Marsh & Mclennan Companies, Inc,
Fiscal Year 2025.

Consolidated revenue growth in 2025 reflects the continued demand for our advice and solutions. Consolidated Operating Expenses Consolidated operating expenses increased $2.1 billion, or 11%, to $20.8 billion in 2025, compared to $18.6 billion in 2024. Expenses also reflect an increase of 7% from acquisitions and a 1% from the impact of foreign currency translation. Consolidated operating expenses in 2025 reflect increased compensation and benefits, driven by higher base salaries and incentive compensation, including the impact from acquisitions.

Corporate and Other Corporate expenses decreased $9 million, or 3%, to $309 million in 2025, compared to $318 million in 2024, reflecting lower restructuring costs in the current year, partially offset by increased compensation and benefits.

For the Floating Notes, interest is calculated based on a compounded SOFR benchmark rate plus 0.700%. The Company used the net proceeds from the November 2024 Notes offering to fund, in part, the McGriff Transaction, including the payment of related fees and expenses, as well as for general corporate purposes. In June 2024, the Company repaid $600 million of 3.500% senior notes at maturity. In March 2024, the Company repaid $1 billion of 3.875% senior notes at maturity. In February 2024, the Company issued $500 million of 5.150% senior notes due 2034 and $500 million of 5.450% senior notes due 2054. The Company used the net proceeds from these issuances for general corporate purposes. The Company's senior debt is currently rated A- by Standard & Poor's ("S&P"), A3 by Moody's, and A- by Fitch. The Company's short-term debt is currently rated A-2 by S&P, P-2 by Moody's, and F-2 by Fitch. The Company carries a Stable outlook with S&P, Moody's and Fitch.

Bridge Loan Commitment Letter In connection with the McGriff Transaction, on September 29, 2024, the Company entered into a Bridge Loan Commitment Letter (the "Commitment Letter") to provide the Company under a 364-day unsecured bridge term loan facility in an amount not to exceed $7.75 billion (the "Bridge Loan Facility"). The Company paid approximately $23 million of customary upfront fees related to the Commitment Letter, amortized as interest expense. On November 8, 2024, the Company issued $7.25 billion of senior notes and terminated the Commitment Letter. The Bridge Loan Facility agreement is discussed in more detail in Note 13, Debt, in the notes to the consolidated financial statements.

Share Repurchases The Company has a share repurchases program authorized by the Board of Directors. In November 2025, the Board of Directors authorized an increase in the Company's share repurchase program, which supersedes any prior authorization, allowing management to buy back up to $6 billion of the Company's common stock. In 2025, the Company repurchased 10.1 million shares of its common stock for $2.0 billion. At December 31, 2025, the Company remained authorized by the Board of Directors to repurchase up to approximately $5.7 billion in shares of its common stock. There is no time limit on the authorization.

* * * * * The macroeconomic and geopolitical environment including multiple major wars and global conflicts, social unrest, tariffs or changes in trade policies, slower GDP growth or recession, fluctuations in foreign exchange rates, lower interest rates, capital markets volatility, inflation and changes in insurance premium rates could impact our business, financial condition, results of operations and cash flows. For more information about these risks, please see "Risk Factors - Macroeconomic Risks" in this annual report on Form 10-K.

In 2024, the Company repurchased 4.3 million shares of its common stock for $900 million. 47 Dividends The Company paid dividends on its common stock shares of $1.7 billion ($3.43 per share) in 2025, as compared with $1.5 billion ($3.05 per share) in 2024. In January 2026, the Board of Directors of the Company declared a quarterly dividend of $0.900 per share on outstanding common stock, payable in February 2026.

Financial Highlights •Consolidated revenue in 2024 was $24.5 billion, an increase of 8%, or 7% on an underlying basis. •Consolidated operating income increased $535 million, or 10% to $5.8 billion in 2024, compared to 2023. Net income attributable to the Company was $4.1 billion. Earnings per share on a diluted basis increased to $8.18 from $7.53, or 9%, compared with 2023. •Risk and Insurance Services revenue in 2024 was $15.4 billion, an increase of 9%, or 8% on an underlying basis. Operating income was $4.4 billion and $3.9 billion in 2024 and 2023, respectively. •Marsh's revenue in 2024 was $12.5 billion, an increase of 10%, or 7% on an underlying basis. Guy Carpenter's revenue in 2024 was $2.4 billion, an increase of 5%, or 8% on an underlying basis. •Consulting revenue in 2024 was $9.1 billion, an increase of 5%, or 6% on an underlying basis. Operating income was $1.8 billion and $1.7 billion in 2024 and 2023, respectively. •Mercer's revenue in 2024 was $5.7 billion, an increase of 3%, or 5% on an underlying basis. Oliver Wyman Group's revenue in 2024 was $3.4 billion, an increase of 9%, or 6% on an underlying basis. •The Company's results of operations in 2024 included restructuring activities of $276 million, primarily related to severance and lease exit charges for activities focused on workforce actions, technology rationalization and reductions in real estate. •The Company completed 17 acquisitions in 2024. On November 15, 2024, the Company completed the acquisition of McGriff Insurance Services, LLC ("McGriff") for $7.75 billion in cash consideration. •On January 1, 2024, the Company completed the sale of its Mercer U.K. pension administration and U.S. health and benefits administration businesses for approximately $120 million, and recorded a net gain of $35 million in the current year. •In November 2024, the Company issued $7.25 billion of senior notes to fund the acquisition of McGriff and for general corporate purposes. In February 2024, the Company issued $500 million of 5.150% senior notes due 2034 and $500 million of 5.450% senior notes due 2054.

In Consulting, underlying revenue growth in 2024 was driven by both Mercer and Oliver Wyman Group. Mercer's revenue increased $156 million, or 3%, to $5.7 billion in 2024, compared to $5.6 billion in 2023. This reflects an increase of 5% on an underlying basis, partially offset by a decrease of 2% from dispositions and 1% from the impact of foreign currency translation. On an underlying basis, revenue increased 8% for Health, and 4% for each of Career and Wealth, as compared to the prior year. Underlying revenue growth at Mercer was driven by continued strong growth in Health and solid growth in Career and Wealth. Health reflected growth across all regions. Wealth growth was driven by both investment management and defined benefits consulting. The increase in investment management was driven by positive net flows and the impact of capital markets. Career revenue benefited from continued strong growth in talent and rewards surveys and products. Revenue in 2024 includes a net gain of $35 million from the sale of the Mercer U.K. pension administration and U.S. health and benefits administration businesses. Oliver Wyman Group's revenue increased $268 million, or 9%, to $3.4 billion in 2024, compared to $3.1 billion in 2023. This reflects an increase of 6% on an underlying basis and 3% from acquisitions. The increase in underlying revenue growth at Oliver Wyman Group in 2024 was primarily driven by the Middle East and Asia. Revenue in 2024 includes a gain of $20 million from the sale of the Celent advisory business. The Consulting segment completed 7 acquisitions in 2024. Information regarding these acquisitions is included in Note 5, Acquisitions and Dispositions, in the notes to the consolidated financial statements. 45

Income and Other Taxes The Company's consolidated effective tax rate for 2024 and 2023 was 24.9% and 24.3%, respectively. The tax rates in both years reflect the impact of discrete tax matters such as excess tax benefits related to share-based compensation, enacted tax legislation, changes in uncertain tax positions, deferred tax adjustments, non-taxable adjustments related to contingent consideration for acquisitions, return to provision adjustments, and valuation allowances for certain tax credits. The 2024 effective tax rate reflects the full impact of the previously enacted change in the U.K. corporate income tax rate from 19% to 25%, which was effective April 1, 2023. The blended U.K. statutory tax rate for 2023 was 23.5%. In 2023, the Company released valuation allowances related to its non-U.S. operations. Management determined that there was sufficient positive evidence to conclude that it was more likely than not that deferred tax assets were realizable, primarily due to the sustained profitability of its operations. The release of valuation allowances resulted in a decrease to tax expense of $94 million in 2023. The effective tax rate may vary significantly from period to period. The effective tax rate is sensitive to the geographic mix of earnings and the cost to repatriate the Company's earnings, which may result in higher or lower effective tax rates. Therefore, a shift in the mix of profits among jurisdictions, or changes in the Company's repatriation strategy to access offshore cash, can affect the effective tax rate. In 2024, pre-tax income in the U.K., Canada, Ireland, India, Bermuda, Germany, Australia, United Arab Emirates, Japan, and Singapore accounted for 46 approximately 65% of the Company's total non-U.S. pre-tax income, with effective rates in those countries of 25.0%, 28.0%, 16.3%, 27.9%, 0.0%, 30.9%, 36.7%, 17.6%, 38.2%, and 18.0%, respectively. In addition, losses in certain jurisdictions cannot be offset by earnings from other operations and may require valuation allowances that affect the rate in a particular period, depending on estimates of the value of associated deferred tax assets which can be realized. A valuation allowance was recorded to reduce deferred tax assets to the amount that the Company believes is more likely than not to be realized. Details are provided in Note 7, Income Taxes, in the notes to the consolidated financial statements. The effective tax rate is also sensitive to changes in unrecognized tax benefits, including the impact of settled tax audits and expired statutes of limitations. The Company has established liabilities for uncertain tax positions in relation to potential assessments in the jurisdictions in which it operates. In the third quarter of 2024, the Company received closure notices and assessments from the U.K. tax authority in relation to its 2016-2020 examinations which disallowed certain interest expense deductions. The Company has appealed the assessments and resolving this matter through litigation or alternative dispute resolution may take several years. The Company believes the resolution of tax matters will not have a material effect on the consolidated financial position of the Company. However, an adverse resolution of tax matters from current or future audits or tax litigation could have a material impact on the Company's net income or cash flows and on its effective tax rate in a particular future period. Changes in tax laws, rulings, policies, or related legal and regulatory interpretations occur frequently and may have significant favorable or adverse impacts on our effective tax rate. In 2021, the Organization for Economic Cooperation and Development's ("OECD") released model rules for a 15% global minimum tax, known as Pillar Two. Pillar Two has now been enacted by most key non-U.S. jurisdictions where the Company operates, including the U.K. and Ireland. This minimum tax is treated as a period cost beginning in 2024 and does not have a material impact on the Company's financial results of operations for the current period. The Company continues to monitor legislative developments, as well as additional guidance from countries that have enacted Pillar Two legislation and will ensure it complies with any changes. As a U.S.-domiciled parent holding company, the Company is the issuer of essentially all of the Company's external indebtedness, and incurs the related interest expense in the U.S. The Company's interest expense deductions are not currently limited. Further, most senior executive and oversight functions are conducted in the U.S. and the associated costs are incurred primarily in the U.S. Some of these expenses may not be deductible in the U.S., which may impact the effective tax rate. Changes to the U.S. tax law in recent years have allowed the Company to repatriate foreign earnings without incurring additional U.S. federal income tax costs as foreign income is generally already taxed in the U.S. However, permanent reinvestment continues to be a component of the Company's global capital strategy. The Company continues to evaluate its global investment and repatriation strategy considering its capital requirements and potential costs of repatriation, which are generally limited to local country withholding taxes. 47

Credit Facilities In October 2023, the Company increased its multi-currency unsecured five-year revolving credit facility (the "Credit Facility") capacity to $3.5 billion from $2.8 billion and extended the expiration to October 2028. The interest rate on the Credit Facility was initially based on LIBOR plus a fixed margin which varied with the Company's credit rating. In the second quarter of 2023, the Credit Facility was amended that borrowings under the Credit Facility bear interest at a rate per annum equal, at the Company's option, either at (a) Securities Overnight Financing Rate ("SOFR") benchmark rate for U.S. dollar borrowings, or (b) a currency specific benchmark rate, plus an applicable margin which varies with the Company's credit ratings. The Company is required to maintain certain coverage and leverage ratios for the Credit Facility, which are evaluated quarterly. 49 The Credit Facility includes provisions for determining a benchmark replacement rate in the event existing benchmark rates are no longer available or in certain other circumstances, in which an alternative rate may be required. At December 31, 2024 and 2023, the Company had no borrowings under this facility. In October 2023, the Company terminated its one-year uncommitted revolving credit facility (the "Uncommitted Credit Facility"). There were no borrowings outstanding under the Uncommitted Credit Facility at December 31, 2023. The Company also maintains other credit and overdraft facilities with various financial institutions aggregating $123 million at December 31, 2024, and $113 million at December 31, 2023. There were no outstanding borrowings under these facilities at December 31, 2024 and 2023. The Company has outstanding guarantees and letters of credit with various banks aggregating $163 million and $139 million at December 31, 2024 and 2023, respectively.

