Item 1. BUSINESS

NIS****OURCE INC.

We strive to provide promotion and advancement opportunities for employees. In 2024, for all leadership positions at the supervisor and above level posted externally, we filled 64% with internal employees. We also develop and implement targeted development action plans to increase succession candidate readiness for leadership roles. Additionally, we monitor the risk and potential impact of talent loss and take action to increase retention of top talent. Retention in 2024 was 93%. We calculate retention as 100 minus the total number of separations divided by the average headcount for the annual period. These separations break down into involuntary separations (2%), resignations (3%), and retirements (2%).

Succession Planning. We perform succession planning annually for officer level positions to ensure that we develop and sustain a strong bench of talent capable of performing at the highest levels. Talent is identified, and potential paths of development are discussed, to ensure that employees have an opportunity to build their skills to be well-prepared for future roles. We maintain formal succession plans for our CEO and key officers. The succession plan for our CEO is reviewed by the Environmental, Social, Nominating and Governance Committee and the succession plans for key officers (other than the CEO) and critical roles are reviewed by the Compensation and Human Capital Committee annually or more frequently as needed.

Employee and Workplace Health and Safety*.* We have several programs to support employees, and their families’ well-being. These programs include competitive medical, dental, vision, life and long-term disability programs, including employee health savings account company contributions, telemedicine services, Employee Assistance Program, Integrated Health Management navigation services, and paid time off including wellness, sick/disability, parental leave, and illness in family days.

We also have a robust program to support employees, contractors and public safety, which is led by our Chief Safety Officer and is under the oversight of the Safety, Operations, Regulatory and Policy Committee of our Board.

Culture and Engagement. Our culture is another important aspect of our ability to advance our strategic and operational objectives. In addition to recruiting, development and retention programs described above, we also invest in internal communications programs, including in-person and virtual learning and networking opportunities, as well as regular town hall communications to employees. We measure and monitor organizational health and employee engagement through various channels including employee lifecycle, pulse, and census surveys.

To instill and reinforce our values and culture, we require our employees to participate in regular training on ethics and compliance topics each year, including raising concerns, treating others with respect, preventing discrimination in the workplace, anti-bribery and corruption, data protection, unconscious biases, harassment, conflicts of interest, and how to use the anonymous ethics and compliance hotline. All employees receive training on our Code of Business Conduct annually or more frequently if there is a material change in content. Because of this training and other programs, we have learned from our most recent employee survey that our employees know what ethical violations look like and how to report them. Our Code of Business Conduct is designed to ensure that our employees adhere to legal and regulatory requirements, mitigate risks, and promote ethical behavior. Our ethics program is led by leadership tone at the top, policies and procedures, regular training and communication, monitoring and auditing, and a system for reporting and addressing violations. Our business ethics program, including the employee training program, is reviewed annually by our executive leadership team and the Audit Committee of our Board of Directors.

Our Compensation and Human Capital Committee reviews reports from our Chief Human Resources Officer on employee engagement and corporate culture. Our Board reviews results and action plans related to our enterprise-wide comprehensive employee engagement survey. Our executive leadership team, including our CEO, communicates directly and regularly with all employees on timely ethics topics through electronic messages, coffee chats, and all-employee town hall meetings. These communications emphasize the importance of our values and culture in the workplace.

INFORMATION ABOUT OUR EXECUTIVE OFFICERS

NIS****OURCE INC.

The following is a list of our Executive Officers, including their names, ages, offices held and other recent business experience.

