cybersecurity policies and procedures, and (ii) cybersecurity governance and oversight policies, including the board of directors’ oversight of any material incidents (individually or in the aggregate) are also required.

The EU General Data Protection Regulation (GDPR) scope extends to entities established within the EEA (i.e., EU member states plus Iceland, Liechtenstein and Norway) and to certain entities not established in the EEA (in certain instances, if they solicit or target individuals in the EU by offering goods or services to EEA data subjects or monitoring the personal behavior of EEA data subjects (e.g., in an online context)). The GDPR was also onshored in the UK through the European Union (Withdrawal) Act 2018, with adjustments as provided in the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019. Sanctions for non-compliance with the GDPR are onerous, with the potential for fines of up to 4 percent of global revenue for the most serious infringements of the GDPR.

We have sought to address the GDPR’s requirements by demonstrating accountability for compliance with the GDPR’s principles relating to processing of personal data, maintaining records of processing and completing mandatory Data Protection Impact Assessments in connection with higher risk data processing activities.

The GDPR imposes requirements on the transfer of personal data outside of the EEA, including via standard contractual clauses supplemented by an assessment and due diligence of the legal and regulatory landscape of the jurisdiction of the data importer, the channels used to transmit personal data and the processors or subprocessors of personal data.

10			AIG | 2024 Form 10-K

ITEM 1 | Business

The NAIC and certain U.S. states have adopted or are considering regulations and guidance relating to the use of “big data,” AI, machine learning and other technology innovations in the insurance marketplace. For example, in December 2023, the NAIC adopted a model bulletin on the use of AI by insurers that sets forth governance, risk management and other requirements that insurers using AI are expected to establish. In addition, state insurance regulators in the United States have issued and will continue to consider regulations or proposed guidelines in the use of external data, algorithms and AI in insurance practices, including underwriting, marketing, and claims practices.

The EEA and the UK have also taken steps to regulate the use of data and algorithms used for the purpose of AI and automated decision-making. The European Union Artificial Intelligence Act, which entered into force on August 1, 2024, and will be effective from August 2, 2026, will broadly regulate the use of AI within the European Union. European countries, and supranational political organizations like the EU and the Council of Europe, are expected to continue taking an active role in regulating AI in ways that may impact the insurance industry.

We also are subject to other international laws and regulations that require financial institutions and other businesses to protect personal and other sensitive information and provide notice of their practices relating to the collection, disclosure and other processing of personal information and to obtain consent for specific processing activities. We are also subject to laws and regulations requiring notification to affected individuals and regulators of security breaches and laws and regulations regarding data localization and the cross-border transfer of information.

CLIMATE CHANGE

In recent years, federal- and state-level lawmakers and regulators in the United States and in other major countries in which we operate have increased their scrutiny on financial institutions’ and other companies’ governance, risk oversight, disclosures, plans, policies and practices in connection with climate change. There have been active and significant regulatory developments on these issues in the form of newly proposed, issued or implemented laws, rules, regulations, guidance and frameworks regarding climate change that impose, or will impose if and when effective, new requirements and expectations, including in connection with climate- related governance, risk management, disclosures, stress testing and scenario analysis. Regulators in several jurisdictions are considering the so-called protection gap as it relates to climate – instances in which populations are under-insured or there is insufficient coverage to protect policyholders against the risks associated with climate change. In March 2024, the SEC adopted final rules on climate-related disclosure, which have been stayed pending completion of judicial review in the U.S. Court of Appeals for the Eighth Circuit, and which may be reconsidered by the new U.S. administration. We continue to actively monitor the regulatory landscape surrounding these issues.

Available Information about AIG

Our corporate website is www.aig.com. We make available free of charge, through the Investors section of our corporate website, the reports that we file or furnish with the SEC (including Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, Proxy Statements on Schedule 14A, any amendments to each of those reports and filings, and other disclosure), corporate governance information (including our Code of Business Conduct and Ethics and any amendments of or waivers from the Code of Business Conduct and Ethics), and select press releases. Additionally, all of our reports filed with the SEC are available on the SEC's website at sec.gov.

Except for the documents specifically incorporated by reference into this Annual Report on Form 10-K, information contained on our website or that can be accessed through our website is not incorporated by reference into this Annual Report on Form 10-K. Reference to our website is made as an inactive textual reference.

AIG | 2024 Form 10-K			11

ITEM 1A | Risk Factors

ITEM 1A | Risk Factors

Risk Factor Summary

The following is a summary of the material risks and uncertainties that could adversely affect our business, financial condition and results of operations. You should read this summary together with the more detailed description of each risk factor contained below.

Market Conditions

• Deterioration of economic conditions, geopolitical tensions, changes in market conditions or weakening in global capital markets have and may continue to materially affect our businesses, results of operations, financial condition and liquidity.

Reserves and Exposures

• The amount and timing of insurance liability claims are difficult to predict and such claims may exceed the related liability for unpaid losses and loss adjustment expenses.

• Reinsurance may be unavailable or too expensive relative to its benefit and may not be adequate to protect us against losses.

• Our consolidated results of operations, liquidity, financial condition and ratings are subject to the effects of natural and man-made catastrophic events as well as mass torts.

• Climate change may adversely affect our business and financial condition.

• Concentration of our insurance, reinsurance and other risk exposures may have adverse effects.

• Losses due to nonperformance or defaults by counterparties may materially and adversely affect the value of our investments, our profitability and sources of liquidity.

Investment Portfolio and Concentration of Investments

• Our investment portfolio is concentrated in certain segments of the economy, and the performance and value of our investment portfolio are subject to a number of risks and uncertainties.

• We rely on investment management and advisory arrangements with third-party investment managers for the majority of our investment portfolio. The historical performance of any investment manager we engage should not be considered as indicative of the future results of our investment portfolio, our future results or any returns expected on our Common Stock.

• Our valuation of investments involves the application of methodologies and assumptions to derive estimates, which may differ from actual experience and could result in changes to investment valuations that may materially adversely affect our business, results of operations, financial condition and liquidity or lead to volatility in our net income.

Liquidity, Capital and Credit

• AIG Parent’s ability to access funds from our subsidiaries is limited, and our sources of liquidity may be insufficient to meet our needs, including providing capital that may be required by our subsidiaries.

• We may not be able to generate cash to meet our needs due to the illiquidity of some of our investments.

• A downgrade by one or more of the rating agencies in the Insurer Financial Strength ratings of our insurance companies could limit their ability to write or prevent them from writing new business and impair their retention of customers and in-force business, and a downgrade in our credit ratings could adversely affect our business, results of operations, financial condition and liquidity.

Business and Operations

• Our risk management policies, standards and procedures may prove to be ineffective and leave us exposed to unidentified or unanticipated risk, which could adversely affect our businesses, results of operations, financial condition and liquidity.

• Pricing for our products is subject to our ability to adequately assess risks and estimate related losses.

• We are exposed to certain risks if we are unable to maintain the availability of our critical technology systems and data and safeguard the confidentiality and integrity of our data, which could compromise our ability to conduct business and adversely affect our consolidated business, results of operations, financial condition and liquidity.

• Our foreign operations expose us to risks that may affect our operations.

• Third parties we rely upon to provide certain business and administrative services on our behalf may not perform as anticipated, which could have an adverse effect on our business and results of operations.

12			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

• We may experience difficulty in marketing and distributing products through our current and future distribution channels and the use of third parties may result in additional liabilities.

• Our restructuring initiatives may not yield expected reductions in expenses and/or improvements in operational and organizational efficiency.

• Business or asset acquisitions and dispositions may expose us to certain risks.

• We are subject to risks from our continuing equity market exposure to Corebridge. There can be no assurances that the anticipated benefits of our sales of Corebridge stock will be achieved.

• Significant legal or regulatory proceedings may adversely affect our business, results of operations or financial condition.

• Increasing scrutiny and evolving expectations from investors, customers, regulators, policymakers and other stakeholders regarding environmental, social, governance and sustainability matters, including governmental responses to such matters, may adversely affect our reputation or otherwise adversely impact our business and results of operations.

• An epidemic, pandemic or other health crisis could materially and adversely affect our business, results of operations, financial condition or liquidity.

• We may not be able to protect our intellectual property and may be subject to infringement claims.

Regulation

• Our businesses are heavily regulated and changes in laws and regulations may affect our operations, increase our insurance subsidiary capital requirements or reduce our profitability.