Debt The Company has a short-term debt financing program through the issuance of commercial paper. The proceeds from the issuance of commercial paper are used for general corporate purposes. In November 2023, the Company increased its short-term commercial paper financing program (the "Program") to $3.5 billion from $2.8 billion. The Company did not have any commercial paper outstanding at December 31, 2024 and 2023.

Net income per share attributable to the Company - Basic$8.48 $8.26 $7.60 - Diluted$8.43 $8.18 $7.53 Average number of shares outstanding: - Basic491 492 494

- Diluted494 496 499 Shares outstanding at December 31,485 491 492 Consolidated operating income increased $406 million, or 7% to $6.2 billion in 2025, compared to $5.8 billion in 2024, reflecting a 10% increase in revenue and an 11% increase in expenses. Revenue growth was driven by increases in the Risk and Insurance Services and Consulting segments of 12% and 7%, respectively. Diluted earnings per share increased to $8.43 from $8.18, or 3% from the prior year, reflecting an increase in operating income, partially offset by higher interest expense due to debt raised to fund the McGriff acquisition. 36

The following tables present the Company's non-GAAP revenue for the years ended December 31, 2025 and 2024 and the related non-GAAP underlying revenue change: Year Ended December 31,

Total Consulting9,794 9,133 7 %9,469 9,053 5 % Corporate Eliminations(78)(70)(78)(70) Total Revenue$26,981 $24,458 10 %$25,312 $24,361 4 % The following table provides more detailed revenue information for certain of the components presented in the previous table: Year Ended December 31,

The Company conducts business through two segments: •Risk and Insurance Services: risk management activities and insurance/reinsurance broking and services, conducted through Marsh Risk and Guy Carpenter. •Consulting: health, wealth and career advice, solutions and products, and specialized management, strategic, economic and brand consulting services conducted through Mercer and Marsh Management Consulting. The results of operations in the Management Discussion & Analysis ("MD&A") include an overview of the Company's consolidated results for fiscal year 2025, compared to the results for fiscal year 2024, and should be read in conjunction with the consolidated financial statements and notes. This section also includes a discussion of the key drivers impacting the Company's financial results of operations both on a consolidated basis and by reportable segments. We describe the primary sources of revenue and categories of expense for each reportable segment in the discussion of segment financial results. A reconciliation of segment operating income to total operating income is included in Note 17, Segment Information, in the notes to the consolidated financial statements included in Part II, Item 8, of this report. For information and comparability of the Company's results of operations and liquidity and capital resources for fiscal year 2023, refer to "Item 7. Management's Discussion and Analysis of Financial Condition and Results of Operations" of the Company's Form 10-K for the fiscal year ended December 31, 2024. This MD&A contains forward-looking statements as defined in the Private Securities Litigation Reform Act of 1995. Refer to "Information Concerning Forward-Looking Statements" at the outset of this report.

(In millions, except percentages) GAAP Revenue% Change GAAPRevenue*Non-GAAP RevenueNon-GAAP Underlying Revenue* 2025202420252024 Marsh Risk: EMEA$3,812 $3,530 8 %$3,757 $3,530 6 %

Health (b)2,284 (4)(13)2,267 2,100 36 2,136 Career1,087 (12)(37)1,038 1,059 - 1,059 Total Mercer$6,190 $(41)$(233)$5,916 $5,743 $(43)$5,700 (a)Acquisitions, dispositions and other in 2025 includes the impact of McGriff. (b)Acquisitions, dispositions and other in 2024 includes a net gain of $35 million from the sale of the U.K. pension administration and U.S. health and benefits administration businesses, that comprised of a $70 million gain in Wealth, offset by a $35 million loss in Health.

(c)Acquisitions, dispositions and other in 2024 includes a gain of $20 million from the sale of a business in Marsh Management Consulting. Note: Amounts in the tables above are rounded to whole numbers. 38

Consolidated Revenue Consolidated revenue increased $2.5 billion, or 10%, to $27 billion in 2025, compared to $24.5 billion in 2024. Consolidated revenue increased 4% on an underlying basis and 6% from acquisitions. On an underlying basis, revenue increased 4% and 5% in 2025, in the Risk and Insurance Services and Consulting segments, respectively.

Additional details are included in Note 14, Restructuring Costs, in the notes to the consolidated financial statements. 39 Risk and Insurance Services The Company conducts business in its Risk and Insurance Services segment through Marsh Risk and Guy Carpenter. Marsh Risk is an insurance broker and risk advisor, offering risk management, insurance broking, insurance program management, risk consulting, analytical modeling and alternative risk financing services to a wide range of businesses, government entities, professional service organizations and individuals in over 130 countries. Guy Carpenter, the Company's reinsurance intermediary and advisor, provides specialized reinsurance broking, strategic advisory and actuarial services, and analytics solutions. Marsh Risk and Guy Carpenter are compensated for brokerage and consulting services through commissions and fees. Commission rates and fees vary in amount and can depend on a number of factors, including the type of insurance or reinsurance coverage provided, the particular insurer or reinsurer selected, and the capacity in which the broker acts and negotiates with clients. Revenues can be affected by premium rate levels in the insurance and reinsurance markets, the amount of risk retained by insurance and reinsurance clients, and by the value of the risks that have been insured since commission-based compensation is frequently related to the premiums paid by insureds and reinsureds. In many cases, fee compensation may be negotiated in advance, based on the type of risk, coverage required, and service provided by the Company and ultimately, the extent of the risk placed into the insurance market or retained by the client. The trends and comparisons of revenue from one period to the next can be affected by changes in premium rate levels, fluctuations in client risk retention and increases or decreases in the value of risks that have been insured, as well as new and lost business, and the volume of business from new and existing clients. In addition to compensation from its clients, Marsh Risk also receives other compensation, separate from retail fees and commissions, from insurance companies. This other compensation includes, among other things, payments for consulting and analytics services provided to insurers; compensation for administrative and other services (including fees for underwriting services and services provided to or on behalf of insurers relating to the administration and management of quota shares, panels and other facilities in which insurers participate), and contingent commissions, which are paid by insurers based on factors such as volume or profitability of Marsh Risk's placements, primarily driven by Marsh McLennan Agency ("MMA") and parts of Marsh Risk's international operations. Marsh Risk and Guy Carpenter receive interest income on certain funds (such as premiums and claims proceeds) held in a fiduciary capacity for others. The investment of fiduciary funds is regulated by state and other insurance authorities. These regulations typically require segregation of fiduciary funds and limit the types of investments that may be made. Interest income from these investments varies depending on the amount of funds invested and applicable interest rates, both of which vary from time to time. For presentation purposes, fiduciary interest income is segregated from the other revenues of Marsh Risk and Guy Carpenter and separately presented within the segment, as shown in the previous revenue by segments tables.

The results of operations for the Risk and Insurance Services segment are as follows: (In millions, except percentages)202520242023 Revenue$17,265$15,395$14,089

Consulting The Company conducts business in its Consulting segment through Mercer and Marsh Management Consulting. Mercer is a provider in delivering advice, solutions and products that help organizations meet the health, wealth and career needs of a changing workforce. Marsh Management Consulting offers management consulting and advisory services across various industries. The major component of revenue in the Consulting business is fees paid by clients for advice and services. Mercer, principally through its health line of business, also earns revenue in the form of commissions received from insurance companies for the placement of group (and occasionally individual) insurance contracts, primarily health, life and accident coverages. Revenue for Mercer's investment management business and certain of Mercer's defined benefit and contribution administration services consists principally of fees based on assets under management or administration. For a majority of the Mercer-managed investment funds, revenue is reported on a gross basis with sub-advisor fees included in other operating expenses. Revenue in the Consulting segment is affected by, among other things, global economic conditions, including changes in clients' particular industries and markets. Revenue is also affected by competition due to the introduction of new products and services, broad trends in employee demographics, including levels of employment and the effect of government policies and regulations. Revenues from investment management services and retirement trust and administrative services are significantly affected by the level of assets under management or administration, which is impacted by securities market performance.

The results of operations for the Consulting segment are as follows: (In millions, except percentages)202520242023 Revenue$9,794$9,133$8,709 Compensation and benefits 5,7105,3585,249

Interest Expense Interest expense was $960 million in 2025, compared to $700 million in 2024. Interest expense increased $260 million in 2025 due to debt raised to fund the McGriff acquisition. Interest expense in 2024 includes $26 million of financing costs, primarily related to customary upfront fees for the Commitment Letter. 42

Investment Income The caption "Investment income" in the consolidated statements of income comprises realized and unrealized gains and losses from investments. It includes, when applicable, other than temporary declines in the value of securities, mark-to-market increases or decreases in equity investments with readily determinable fair values and equity method gains or losses on its investments in private equity funds. The Company's investments may include direct investments in insurance, consulting or other strategically linked companies and investments in private equity funds. The Company recorded net investment income of $34 million in 2025, compared to $12 million in 2024. The increase in 2025 is primarily driven by higher mark-to-market gains from the Company's investments compared to the prior year.

Operating Cash Flows The Company provided $5.3 billion of cash from operations in 2025 compared to $4.3 billion in 2024. These amounts reflect the net income of the Company during those periods, excluding gains or losses from investments, adjusted for non-cash charges, and changes in working capital which relate primarily to the timing of payments of accrued liabilities, including incentive compensation, or receipts of receivables and pension contributions. The Company used cash of $205 million and $270 million related to its restructuring activities in 2025 and 2024, respectively.