Name						Age						Office(s) Held in Past 5 Years
Lloyd M. Yates						64						President and Chief Executive Officer of NiSource since February 2022 and Director since March 2020
												Executive Vice President, Customer and Delivery Operations, and President, Carolinas Region, of Duke Energy Corporation from 2014 to 2019
Shawn Anderson						43						Executive Vice President and Chief Financial Officer of NiSource since March 2023
												Senior Vice President and Chief Strategy and Risk Officer from June 2020 to March 2023
												Vice President, Strategy and Chief Risk Officer from January 2019 to May 2020
Melody Birmingham						53						Executive Vice President, and President, NiSource Utilities of NiSource since March 2023
												Executive Vice President, Chief Innovation Officer of NiSource from July 2022 to March 2023
												Senior Vice President and Chief Administrator Officer of Duke Energy Corporation from May 2021 to June 2022
												Senior Vice President, Supply Chain and Chief Procurement Officer of Duke Energy Indiana from 2018 to April 2021
William Jefferson, Jr						63						Executive Vice President, Chief Operating and Safety Officer of NiSource since May 2024
												Executive Vice President, Operations and Chief Safety Officer of NiSource from July 2022 to May 2024
												Station Director at STPNOC, Wadsworth, Texas, from 2020 to May 2022 and Vice President in 2022
Michael S. Luhrs						52						Executive Vice President, Strategy and Risk and Chief Commercial Officer of NiSource since March 2023
												Senior Vice President at Alliant Energy from 2022 to March 2023
												Vice President at Duke Energy Corporation from 2013 to 2022
Kimberly S. Cuccia						41						Senior Vice President, General Counsel and Corporate Secretary of NiSource since April 2022
												Vice President, Interim General Counsel and Corporate Secretary of NiSource from December 2021 to April 2022
												Vice President and Deputy General Counsel, Regulatory, of NiSource Corporate Services Company, from January 2021 to December 2021
												Vice President and General Counsel of Columbia Gas of Massachusetts and of NiSource Corporate Services Company, from 2019 to 2020
Melanie B. Berman						54						Chief Human Resources Officer and Senior Vice President, Administration of NiSource since May 2024
												Senior Vice President and Chief Human Resources Officer of NiSource from June 2021 to May 2024
												Executive Vice President and Chief Human Resources Officer of The Michaels Companies, Inc. from 2020 to 2021
Gunnar J. Gode						50						Vice President, Chief Accounting Officer and Controller of NiSource since July 2020
												Vice President and Controller of Washington Gas from March 2019 to 2020

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

Our operations and financial results are subject to various risks and uncertainties, including those described below, that could adversely affect our business, financial condition, results of operations, cash flows, and the market price of our common stock.

OPERATIONAL RISKS

We may not be able to execute our business plan or growth strategy, including utility infrastructure investments, or business opportunities, such as data center development and related generation sources and transmission capabilities to meet potential load growth.

Operational, financial or regulatory conditions may result in our inability to execute our business plan or growth strategy, including investments related to natural gas and electric distribution and transmission infrastructure investments and our electric generation projects. Additionally, operational, financial or regulatory conditions may result in our inability to manage the development and implementation connected to the complex business opportunity associated with growing interest in data centers from existing and potential customers.

Our enterprise-wide transformation roadmap initiatives identify and enable long-term sustainable capability enhancements, cost optimization improvements, technology investments and work process optimization, and these initiatives have increased the volume and pace of change and may not be effective as it continues. Our customer and regulatory initiatives may not achieve planned results. Utility infrastructure investments may not materialize, may cease to be achievable or economically viable and may not be successfully completed. Furthermore, we are evaluating the potential for data center development in our service territories, including ways to effectively manage the potential power demand, generation sources, and transmission capabilities to meet potential load growth from any data center customer, while at the same time focusing on our environmental goals. We expect that management of load growth would require new generation and transmission capabilities. Natural gas may cease to be viewed as an economically and environmentally attractive fuel. Certain environmental activist groups, investors and governmental entities continue to oppose natural gas delivery and infrastructure investments because of perceived environmental impacts associated with the natural gas supply chain and end use. Energy conservation, energy efficiency, distributed generation, energy storage, policies favoring electric heat over gas heat and other factors may reduce demand for natural gas and electricity. In addition, we consider acquisitions or dispositions of assets or businesses, JVs, and mergers from time to time as we execute on our business plan and growth strategy. As data center opportunities evolve and develop, we may also enter into arrangements and agreements with customers and potential customers that require us to invest capital related to the data center development and related generation sources and transmission capabilities before we receive any potential return. Any of these circumstances could adversely affect our business, results of operations and growth prospects. Even if our business plan, growth strategy, and/or business opportunities are executed, there is still risk of, among other things, human error in maintenance, installation or operations, shortages or delays in obtaining equipment, including as a result of transportation delays and availability, labor availability and performance below expected levels (in addition to the other risks discussed in this section). We are currently experiencing, and expect to continue to experience, supply chain challenges, including labor availability issues, impacting our ability to obtain materials for our gas and electric projects, as well as our ability to ensure timely completion.