• New laws and regulations or new interpretations of current laws and regulations, both domestically and internationally, may affect our businesses, results of operations, financial condition and ability to compete effectively.

• An “ownership change” could limit our ability to utilize tax loss and credit carryforwards to offset future taxable income.

• New and proposed changes to tax laws could increase our corporate taxes.

Estimates and Assumptions

• Estimates or assumptions used in the preparation of financial statements and modeled results used in various areas of our business may differ materially from actual experience.

• Changes in accounting principles and financial reporting requirements may impact our consolidated results of operations and financial condition.

• If our businesses do not perform well and/or their estimated fair values decline, we may be required to recognize an impairment of our goodwill or establish an additional valuation allowance against the related deferred income tax assets, which could have a material adverse effect on our results of operations and financial condition.

Employees and Competition

• Employee error and misconduct may be difficult to detect and prevent and may result in reputational damage and significant losses.

• Competition for employees in our industry is intense, and managing key employee succession is critical to our success. We may not be able to attract and retain the key employees and other highly skilled employees we need to support our businesses.

• We face intense competition in each of our business lines, and technological changes may present new and intensified challenges to our businesses.

AIG | 2024 Form 10-K			13

ITEM 1A | Risk Factors

Risk Factors

Investing in AIG involves risk. In deciding whether to invest in AIG, you should carefully consider the following risk factors. Any of these risk factors could have a significant or material adverse effect on our businesses, results of operations, financial condition or liquidity. They could also cause significant fluctuations and volatility in the trading price of our securities. Readers should not consider any descriptions of these factors to be a complete set of all potential risks that could affect AIG. These factors should be considered carefully together with the other information contained in this report and the other reports and materials filed by us with the SEC. Further, many of these risks are interrelated and could occur under similar business and economic conditions, and the occurrence of certain of them may in turn cause the emergence or exacerbate the effect of others. Such a combination could materially increase the severity of the impact of these risks on our businesses, results of operations, financial condition and liquidity above and beyond a risk’s singular impact.

MARKET CONDITIONS

Deterioration of economic conditions, geopolitical tensions, changes in market conditions or weakening in global capital markets have and may continue to materially affect our businesses, results of operations, financial condition and liquidity.

Our businesses are highly dependent on global economic and market conditions. Weaknesses in economic conditions, including a recessionary environment, poor capital markets performance, market volatility, volatility in interest rate levels and inflation have in the past led to, and may in the future lead to, among other consequences, a poor operating environment, erosion of consumer and investor confidence, reduced business volumes, deteriorating liquidity and declines in asset valuations.

Key ways in which we have been, and could be, negatively affected by economic conditions include:

• increased loss payments and loss costs due to inflation;

• increased challenges to insurance policy terms and conditions, such as standard exclusions;

• increases in costs associated with third-party reinsurance, or decreased ability to obtain reinsurance on acceptable terms;

• the increased likelihood of, or increased magnitude of, asset impairments caused by market fluctuations, deterioration in collateral values or credit deterioration of borrowers; and

• reduced premiums.

Adverse economic conditions may result from a variety of factors including domestic and global economic and political developments, including changes in interest rate levels, plateauing or decreasing economic growth and business activity, recessions, social inflation, inflationary or deflationary pressures in developed economies, including the United States, civil unrest, pandemics, geopolitical tensions, changes to international trade and/or tariff policies, foreign investment restrictions, or military action, such as the armed conflict between Ukraine and Russia and corresponding sanctions imposed by the United States and other countries, or the conflict in Israel and the surrounding areas, and new or evolving legal and regulatory requirements on business investment, hiring, migration, labor supply and global supply chains.

These and other market, economic, regulatory and political factors, including the effects of inflation, macroeconomic uncertainty, domestic and international political tensions, disruption to our business operations in countries exposed to geopolitical risk, natural disasters and the increased costs associated with meeting customer needs in such regions, adverse impacts resulting from changes to international trade and tariff policies, and any potential U.S. government shutdown, have had and could continue to have a material adverse effect on our businesses, results of operations, financial condition, capital and liquidity in many ways, including:

• lower levels of consumer demand for and ability to afford our products and commercial business activities that have decreased and may continue to decrease revenues and profitability and thus impair goodwill, deferred tax assets or other long-term assets;

• increased credit impairments, downgrades and losses across single or numerous asset classes due to lower collateral values or deteriorating cash flow and profitability by borrowers that could lead to higher defaults on the Company’s investment portfolio, especially in geographic, industry or investment sectors where the Company has higher concentrations of exposure, and widening of credit spreads that could reduce investment asset valuations and increase statutory capital requirements;

• increased market volatility and uncertainty that could decrease liquidity, increase borrowing costs and limit access to capital markets;

• the reduction of investment income generated by, or the market value of, our investment portfolio;

• increased costs related to our direct and third-party support services, labor and financing, increased credit risk and decreased sales as a result of inflationary pressures; and

• limitations on business activities and increased compliance risks with respect to economic sanctions regulations relating to jurisdictions in which our businesses operate or we have operations.

14			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

We are exposed to certain risks arising from or exacerbated by fluctuations in interest rates, such as the mismatch between the expected duration of our liabilities and our assets, changes in certain statutory reserve or capital requirements that are based on formulas or models that consider interest rates or prescribed interest rates, increased financing and refinancing costs, in particular with respect to our corporate debt instruments; and lower investment income on our floating rate investments that will adjust to lower coupons if short-term rates decrease. Changes in interest rates have had and could continue to have a material adverse effect on the value of our investment portfolio. For example, increases in interest rates have impacted, and may continue to impact, our investment portfolio by decreasing the estimated fair values of the fixed income securities that constitute a substantial portion of our investment portfolio as well as the alternative investments in our investment portfolio. This in turn has increased and could continue to increase the unrealized loss positions in our portfolio which could materially and adversely affect our business, results of operations, financial condition and liquidity. Should a low interest rate environment return, it could in the future negatively affect the performance of our investments and reduce the level of investment income earned on our investment portfolios.

In addition, if our investment managers fail to react appropriately to difficult market or economic conditions, our investment portfolio could incur material losses.

RESERVES AND EXPOSURES

The amount and timing of insurance liability claims are difficult to predict and such claims may exceed the related liability for unpaid losses and loss adjustment expenses.

We regularly review the adequacy of the established liability for unpaid losses and loss adjustment expenses. We also conduct extensive analyses of our reserves during the year. Our liability for unpaid losses and loss adjustment expenses, however, has and may develop adversely and materially impact our businesses, results of operations, financial condition and liquidity.

Estimation of ultimate net losses, loss expenses and the liability for unpaid losses and loss adjustment expenses is a complex process, particularly for both long-tail and medium-tail liability lines of business. There is also greater uncertainty in establishing reserves with respect to new business, particularly new business involving recently introduced product lines. In these cases, there is less historical experience or knowledge and less data upon which the actuaries can rely. Estimating reserves is further complicated by unexpected claims or unintended coverages that emerge due to unexpected events, such as pandemics or geopolitical conflicts. These emerging issues may increase the size or number of claims beyond our intent at the time of underwriting and may not become apparent for many years after a policy is issued.

While we use a number of analytical reserve development techniques to project future loss development, the liability for unpaid losses and loss adjustment expenses has been and may continue to be significantly affected by changes in loss cost trends or loss development factors that we relied upon in setting the liability for unpaid losses and loss adjustment expenses. These changes in loss cost trends or loss development factors could be due to changes in actual versus expected claims and losses, difficulties in predicting changes, such as changes in inflation, unemployment, or other social or economic factors affecting claims, including judicial and legislative actions, and changes in the tort environment. Any deviation in loss cost trends or in loss development factors might not be identified for an extended period of time after we record the initial loss reserve estimates for any accident year or number of years.

We review and update actuarial assumptions at least annually, typically in the third quarter for reserves. If actual experience or revised future expectations result in projected future losses, we may be required to record additional liabilities through a charge to net realized gains or losses in the then-current period, which could negatively affect our business, results of operations, financial condition and liquidity. For additional information on reserve development, see Part II, Item 7. MD&A – Insurance Reserves.

For additional information on our loss reserves, see Part II, Item 7. MD&A – Critical Accounting Estimates – Loss Reserves and Note 13 to the Consolidated Financial Statements.

Reinsurance may be unavailable or too expensive relative to its benefit and may not be adequate to protect us against losses.