Pension Related Items Contributions The Company's policy for funding its tax-qualified defined benefit plans is to contribute amounts at least sufficient to meet the funding requirements set forth in accordance with applicable law. In 2025, the Company contributed $38 million to its U.S. defined benefit pension plans and $44 million to its non-U.S. defined benefit pension plans. In 2024, the Company contributed $34 million to its U.S. defined benefit pension plans and $59 million to its non-U.S. defined benefit pension plans. In the U.S., contributions to the tax-qualified defined benefit plans are based on Employee Retirement Income Security Act ("ERISA") guidelines and the Company generally expects to maintain a funded status of 80% or more of the liability determined in accordance with the ERISA guidelines. In 2025, the Company made contributions of $36 million to its non-qualified plans and expects to contribute approximately $34 million in 2026. The Company also made required contributions of $2 million to its U.S. qualified plans in 2025. In 2026, the Company is expected to be required to make contributions totaling $33 million to its U.S. qualified plans. Outside the U.S., the Company has a large number of non-U.S. defined benefit pension plans, the largest of which are in the U.K., which comprise approximately 78% of non-U.S. plan assets at December 31, 2025. Contribution rates for non-U.S. plans are generally based on local funding practices and statutory requirements, which may differ significantly from measurements in accordance with U.S. GAAP. In the U.K., the assumptions used to determine pension contributions are the result of legally prescribed negotiations between the Company and the plans' trustee that typically occur every three years in conjunction with the actuarial valuation of the plans. Currently, this results in a lower funded status compared to U.S. GAAP and may result in contributions irrespective of the U.S. GAAP funded status. 45 The MMC U.K. Pension Fund has four segregated defined benefit sections, all in a surplus funding position at December 31, 2024. Based on that funding position, an agreement was reached with the trustee in the fourth quarter of 2025 that no deficit funding will be required to any of the defined benefit sections until 2029 at the earliest, following the completion in 2028 of the December 31, 2027 valuation. The Company's prior agreement to support certain annual deficit contributions that may have been required by U.K. operating companies under certain circumstances, expiring on December 31, 2025, was not renewed in January 2026 due to the improved surplus funding position. In 2025, the Company contributed $1 million to the U.K. non-qualified plan. The Company's contributions for 2026 are also expected to be approximately $1 million. The Company expects to contribute approximately $39 million to its non-U.S. defined benefit plans in 2026, comprising approximately of $1 million to the U.K. plans and $38 million to plans outside of the U.K.

Changes in Funded Status and Expense The year-over-year change in the funded status of the Company's pension plans is impacted by the difference between actual and assumed results, particularly with regard to return on assets and changes in the discount rate, as well as the amount of Company contributions, if any. Unrecognized actuarial losses at December 31, 2025, were approximately $1.4 billion and $3.9 billion for the U.S. plans and non-U.S. plans, respectively, compared with losses of $1.4 billion and $3.5 billion at December 31, 2024. The increase in the non-U.S. plans is primarily due to lower than expected returns on plan assets and the impact of foreign exchange, partially offset by increases in the discount rates used to measure plan liabilities. In the past several years, the amount of unamortized losses has been significantly impacted, both positively and negatively, by actual asset performance and changes in discount rates. The discount rate used to measure plan liabilities in 2025 decreased for the Company's U.S. plans and increased for U.K. plans. The discount rate used to measure plan liabilities for both the Company's U.S and U.K. plans increased in 2024 and decreased in 2023. An increase in the discount rate decreases the measured plan benefit obligation, resulting in actuarial gains, while a decrease in the discount rate increases the measured plan obligation, resulting in actuarial losses. In 2025, the Company's defined benefit pension plan assets had gains of 8.0% and 2.9% in the U.S. and U.K., respectively, as compared to gains of 2.2% and losses of 5.0% in the U.S. and U.K., respectively, in 2024. Overall, based on the measurement at December 31, 2025, other net benefit credits related to the Company's defined benefit pension plans are not expected to be materially different in 2026, compared to 2025. The Company's accounting policies for its defined benefit pension plans, including the selection of and sensitivity to assumptions, are discussed in Management's Discussion of Critical Accounting Estimates. For additional information regarding the Company's retirement plans, refer to Note 1, Summary of Significant Accounting Policies, and Note 8, Retirement Benefits, in the notes to the consolidated financial statements.

•$1.5 billion 5.400% senior notes due 2055; and •$300 million floating rate senior notes due 2027 (the "Floating Notes") collectively referred to as the "November 2024 Notes".

(In millions)202520242023 Operating: Contingent consideration payments for prior year acquisitions$(28)$(92)$(41) Receipt of contingent consideration for dispositions- - 1

Contingent consideration for prior year acquisitions$(13)$(74)$(135) Deferred consideration for prior year acquisitions (54)(39)(67) Payments of deferred and contingent consideration for acquisitions$(67)$(113)$(202)

Receipt of contingent consideration for dispositions$- $1 $2 For acquisitions completed in 2025 and in prior years, remaining estimated future contingent payments of $268 million, and deferred consideration payments of $169 million, are recorded in accounts payable and accrued liabilities or other liabilities in the consolidated balance sheets at December 31, 2025.

Derivatives - Net Investment Hedge The Company has investments in various subsidiaries with Euro functional currencies. As a result, the Company is exposed to the risk of fluctuations between the Euro and U.S. dollar exchange rates. As part of its risk management program, the Company designated its €1.1 billion senior note debt instruments ("Euro notes") as a net investment hedge (the "hedge") of its Euro denominated subsidiaries. The hedge effectiveness is re-assessed each quarter to confirm that the designated equity balance at the beginning of each period continues to equal or exceed 80% of the outstanding balance of the Euro debt instrument and that all the critical terms of the hedging instrument and the hedged net investment continue to match. If the hedge is highly effective, the change in the debt balance related to foreign exchange fluctuations is recorded in accumulated other comprehensive loss in the consolidated balance sheets. The U.S. dollar value of the Euro notes increased by $149 million in 2025 due to the change in foreign exchange rates. The Company concluded that the hedge was highly effective and recorded an increase to accumulated other comprehensive loss for the year ended December 31, 2025.

Fiduciary Liabilities Since fiduciary assets are not available for corporate use, fiduciary assets are shown separately in the consolidated balance sheets as cash and cash equivalents held in a fiduciary capacity, with a corresponding amount in current liabilities. Financing cash flows reflect an decrease of $382 million in 2025 and a increase of $411 million in 2024 related to fiduciary liabilities. 48

Investing Cash Flows Net cash used for investing activities amounted to $845 million in 2025, compared with $8.8 billion used for investing activities in 2024. The Company paid $652 million and $8.5 billion, net of cash, cash equivalents and cash and cash equivalents held in a fiduciary capacity acquired, for acquisitions in 2025 and 2024, respectively. The outflow of funds in 2025 related primarily to the acquisition of the three Hawaii-based insurance brokerages, Atlas Insurance Agency, Inc., Pyramid Insurance Centre, Ltd., and NMF Insurance, Inc., for $324 million. The outflow of funds in 2024 related primarily to the acquisition of McGriff, where the Company paid $7.0 billion in cash consideration. The remaining outflow of funds in 2024 related primarily to the acquisitions of Cardano, the Horton Group, and Fisher Brown Bottrell Insurance Inc., for $466 million, $384 million and $321 million, respectively. In the first quarter of 2025, the Company sold Marsh McLennan Agency's ("MMA") Technology Consulting and Administrative Solutions ("TCAS") business for approximately $25 million, and recorded a gain of $15 million, which is included in revenue in the consolidated statements of income. In 2024, the Company received cash proceeds from dispositions of $135 million, partially offset by $46 million primarily related to cash and cash equivalents held in fiduciary capacity in the disposed businesses. The Company sold its Mercer U.K. pension administration and U.S. health and benefits administration businesses on January 1, 2024, for approximately $120 million, comprised of cash proceeds of $30 million and deferred consideration of $90 million. The Company received $78 million of deferred consideration in 2024. The Company's additions to fixed assets and capitalized software amounted to $291 million and $316 million in 2025 and 2024, respectively, related primarily to software development costs, the refurbishing and modernizing of office facilities, and technology equipment purchases. Cash from the sale of long-term investments in 2025 is primarily due to the disposal of an investment in a unit trust fund, which was acquired in 2024. Cash used for long-term investments in 2025 is due to investments in private equity funds. At December 31, 2025, the Company has commitments for potential future investments of approximately $101 million in private equity funds that invest primarily in financial services companies.

(In millions) TotalWithin 1 Year1-3Years4-5YearsAfter 5Years Current portion of long-term debt$1,267 $1,267 $- $- $- Long-term debt18,477 - 1,292 3,945 13,240

538 241 227 69 1 Total$36,067 $3,132 $4,058 $6,076 $22,801 (a)Primarily reflects future payments of deferred and contingent purchase consideration. The table does not include the liability for unrecognized tax benefits of $109 million as the Company is unable to reasonably predict the timing of settlement of these liabilities, other than approximately $59 million that may become payable within one year. The table also does not include the remaining transitional tax payments related to the Tax Cuts and Jobs Act (the "TCJA") of $13 million, which will be paid in 2026. 49

Total CompanyU.S.ROW Assumed rate of return on plan assets5.94 %6.50 %5.68 % Discount rate5.39 %5.61 %5.25 % Holding all other assumptions constant, a 0.5 percentage point change in the rate of return on plan assets and discount rate assumptions would affect net periodic benefit (credit) cost for the U.S. and U.K. plans, which together comprise approximately 83% of total pension plan liabilities, as follows:

Consolidated Results of Operations For the Years Ended December 31, (In millions, except per share data) 202520242023 Revenue$26,981 $24,458 $22,736

Quarterly variations in revenues and operating results may occur due to several factors. These include: •the number of client engagements during a quarter; •the possibility that clients may decide to delay or terminate a current or anticipated project as a result of factors unrelated to our work product or progress; •fluctuations in capacity and utilization rates and clients' ability to terminate engagements without penalty; •our net colleague hires and related compensation and benefits expense; •potential limitations on the clients or industries we serve resulting from increased regulation or changing stakeholder expectations on sustainability issues; •the impact of changes in accounting standards or in our accounting estimates or assumptions; •the impact on us or our clients of changes in legislation, regulation and legal guidance or interpretations in the jurisdictions in which we operate, particularly in the U.S. as a result of the shift in the presidential administration; •seasonality due to the impact of regulatory deadlines, policy renewals and other timing factors to which our clients are subject; •the success of our acquisitions or investments; •occurrence of any significant natural disaster or other insured events including any potential reputational harm to the insurance industry following such event; •macroeconomic factors such as changes in foreign exchange rates, interest rates and global public and private capital markets, particularly in the case of Mercer, where fees in its investments business and certain other business lines are derived from the value of assets under management, advisement or administration; and •general economic conditions, including factors beyond our control affecting economic conditions such as global health crises or pandemics, severe weather, climate change, geopolitical unrest such as the war in Ukraine and the conflict throughout the Middle East, protests and riots or other catastrophic events, since our results of operations are directly affected by the levels of business activity of our clients, which in turn are affected by the level of economic activity in the industries and markets that they serve. A significant portion of our total operating expenses is relatively fixed in the short term. Therefore, a variation in the number of client assignments or in the timing of the initiation or the completion of client assignments can cause significant variations in quarterly operating results for these businesses.