Data center growth in our service territories, including a focus on northern Indiana, while providing growth opportunities that enhance our business strategy, provide significant financial, operational, and regulatory risks that must be effectively managed.

As we evaluate business opportunities presented by the data center development in our territories, including a focus on northern Indiana, we face a variety of challenges including accurately predicting future power needs of data centers due to rapidly changing technology and market dynamics, managing the potential power demand, generation sources, and transmission capabilities to meet potential load growth from any data center customer, financing the capital investment needed to build and maintain the necessary infrastructure to support data center development, managing the possible environmental impact of the potential increased power demand while remaining focused on our Net Zero Goal, and evaluating and complying with evolving regulations related to data center development. As we evaluate the potential for data center development in our service territories, we must effectively manage these financial, operational and regulatory risks.

Our distribution, transmission and generation activities involve a variety of inherent hazards and operating risks, including potential public safety risks.

Our gas distribution and transmission, electric generation, transmission and distribution activities, involve a variety of inherent hazards and operating risks, including, but not limited to, gas leaks and over-pressurization, downed power lines, stray electrical voltage, excavation or vehicular damage to our infrastructure, outages, environmental spills, mechanical problems, damage from weather events, and other incidents, which could cause substantial financial losses. These hazards and risks have resulted and may result in serious injury or loss of life to employees and/or the general public, significant damage to property,

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

environmental pollution, impairment of our operations, adverse regulatory rulings and reputational harm, which in turn could lead to substantial business and financial losses. The location of pipeline facilities, including regulator stations, liquefied natural gas and underground storage, or generation, transmission, substation and distribution facilities near populated areas, including residential areas, commercial business centers and industrial sites, could increase the level of damages resulting from such incidents. Hazardous incidents have subjected and may subject us to both civil and criminal litigation or administrative or other legal proceedings from time to time, which could result in substantial monetary judgments, fines, or penalties against us, be resolved on unfavorable terms, and require us to incur significant operational expenses. The occurrence of incidents has in certain instances adversely affected and could in the future adversely affect our reputation, cash flows, financial position and/or results of operations. We maintain insurance against some, but not all, of these risks and losses.

We currently conduct and may conduct in the future certain operations through a JV arrangement involving third- party investors that may result in operational impasses or litigation, including business delays as a result of such arrangements.

We have and may enter into JV arrangements involving third-party investors, including the NIPSCO Minority Interest Transaction. As part of a JV arrangement, third-party investors may hold certain protective rights that may impact our ability to make certain decisions, restricting our operational and corporate flexibility. Any such third-party investors may have interests and objectives which may differ from ours, we may be unable to cause these third parties to take action that we believe would be in the JV’s best interest, and, accordingly, disputes may arise that may result in operational impasses or litigation, including business delays.

Failure to adapt to advances in technology, including alternative energy sources, and changes in laws or regulations to support such advances in technology or alternative energy sources, and our ability to manage such related costs could make us less competitive.

A key element of our electric business model includes generating power at central station power plants and transmitting that power to customers to achieve economies of scale and produce power at a competitive cost. We continue to transition our generation portfolio in order to implement new and diverse technologies including renewable energy, distributed generation, energy storage, and implement energy efficiency programs for customers. Advances in technology and potential competition supported by changes in laws or regulations could reduce the cost of electric generation and provide retail alternatives causing power sales to decline and the value of our generating, transmission and distribution facilities to decline.

Our natural gas business model depends on widespread utilization of natural gas for space heating as a core driver of revenues. Alternative energy sources, new technologies or alternatives to natural gas space heating, including cold climate heat pumps and/or efficiency of other products, and potential competition supported by changes in laws or regulations could reduce demand and increase customer attrition, which could impact our ability to recover on our investments in our gas distribution assets.

Our future success will depend, in part, on our ability to anticipate and successfully adapt to technological changes, to offer services that meet customer demands and evolving industry standards, including environmental impacts associated with our products and services, and to recover all, or a significant portion of, remaining investments in retired assets. A failure by us to effectively adapt to changes in technology, successfully implement such changes, and manage the related costs could harm the ability of our products and services to remain competitive in the marketplace and could have a material adverse impact on our business, results of operations and financial condition. Furthermore, if these changes do not provide the anticipated benefits or meet customer demands, such failure could materially adversely affect our business model as well as impact results of operations and financial condition.