Our subsidiaries are major purchasers of third-party reinsurance and we use reinsurance as part of our overall risk management strategy. While reinsurance does not discharge our subsidiaries from their obligation to pay claims for losses insured under our policies, it makes the reinsurer liable to our subsidiaries for the reinsured portion of the risk. Market conditions beyond our control have impacted and may in the future impact the availability and cost of reinsurance and could have a material adverse effect on our business, results of operations and financial condition. For example, reinsurance is typically more difficult or costly to obtain after a year or consecutive years with a large number of major catastrophes, the severity and frequency of which have increased in recent years, and likelihood of which may be further exacerbated by climate change. We have been and may, at certain times be, (i) forced to incur additional costs for reinsurance, (ii) unable to obtain sufficient reinsurance on acceptable terms, or (iii) unable to obtain reinsurance for certain parts of our business. In instances where reinsurance is more costly, insufficient on acceptable terms or unavailable, we have had to, and will in the future have to accept an increase in exposure to risk, reduce or stop writing certain lines of business written by our subsidiaries or seek alternatives in line with our risk limits, or a combination thereof.

AIG | 2024 Form 10-K			15

ITEM 1A | Risk Factors

Additionally, we are exposed to credit risk with respect to our subsidiaries’ reinsurers to the extent the reinsurance receivable is not secured, or is inadequately secured by collateral or does not benefit from other credit enhancements. We also bear the risk that a reinsurer is, or may be, unwilling to pay amounts we have recorded as reinsurance recoverables for any reason, including that (i) the terms of the reinsurance contract do not reflect the intent of the parties to the contract or there is a disagreement between the parties as to their intent, or (ii) the terms of the contract cannot be legally enforced. The insolvency of one or more of our reinsurers, the inability or unwillingness of such reinsurers to make timely payments under the terms of our contracts or payments in an amount equal to our reinsurance recoverable, or the risk that the reinsurance transaction does not operate as intended, including due to a change in laws and regulations or on account of court or arbitration panel interpretations, could have a material adverse effect on our results of operations and liquidity.

Moreover, the use of reinsurance placed in the capital markets or placed with alternative market reinsurers supported by capital market institutions, like private equity houses that fund single purpose reinsurance capital vehicles, may not provide the same levels of protection as traditional reinsurance transactions. Any disruption, volatility and uncertainty in these markets or with respect to these capital market participants or these types of alternative reinsurance structures may impact the protection provided by this type of reinsurance or may limit our ability to access such markets on terms favorable to us or at all. Also, to the extent that we intend to use structures based on an industry loss index or other non-indemnity trigger rather than on actual losses incurred by us, we could be subject to residual risk.

The availability of private sector reinsurance for terrorism is limited and we currently have limited reinsurance coverage for terrorist attacks. While we benefit from the Terrorism Risk Insurance Program Reauthorization Act (TRIPRA), which provides U.S. government risk assistance to the insurance industry to manage the exposure to terrorism incidents, TRIPRA has specific program limits and does not cover losses in certain lines of business such as personal property and personal casualty. We also rely on the government-sponsored and government-arranged terrorism reinsurance programs, including pools, in force in applicable non-U.S. jurisdictions. The realization of these risks may materially and adversely affect our business, results of operations and financial condition.

For additional information on our reinsurance recoverable, see Part II, Item 7. MD&A – Enterprise Risk Management – Insurance Risks – Reinsurance Activities – Reinsurance Recoverable.

Our consolidated results of operations, liquidity, financial condition and ratings are subject to the effects of natural and man-made catastrophic events as well as mass torts.

Events such as hurricanes, windstorms, hailstorms, flooding, earthquakes, landslides, wildfires, solar storms, earth sinking, tsunamis, war or other military action, acts of terrorism, explosions and fires, cyberattacks, product defects, pandemics and other highly contagious diseases, mass torts, civil unrest and other catastrophes have adversely affected our business in the past and could do so in the future.

Catastrophic events, and legislative or regulatory responses thereto, have in the past and could in the future result in losses in any business in which we operate, and could expose us to:

• widespread claim costs associated with property, casualty, general liability, bodily injury, workers’ compensation, accident and health, travel, business interruption and cyber claims, among others;

• loss resulting from a decline in the value of our invested assets;

• limitations on our ability to recover deferred tax assets;

• loss resulting from actual policy experience that is adverse compared to the assumptions made in product pricing;

• revenue loss due to decline in customer base;

• declines in value and/or losses with respect to companies and other entities whose securities we hold and counterparties we transact business with and have credit exposure to, including reinsurers;

• significant disruptions to our physical infrastructure, systems and operations; and

• widespread loss or corruption of personal or sensitive business data.

Natural and man-made catastrophic events are generally unpredictable. Our exposure to catastrophe-related loss depends on various factors, including the frequency and severity of the catastrophes, the availability of reinsurance, the rate of inflation and the value and geographic or other concentrations of insured companies and individuals. Vendor models and proprietary assumptions and processes that we use to manage catastrophe exposure may prove to be ineffective due to incorrect assumptions or estimates. For example, modeling for the more unpredictable and infrequent types of catastrophes, such as terrorism, cyber incidents and pandemics, is even more difficult and may be less reliable.

In addition, legislative and regulatory initiatives and court decisions following major catastrophes (both natural and man-made), as well as mass torts, have required and could in the future require us to pay the insured beyond the provisions of the original insurance policy and may prohibit the application of a deductible, resulting in inflated and unanticipated claims; or impose other restrictions, which would reduce our ability to mitigate exposure. These initiatives could impair our cash flows and, without regulatory relief, could adversely impact our subsidiaries’ capital ratios.

16			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

For additional information on potential catastrophic events, including a sensitivity analysis of our exposure to certain catastrophes, see Part II, Item 7. MD&A – Enterprise Risk Management – Insurance Risks.

For information regarding the effects of climate change on our business, see “Climate change may adversely affect our business and financial condition” below.

Climate change may adversely affect our business and financial condition.

Climate change, indicated by higher concentrations of greenhouse gases, a warming atmosphere and ocean, wildfires, diminished snow and ice, and a rise in sea levels, appears to have contributed to an increase in the frequency and severity of natural disasters and the creation of uncertainty as to future trends and exposures. As such, climate change presents significant financial implications for us in areas such as underwriting, claims and investments, as well as risk capacity, financial reserving and operations.

Climate change presents challenges to our ability to effectively underwrite, model and price catastrophe risk particularly if the frequency and severity of catastrophic events such as pandemics, hurricanes, tornadoes, heatwaves, floods, wildfires and windstorms and other natural disasters continues to increase. For example, losses resulting from actual policy experience may be adverse as compared to the assumptions made in product pricing and our ability to mitigate our exposure may be reduced.

Climate change-related risks may also adversely impact the value of the securities that we hold or lead to credit risk of other counterparties we transact business with, including reinsurers. Our reputation or corporate brand could also be negatively impacted as a result of changing customer or societal perceptions of organizations that we either insure or invest in due to their actions (or lack thereof) with respect to climate change, as well as political initiatives or other stakeholder expectations with respect thereto.

In addition, lawmakers and regulators at the federal, state and local levels have imposed and may continue to impose new requirements or issue new guidance aimed at addressing or mitigating climate change-related risks and efforts undertaken in response thereto. Additional actions by foreign governments, regulators and international standard setters have and could result in substantial expansions of the regulations, guidance or expectations to which we may be subject. It is also possible that the laws, regulations and guidance adopted in U.S. local, state, U.S. federal or foreign jurisdictions regarding climate change-related risks will differ from one another, and that they could be inconsistent with the laws and regulations of other jurisdictions in which we operate. This could result in us having to comply with differing or inconsistent laws, regulations and guidance across jurisdictions.

Additionally, litigation related to climate change has increased in recent years. Many lawsuits center on enforcement or interpretation of environmental laws and regulations, often seeking to use litigation as a tool to influence governmental and corporate climate policies. Other cases seek damages for contribution to climate change or for insufficient disclosure around material financial risks, which could cause us to experience increased claims under liability policies, such as casualty and directors’ and officers’ insurance policies, increase our liabilities and affect the viability of certain of our business lines.

In addition, severe weather and other effects of climate change result in more frequent and more severe damages, leading to lawsuits against our insureds. Indirect climate change effects are also seen in litigation over flooding, mudslides and other severe weather that results in injury or damage, as well as in construction defect litigation, chemical release lawsuits, and workers’ compensation claims. Litigation related to climate change may, through increased claims from our customers and adverse impacts to the value of the securities that we hold, adversely impact our business and results of operations.