outcome in a particular matter could have a material adverse effect on the Company's business, results of operations or financial condition. We cannot guarantee that we are or will be in compliance with all current and potentially applicable U.S. federal and state or foreign laws and regulations, and actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate could have a material adverse effect on our business. Our activities are subject to extensive regulation under the laws of the U.S. and its various states, the United Kingdom, the European Union and its member states, Australia and the other jurisdictions in which we operate. We are also subject to trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, and anti-corruption laws such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act. We are subject to numerous other laws on matters as diverse as internal control over financial reporting and disclosure controls and procedures, securities regulation, data privacy and protection, cybersecurity, taxation, anti-trust and competition, anti-money laundering, immigration, wage-and-hour standards and employment and labor relations. The U.S. and foreign laws and regulations that apply to our operations are complex and may change rapidly, and our efforts to comply and keep up with them require significant resources. In some cases, these laws and regulations may decrease the need for our services, increase our costs, negatively impact our revenues or impose operational limitations on our business, including on the products and services we may offer or on the amount or type of compensation we may collect. In particular, the financial and operational impact of complying with laws and regulations has increased in the current global environment of increased regulatory activity and enforcement. Changes or uncertainty with respect to the applicable laws and regulations may impose additional and unforeseen costs on us or pose new or previously immaterial risks to us. There can be no assurance that current and future government regulations will not adversely affect our business, and we cannot predict new regulatory priorities, the form, content or timing of regulatory actions, and their impact on our business and operations. In addition, geopolitical conflict, such as the war in Ukraine and the conflict throughout the Middle East, has resulted in, and may continue to result in, new and rapidly evolving trade sanctions, which may increase our costs, negatively impact our revenues or impose additional operational limitations on our businesses. Changes to tax laws, trade agreements, tariffs, labor policies, or environmental standards could also result in increased costs or operational changes. While we attempt to comply with applicable laws and regulations, there can be no assurance that we, our colleagues, our consultants and our contractors and other agents are in full compliance with such laws and regulations or interpretations at all times, or that we will be able to comply with any future laws or regulations. If we fail to comply or are accused of failing to comply with applicable laws and regulations, including those referred to above, or new and evolving regulations regarding cybersecurity, AI or sustainability matters, we may become subject to investigations, criminal penalties, civil remedies or other consequences, including fines, injunctions, loss of an operating license or approval, increased scrutiny or oversight by regulatory authorities, the suspension of individual employees, limitations on engaging in a particular business or redress to clients or other parties, and we may become exposed to negative publicity or reputational damage. Moreover, our failure to comply with laws or regulations in one jurisdiction may result in increased regulatory scrutiny by other regulatory agencies in that jurisdiction or regulatory agencies in other jurisdictions. These inquiries consume significant management attention, and the cost of compliance and the consequences of failing to be in compliance could therefore have a material adverse effect on our business. In most jurisdictions, government regulatory authorities have the power to interpret and amend or repeal applicable laws and regulations, and have discretion to grant, renew and revoke the various licenses and approvals we need to conduct our activities. Such authorities may require the Company to incur substantial costs in order to comply with such laws and regulations. In some areas of our businesses, we act on the basis of our own or the industry's interpretations of applicable laws or regulations, which may conflict from state to state or country to country. In the event those interpretations eventually prove different from the interpretations of regulatory authorities, we may be penalized or precluded from carrying on our previous activities. Moreover, the laws and regulations to which we are subject may conflict among the various jurisdictions and countries in which we operate, which increases the likelihood of our businesses being non-compliant in one or more jurisdictions.

We depend in large part on our technology systems for conducting business, as well as for providing the data and analytics we use to manage our business. As a result, our business success is dependent on maintaining the effectiveness of existing technology systems and on continuing to develop and enhance technology systems that support our business processes and strategic initiatives in a cost and resource efficient manner, particularly as our business processes become more digital. We have a number of strategic initiatives involving investments in, or partnerships with, technology companies as part of our growth strategy, as well as investments in technology, including generative AI, and infrastructure to support our own systems. These investments may be costly and require significant capital expenditures, may not be profitable or may be less profitable than what we have experienced historically. In addition, investments in technology systems may not deliver the benefits or perform as expected, or may be replaced or become obsolete more quickly than expected, which could result in operational difficulties or additional costs. In some cases, we also depend on key vendors and partners to provide technology and other support for our strategic initiatives. If these vendors or partners fail to perform their obligations or otherwise cease to work with us, our ability to execute on our strategic initiatives could be adversely affected. If we do not keep up with technological changes or execute effectively on our strategic initiatives, our business and results of operations could be adversely impacted. In addition, to remain competitive in many of our business areas, we must anticipate and respond effectively to the threat of digital disruption and other technological change such as generative AI. The threat comes from traditional players, such as insurers, through disintermediation as well as from new entrants, such as technology companies, "Insurtech" start-up companies and others. In the past few years, there has been a substantial increase in private equity investments into these Insurtech companies. These players are focused on using technology and innovation, including AI, digital platforms, data analytics, robotics and blockchain, to simplify and improve the client experience, increase efficiencies, alter business models and effect other potentially disruptive changes in the industries in which we operate. We are actively investing in generative AI tools. While our internal generative AI tool, LenAI, was designed to meet our standards for data security and to address and mitigate the risks associated with this new technology, our use of generative AI in certain products, services and operations may present risks and challenges that remain uncertain due to the relative novelty of this technology. These risks may include operational disruptions or failures, reputational harm, enhanced governmental or regulatory scrutiny, litigation or ethical concerns. The models underlying AI tools may be incorrectly or inadequately designed or implemented and trained on, or otherwise use, data or algorithms that are (and the output generated by such AI tools also may be) biased, unethical, discriminatory, incomplete, inaccurate, misleading or poor-quality, any of which may not be easily detectable. To the extent that we do not have sufficient rights to use the data used in or output generated by such AI tools, we may be subject to litigation by holders of third-party intellectual property, privacy, publicity, contractual or other rights. If any of our employees, contractors, consultants, vendors or service providers use any third-party AI powered software in connection with our business or the services they provide to us, it may lead to the inadvertent disclosure or incorporation of our confidential information into publicly available training sets, which may impact our ability to realize the benefit of, or adequately maintain, protect and enforce our intellectual property or confidential information, harming our competitive position and business. In addition, the use of AI by other 18 companies has resulted in, and our use of AI may in the future result in, data incidents and cybersecurity breaches. While we have implemented certain mitigation measures and governance related to the proliferation of AI tools, these measures may be inadequate or may not satisfy a growing number of legal and regulatory requirements related to AI. Moreover, if we are perceived to exaggerate the effectiveness, safety or ethical design of AI systems, this could lead to regulatory enforcement, litigation or reputational harm. Any misrepresentation, intentional or unintentional, of our AI-related capabilities or initiatives could also erode trust among clients and regulators. There can be no assurance that our use of AI will enhance our products, services or operations or otherwise result in our intended outcomes.

Legal and Regulatory Risks We are subject to significant uninsured exposures arising from errors and omissions, breach of fiduciary duty and other claims. Our businesses provide numerous professional services, including the placement of insurance and the provision of consulting, investment advisory, investment management and actuarial services, to clients around the world. As a result, the Company and its subsidiaries are subject to a significant number of errors and omissions, breach of fiduciary duty, breach of contract and similar claims, which we refer to collectively as "E&O claims." In our Risk and Insurance Services segment, such claims include allegations of damages arising from our failure to assess clients' risks, advise clients, place coverage, or notify insurers of potential claims on behalf of clients in accordance with our obligations to them. For example, these claims could include allegations related to losses from cyberattacks associated with policies where cyber risk was not specifically included or excluded in policies, commonly referred to as "silent cyber." In our Consulting segment, where we may act in a fiduciary capacity through our investments business, such claims could include allegations of damages arising from the provision of consulting, investment management (including, for example, from trading execution or other operational errors), actuarial, pension administration and other services. We may also be exposed to claims related to services or solutions offered by the Consulting segment in addition to consulting services. These Consulting segment services frequently involve complex calculations and services, including (i) making assumptions about, and preparing estimates concerning, contingent future events, (ii) drafting and interpreting complex documentation governing pension plans, (iii) calculating benefits within complex pension structures, (iv) providing individual financial planning advice including investment advice and advice relating to cashing out of defined benefit pension plans, (v) providing investment advice, including guidance on asset allocation and investment strategy, and (vi) managing client assets, including the selection of investment managers and implementation of a client's investment policy and strategies. We provide these services to a broad client base, including clients in the public sector. Matters may relate to services provided by the Company dating back many years. Such claims may subject us to significant liability for monetary damages, including punitive and treble damages, negative publicity and reputational harm, and may divert personnel and management resources. We may be unable to effectively limit our potential liability in certain jurisdictions, including through insurance, or in connection with certain types of claims, particularly those concerning claims of a breach of fiduciary duty. In establishing liabilities for E&O claims in accordance with U.S. generally accepted accounting principles ("U.S. GAAP"), the Company uses case level reviews by inside and outside counsel, actuarial analysis by Oliver Wyman, a subsidiary of the Company, and other methods to estimate potential losses. A liability is established when a loss is both probable and reasonably estimable. The liability is assessed quarterly and adjusted as developments warrant. In many cases, the Company has not recorded a liability, other than for legal fees to defend a claim, because we are unable, at the present time, to make a determination that a loss is both probable and reasonably estimable. Given the judgment involved in estimating and establishing such liabilities, as well as the unpredictability of E&O claims and the litigation that can flow from them, it is possible that an adverse outcome in a particular matter could have a material adverse effect on the Company's business, results of operations or financial condition. 15 We cannot guarantee that we are or will be in compliance with all current and potentially applicable U.S. federal and state or foreign laws and regulations, and actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate could have a material adverse effect on our business. Our activities are subject to extensive regulation under the laws of the U.S. and its various states, the United Kingdom, the European Union and its member states, Australia and the other jurisdictions in which we operate. We are also subject to trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, and anti-corruption laws such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act. We are subject to numerous other laws on matters as diverse as internal control over financial reporting and disclosure controls and procedures, securities regulation, data privacy and protection, cybersecurity, taxation, anti-trust and competition, immigration, wage-and-hour standards and employment and labor relations.