Increased dependency on technology may hinder our business operations and adversely affect our financial condition and results of operation if such technology fails.

We use a variety of technological tools and systems including both Company-owned information technology and technological services provided by outside parties. These tools and systems support critical functions including scheduling and dispatching of service technicians, automated meter reading systems, customer care and billing, operational plant logistics, management reporting and external financial reporting. The failure of these or other similarly important technologies, or our inability to have these technologies supported, updated, expanded, recovered (including timely recovered), or integrated into other technologies, could hinder our business operations and adversely impact its financial condition and results of operations. Although the Company has, when possible, developed alternative sources of technology and built redundancy into its computer networks and tools, there can be no assurance that these efforts would protect against all potential issues related to the loss of any such technologies.

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

Aging infrastructure may lead to disruptions in operations and increased capital expenditures and maintenance costs.

We have risks associated with aging electric and gas infrastructure. These risks can be driven by threats such as, but not limited to, electrical faults, mechanical failure, internal corrosion, external corrosion, ground movement and stress corrosion and/or cracking. The age of these assets may result in a need for replacement, a higher level of maintenance costs or unscheduled outages, despite efforts by us to properly maintain or upgrade these assets through inspection, scheduled maintenance and capital investment. In addition, the nature of the information available on aging infrastructure assets, which in some cases is incomplete, may make the operation of the infrastructure, inspections, maintenance, upgrading and replacement of the assets particularly challenging. Missing or incorrect infrastructure data may lead to (1) difficulty properly locating facilities, which can result in excavator damage and operational or emergency response issues, (2) configuration and control risks associated with the modification of system operating pressures in connection with turning off or turning on service to customers, which can result in unintended outages or operating pressures and (3) other potential risks related to missing or incorrect infrastructure data. Also, additional maintenance and inspections are required in some instances to improve infrastructure information and records and address emerging regulatory or risk management requirements, resulting in increased costs.

Supply chain issues related to shortages of materials, labor and transportation logistics may lead to delays in the maintenance and replacement of aging or damaged infrastructure, which could increase the probability and/or impact of a public safety incident. We lack diversity in suppliers of some gas materials. While we have implemented contractual protections with suppliers and stockpile some materials in inventory for such supply risks, we may not be effective in ensuring that we can obtain adequate emergency supply on a timely basis in each state, that no compromises are being made on quality and that we have alternate suppliers available. The failure to operate our assets as desired could result in interruption of electric service, major component failure at generating facilities and electric substations, gas leaks and other incidents, and an inability to meet firm service and compliance obligations, which could adversely impact revenues, and could also result in increased capital expenditures and maintenance costs, which, if not fully recovered from customers, could negatively impact our financial results.

We may be unable to obtain insurance on acceptable terms or at all, and the insurance coverage we do obtain may not provide protection against all significant losses.

Our ability to obtain insurance, as well as the cost and coverage of such insurance, is impacted by various events and developments affecting our industry and the financial condition and underwriting considerations of insurers. For example, some insurers have discontinued underwriting certain carbon-intensive energy-related businesses such as those in the coal industry or excluded coverage for specific perils such as wildfires or punitive damage risks. Certain perils, such as cyber liability, are now being excluded from some master policies for property and casualty insurance, requiring, where we have the ability, procurement of additional policies to maintain consistent coverage at an additional cost. Specific natural catastrophe events, such as hail and tornado, may not be covered with the same limits as other perils in certain property policies, as full coverage for these events is unavailable in the marketplace without costly specialty policies. Insurance coverage may not continue to be available at limits, rates or terms acceptable to us. In addition, our insurance is not sufficient or effective under all circumstances and against all hazards or liabilities to which we are subject. Certain types of damages, expenses or claimed costs, such as fines and penalties, have been and in the future may be excluded under the policies. In addition, insurers providing insurance to us may raise defenses to coverage under the terms and conditions of the respective insurance policies that could result in a denial of coverage or limit the amount of insurance proceeds available to us. Any losses for which we are not fully insured or that are not covered by insurance at all could materially adversely affect our results of operations, cash flows and financial position.

Aspects of the implementation of our electric generation strategy, including the timing of the retirement of our coal generation units or the addition of new generation resources, may be delayed and may not achieve intended results.