We have also faced and may continue to face business continuity risk as a result of climate change-related incidents that may disrupt business operations, including extreme weather events. We cannot predict the long-term impacts of climate change on our business and results of operations.

For information regarding risks associated with other catastrophic events, see Reserves and Exposures – “Our consolidated results of operations, liquidity, financial condition and ratings are subject to the effects of natural and man-made catastrophic events” above.

Concentration of our insurance, reinsurance and other risk exposures may have adverse effects.

We are exposed to risks as a result of concentrations in our insurance policies, investments, derivatives and other obligations that we undertake for customers and counterparties. Further, any risk management arrangements we employ to manage concentration risks, whether directly or through third parties, may not be available on acceptable terms or may prove to be ineffective. Our risk exposures under insurance policies, derivatives and other obligations are, from time to time, compounded by risk exposure assumed in the management of our investment portfolio. Also, our exposure for certain single risk coverages and other coverages may be so large that adverse experience compared to our expectations may have a material adverse effect on our consolidated results of operations or result in additional statutory capital requirements for our subsidiaries.

In addition, the deconsolidation for accounting purposes and ongoing divestment of our stake in Corebridge, could increase the materiality of these potential concentrations in the remaining portfolio. For additional information on risks associated with our continuing equity market exposure to Corebridge, see Business Operations – “We are subject to risks from our continuing equity market exposure to Corebridge. There can be no assurances that the anticipated benefits of our sales of Corebridge stock will be achieved” below.

AIG | 2024 Form 10-K			17

ITEM 1A | Risk Factors

Also see Part II, Item 7. MD&A – Business Segment Operations – General Insurance – Business Strategy and – Industry and Economic Factors.

Losses due to nonperformance or defaults by counterparties may materially and adversely affect the value of our investments, our profitability and sources of liquidity.

We are exposed to credit risk arising from exposures to various counterparties related to investments, derivatives, premiums receivable, certain businesses and reinsurance recoverables. These counterparties include, but are not limited to, issuers of fixed income and equity securities we hold, borrowers of loans we hold, customers, plan sponsors, trading counterparties, counterparties under swaps and other derivatives instruments, reinsurers, corporate and governmental entities whose payments or performance we insure, joint venture partners, clearing agents, exchanges, clearing houses, custodians, brokers and dealers, commercial banks, investment banks, intra-group counterparties with respect to derivatives and other third parties, financial intermediaries and institutions and guarantors. These counterparties may default on their obligations to us due to bankruptcy, insolvency, receivership, financial distress, lack of liquidity, adverse economic conditions, operational failure, fraud, government intervention and other reasons. In addition, for exchange-traded derivatives, such as futures, options as well as "cleared" over-the-counter derivatives, we are generally exposed to the credit risk of the relevant central counterparty clearing house and futures commission merchants through which we clear derivatives. Defaults by these counterparties on their obligations to us could have a material adverse effect on the value of our investments, business, financial condition, results of operations and liquidity.

An insolvency of, or the appointment of a receiver to rehabilitate or liquidate, a significant competitor could negatively impact our business if such appointment were to impact consumer confidence in our products and services. Additionally, if the underlying assets supporting the structured securities we invest in are expected to default or actually default on their payment obligations, our securities may incur losses.

INVESTMENT PORTFOLIO AND CONCENTRATION OF INVESTMENTS

Our investment portfolio is concentrated in certain segments of the economy, and the performance and value of our investment portfolio are subject to a number of risks and uncertainties.

Our results of operations and financial condition have in the past been, and may in the future be, adversely affected by the degree of concentration in our consolidated investment portfolio. For example, we have significant holdings of real estate and real estate-related investments, including residential mortgage- backed securities (both U.S. government-sponsored enterprise-issued and Non-Agency issued), and commercial mortgage-backed securities and whole loans. We also have significant exposures to domestic and global financial institutions certain industries, such as consumer discretionary and non-discretionary, the U.S. federal, state and local government issuers and authorities, and various governments globally. Events or developments that have a negative effect on any particular industry, asset class, group of related industries or geographic region may adversely affect the valuation of our investments to the extent they are concentrated in such segments. Our ability to sell assets in such segments may be limited.

Our investments are also subject to market risks and uncertainties, including, in addition to interest rate risk, changes in the level of credit spreads, currency rates, and equity prices, each of which has affected and will continue to affect the value of investments in our investment portfolio as well as the performance of, and returns generated by, such investments. For information regarding risks associated with interest rate volatility, see Market Conditions above.

Furthermore, our alternative investment portfolio, which is subject to volatility in equity markets, includes investments for which changes in fair value are reported through pre-tax income. An economic downturn or decline in the capital markets has had and could continue to have a material adverse effect on our investment income, including as a result of decreases in the fair value of alternative investments.

We rely on investment management and advisory arrangements with third-party investment managers for the majority of our investment portfolio. The historical performance of any investment manager we engage should not be considered as indicative of the future results of our investment portfolio, our future results or any returns expected on our Common Stock.

We rely on external investment managers to manage the majority of our investment portfolio, consisting of liquid fixed income, certain private placement credit, certain private equity investments, commercial real estate-related equity investments and commercial mortgage loans.

Our investment managers are generally compensated based on the size of the investment portfolios that they manage, rather than based on investment profits or income; as a result, these investment managers are not directly incentivized to maximize investment returns. Our investment portfolio’s returns have benefited historically from investment opportunities and general market conditions that may not currently exist and may not be repeated. There can be no guarantee that any investment manager we engage will be able to achieve any particular returns or generate investment opportunities with attractive, risk-adjusted returns for our investment portfolio in the future. If any of our investment managers becomes unable to effectively manage our portfolio investments, the concentration of assets in our portfolio that are managed by it could adversely affect our business, results of operations, financial condition and liquidity.

18			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

In addition, we have become more reliant on our external asset managers, and such increased dependence has and may reduce our internal capabilities and expertise or expose us to greater risk, including the risk that external asset managers may fail to meet our performance expectations or otherwise experience disruptions or losses.

Our valuation of investments involves the application of methodologies and assumptions to derive estimates, which may differ from actual experience and could result in changes to investment valuations that may materially adversely affect our business, results of operations, financial condition and liquidity or lead to volatility in our net income.

It has been and may continue to be difficult to value those of our investments or derivatives that are not actively traded. There also may be cases where, due to the financial environment or market conditions, normally active markets become inactive or less active, which can result in insufficient observable data. As a result, valuations may include inputs and assumptions that are less observable or require greater estimation and judgment as well as valuation methods that are more complex. These values may not be realized in a market transaction, may not reflect the value of the asset and may change very rapidly as market conditions change and valuation assumptions are modified. Decreases in value and/or an inability to realize that value in a market transaction or other disposition may have a material adverse effect on our business, results of operations, financial condition and liquidity.

LIQUIDITY, CAPITAL AND CREDIT

AIG Parent’s ability to access funds from our subsidiaries is limited, and our sources of liquidity may be insufficient to meet our needs, including providing capital that may be required by our subsidiaries.

As a holding company, AIG Parent depends on dividends and other payments from its subsidiaries to fund operations, pay dividends, repurchase shares, meet debt service obligations and meet the capital and liquidity needs of our subsidiaries. The majority of our investments are held by our regulated subsidiaries. Any inability by our subsidiaries to make dividend or other payments in an amount sufficient to enable AIG Parent to meet its cash requirements could have an adverse effect on our operations or our business, results of operations, financial condition, capital and liquidity.

The ability of our subsidiaries to pay dividends to AIG Parent in the future will depend on their earnings, capital levels, tax considerations, covenants contained in any financing or other agreements, applicable regulatory restrictions and rating agency requirements. In addition, such payments could be limited as a result of claims against our subsidiaries by their creditors, including suppliers, vendors, lessors and employees. Additionally, our insurance subsidiaries may be limited in their ability to make dividend payments to AIG Parent in the future because of the need to meet their obligations or to support their own capital levels or because of regulatory limits and restrictions or changes in, or interpretations of, regulatory or rating agency standards.

Our decision to pursue strategic changes or transactions in our business and operations may also subject our subsidiaries’ dividend plans to heightened regulatory scrutiny and could make obtaining regulatory approvals for extraordinary distributions by our subsidiaries, if required, more difficult. We are also subject to certain other restrictions on our capital from time to time.