We collect data from clients and individuals located all over the world and leverage systems and teams to process it. As a result, we are subject to a variety of laws and regulations in the U.S., Europe and around the world regarding privacy, data protection, data security and cyber security. These laws and regulations are continuously evolving and developing. Some of these laws and regulations are increasing the level of data handling restrictions, including rules on data localization, all of which could affect our operations and result in regulatory liability and high fines. In particular, high-profile data breaches at major companies continue to be disclosed regularly, which is leading to even greater regulatory scrutiny and significant fines, which are not limited to data breaches as regulators increasingly focus on other data processing activities, including those related to ad-tech and "data subject" rights. The number of laws that apply to us keeps increasing and the interpretation of such laws is often uncertain and may be conflicting. At the international level, we are subject to an increasing number of comprehensive privacy laws including, for example, those passed in Indonesia, the Kingdom of Saudi Arabia, India and Australia. Many of these laws, which are modeled after the GDPR, have greatly increased the jurisdictional reach of privacy laws and added a broad array of requirements for handling personal data, such as the public disclosure of data breaches, data protection impact assessments, data portability and the appointment of data protection officers in some cases. Given the breadth and depth of changes in data protection obligations, including classifying data and committing to a range of administrative, technical and physical controls to protect data and enable data transfers across borders, our compliance with such laws will continue to require time, resources and review of the technology and systems we use. Despite a proliferation of regulatory guidance papers, there remains uncertainty in key areas related to these laws, and that uncertainty could result in potential liability for our failure to meet our obligations, including the possibility of significant fines some of which can amount to 4% or more of our global revenue. Further, despite developments such as the U.S.- EU Data Privacy Framework and the U.S.- U.K. Data Bridge, there remains a high level of uncertainty concerning the flow of personal information between the U.S. and EU, between the U.S. and the U.K. and between the U.K. and the EU. This uncertainty may impair our ability to offer our existing and planned products and services or increase our cost of doing business. Some of the global laws enacted in recent years, including those in China and the Kingdom of Saudi Arabia, also include data localization elements that will require that certain personal data stay within their borders. These requirements are complex and our efforts to comply with them require significant resources, and we cannot guarantee we are or will be in full compliance with such laws at all times. At the U.S. federal level, we are subject to various privacy laws and regulations, including those promulgated under the authority of the U.S. Federal Trade Commission, which has the authority to regulate and enforce against unfair or deceptive acts or practices in or affecting commerce, including with respect to data privacy and cybersecurity. At the U.S. state level, we are subject to laws and regulations related to privacy, such as the CCPA, which introduced concepts such as transparency and rights like access and deletion, that have been enacted by over twenty states with more such laws expected to pass in future years. These laws establish a privacy framework for covered businesses, including various obligations imposed on them related to the personal information they collect and use, and offer various rights for their state residents. Some of these laws provide a private right of action for violations and in some cases damages may be significant. Many of these laws diverge from the CCPA and create their own set of rules, and this proliferation of inconsistent state level privacy laws will add operational complexity and increased risk of noncompliance or violations which could trigger enforcement action or litigation. In addition to data protection and data privacy laws, foreign countries and U.S. states are enacting cybersecurity laws and regulations. For example, in late 2023 the New York State Department of Financial Services (NYDFS) issued amendments to its previous cybersecurity regulations which imposed obligations on companies such as Marsh McLennan, including for example, requiring companies to provide evidence of how they are implementing their data retention, data governance and data classifications policies and procedures. A number of states have also adopted laws covering data collected by insurance licensees that include security and breach notification requirements. All of these evolving compliance and operational requirements impose significant costs that are likely to increase over time, may divert resources from other initiatives and projects and could restrict the way services involving data are offered, all of which may adversely affect our results of operations. Failure to comply with some of these obligations, especially those related to data retention requirements, could expose us to regulatory fines and other penalties. Many statutory requirements, both in the U.S. and abroad, include obligations for companies to notify individuals of security breaches involving certain personal information, which could result from breaches experienced by us or our vendors. For example, laws in all 50 U.S. states generally require businesses to provide notice under 20

Competitive Risks The loss of members of our senior management team or other key colleagues, or if we are unsuccessful in our efforts to attract, retain and develop talent, could have a material adverse effect on our business. We rely upon the contributions of our senior management team to establish and implement our business strategy and to manage the future growth of our business. We may be unable to retain them, particularly if we do not offer employment terms that are competitive with the rest of the labor market. The loss of any of the senior management team could limit our ability to successfully execute our business strategy or adversely affect our ability to retain existing and attract new clients. Moreover, we could be adversely affected if we fail to adequately plan for the succession of members of our senior management team or if our succession plans do not operate effectively. Across all of our businesses, our colleagues are critical to developing and retaining client relationships as well as performing the services on which our revenues are earned. It is therefore important for us to attract, incentivize and retain significant revenue-producing employees and the key managerial and other professionals who support them. We face numerous challenges in this regard, including the intense competition for talent, which has accelerated in recent years. Such challenges include the increased mobility of colleagues in light of more flexible working models, market dislocation resulting from proposed and actual combinations in the industry, raids by competitors, and fostering an inclusive workplace. In some cases, competitors have used increasingly aggressive tactics to recruit talent across the industry, including orchestrated team lifts and the theft or misuse of confidential information. We have pursued, and continue to pursue, litigation and other remedies in response to such conduct. However, we cannot guarantee that such efforts will effectively deter future conduct. Losing colleagues who manage or support substantial client relationships or possess substantial experience or expertise could adversely affect our ability to secure and complete client engagements, which could adversely affect our results of operations. If a key employee were to join an existing competitor or form a competing company, some of our clients could choose to use the services of a competitor instead of our services. If a colleague joins us from a competitor and is subject to enforceable restrictive covenants, we may not be able to secure client engagements or maximize the colleague's potential. In addition, regulation or legislation impacting the workforce may lead to increased uncertainty and competition for talent.

Failure to maintain our corporate culture could adversely affect our business and reputation. We strive to foster a culture in which our colleagues act with integrity and feel comfortable speaking up about potential misconduct. We are a people business, and a well-defined and consistently reinforced corporate culture, starting with a strong "tone from the top," is critical to ensuring compliance with laws and regulations, attracting and retaining top talent and maintaining the trust of our clients, business partners and other stakeholders. As a multinational company operating across many geographies, failure to effectively align our workforce with our core values and ethical principles may impair our ability to achieve our strategic objectives, particularly as we execute our brand strategy, operational model changes and integrate acquisitions. If we fail to maintain our corporate culture, there is an increased risk of unethical behavior or regulatory violations, which could result in legal penalties, reputational damage and financial harm. Increasing scrutiny and changing laws and expectations from regulators, investors, clients and our colleagues with respect to our business responsibility practices and disclosure may impose additional costs on us or expose us to new or additional risks. There is continued focus, including from governmental organizations, regulators, investors, colleagues and clients, on matters related to environmental stewardship and sustainability, strategies to foster a vibrant and inclusive culture, and responsible business practices, including government relations and public affairs initiatives. We refer to these matters collectively as business responsibility. The regulatory landscape related to these issues 19 continues to evolve, with new laws and reporting requirements introduced across various jurisdictions, including in the U.S., the U.K., the European Union (E.U.) and Australia. These laws and regulations may impose additional compliance or disclosure obligations on us. Inconsistent or even conflicting requirements across jurisdictions may also increase compliance challenges, add operational costs, or lead to stakeholder dissatisfaction. As these reporting requirements and standards evolve, we continue to evaluate and update our public disclosures in these areas, including refining our disclosure of metrics and sustainability goals in accordance with the guidance and our own business responsibility assessments and priorities. These disclosures, metrics and sustainability goals and any failure to accurately report or comply with federal, state or international laws and regulations, or achieve progress on our metrics and sustainability goals on a timely basis, or at all, may result in legal and regulatory proceedings against us and negatively impact our reputation. Implementation of our business responsibility initiatives also depends in part on third-party performance or data that is outside the Company's control. In addition, heightened regulatory scrutiny of environmental and sustainability-related products, funds, investment strategies and advice has increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements, or that we have otherwise run afoul of regulation. Such perceptions or accusations could damage our reputation, result in litigation or regulatory enforcement actions, and adversely affect our business. Organizations that provide information to investors on corporate governance and related matters have also developed ratings processes for evaluating companies on their approach to business responsibility, and unfavorable ratings of our company or our industries may lead to negative investor sentiment and the diversion of investment to other companies or industries, exclusion of our stock from business responsibility-oriented indices or investment funds or harm our relationships with regulators and the communities in which we operate. Moreover, public opinion and potential legal actions regarding business responsibility initiatives remain highly dynamic and can vary across stakeholders and geographies. Balancing these competing expectations globally is complex. The impact of new laws and regulations, negative public perception, adverse publicity or negative comments in social media could damage our reputation, and be costly to defend, if we do not, or are not perceived to, adequately address these issues. Any harm to our reputation could impact colleague engagement and retention and the willingness of clients and our partners to do business with us.

Our significant non-U.S. operations expose us to exchange rate fluctuations and various risks that could impact our business. Approximately 51% of our total revenue reported in 2025 was from business outside of the U.S. We are subject to exchange rate movement because we must translate the financial results of our foreign subsidiaries into U.S. dollars and also because some of our subsidiaries receive revenue other than in their functional currencies. Exchange rate movements may change over time, and they could have a material adverse impact on our financial results and cash flows reported in U.S. dollars. For additional discussion, see "Market Risk and Credit Risk- 23

Our current debt level could adversely affect our financial flexibility. At December 31, 2025, we had total consolidated debt outstanding of approximately $19.6 billion. The level of debt outstanding could adversely affect our financial flexibility by reducing our cash flows and our ability to use cash from operations for other purposes, including working capital, dividends to shareholders, share repurchases, acquisitions, capital expenditures and general corporate purposes. In addition, we are subject to risks that, at the time any of our outstanding debt matures, we will not be able to retire or refinance the debt on terms that are acceptable to us. 24 The current U.S. tax regime has provisions which have unintended consequences and may also impact our tax rate in varying degrees based on where our global income is earned. Our effective tax rate may fluctuate in the future as a result of the current U.S. tax regime and the continuing issuance of interpretive guidance related to the operations of U.S.-based multinational corporations. These include significant provisions in U.S. income tax law that may have a meaningful impact on our income tax expense and require significant judgments and estimates in interpretation and calculations. Current tax legislation includes, among other provisions, limitations on the deductibility of net interest expense, a minimum tax on most non-U.S. income called Net Controlled Foreign Corporation Tested Income ("NCTI") (formerly known as Global Intangible Low-Taxed Income ("GILTI"), the Base Erosion and Anti-Abuse Tax ("BEAT") and a corporate book minimum tax ("CAMT"). Given the significant complexity of the rules, and the potential for additional guidance from the U.S. Treasury, the Securities and Exchange Commission, the Financial Accounting Standards Board or other regulatory authorities, recognized impacts in future periods could be significantly different from our current estimates. Such uncertainty may also result in increased scrutiny from, or disagreements with, tax authorities. As a U.S.-domiciled company, any such increases would likely have a disproportionate impact on us compared to our foreign-based competitors.