We intend to retire the remaining two coal units at R.M. Schahfer Generating Station by the end of 2025, two natural gas-fired peaking units at R.M. Schahfer Generating Station by the end of 2027, and the coal unit at Michigan City Generating Station by the end of 2028. These units are being replaced with a diverse, flexible, and scalable mix of incremental resources, including short-term contracted capacity resources, expanded demand side management programs, wind, solar, battery energy storage, and new natural gas peaking resources. Macro supply chain issues and U.S. federal policy actions could create uncertainty around the availability of key input materials necessary to develop and place our electric generation projects in service.

We expect renewable generation, battery energy storage and natural gas generation to be the primary ways in which we will meet our electric generation capacity and reliability obligations to the MISO market and reliably serve our customers when we retire our coal generation capacity. Any delays in the completion of such projects could create significant risks for us to reliably meet our capacity and energy obligations to MISO and to provide reliable and affordable energy to our customers. Delays to the

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

completion dates of our projects could also include delays in the financial return of certain investments and impact the overall timing of our electric generation transition.

Our electric generation strategy may require additional investment to meet our MISO obligations and may require significant future capital expenditures, operating costs and charges to earnings that may negatively impact our financial position, financial results and cash flows. An inability to secure and deliver on electric generation projects has negatively impacted, and could in the future negatively impact, our generation transition timeline and could negatively impact our achievement of decarbonization goals and reputation.

Our capital projects and programs subject us to construction and supply risks, and are subject to regulatory oversight, including requirements for permits, approvals and certificates from various governmental agencies.

Our business requires substantial capital expenditures for investments in, among other things, capital improvements to our electric generating facilities, electric and natural gas transmission and distribution infrastructure, natural gas storage and other projects, including projects for environmental compliance. As we undertake these projects and programs, we may be unable to complete them on schedule or at the anticipated costs. Additionally, we may construct or purchase some of these projects and programs to capture anticipated future growth, which may not materialize, and may cause the construction to occur over an extended period of time.

Construction risks include, but are not limited to, changes in the availability or costs of materials, equipment, commodities or labor (including changes to tariffs on materials), delays caused by construction incidents or injuries, work stoppages, poor initial cost estimates, unforeseen engineering issues, and general contractors and subcontractors not performing as required under their contracts.

We are monitoring risks related to increasing delivery lead times for certain construction and other materials, increasing risk associated with the unavailability of materials due to global shortages in raw materials and issues with transportation logistics, and risk of decreased construction labor productivity in the event of disruptions in the availability of materials critical to our gas and electric operations. Our efforts to enhance our resiliency to supply chain shortages may not be effective. We continue to see increasing prices associated with certain materials, equipment and products, which impacts our ability to complete major capital projects at the cost that was planned and approved. To the extent that delays occur, costs increase, costs become unrecoverable or recovery is delayed, or we otherwise become unable to effectively manage our affordability and complete our capital projects, our business operations, results of operations, cash flows, and financial condition may be adversely affected. In addition, to the extent that delays occur on projects that target system integrity, the risk of an operational incident could increase.

Our existing and planned capital projects require numerous permits, approvals and certificates from federal, state, and local governmental agencies, including obtaining necessary rights-of-way, easements and transmissions connections, as well as complying with various environmental statutes, rules and regulations, among other items. If there is a delay in obtaining any required regulatory approvals or if we fail to obtain or maintain any required approvals or to comply with any applicable laws or regulations, we may not be able to construct or operate our facilities, we may be forced to incur additional costs or we may be unable to recover any or all amounts invested in a project. We also may not receive the anticipated increases in revenue and cash flows resulting from such projects and programs until after their completion.

A significant portion of the gas and electricity we sell is used by residential and commercial customers for heating and air conditioning. Accordingly, fluctuations in weather, gas and electricity commodity costs, and economic conditions impact customer demand.

Energy sales are sensitive to variations in weather. Forecasts of energy sales are based on “normal” weather, which represents a long-term historical average. Significant variations from normal weather resulting from climate change or other factors could have, and have had, a material impact on energy sales. Additionally, residential usage, and to some degree commercial usage, is sensitive to fluctuations in commodity costs for gas and electricity (which volatility is described in more detail in the below risk factor), whereby usage declines with increased costs which could affect our financial results. Rising gas costs could heighten regulator and stakeholder sensitivity relative to the impact of base rate increases on customer affordability. Lastly, residential and commercial customers’ usage is sensitive to economic conditions and factors such as recession, inflation, unemployment, demand and consumer confidence. Therefore, prevailing economic conditions affecting the demand of our customers may in turn affect our financial results.