If our liquidity is insufficient to meet our needs, we may need to have recourse to third-party financing, external capital markets or other sources of liquidity, which may not be available or could be expensive. The availability and cost of any additional financing at any given time depends on a variety of factors, including general market conditions, the volume of trading activities, the overall availability of credit, regulatory actions and our credit ratings and credit capacity. It is also possible that, as a result of such recourse to external financing, customers, lenders or investors could develop a negative perception of our long- or short-term financial prospects. If AIG Parent is unable to satisfy a capital need of a subsidiary, the credit rating agencies could downgrade the subsidiary’s financial strength ratings or the subsidiary could become insolvent or, in certain cases, could be seized by its regulator.

In the ordinary course of our business, we are required to post collateral for our insurance company subsidiaries from time to time. We may be required to post additional collateral due to regulatory changes from time to time, which could adversely impact our business, financial condition, results of operations and cash flows.

For additional information on our liquidity, see Part II, Item 7. MD&A – Liquidity and Capital Resources.

We may not be able to generate cash to meet our needs due to the illiquidity of some of our investments.

We have a diversified investment portfolio. However, economic conditions as well as adverse capital market conditions, including a lack of buyers, the inability of potential buyers to obtain financing on reasonable terms, volatility, credit spread changes, interest rate changes, foreign currency exchange rates and/or declines in collateral values have in the past impacted, and may in the future impact, the liquidity and value of our investments.

We have investments in certain securities, including certain fixed income structured and privately placed securities as well as investments in private equity funds and hedge funds, mortgage loans and real estate, that are less liquid than other investments. If it became necessary to sell such assets in a stressed market environment, the prices achieved in any sale may be lower than their carrying value, which could cause a material adverse effect on our business, financial condition, results of operations and cash flows. Adverse changes in the valuation of real estate and real estate-linked assets, volatility or deterioration of capital markets and widening

AIG | 2024 Form 10-K			19

ITEM 1A | Risk Factors

credit spreads have in the past, and may in the future, materially adversely affect the liquidity and the value of our investment portfolios.

In the event additional liquidity is required by one or more of our companies, it may be difficult for us to generate additional liquidity by selling, pledging or otherwise monetizing these or other of our investments at reasonable prices and time frames.

A downgrade by one or more of the rating agencies in the Insurer Financial Strength ratings of our insurance companies could limit their ability to write or prevent them from writing new business and impair their retention of customers and in-force business, and a downgrade in our credit ratings could adversely affect our business, results of operations, financial condition and liquidity.

Downgrades of the Insurer Financial Strength (IFS) ratings of our insurance companies could (i) prevent these companies from selling, or make it more difficult for them to succeed in selling, products and services, (ii) make it more difficult for them to obtain new reinsurance or obtain it on reasonable pricing terms, and/or (iii) result in increased policy cancellations or return of premiums. A downgrade of the IFS ratings of our insurance companies could result in a downgrade of AIG Parent’s credit ratings. In the event of a downgrade of AIG Parent’s credit ratings, our financing costs will increase and the availability of financing could be limited. A downgrade could also cause our derivative counterparties to limit or reduce their exposure to us and thus reduce our ability to manage our market risk exposures effectively.

These events could adversely affect our business, results of operations, financial condition and liquidity.

For additional information on rating agency actions, see Part II, Item 7. MD&A – Liquidity and Capital Resources – Credit Ratings and – Financial Strength Ratings.

BUSINESS AND OPERATIONS

Our risk management policies, standards and procedures may prove to be ineffective and leave us exposed to unidentified or unanticipated risk, which could adversely affect our businesses, results of operations, financial condition and liquidity.

We have developed and continue to enhance enterprise-wide risk management policies, standards and procedures to identify, monitor and mitigate risk to which we are exposed. Our risk management policies, standards and procedures may not be sufficiently comprehensive and may not identify or adequately protect us from every risk to which we are exposed. Many of our methods of identifying, measuring, underwriting and managing risks are based upon our study and use of historical market, applicant, customer, employee and bad actor behavior or statistics based on historical models. As a result, these methods may not accurately predict future exposures from events such as a major financial market disruption as the result of a natural or man-made catastrophe, that could be significantly different than the historical measures indicate, and which could also result in claims levels not previously observed. We have and will continue to enhance our underwriting processes, including, from time to time, considering and integrating newly available sources of data to confirm and refine our traditional underwriting methods. Our efforts at implementing these improvements may not, however, be fully successful, which may adversely affect our competitive position. We have also introduced new product features designed to limit our risk and taken actions on in-force business, which may not be fully successful in limiting or eliminating risk. Moreover, our hedging programs and reinsurance strategies that are designed to manage risk rely on assumptions regarding our assets, liabilities, general market factors and the creditworthiness of our counterparties that could prove to be incorrect or inadequate. Our hedging programs utilize various derivative instruments, including but not limited to interest rate swaps, credit default swaps and foreign exchange forwards, as well as other hedging instruments, which may not effectively or completely reduce our risk. Assumptions underlying models used to measure accumulations and support reinsurance purchases may prove inaccurate and could leave us exposed to larger than expected catastrophe losses in any given period. In addition, our current business continuity and disaster recovery plans may not be sufficient to reduce the impact of pandemics, a major cyber-attack, including ransomware, and other natural or man-made catastrophic events. Other risk management methods depend upon the evaluation of information regarding markets, clients, or other matters that is publicly available or otherwise accessible to us, which may not always be accurate, complete, up-to-date or properly evaluated. Management of operational, legal and regulatory risks requires, among other things, policies and procedures to record and verify large numbers of transactions and events in each jurisdiction in which we operate. Further, various jurisdictions have unique requirements with respect to AI and environmental, social and governance matters, which may impact the efficacy of our standardized risk management tools and techniques; therefore, our policies and procedures may not be fully effective. Accordingly, our risk management policies and procedures may not adequately mitigate the risks to our business, results of operations, financial condition and liquidity.

If our risk management policies and procedures are ineffective, we may suffer unexpected losses and could be materially adversely affected. As our businesses change and the markets in which we operate evolve, new risks emerge, including risks posed by the rapidly developing technology associated with AI and the implementation thereof within our operations, by our third-party vendors and by competitors, and unanticipated challenges with respect thereto. As a result, new products or new business strategies may present risks that are not appropriately identified, monitored or managed. The effectiveness of our risk management strategies may be limited, resulting in losses, because of market stress or unanticipated financial market movements. In addition, there can be no assurance

20			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

that we can effectively review and monitor all risks or that all of our employees will understand, follow and comply with our risk management policies and procedures.

Pricing for our products is subject to our ability to adequately assess risks and estimate related losses.

Our business is dependent on our ability to price our products effectively and charge appropriate premiums and other charges. Pricing adequacy depends on a number of factors and assumptions, including proper evaluation of insurance risks, our expense levels, net investment income expected to be realized, our response to rate actions taken by competitors, legal and regulatory developments, the ability to obtain regulatory approval for rate changes and inflation. Management establishes target returns for each product based upon the factors described above, certain underwriting assumptions and capital requirements, including statutory, GAAP and economic capital models. We monitor and manage pricing and sales to achieve target returns on new business, but we may not be able to achieve those returns, including due to the factors discussed above. Additionally, the property and casualty insurance markets are historically cyclical and experience periods of relatively strong premium rates followed by periods of increased competition that push premium rates down. Inadequate pricing and the difference between estimated results and actual results could have a material adverse effect on the profitability of our operations and our financial condition.

We are exposed to certain risks if we are unable to maintain the availability of our critical technology systems and data and safeguard the confidentiality and integrity of our data, which could compromise our ability to conduct business and adversely affect our consolidated business, results of operations, financial condition and liquidity.

We use information technology systems, infrastructure, including energy supply, and networks and other operational systems to store, retrieve, evaluate and use customer, employee and company data and information. Our business is highly dependent on our ability to access these systems and networks to perform necessary business functions. In the event of a natural disaster, unauthorized access, a terrorist attack, a major cyber-attack or other disruption, our systems, networks, and data may be inaccessible to our employees, customers or business partners for an extended period of time, and we may be unable to meet our business obligations and regulatory requirements for an extended period of time if our data or systems are disabled, manipulated, destroyed or otherwise compromised. Additionally, some of our technology systems are older, legacy-type systems that are less efficient and require an ongoing commitment of significant resources to maintain or upgrade, and in some cases may not be able to be fully protected or to implement the latest security patches. Supply chain disruptions or delays could prevent us from maintaining and implementing changes, updates and upgrades to our systems and networks in a timely manner or at all. System and network failures or outages, including with respect to third parties, have and could compromise our ability to perform business functions in a timely manner, which could harm our ability to conduct business, hurt our relationships with our business partners and customers and expose us to legal claims as well as regulatory investigations and sanctions, any of which could have a material adverse effect on our business, results of operations, financial condition and liquidity.