Global Operations We are exposed to multiple risks associated with the global nature of our operations. We conduct business globally. In 2025, approximately 51% of the Company's total revenue was generated from operations outside the U.S., and over one-half of our employees were located outside the U.S. In addition, we conduct our operations through four separate businesses. Potential conflicts of interest may arise across our businesses given the significant volume of our engagements. The geographic breadth of our activities also subjects us to significant legal, economic, operational, market, compliance and reputational risks. These include, among others, risks relating to: •economic and political conditions in the countries in which we operate; •client concentration in certain high-growth countries in which we operate; •the length of payment cycles and potential difficulties in collecting accounts receivable; •unexpected increases in taxes or changes in U.S. or foreign tax laws, rulings, policies or related legal and regulatory interpretations; •the implementation of the Organization for Economic Cooperation and Development (OECD) international tax framework, including the implementation of the Pillar Two minimum tax regime (and the "side-by-side" arrangement for U.S. companies), and the Pillar One profit reallocation regime (or compensating digital services taxes), potentially resulting in an adverse effect on our effective tax rate, tax payments and results of operations, particularly as key jurisdictions adopt these changes, either partially or in full, alongside potential shifts in tax laws in response to such implementation; 25 •international initiatives to require multinational enterprises, like ours, to calculate and report profitability on a country-by-country basis, which could increase scrutiny by, or cause disagreements with, foreign tax authorities; •potential transfer pricing-related tax exposures that may result from the flow of funds among our subsidiaries and affiliates in the various jurisdictions in which we operate; •unexpected reassessment by tax authorities of interpretations of existing rules which may require companies to defend previously accepted positions and may create both new and prior-year exposures; •litigation arising from ongoing and future controversies with tax authorities; •permanent establishments created due to colleagues traveling to and doing work in certain countries, or living in such countries and working remotely post-pandemic, which are not properly compensated through transfer pricing; •our ability to obtain dividends or repatriate funds from our non-U.S. subsidiaries, including because of the imposition of currency controls and other government restrictions on repatriation in the jurisdictions in which our subsidiaries operate, fluctuations in foreign exchange rates and the imposition of withholding and other taxes on such payments; •geopolitical tensions, such as the war in Ukraine and the conflict throughout the Middle East, in countries where we operate, international hostilities, international trade disputes, terrorist activities, natural disasters, pandemics, and infrastructure disruptions; •local investment or other financial restrictions that foreign governments may impose; •potential lawsuits, investigations, market studies, reviews or other activity by foreign regulatory or law enforcement authorities or legislatively appointed commissions, which may result in potential modifications to our businesses, related private litigation or increased scrutiny from U.S. or other regulators; •potential costs and difficulties in complying with a wide variety of foreign laws and regulations (including tax systems) administered by foreign government agencies, some of which may conflict with U.S. or other sources of law; •potential costs and difficulties in complying, or monitoring compliance, with foreign and U.S. laws and regulations that are applicable to our operations abroad, including trade sanctions laws relating to countries such as Afghanistan, Belarus, Cuba, Iran, North Korea, Russia, Syria, Ukraine (Russia-controlled territories) and Venezuela, anti-corruption laws such as the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act 2010; •limitations or restrictions that foreign or U.S. governments and regulators may impose on the products or services we sell, the methods by which we sell our products and services and the manner in which and the amounts we are compensated; •potential limitations or difficulties in protecting our intellectual property in various foreign jurisdictions; •limitations that foreign governments may impose on the conversion of currency or the payment of dividends or other remittances to us from our non-U.S. subsidiaries;

•engaging and relying on third parties to perform services on behalf of the Company; and •potential difficulties in monitoring employees in geographically dispersed locations.

RISKS RELATING TO OUR RISK AND INSURANCE SERVICES SEGMENT Our Risk and Insurance Services segment, conducted through Marsh Risk and Guy Carpenter, represented 64% of the Company's total revenue in 2025. Our business in this segment is subject to particular risks.

Volatility or declines in premiums and other market trends may significantly impede our ability to grow revenues and profitability. A significant portion of our Risk and Insurance Services revenue consists of commissions paid to us out of the premiums that insurers and reinsurers charge our clients for coverage. We do not determine the insurance premiums on which our commissions are generally based. Our revenues and profitability are subject to change to the extent that premium rates fluctuate or trend in a particular direction. The potential for changes in premium rates is significant, due to the normal cycles of pricing in the commercial insurance and reinsurance markets. For example, the property and casualty insurance market has seen softer pricing recently, which may continue to impact profitability. As traditional insurance companies continue to rely on non-affiliated brokers or agents to generate premium, those insurance companies may seek to reduce their expenses by lowering their commission rates. The reduction of these commission rates, along with general volatility or declines in premiums, may significantly affect our revenue and profitability. Because we do not determine the timing or extent of premium pricing changes, it is difficult to accurately forecast our commission revenues, including whether they will significantly decline. As a result, we may have to adjust our plans for future acquisitions, capital expenditures, dividend payments, loan repayments and other expenditures to account for unexpected changes in revenues, and any decreases in premium rates may adversely affect the results of our operations. In addition to movements in premium rates, our (and Mercer's Health business's) ability to generate premium-based commission revenue may be challenged by disintermediation and the growing availability of alternative methods for clients to meet their risk-protection needs. This trend includes a greater willingness on the part of corporations to self-insure, the expanded use of captive insurers, and the presence of capital markets-based solutions for traditional insurance and reinsurance needs. Further, the profitability of our Risk and Insurance Services segment depends in part on our ability to be compensated for the analytical services and other advice that we provide, including the consulting and analytics services that we provide to insurers. If we are unable to achieve and maintain adequate billing rates for all of our services, our margins and profitability could decline. Adverse legal developments and future regulations concerning how intermediaries are compensated by insurers or clients, as well as allegations of anti-competitive behavior or conflicts of interest, could have a material adverse effect on our business, results of operations and financial condition. The ways in which insurance intermediaries are compensated receive scrutiny from regulators in part because of the potential for anti-competitive behavior and conflicts of interest. The vast majority of the compensation that Marsh Risk receives is in the form of retail fees and commissions that are paid by the client or paid from carriers. The amount of other compensation that we receive from insurance companies, separate from retail fees and commissions, has increased in the last several years, both on an underlying basis and through acquisition, and represented approximately 7% of Marsh Risk's revenue in 2025. This other compensation includes payment for (i) consulting and analytics services provided to insurers; (ii) administrative and other services provided to insurers (including underwriting services and services relating to the administration and management of quota shares, panels and other facilities); and (iii) contingent commissions, primarily at MMA and outside the U.S., paid by insurers based on factors such as volume or profitability. These other revenue streams present potentially heightened regulatory, litigation and reputational risks that may arise from alleged anti-competitive behavior or conflicts of interest, (including those arising from Guy Carpenter's role as intermediary and advisor for insurance companies), and future changes in the regulatory environment may impact our ability to collect such revenue. Adverse regulatory, legal or other developments could have a material adverse effect on our business and expose the Company to negative publicity and reputational harm. 27

RISKS RELATING TO OUR CONSULTING SEGMENT Our Consulting segment, conducted through Mercer and Marsh Management Consulting, represented 36% of our total revenue in 2025. Our businesses in this segment are subject to particular risks. Mercer's Wealth business is subject to a number of risks, including risks related to public and private capital market fluctuations, third-party asset managers and custodians, operations and technology risks, trading and execution risks, conflicts of interest, sustainability and greenwashing, asset performance and regulatory compliance, that, if realized, could result in significant damage to our business. Mercer's Investments business provides clients with digital tools, investment consulting and investment management services. Mercer's Investments business is subject to a number of risks, including risks related to litigation (both by clients and by plan participants, particularly when we act in a fiduciary capacity), liquidity and market volatility, an inability to obtain contractual limitations of liability for errors & omissions in certain jurisdictions or parts of our business, third-parties, our operations and technology (including the use of AI), trading and execution errors, conflicts of interest, asset performance and regulatory compliance and scrutiny, which could arise in connection with these offerings. For example, Mercer's manager research or due diligence on an asset manager may fail to uncover material deficiencies or fraud that could result in investment losses to a client. There is a risk that Mercer will fail to properly or timely implement or execute a client's investment policy or strategy or instruction, which could cause an incorrect or untimely allocation of client assets among asset classes, asset managers, or strategies or result in a trading error. Mercer may also be perceived as making inaccurate or misleading statements regarding the investment strategies of our offerings or investments with respect to sustainability, commonly referred to as "greenwashing," or recommending certain asset managers to clients or offering delegated solutions to a potential or existing client, solely to enhance its own compensation or due to other conflicts of interest. Asset classes may perform poorly, or asset managers may underperform their benchmarks, due to poor market performance, a downturn in the global markets, negligence or other reasons, resulting in poor returns or loss of client assets. Changes in the value of equity, debt, currency, real estate, commodities, alternatives or other asset classes, in particular as a result of a downturn in the global markets, could cause the value of assets under management or advisement, and the fees earned by Mercer to decline. Mercer or its clients may be subject to claims or class action litigation relating to advice given or investment decisions made by plan sponsors and plan fiduciaries, particularly relating to 401(k) plans in the U.S. or pension schemes in the U.K. MMA's wealth and retirement business operate under similar regulatory regimes as Mercer's Investments business and are also exposed to these risks. These risks, if realized, could result in significant liability and damage our business. Our businesses are subject to a number of risks related to the U.S. healthcare industry, including risks related to healthcare regulation and reputational damage from negative publicity. Mercer, Marsh Management Consulting and MMA help public and private sector employers design and manage employee health and welfare programs. Their services include plan design, brokering of insurance programs, administration and other consulting, actuarial and specialty services. The healthcare industry, inclusive of health insurance, is regulated by federal, state and local governments in the U.S., and by regulators and governments in other countries where we do business. The laws and rules governing the healthcare industry and interpretations of those laws and rules are subject to frequent and often unpredictable change. For example, legislation or regulatory action that has the impact of disincentivizing U.S. companies from offering employer-sponsored health insurance could ultimately reduce the revenue we receive when consulting on and broking these policies on behalf of our corporate clients. Legislation seeking to regulate pharmacy benefit management services introduced or enacted at the federal or state level could impact the compensation structure and how much we are paid where we advise clients on prescription drug coverage. Changes to U.S. government health programs, like Medicaid, could also impact our consulting and ancillary services for government clients that manage these programs. Moreover, the health care industry is regularly subject to negative publicity, including as a result of governmental investigations, adverse media coverage and political debate concerning industry regulation. Negative publicity may adversely affect our business and damage our reputation, and expose us to unexpected or unwarranted regulatory scrutiny, including as a result of the revenue our businesses receive from healthcare-related services including our consulting advice to clients from different areas of the healthcare industry. 28 Revenues for the services provided by our Consulting segment may decline for various reasons, including as a result of changes in economic conditions, the value of equity, debt and other asset classes, our clients' or an industry's financial condition or government regulation or an accelerated trend away from actively managed investments to passively managed investments.