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

Fluctuations in the price of energy commodities or their related transportation costs, or an inability to obtain an adequate, reliable and cost- effective fuel supply may impact our ability to meet customer demand.

Our current electric generating fleet has dependencies on coal and natural gas for fuel, and our gas distribution operations purchase and resell a portion of the natural gas we deliver to our customers. These energy commodities are subject to price fluctuations and fluctuations in associated transportation costs. We use physical hedging through the use of storage assets and use financial products in certain jurisdictions in order to offset fluctuations in commodity supply prices. We rely on regulatory recovery mechanisms in the various jurisdictions in order to fully recover the commodity costs incurred in selling energy to our customers. While we have historically been successful in the recovery of costs related to such commodity prices, there can be no assurance that such costs will be fully recovered through rates in a timely manner.

In addition, we depend on electric transmission lines, natural gas pipelines, and other transportation and storage facilities owned and operated by third parties to deliver the electricity and natural gas we sell to wholesale markets, supply natural gas to our gas storage and electric generation facilities, and provide retail energy services to our customers. If transportation is disrupted, if capacity is inadequate or if supply is interrupted due to issues at the wellhead, we may be unable to sell and deliver our gas and electric services to some or all of our customers. As a result, we may be required to procure additional or alternative electricity and/or natural gas supplies at then-current market rates, which, if recovery of related costs is disallowed, could have a material adverse effect on our businesses, financial condition, cash flows, results of operations and/or prospects.

Failure to attract, retain or re-skill an appropriately qualified workforce, and maintain good labor relations, could adversely impact safety, service reliability, and customer satisfaction.

We face increased competition for talent which may result in longer hire times or increased cost due to the competitive nature of certain positions.

We operate in an industry that requires many of our employees and contractors to possess unique technical skill sets. An aging workforce without appropriate replacements, the mismatch of skill sets to future needs, the unavailability of talent for internal positions and the unavailability of contract resources may lead to operating challenges or increased costs. These operating challenges include lack of resources, loss of knowledge and a lengthy time period associated with skill development. For example, certain skills, such as those related to construction, maintenance and repair of transmission and distribution systems, are in high demand and have a limited supply. Current and prospective employees may determine that they do not wish to work for us due to market, economic, employment or other conditions, including those related to organizational changes as described in the risk factor below.

Further, as part of our strategic plan, which includes enhanced technology, transmission and distribution investments, and a reduction in reliance on coal-fired generation, we will need to attract and retain personnel that are qualified to implement such a strategy and may need to retrain or re-skill certain employees to support our long-term objectives. Additionally, successful implementation of our strategic plan is dependent on our ability to recruit and retain key executive officers to oversee its progress.

A significant portion of our workforce is subject to collective bargaining agreements. Our collective bargaining agreements are generally negotiated on an operating company basis with some companies having multiple bargaining agreements, which may span different geographies. Any failure to reach an agreement on new labor contracts or to renegotiate these labor contracts might result in strikes, boycotts or other labor disruptions. Our workforce continuity plans may not be effective in avoiding work stoppages that may result from labor negotiations or mass resignations. Labor disruptions, strikes or significant negotiated wage and benefit increases, whether due to union activities, employee turnover or otherwise, could have a material adverse effect on our businesses, results of operations and/or cash flows.

Failure to attract, retain, or re-skill qualified employees, including the ability to transfer significant internal historical knowledge and expertise to the new employees, could result in a loss of momentum, loss of high-level employees to our peers and could materially adversely affect our business, results of operations, cash flow and financial condition. If we are unable to successfully attract and retain an appropriately qualified workforce and maintain satisfactory labor relations, safety, service reliability, and customer satisfaction, our results of operations could be adversely affected.

If we cannot effectively manage new initiatives and organizational changes, we will be unable to address the opportunities and challenges presented by our strategy and the business and regulatory environment.