Some of these technology systems also rely upon third-party systems and services, which themselves may rely on the systems and services of other third parties. Problems caused by, or occurring in relation to, our third-party providers’ systems and services, including those resulting from breakdowns or other disruptions in information technology services provided by our third-party providers and the other third parties on which they rely, our inability to acquire third-party services on commercially acceptable terms, failure of a third-party provider to perform as anticipated or in compliance with applicable laws or regulations, inability of a third-party provider to provide the required volumes of services or our third-party providers experiencing cyberattacks or data breaches, could materially and adversely affect our business, results of operations, financial condition and liquidity.

Like other global companies, the systems and networks we maintain and third-party systems and networks we or our vendors use are currently, and may in the future continue to be, subject to or targets of unauthorized or fraudulent access, including physical or electronic break-ins or unauthorized tampering, as well as attempted cybersecurity threats such as “denial of service” attacks, phishing, automated attacks, and other disruptive attacks, including ransomware. Cyber threats are constantly evolving and the techniques used in these attacks change, develop and evolve rapidly, including the use of emerging technologies, such as advancing forms of artificial intelligence and quantum computing by nation state threat actors and criminal organizations. The new cyber risks introduced by these changes in technology, such as deepfake schemes, require us to devote significant attention to identification, assessment and analysis of the risks and implementation of corresponding preventative measures. Additionally, the frequency and sophistication of such threats continue to increase and often become further heightened in connection with geopolitical tensions. Also, like other global companies, we have an increasing challenge of retaining and attracting highly qualified personnel to assist us in combatting these security threats.

There is no assurance that our cybersecurity measures, including information security and technology policies and standards, administrative, technical and physical controls and other actions by us or contracted third-parties designed as preventative, will provide fully effective protection from threats to our data, systems and networks, including malware and computer virus attacks, ransomware, unauthorized access, business e-mail compromise, misuse, denial-of-service attacks, system failures and other disruptions. We maintain insurance to cover operational risks, such as cyber risk and technology outages, but this insurance may not cover all costs associated with the consequences of information systems or personal, confidential or proprietary information being compromised. In the case of a successful ransomware attack in which our data and information systems are compromised and

AIG | 2024 Form 10-K			21

ITEM 1A | Risk Factors

applicable processes to restore access are not effective, our information could be held hostage until a ransom, which may be significant, is paid. In some cases, such a compromise may not be immediately detected which may make it difficult to restore critical services, mitigate damage to assets and maintain the integrity and security of data including our policyholder, employee, agent, and other confidential information processed through our systems and networks.

Additionally, since we rely heavily on information technology and systems (which is expected to increasingly include the use of artificial intelligence) and on the integrity and timeliness of data to run our businesses and service our customers, any such security event and resulting compromise of systems or data have and may impede or interrupt our business operations and our ability to service our customers, and may materially and adversely affect our business, results of operations, financial condition and liquidity.

There can be no assurance that any actions taken by us to evaluate and enhance our information security and technology systems and processes, including third-party systems and services on which we rely, as well as changes designed to update and enhance our protective measures to address new threats, will decrease the risk of a system or process failure; further, such changes may create a gap in the associated security measures during the change period. Any such system or process failure or security measures gap could materially and adversely affect our business, results of operations, financial condition and liquidity.

We routinely transmit, receive and store personal, confidential and proprietary information by secured email and other electronic means. Although we attempt to keep such information confidential and secure, we have been, and in the future may be, unable to do so in all events, especially with clients, vendors, service providers, counterparties and other third parties who may not have or use appropriate controls to protect personal, confidential or proprietary information. Failure to secure or appropriately handle personal, confidential or proprietary information could cause a loss of data or compromised data integrity, give rise to remediation or other expenses, expose us to liability under U.S. and international laws and regulations, subject us to litigation, investigations, sanctions, and regulatory and law enforcement action, and result in reputational harm and loss of business, any of which could have a material adverse effect on our business, results of operations, financial condition and liquidity.

Furthermore, certain of our businesses are subject to compliance with laws and regulations enacted by U.S. federal and state governments, the EU or other jurisdictions or enacted by various regulatory organizations or exchanges relating to the privacy and security of the information of clients, employees or others. The variety of applicable privacy and information security laws and regulations exposes us to heightened regulatory scrutiny, requires us to incur significant technical, legal and other expenses in an effort to ensure and maintain compliance and will continue to impact our business in the future by increasing legal, operational and compliance costs. While we have taken steps to comply with privacy and information security laws, we cannot guarantee that our efforts will meet the evolving standards imposed by data protection authorities. If we are found not to be in compliance with these privacy and security laws and regulations, we may be subject to additional potential private consumer, business partner or securities litigation, regulatory inquiries, and governmental investigations and proceedings, including class-actions. Any such developments may damage our reputation and subject us to material fines and other monetary penalties and damages, divert management’s time and attention, and lead to further enhanced regulatory oversight, any of which could have a material adverse effect on our business, results of operations, financial condition and liquidity. Additionally, we expect that developments in privacy and cybersecurity worldwide will increase the financial and reputational implications in the event of a significant breach of our or our third-party suppliers’ information technology systems. For additional information on data protection and cybersecurity regulations, see Item 1. Business – Regulation – Privacy, Data Protection, Cybersecurity and Artificial Intelligence Requirements, and Part II, Item 7. MD&A – Enterprise Risk Management – Operational Risk Management – Cybersecurity Risk.

Our foreign operations expose us to risks that may affect our operations.

Through our operations, licenses and authorizations and network partners, we provide insurance solutions that help businesses and individuals in approximately 200 countries and jurisdictions protect their assets and manage risks. A substantial portion of our business is conducted outside the United States, and we intend to continue to grow our business in strategic markets. Operations outside the United States have in the past been, and may in the future be, affected by elevated climate risks, regional economic downturns, changes in foreign currency exchange rates and foreign interest rates, political events or upheaval, sanctions policies, nationalization and other restrictive government or regulatory actions, which could also affect our other operations.

Our subsidiaries operating in foreign jurisdictions must satisfy local regulatory requirements and it is possible that these local licenses may require AIG Parent to meet certain conditions. Licenses issued by foreign authorities to our subsidiaries are subject to modification and revocation. Consequently, our insurance subsidiaries could be prevented from conducting future business in some of the jurisdictions where they currently operate. Adverse actions from any single country could adversely affect our results of operations, depending on the magnitude of the event and our financial exposure at that time in that country.

We are subject to myriad regulations which govern items such as sanctions, bribery and anti-money laundering, for which failure to comply could expose us to significant penalties. Laws and regulations aimed at preventing money laundering, which in some jurisdictions apply to insurance companies, create obligations to know certain information about clients and take steps to monitor for suspicious activities. The Foreign Corrupt Practices Act makes it unlawful for certain classes of persons and entities to make payments to foreign government officials to assist in obtaining or retaining business. Also, the Department of the Treasury’s Office of Foreign Assets Control administers regulations that restrict or prohibit dealings involving certain organizations, individuals and

22			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

countries. The UK, the EU, Japan and other jurisdictions maintain similar laws and regulations. Although we have policies and controls in place that are designed to ensure compliance with these laws and regulations, if those controls are ineffective and/or an employee or third party fails to comply with applicable laws and regulations, we could suffer civil and criminal penalties, including disgorgement, and our business and our reputation could be adversely affected.

Third parties we rely upon to provide certain business and administrative services on our behalf may not perform as anticipated, which could have an adverse effect on our business and results of operations.

We have used and will continue to use outsourcing strategies and third-party providers to transform operational and back office processes and deliver contracted services in a broad range of areas. Such areas include, but are not limited to, administration or servicing of certain policies and contracts, finance, actuarial, information technology services related to infrastructure, and investment advisory and management services. The implementation of any technological advancements may be comprised of multiple workstreams that are complex and, have in the past and may in the future, require significant time and resource prioritization and result in delays due to the lack of sufficient resources to execute on a timely basis, inefficiencies stemming from changes that may be required to the program or sequencing, failure to meet operational and financial targets due to additional priorities or other factors. These risks may impair our ability to achieve anticipated improvements in our businesses may disrupt or may otherwise harm our operations which could materially and adversely affect our businesses, financial condition and operations.