RISKS RELATING TO THE COMPANY GENERALLY Macroeconomic Risks Our results of operations and investments could be adversely affected by geopolitical or macroeconomic conditions. Geopolitical and macroeconomic conditions, including from multiple major wars and global conflicts, social unrest, tariffs or changes in trade policies, slower GDP growth or recession, fluctuations in foreign exchange rates, lower interest rates, capital markets volatility, inflation and changes in insurance premium rates affect our clients' businesses and the markets they serve. These conditions, including inflationary expense pressure with our clients, may reduce demand for our services or depress pricing for those services, which could have a material adverse effect on our results of operations. For example, the war in Ukraine, the conflict throughout the Middle East, including heightened regional instability and tensions involving Iran, and recent developments in Latin America, have resulted in worldwide geopolitical and macroeconomic uncertainty and may negatively impact other regional and global economic markets (including Europe, the Middle East, Latin America and the U.S.), companies in other countries and various sectors, industries and markets for securities and commodities globally, such as oil and natural gas, and may increase financial market volatility and adversely impact regional and global economic markets, industries and companies. 10 Changes in macroeconomic and geopolitical conditions could also shift demand to services for which we do not have a competitive advantage, and this could negatively affect the amount of business that we are able to obtain. More generally, our investments, including our minority investments in other companies as well as our cash investments and those held in a fiduciary capacity, are subject to general credit, liquidity, counterparty, foreign exchange, market and interest rate risks. For example, fluctuations in interest rates and foreign exchange rates between the U.S. dollar and foreign currencies may adversely affect our results of operations. Lower interest rates have led to a decline in our fiduciary income. These risks may be exacerbated by global macroeconomic conditions, market volatility and regulatory, financial and other difficulties affecting the companies in which we have invested or that may be faced by financial institution counterparties. During times of stress in the banking industry, counterparty risk can quickly escalate, potentially resulting in substantial trading and investment losses for corporate and other investors. In addition, we may incur investment losses as a result of unusual and unpredictable market developments, and we may experience lower earnings if the yields on investments begin to decline. If the banking system or the fixed income, interest rate, credit or equity markets deteriorate, the value and liquidity of our investments could be adversely affected. Finally, the value of the Company's assets held in other jurisdictions, including cash holdings, may decline due to foreign exchange fluctuations.

Our utilization rates are affected by a number of factors, including: •general economic conditions; •our ability to transition consultants promptly from completed projects to new assignments, and to engage newly-hired consultants quickly in revenue-generating activities; •our ability to continually secure new business engagements, particularly because a portion of our work is project-based rather than recurring in nature; •our ability to forecast demand for our services and thereby maintain appropriate headcount in each of our geographies and workforces; •our ability to retain key colleagues and consulting professionals; •our ability to move relevant staff to client locations when on-site presence is required for our services; •unanticipated changes in the scope of client engagements; •the potential for conflicts of interest that might require us to decline client engagements that we otherwise would have accepted;

If the utilization rate for our consulting professionals declines, our revenues, profit margin and profitability could decline. In addition, the profitability of our Consulting businesses depends in part on the prices we are able to charge for our services. The prices we charge are affected by a number of factors, including: •general economic conditions; •clients' perception of our ability to add value through our services; •market demand for the services we provide; •our ability to develop new services and the introduction of new services by competitors; •the pricing policies of our competitors;

Cybersecurity, Data Protection and Technology Risks We could incur significant liability or our reputation could be damaged if our information systems are breached or we otherwise fail to protect client or Company data or information systems. In operating our business and providing services and solutions to clients, we collect, use, store, transmit and otherwise process certain electronic information, including personal, confidential, proprietary and sensitive data such as financial records, health care, mergers and acquisitions and personal data of our clients, colleagues and vendors. We rely on the efficient, uninterrupted and secure operation of complex information technology systems and networks to operate our business and securely process, transmit and store electronic information. In the normal course of business, we also share electronic information with our vendors and other third parties, which in some cases is critical to our ability to deliver services to our clients. This electronic information comprises sensitive and confidential data, including information related to financial records, health care, mergers and acquisitions and clients' personal data. Our information technology systems and information security control systems, and those of our numerous third-party providers, as well as the control systems of critical infrastructure they rely on, such as power grids, and undersea cables, are potentially vulnerable to unauthorized access, damage or interruption from a variety of external threats, including software bugs, physical attack, cyberattacks, computer viruses and other malware, malicious or destructive code, ransomware, social engineering attacks (including phishing, business e-mail compromise and digital or telephonic impersonation), hacking theft, denial-of-service attacks and other types of data and systems-related modes of attack. The techniques used to achieve such unauthorized access, damage or interruption change frequently and new techniques may not be identified until they are launched against a target, and we may be unable to anticipate these techniques or implement adequate preventative or remedial measures, resulting in potential data loss, data unavailability, data corruption or other damage to information technology systems. In addition, remote and hybrid work arrangements have increased the risk of phishing and other cybersecurity attacks, unauthorized dissemination of personal, confidential, proprietary or sensitive data, and unauthorized access to company computing assets. Further, a disruption of physical infrastructure could impact our ability to conduct business and service clients. This may include deliberate or unintentional disruption of service to electrical systems, satellite communications, undersea or terrestrial cable systems, Internet services, or other systems our colleagues or third parties rely on us to conduct business in a multitude of jurisdictions across the globe. Disruptions may be the result of weather, natural disaster, war, terrorism, pandemic, or other natural or geopolitical events. Our systems are also subject to compromise from internal threats such as fraud, mistakes, misconduct or other improper action by employees, vendors and other third parties with otherwise legitimate access to our systems. Moreover, we face the ongoing challenge of managing access controls in a complex environment. The latency of a compromise is often measured in months but could be years, and we may not be able to detect a compromise in a timely manner, and even if detected, there can be no assurance that we can mitigate or remediate such compromise in an adequate or timely manner. We could experience significant financial and reputational harm if our information systems are breached, sensitive client or Company data are compromised, surreptitiously modified, rendered inaccessible for any period of time or maliciously made public, or if we fail to make adequate or timely disclosures to the public, 13 law enforcement agencies or regulators following any such event, whether due to delayed discovery or a failure to follow existing protocols. Moreover, a successful cyberattack targeting our financial reporting systems or related services and infrastructure could disrupt our ability to accurately prepare, finalize, and disclose our financial results in a timely manner.

Many statutory requirements, both in the U.S. and abroad, include obligations for companies to notify individuals of security breaches involving certain personal information, which could result from breaches experienced by us or our vendors. For example, laws in all 50 U.S. states generally require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a breach. In addition to government regulation, our agreements with certain third parties may require us to notify them in the event of a security breach. Further, privacy advocates and industry groups have and may in the future propose self-regulatory standards. These laws, rules and industry standards may legally or contractually apply to us, or we may elect to comply with them. We expect that there will continue to be new proposed laws and regulations concerning data privacy and security, and we cannot yet determine the impact such future laws, regulations and standards may have on our business. Many of these laws and rules also include strict notification requirements for organizations related to confirmed or suspected breaches. This narrow notification window is often too short to fully validate the facts, and there is an increased risk of reporting a false alarm or immaterial breach, which may lead to reputational damage despite there not being an actual data breach. We post public privacy notices and other documentation regarding our collection, use, disclosure, cross-border transfer, retention, and other processing of personal information. Although we endeavor to comply with our published notices and other documentation, we may at times fail to do so or may be perceived to have failed to do so. Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, contractors, service providers, vendors or other third parties with whom we do business fail to comply with our published notices and documentation. Such failures could carry similar consequences or subject us to potential enforcement actions or investigations if they are found to be deceptive, unfair or misrepresentative of our actual practices. Furthermore, U.S. and global regulators continue to focus their enforcement actions and investigations on website-related practices, including the proper use of "cookies", pixels and other online trackers, as well as the use of online session recording tools. As we use such tools in our website environment, we are at risk of being impacted by such activity, including fines and cease and desist orders. Additionally, certain foreign, U.S. federal and U.S. state governments are increasingly enacting, or are considering enacting, AI-related laws and regulations, such as the EU's AI Act, the AI Transparency Act of California and the AI Act of Colorado, which impose complex new obligations on developers and providers of AI systems. Given the rapid expansion of AI technology capabilities, the lack of legal or regulatory precedent, and the ambiguity surrounding key definitions, complying with these evolving legal and regulatory frameworks is likely to be both challenging and costly. There is a risk that we may not fully meet the requirements set forth by these laws and regulations, potentially exposing us to legal, regulatory or financial penalties. Furthermore, as new and divergent AI laws and regulations continue to emerge globally, they could significantly increase our risk of liability and fines, impact our ability to deploy and utilize AI tools across different jurisdictions, disrupt operations and prospective business and increase our compliance burdens. 17 Privacy or AI-related legal or regulatory violations, including unauthorized use disclosure or transfer of sensitive, personal or confidential client or Company data, whether through systems failure, employee negligence, fraud or misappropriation, by the Company, our vendors or other parties with whom we do business (if they fail to meet the standards we impose) could damage our reputation and subject us to significant litigation, monetary damages, regulatory enforcement actions, fines and criminal prosecution in one or more jurisdictions where we operate. Given the complexity of operationalizing the various privacy, data security, data protection and AI laws and regulations mentioned above, the complexity of proposed compliance frameworks and the continued lack of certainty on how to implement their requirements, we and our clients are at risk of enforcement actions taken by applicable regulators or authorities around the world or litigation from third parties, including consumer advocacy groups acting on behalf of data subjects. Additionally, due to the ongoing fast pace of legislative and regulatory activity, we may not be able to respond quickly or effectively to new legislative, regulatory and other developments. These changes may also impair our ability to offer our existing or planned products and services and increase our cost of doing business in various countries. Our business performance and growth plans could be negatively affected if we are not able to develop and implement improvements in technology or respond effectively to the threat of digital disruption and other technological change such as AI.

Cyberattacks are increasing in frequency and evolving in nature. We are at risk of attack by a variety of adversaries, including nation states, state-sponsored organizations, opportunistic attacks, and organized crime and hackers, through use of increasingly sophisticated methods of attack, including the deployment of AI to find and exploit vulnerabilities, "deep fakes", long-term, persistent attacks (referred to as advanced persistent threats) and the use of the IT supply chain to introduce malware through software updates or compromised suppliers accounts or hardware. In particular, the advance of AI and large language models has given rise to additional vulnerabilities and potential entry points for cyber threats. With generative AI, threat actors may have additional tools to automate breaches or persistent attacks, evade detection, or generate sophisticated phishing emails or other forms of digital impersonation, doing so quickly and without requiring deep technical understanding of potential exploits. Attackers may develop AI agents to fully automate the attack cycle, which could discover new and unexploited applications and dynamically create ways to exploit these weaknesses faster than security tools can adapt to and detect these new attack methods. In addition, increasing use of generative AI models, including new capabilities offered through Model Context Protocol (MCP) Servers, in our internal systems may create new attack methods for adversaries. Because generative AI is a constantly evolving field, understanding of cybersecurity risks and protection methods continues to develop, and features that rely on generative AI, including in services provided to us by third parties, may be susceptible to unanticipated cybersecurity threats from sophisticated adversaries and other cybersecurity incidents. Further, we are at increased risk of a cyberattack during periods of heightened geopolitical conflict, such as the war in Ukraine and the conflict throughout the Middle East, as diplomatic events and economic policies may trigger espionage or retaliatory cyber incidents. Additionally, nation states may deploy threat actors masquerading as potential candidates for hire at target companies to perform corporate espionage or execute internal cyber threat activities. Despite our efforts to comply with applicable cybersecurity requirements and mitigate risks of cybersecurity threats, we cannot be certain that our security measures will definitively prevent, contain, detect, or remediate all cybersecurity threats or incidents or other instructions from malware currently in existence or developed in the future. As the breadth and complexity of the technologies we use and the software and platforms we develop continue to grow, including as a result of the use of mobile devices, cloud services, "open source" software, social media tools and the increased reliance on devices connected to the Internet (known as the "Internet of Things"), the potential risk of security breaches and cyber-attacks also increases. Despite ongoing efforts to improve our ability to protect data from compromise, we may not be able to protect all of our data across our diverse systems. Our efforts to improve and protect data from compromise may also identify previously undiscovered instances of security breaches or other cyber incidents. Our policies, employee training (including phishing prevention training), procedures and technical safeguards may also be insufficient to prevent, detect or remediate improper access to confidential, personal or proprietary information. In addition, the competition for talent in the data privacy and cybersecurity space is intense, and we may also be unable to hire, develop or retain suitable talent capable of adequately detecting, mitigating or remediating these risks. Our increasing reliance on software-as-a-service ("SaaS") cloud solutions and other cloud-based vendors to support critical business operations also exposes us to risks associated with the availability, security, and resilience of these third-party platforms. These arrangements create dependencies on the vendors' ability to maintain continuous service and protect against outages, disruptions or cyber incidents and on the sufficiency of their security controls and incident response. In addition, managing and integrating multiple cloud environments with our internal systems increases the risk of configuration errors or vulnerabilities that could be exploited. Should an attacker gain access to our network using compromised credentials of an authorized user, we are at risk that the attacker might successfully leverage that access to compromise additional systems and data. Certain measures that could increase the security of our systems, such as data encryption (including encryption of data at rest), heightened monitoring and logging, scanning for source code errors or deployment of multi-factor authentication, take significant time and resources to deploy broadly, and such measures may not be deployed in a timely manner or be effective against an attack. The inability to implement, maintain and upgrade adequate safeguards could have a material adverse effect on our business. 14