In order to execute on our sustainable growth strategy and enhance our culture of ongoing continuous improvement, we must effectively manage the complexity and frequency of new initiatives and organizational changes. The organizational changes

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

from our transformation initiatives have put short-term pressure on employees due to the volume and pace of change and, in some cases, the loss of personnel. Front-line workers are being impacted by the variety of process and technology changes that are currently in progress.

If we are unable to make decisions quickly, assess our opportunities and risks, and successfully implement new governance, managerial and organizational processes as needed to execute our strategy in this increasingly dynamic and competitive business and regulatory environment, our financial condition, results of operations and relationships with our business partners, regulators, customers, employees and stockholders may be negatively impacted.

Actions of activist stockholders could negatively affect our business and stock price and cause us to incur significant expenses.

We may be subject to actions or proposals from activist stockholders or others that may not be aligned with our long-term strategy or the interests of our other stockholders. Our response to suggested actions, proposals, director nominations and contests for the election of directors by activist stockholders could disrupt our business and operations, divert the attention of our board of directors, management and employees, and be costly and time‐consuming. Potential actions by activist stockholders or others may interfere with our ability to execute our strategic plans; create perceived uncertainties as to the future direction of our business or strategy; cause uncertainty with our regulators; make it more difficult to attract and retain qualified personnel; and adversely affect our relationships with our existing and potential business partners. Any of the foregoing could adversely affect our business, financial condition and results of operations. Also, we may be required to incur significant fees and other expenses related to responding to stockholder activism, including for third-party advisors. Moreover, our stock price could be subject to significant fluctuation or otherwise be adversely affected by the events, risks and uncertainties of any stockholder activism.

We outsource certain business functions to third-party suppliers and service providers, and may be impacted by substandard performance or quality by third parties.

Utilities rely on extensive networks of business partners and suppliers to support critical enterprise capabilities across their organizations. Like other companies in the utilities industry, we outsource certain services to third parties in areas including construction services, information technology, materials, fleet, environmental, operational services, corporate and other areas. We have seen, and may see in the future, slowing deliveries from suppliers and in some cases materials and labor shortages. In addition to delays and unavailability, at times, outsourcing of services to third parties could expose us to inferior service quality or substandard deliverables, which may result in non-compliance (including with applicable legal requirements and industry standards), interruption of service, accidents, or reputational harm, which could negatively impact our business, financial condition and results of operations. The nature of indirect supply chain, including a potential lack of control or certain visibility into sourcing by vendors, may also impact our ability to serve customers in a safe, reliable and cost-effective manner. These risks include the risk of operational failure, reputation damage, disruption due to new supply chain disruptions, exposure to significant commercial losses and fines and poorly positioned and distressed suppliers. If we continue to see delayed deliveries and shortages or if any other difficulties in the operations of these third-party suppliers and service providers, including their systems, were to occur, they could adversely affect our results of operations, or adversely affect our ability to work with regulators, unions, customers, or employees.

A cyber-attack or security breach on any of our or certain third-party technology systems, including but not limited to information systems, infrastructure, software and hardware, upon which we rely may adversely affect our ability to operate, could lead to a loss or misuse of confidential and proprietary information, or potential liability.

We are reliant on technology to run our business, which is dependent upon technology systems to process critical information necessary to conduct various elements of our business, including the generation, transmission and distribution of electricity; operation of our gas pipeline facilities; and the recording and reporting of commercial and financial transactions to regulators, investors and other stakeholders. In addition to general information and cybersecurity risks that all large corporations face (e.g., ransomware, malware, unauthorized access attempts, phishing attacks, malicious intent by insiders, third-party software vulnerabilities and inadvertent disclosure of sensitive information), the utility industry faces evolving and increasingly complex cybersecurity risks associated with protecting electric grid and natural gas infrastructure as well as sensitive and confidential customer and employee information. Deployment of new business technologies, along with maintaining legacy technology, represents a large-scale opportunity for attacks on our information systems and confidential customer and employee information, as well as on the integrity of the electric grid and the natural gas infrastructure. Increasing large-scale corporate cyber-attacks in conjunction with more sophisticated threats continue to challenge utility companies. Additionally, international conflicts, as well as increased surveillance activity from global threat actors, has increased the likelihood of a cyber-attack or security breach on critical infrastructure systems.

ITEM 1A. RISK FACTORS

NIS****OURCE INC.