Further, third-party investment managers manage the majority of our investment assets. For information regarding our reliance on third-party investment managers, see Investment Portfolio and Concentration of Investments – “We rely on investment management and advisory arrangements with third-party investment managers for the majority of our investment portfolio. The historical performance of any investment manager we engage should not be considered as indicative of the future results of our investment portfolio, our future results or any returns expected on our Common Stock” above.

Some of the third-party providers we use are located outside the U.S., which exposes us to business disruptions and political risks inherent to conducting business outside of the U.S. We periodically negotiate the terms of the provisions and renewal of these relationships, and there can be no assurance that such terms will remain acceptable to us, such third parties or regulators. If such third-party providers experience disruptions, fail to meet applicable licensure requirements, do not perform as anticipated or in compliance with applicable laws and regulations, terminate or fail to renew our relationships, or such third-party providers in turn rely on services from another third-party provider, who experiences such disruptions, licensure failures, nonperformance or noncompliance, termination or non- renewal of its contractual relationships, we may experience operational difficulties, an inability to meet obligations (including, but not limited to, contractual, legal, regulatory or policyholder obligations), a loss of business, increased costs or reputational harm, compromises to our data integrity, or suffer other negative consequences, all of which may have a material adverse effect on our business, consolidated results of operations, liquidity and financial condition. Third parties performing regulated activities on our behalf, such as sales and servicing of insurance products, pose a heightened risk as we may be held accountable for third-party conduct that fails to comply with applicable law.

For information regarding cyber risk arising from third-party providers, see Business and Operations – “We are exposed to certain risks if we are unable to maintain the availability of our critical technology systems and data and safeguard the confidentiality and integrity of our data, which could compromise our ability to conduct business and adversely affect our consolidated business, results of operations, financial condition and liquidity” above.

We may experience difficulty in marketing and distributing products through our current and future distribution channels and the use of third parties may result in additional liabilities.

We maintain relationships with a number of key distributors, which results in certain distributor concentration. Distributors have in the past, and may in the future, elect to renegotiate the terms of existing relationships, such that those terms may not remain attractive or acceptable to us, limit the products they sell, including the types of products offered by us, or otherwise reduce or terminate their distribution relationships with us, with or without cause. This could be due to various reasons, such as industry consolidation of distributors or other industry changes that increase the competition for access to distributors, developments in laws or regulations that affect our business or industry, including the marketing and sale of our products and services, adverse developments in our business, the distribution of products with features that do not meet minimum thresholds set by the distributor, strategic decisions that impact our business, adverse rating agency actions or concerns about market-related risks.

Alternatively, renegotiated terms may not be attractive or acceptable to distributors, or we may terminate one or more distribution agreements due to, for example, a loss of confidence in, or a change in control of, one of the third-party distributors. An interruption or reduction in certain key relationships could materially affect our ability to market our products and could materially and adversely affect our business, results of operations, financial condition and liquidity.

Key distribution partners could merge, consolidate, change their business models in ways that affect how our products are sold, or terminate their distribution contracts with us, or new distribution channels could emerge and adversely impact the effectiveness of our distribution efforts.

AIG | 2024 Form 10-K			23

ITEM 1A | Risk Factors

Also, if we are unsuccessful in attracting, retaining and training key distribution partners, or are unable to maintain our distribution relationships, our sales could decline, which could have a material adverse effect on our business, results of operations, financial condition and liquidity. In addition, substantially all of our distributors are permitted to sell our competitors’ products. If our competitors offer products that are more attractive than ours or pay higher commission rates to the distribution partners than we do or for other reasons outside of our control, these distribution partners could concentrate their efforts in selling our competitors’ products instead of ours.

In addition, we can, in certain circumstances, be held responsible for the actions of our third-party distributors, including registered representatives, insurance agents and agencies, marketing organizations, and their respective employees, agents and representatives, in connection with the marketing and sale of our products by such parties, including the security of their operations and their handling of confidential information and personal data, in a manner that is deemed not compliant with applicable laws and regulations. This is particularly acute with respect to unaffiliated distributors where we may not be able to directly monitor or control the manner in which our products are sold through third-party firms despite our risk assessment, training and compliance programs. Further, misconduct by employees and agents in the sale of our products could also result in violations of laws by us or our subsidiaries, regulatory sanctions and serious reputational or financial harm to us. The precautions we take to prevent and detect the foregoing activities may not be effective. If our products are distributed in a manner alleged to be inappropriate, or third-party distributors experience a security or data breach due to deficient operational controls, we could suffer reputational and/or other financial harm to our business.

Our restructuring initiatives may not yield expected reductions in expenses and/or improvements in operational and organizational efficiency.

We may not be able to fully realize the anticipated expense reductions and operational and organizational efficiency improvements we expect to result from our focus on our operating model and associated initiatives. Actual costs to implement these initiatives may exceed our estimates or we may be unable to fully implement and execute these initiatives as planned. Our businesses and results of operations may be negatively impacted if we are unable to realize these anticipated expense reductions and efficiency improvements or if implementing these initiatives harms our relationships with customers or employees or our competitive position. The successful implementation of these initiatives may continue to require us to effect business rationalizations, technology enhancements, business process outsourcing, workforce reductions, modifications to our operating model and other actions, which depend on a number of factors, some of which are beyond our control.

Business or asset acquisitions and dispositions may expose us to certain risks.

The completion of any business or asset acquisition or disposition is subject to certain risks, including those relating to the receipt of required regulatory approvals, the terms and conditions of regulatory approvals including any financial accommodations required by regulators, our ability to satisfy such terms, conditions and accommodations, the occurrence of any event, change or other circumstances that could give rise to the termination of a transaction and the risk that parties may not be willing or able to satisfy the conditions to a transaction. As a result, there can be no assurance that any business or asset acquisition or disposition will be completed as contemplated, or at all, or regarding the expected timing of the completion of the acquisition or disposition.

Once we complete acquisitions or dispositions, there can be no assurance that we will realize the anticipated economic, strategic or other benefits of any transaction. For example, the integration of businesses we acquire may not be as successful as we anticipate or there may be undisclosed risks present in such businesses. Additionally, difficulties or delays in separating a divested business from our existing infrastructure, systems and operations could reduce the anticipated economic, strategic or other benefits of such transaction. Acquisitions and dispositions involve a number of risks, including operational, strategic, financial, accounting, legal, compliance and tax risks. Difficulties integrating an acquired business may result in the acquired business performing differently than we expected (including due to the loss of customers) or in our failure to realize anticipated expense-related efficiencies. Our existing businesses could also be negatively impacted by acquisitions. Risks resulting from future acquisitions may have a material adverse effect on our results of operations and financial condition. In connection with a business or asset disposition, we may also hold a concentrated position in securities of the acquirer as part of the consideration, which subjects us to risks related to the price of equity securities and our ability to monetize such securities. We have also provided and may provide financial guarantees and indemnities in connection with the businesses we have sold or may sell, as described in greater detail in Note 15 to the Consolidated Financial Statements. While we do not currently believe that claims under these indemnities will be material, it is possible that significant indemnity claims could be made against us. If such a claim or claims were successful, it could have a material adverse effect on our results of operations, cash flows and liquidity.

For additional information regarding the risks associated with our continuing equity market exposure to Corebridge, see Business and Operations – “We are subject to risks from our continuing equity market exposure to Corebridge. There can be no assurances that the anticipated benefits of our sales of Corebridge stock will be achieved” above.

24			AIG | 2024 Form 10-K

ITEM 1A | Risk Factors

We are subject to risks from our continuing equity market exposure to Corebridge. There can be no assurances that the anticipated benefits of our sales of Corebridge stock will be achieved.

Since September of 2022 when we closed on the initial public offering of Corebridge’s common stock, we have continued to sell down our interest in Corebridge. On June 9, 2024, we met the requirements for the deconsolidation of Corebridge for accounting purposes. For a detailed discussion of the deconsolidation, see Note 4 to the Consolidated Financial Statements.

Although Corebridge has been deconsolidated from our consolidated financial results, we continue to hold a significant stake in Corebridge's common stock. At the time of deconsolidation, we elected the fair value option to account for our remaining investment in Corebridge. From that date onward, the fair value change in Corebridge’s stock, and dividends received from Corebridge, are recognized in net investment income. As a result, a decline in the market value of Corebridge common stock may result in a decrease in our investment income and may have a material and adverse effect on our results and financial condition. There can be no assurances given as to the price, transaction costs, or timing of further Corebridge stock sales and, as a result, we may fail to realize the expected benefits of our sales of such stock if there are adverse movements in its market value prior to, or at the time of, such sales.

Further, the sale of our remaining Corebridge stock involves a number of divestment-related risks, including (i) unanticipated developments that may delay, prevent or otherwise adversely affect our ability to continue the full divestment, including an economic downturn or unfavorable capital markets conditions; (ii) unforeseen losses, liabilities or asset impairments arising from further dispositions; and (iii) challenges associated with the valuation of Corebridge and the Company as we seek to fully divest our investment in Corebridge.

In addition, the divestment of Corebridge, or a significant delay in our ability to continue to sell our Corebridge stock, has caused and could continue to cause the emergence, or exacerbate the effects of, many of the other risks discussed herein, including changes in our deferred tax assets and liabilities and our ability to utilize certain tax loss and credit carryforwards to offset future taxable income.

Significant legal or regulatory proceedings may adversely affect our business, results of operations or financial condition.

In the normal course of business, we face significant risk from regulatory and governmental investigations and civil actions, litigation and other forms of dispute resolution in various domestic and foreign jurisdictions. We frequently engage in litigation and arbitration concerning the scope of coverage under insurance and reinsurance contracts, and face litigation and arbitration in which our subsidiaries defend or indemnify their insureds under insurance contracts.

Additionally, from time to time, various regulatory and governmental agencies review the transactions and practices of the Company and our subsidiaries in connection with company-specific matters, or industry-wide and other inquiries into, among other matters, the business practices of current and former operating insurance subsidiaries. Such reviews, investigations, inquiries or examinations have and could lead to extended delays to, or prohibitions of, such transactions or practices, or develop into administrative, civil or criminal proceedings or enforcement actions, in which remedies could include fines, penalties, restitution or alterations to our business practices, and could result in additional expenses, limitations on certain business activities and reputational damage.

We, our subsidiaries and their respective officers and directors are also subject to, or may become subject to, a variety of additional types of legal disputes brought by holders of our securities, customers, employees and others, alleging, among other things, breach of contractual or fiduciary duties, bad faith, indemnification and violations of federal and state statutes and regulations. Certain of these matters may also involve potentially significant risk of loss due to the possibility of significant jury awards and settlements, punitive damages or other penalties. Many of these matters are also highly complex and seek recovery on behalf of a class or similarly large number of plaintiffs. It is therefore inherently difficult to predict the size or scope of potential future losses arising from them, and developments in these matters could have a material adverse effect on our consolidated financial condition or consolidated results of operations.

For information regarding certain legal proceedings, see Notes 15 and 21 to the Consolidated Financial Statements.

Increasing scrutiny and evolving expectations from investors, customers, regulators, policymakers and other stakeholders regarding environmental, social, governance and sustainability matters, including governmental responses to such matters, may adversely affect our reputation or otherwise adversely impact our business and results of operations.

There is increasing scrutiny and evolving expectations from investors, customers, regulators, policymakers and other stakeholders on companies’ governance, risk oversight, disclosures, plans, policies and practices regarding environmental, social, governance and sustainability matters, including those related to environmental stewardship, climate change, racial justice and workplace conduct. The requirements, standards and expectations of such stakeholders may also, as a whole, reflect diverging or conflicting values or policy objectives.

Governmental actions to mitigate climate and other risks related to environmental, social, governance and sustainability matters, or, conversely, to restrict actions companies may take in response to such risks, could have an adverse effect on our business and results of operations. Internationally and at the U.S. federal, state and local levels, regulators have imposed and likely will continue to impose requirements and guidance related to environmental, social, governance and sustainability matters, which will continue to

AIG | 2024 Form 10-K			25

ITEM 1A | Risk Factors

evolve and may conflict with one another, impose additional costs on us and expose us to new or additional risks, including financial, regulatory, litigation, reputational and operational risks. See Item 1. Business – Regulation – Climate Change.

Furthermore, certain organizations that provide information to investors have developed ratings for evaluating companies on their approach to different environmental, social and governance matters, and unfavorable ratings of our company or our industries may lead to negative investor sentiment and the diversion of investment to other companies or industries.

We may not be able to meet the requirements, standards or expectations of our various stakeholders on environmental, social, governance and sustainability issues, including with respect to any current or future targets, goals, plans, standards or expectations (including any previously announced climate target, goal or plan) on these matters, whether established or set by us or third parties, due to a variety of factors, including regulatory or other developments, changes to the methodologies, assumptions and estimates that underlie our climate- and other sustainability-related targets, goals and strategy, or the actions of or information provided by third parties outside of our control, who may apply standards, methodologies, practices and policies that differ from ours. If we are unable to meet such targets, goals, plans, standards or expectations, it could result in adverse publicity, reputational harm, or loss of customer and/ or investor confidence, which could adversely affect our business and results of operations. Conversely, actions we may take toward meeting such targets, goals, plans, standards or expectations could expose us to negative investor sentiment, regulatory scrutiny, adverse publicity or reputational harm.

For information on the effects of climate change on our business, see Reserves and Exposures – “Climate change may adversely affect our business and financial condition” above.

An epidemic, pandemic or other health crisis could materially and adversely affect our business, results of operations, financial condition or liquidity.

Public health crises and related governmental response measures, for example related to the COVID-19 pandemic, have resulted in significant societal disruption, economic uncertainty, volatility in business and consumer confidence and global economic slowdowns, which have adversely impacted our business and may again do so.

For example, we have experienced increased claim volumes; adverse effects resulting from our exposure to certain industries, and difficulties in arriving at accurate valuations thereof, which has caused or may cause impairment of the estimates and assumptions used to run our businesses or resulting in greater variability and subjectivity in our investment decisions; and increased difficulty and cost in obtaining reinsurance coverage.

If a public health crisis emerges the markets and economies in which we operate may experience heightened stress and further volatility, which may materially adversely affect our business, results of operations and financial condition. Legal proceedings, including class actions, could also be filed against us, our insureds, or others, seeking coverage for epidemic or pandemic-related losses or alleging bad faith denial of such coverage. In addition, remote or hybrid work may negatively impact our compliance efforts, culture and employees’ morale, which could result in greater turnover, lower productivity and greater operational risks.

We may not be able to protect our intellectual property and may be subject to infringement claims.

Effective intellectual property rights protection, including in the form of contractual rights, copyright, trademark, patent and trade secret laws, may be unavailable, limited, or subject to change in some countries where we do or plan to do business. Third parties may infringe or misappropriate our intellectual property. We have, and may in the future, litigate to protect our intellectual property. Any such litigation may be costly and may not be successful. Additionally, third parties may have patents or other protections that could be infringed by our products, methods, processes or services or which could limit our ability to offer certain product features. Consequently, we have in the past been and may in the future be subject to costly litigation in the event that another party alleges that we infringe upon their intellectual property rights. Any such intellectual property litigation could prove to be both costly and unsuccessful, result in significant expense, damages, and in some circumstances, we could be enjoined from providing certain products or services to our customers. Alternatively, we could be required to enter into costly licensing arrangements with third parties to resolve infringement or contractual disputes. The loss of intellectual property protection or the inability to secure or protect our intellectual property assets could harm our reputation and have a material adverse effect on our business and our ability to compete.

REGULATION

Our businesses are heavily regulated and changes in laws and regulations may affect our operations, increase our insurance subsidiary capital requirements or reduce our profitability.

Our operations generally, and our insurance subsidiaries in particular, are subject to extensive and potentially conflicting laws and regulations in the jurisdictions in which we operate. Our business and financial condition are also subject to supervision and regulation by authorities in the various jurisdictions in which we do business. Federal, state and foreign regulators also periodically review and investigate our insurance businesses, including Company-specific and industry-wide practices. The primary purpose of insurance regulation is the protection of insurance and reinsurance contract holders. The extent of regulation on our insurance business varies across the jurisdictions in which we operate, but generally is governed by laws that delegate regulatory, supervisory and

26			AIG | 2024 Form 10-K