Additionally, our information systems experience ongoing, often sophisticated, cyber-attacks or security breaches by a variety of sources, including foreign sources, with the apparent aim to breach our cyber-defenses. While we have implemented and maintain a cybersecurity program designed to protect our information technology, operational technology, and data systems from such cyber-attacks or security breaches, our cybersecurity program does not prevent all breaches, cyber-attack or security breach incidents. We have experienced an increase in the number of attempts by external parties to access our networks or our company data without authorization. We have experienced, and expect to continue to experience, cybersecurity intrusions and attacks or security breaches to our information systems. To our knowledge, none of these intrusions or attacks have resulted in a material cybersecurity intrusion or data breach. The risk of a disruption or breach of our operational technology, or the compromise of the data processed in connection with our operations, through cybersecurity breach or ransomware attack has increased as attempted cyber-attacks or security breaches have advanced in sophistication and number around the world. Technological complexities combined with advanced cyber-attack or security breach techniques, lack of cybersecurity hygiene and human error can result in a cybersecurity incident, such as a ransomware attack. Supplier non-compliance with cybersecurity controls can also result in a cybersecurity incident. We are aware of vendor cybersecurity incidents that have impacted our business, although no such events have had a material impact. Cyber-attacks or security breaches can occur at any point in the supply chain or with any suppliers, and future supplier non-compliance with cybersecurity controls could result in material cybersecurity incidents. In addition, we use unmanned aircraft systems (UAS) or drones in our business operations. UASs are also being used for malicious activities and the cybersecurity risk in connection with operating UASs is increasing.

In addition, we collect and retain personally identifiable information of our customers and employees. Customers and employees expect that we will adequately protect their personal information.

A cybersecurity breach of our information systems or operational technology, or a cybersecurity breach of the information systems of our customers, suppliers or others with whom we do business, could, among other things, (i) adversely impact our ability to safely and reliably deliver electricity and natural gas to our customers through our generation, transmission and distribution systems and potentially negatively impact our compliance with certain mandatory reliability and gas flow standards, (ii) subject us to reputational and other harm or liabilities associated with theft or inappropriate release of certain types of information such as system operating information or information, personal or otherwise, relating to our customers or employees, (iii) impact our ability to manage our businesses, and/or (iv) subject us to legal and regulatory proceedings and claims from third parties, in addition to remediation costs, any of which, in turn, could have a material adverse effect on our businesses, cash flows, financial condition and/or results of operations. Although we do maintain cybersecurity insurance, it is possible that such insurance will not adequately cover any losses or liabilities we may incur as a result of a cybersecurity incident.

Compliance with and changes in cybersecurity requirements have a cost and operational impact on our business, and failure to comply with such laws and regulations could adversely impact our reputation, results of operations, financial condition and/or cash flows.

The legal and regulatory environment surrounding cybersecurity and privacy is increasingly demanding. As cyber-attacks or security breaches are becoming more sophisticated, critical infrastructure assets, including pipelines and electric infrastructure, may be specifically targeted. In 2021, the TSA announced two new cybersecurity directives in response to a ransomware attack on the Colonial Pipeline that occurred earlier in the year. These directives, including updates or amendments to such TSA directives, require critical pipeline owners to comply with mandatory reporting measures, designate a cybersecurity coordinator, provide vulnerability assessments, and ensure compliance with certain cybersecurity requirements. In November 2024, the TSA issued a Notice of Proposed Rulemaking (NPRM) that would mandate cyber risk management and reporting requirements for the pipeline industry. Such directives or additional legal requirements may require expenditure of significant additional resources to respond to cyber-attacks or security breaches, to continue to modify or enhance protective measures, or to assess, investigate and remediate any critical infrastructure security vulnerabilities. Increased costs and the operational impacts of compliance and changes in cybersecurity requirements, including any failure to comply with government regulations or any failure in our cybersecurity protective measures may result in enforcement actions, all of which may have a material adverse effect on our business, results of operations and financial condition. In addition, there is no certainty that costs incurred related to securing against threats will be recovered through rates.

The impacts of natural disasters, acts of terrorism, acts of war, civil unrest, accidents, public health emergencies or other catastrophic events may disrupt operations and reduce the ability to service customers.

A disruption or failure of natural gas distribution systems, or within electric generation, transmission or distribution systems, in the event of a hurricane, tornado, wildfire, flood, or other major weather event, or terrorist attack, acts of war, international