Compensation for Services in Risk and Insurance Services Marsh and Guy Carpenter are compensated for brokerage and consulting services through commissions and fees. Commission rates and fees vary in amount and can depend on a number of factors, including the type of insurance or reinsurance coverage provided, the particular insurer or reinsurer selected, and the capacity in which the broker acts and negotiates with clients. In addition to compensation from its clients, Marsh also receives other compensation, separate from retail fees and commissions, from insurance companies. This other compensation includes, among other things, payments for consulting and analytics services provided to insurers; compensation for administrative and other services (including fees for underwriting services and services provided to or on behalf of insurers relating to the administration and management of quota shares, panels and other facilities in which insurers participate); and contingent commissions, which are paid by insurers based on factors such as volume or profitability of Marsh's placements, primarily driven by MMA and parts of Marsh's international operations. Marsh and Guy Carpenter receive interest income on certain funds (such as premiums and claims proceeds) held in a fiduciary capacity for others. For a more detailed discussion of revenue sources and factors affecting revenue in our Risk and Insurance Services segment, refer to Part II, Item 7 ("Management's Discussion and Analysis of Financial Condition and Results of Operations") of this report.

MERCER Mercer is a leading provider in delivering advice, solutions and products that help organizations meet the health, wealth and career needs of a changing workforce. Mercer has approximately 23,300 colleagues based in 48 countries. Clients include a majority of the companies in the Fortune 1000 and FTSE 100, as well as medium- and small-market organizations, public sector entities and individual customers. Mercer generated approximately 23% of the Company's total revenue in 2024.

REGULATION The Company's activities are subject to licensing requirements and extensive regulation under U.S. federal and state laws, as well as laws of other countries in which the Company operates. Across most jurisdictions, we are also subject to various data privacy and data protection laws and regulations that apply to personal information, as well as, in certain jurisdictions, cybersecurity laws and regulations and emerging laws and regulations related to artificial intelligence ("AI"). In addition, we are subject to various financial crime laws and regulations through our activities, activities of associated persons, the products and services we provide and our business and client relationships. Such laws and regulations relate to, among other areas, sanctions and export control, anti-bribery, anti-corruption, anti-money-laundering and counter-terrorist financing. In certain circumstances, we are also required to maintain operating funds primarily related to regulatory requirements outside the U.S. See Part I, Item 1A ("Risk Factors") below for a discussion of how actions by regulatory authorities or changes in legislation and regulation in the jurisdictions in which we operate may have an adverse effect on our businesses and for more information about the laws and regulations related to data privacy, data protection, cybersecurity and AI and the associated risks to our businesses. Risk and Insurance Services. While laws and regulations vary from location to location, every state of the U.S. and most foreign jurisdictions require insurance market intermediaries and related service providers (such as insurance brokers, agents and consultants, reinsurance brokers and managing general agents) to hold an individual or company license from a government agency or self-regulatory organization. Some jurisdictions issue licenses only to individual residents or locally-owned business entities; in those instances, if the Company has no licensed subsidiary, it may maintain arrangements with residents or business entities licensed to act in such jurisdiction. Such arrangements are subject to an internal review and approval process. Licensing of reinsurance intermediaries is generally less rigorous compared to that of insurance brokers, and most jurisdictions require only corporate reinsurance intermediary licenses. In the United Kingdom, our business is regulated by the Financial Conduct Authority ("FCA"). The FCA's responsibilities and powers include licensing of insurance and reinsurance intermediaries and related criteria such as professional competence, financial capacity and the requirement to hold professional indemnity insurance, the broking of premium finance to consumers, and competition powers that enable it to enforce prohibitions on anti-competitive behavior in relation to financial services. Insurance authorities in the U.S. and certain other jurisdictions in which the Company's subsidiaries do business, including the FCA in the United Kingdom, also have enacted laws and regulations governing the investment of funds, such as premiums and claims proceeds, held in a fiduciary capacity for others. These laws and regulations typically provide for segregation of these fiduciary funds and limit the types of investments that may be made with them, and generally apply to both the insurance and reinsurance business. Certain of the Company's Risk and Insurance Services activities are governed by other regulatory bodies, such as investment, securities and futures licensing authorities. In the U.S., Marsh and Guy Carpenter use the services of MMC Securities LLC, a SEC registered broker-dealer and introducing broker in the U.S. MMC Securities LLC is a member of the Financial Industry Regulatory Authority ("FINRA"), the National Futures Association and the Securities Investor Protection Corporation ("SIPC"), primarily in connection with capital markets and other investment banking-related services relating to insurance-linked and alternative risk financing transactions. Also in the U.S., Marsh uses the services of MMA Securities LLC, a SEC registered broker-dealer, investment adviser and member of FINRA, SIPC and the Municipal Securities Rulemaking Board ("MSRB"), and MMA Asset Management LLC, a SEC registered investment adviser, primarily in connection with retirement, executive compensation and benefits consulting and advisory services to qualified and non-qualified benefits plans, companies and executives and personal wealth management. In the United Kingdom, Marsh and Guy Carpenter use the expertise of MMC Securities Limited, which is authorized and regulated by the FCA to provide advice on 7 securities and investments, including mergers & acquisitions in the United Kingdom. In the European Union, Guy Carpenter uses MMC Securities (Ireland) Limited, which is authorized and regulated by the Central Bank of Ireland to place certain securities and investments in the European Union. MMC Securities LLC, MMC Securities Limited, MMC Securities (Ireland) Limited, MMA Securities LLC, and MMA Asset Management LLC are indirect, wholly-owned subsidiaries of Marsh & McLennan Companies, Inc.

The Company conducts business through two segments: •Risk and Insurance Services includes risk management activities (risk advice, risk transfer and risk control and mitigation solutions) as well as insurance and reinsurance broking and services. The Company conducts business in this segment through Marsh and Guy Carpenter. •Consulting includes health, wealth and career advice, solutions and products, and specialized management, strategic, economic and brand consulting services. The Company conducts business in this segment through Mercer and Oliver Wyman Group. We describe our current segments in further detail below. We provide financial information about our segments in our consolidated financial statements included under Part II, Item 8 of this report.

Consulting. Mercer's retirement-related consulting and investment services are subject to pension law and financial regulation in many countries. Depending on the country, Mercer may rely on licensed colleagues or registered legal entities to engage in these services, or may utilize other Marsh McLennan entities or third parties. In addition, trustee services, investment services (including advice to persons, institutions and other entities on the investment of pension assets and assumption of discretionary investment management responsibilities) and retirement and employee benefit program administrative services provided by Mercer and its subsidiaries and affiliates may also be subject to investment and securities regulations in various jurisdictions, including (but not limited to) regulations imposed or enforced by the Securities and Exchange Commission (SEC) and the Department of Labor in the U.S., the Ontario Securities Commission in Canada, the FCA in the United Kingdom, the Central Bank of Ireland and the Australian Prudential Regulation Authority and the Australian Securities and Investments Commission. In the U.S., Mercer provides investment services through Mercer Investments LLC, (formerly Mercer Investment Management, Inc.), an SEC-registered investment adviser, which consolidated the activities of each of Mercer's affiliated investment adviser entities in the U.S. (including Mercer Investment Consulting LLC and Pavilion Advisory Group) in 2019. Mercer Trust Company, a limited purpose New Hampshire chartered trust bank, may also provide services for certain clients of Mercer's investment management business in the U.S. The benefits insurance consulting and brokerage services provided by Mercer and its subsidiaries and affiliates are subject to the same licensing requirements and regulatory oversight as the insurance market intermediaries described above regarding our Risk and Insurance Services businesses. Depending on the nature of the client and services performed, Mercer may also be subject to direct oversight by the Department of Health and Human Services and other federal agencies in the U.S. Mercer provides annuity buy-out advice that is subject to regulations (for example, in the U.S., state insurance licensing regulations and ERISA). Mercer uses the services of MMC Securities LLC to provide certain services, including executive benefit and compensation services and securities dealing services. FATCA. Regulations promulgated by the U.S. Treasury Department pursuant to the Foreign Account Tax Compliance Act and related legislation (FATCA) require the Company to take various measures relating to non-U.S. funds, transactions and accounts. The regulations impose on Mercer and MMA certain client financial account obligations relating to non-U.S. financial institution and insurance clients.

Martin South, age 60, is President and Chief Executive Officer of Marsh, a position he assumed in January 2022, and oversees all of Marsh's businesses and operations globally. He also serves as Vice Chair of Marsh McLennan. With more than 30 years in the insurance industry, Mr. South joined Marsh for the first time in 1985 with Bowring Marsh, a Marsh McLennan broking unit. His industry experience includes senior leadership roles at Zurich Financial Services, where he was a member of the Group Management Board, responsible for all of Zurich's operations outside of North America and Europe, and CEO of Zurich's London operations. Since rejoining Marsh in 2007, Mr. South has served as CEO of Marsh's Asia-Pacific region, CEO of Marsh U.K. and Ireland, CEO of Marsh Europe and CEO of Marsh U.S. and Canada. Nicholas Studer, age 51, is Chief Executive Officer of Oliver Wyman Group, a role he assumed in July of 2021. He also serves as Vice Chair of Marsh McLennan. From 2017 to 2021, Mr. Studer was the Managing Partner of the Consumer, Industrial and Services Practice Group, before becoming Managing Partner of Oliver Wyman in 2021. He has held many senior positions at Oliver Wyman including Managing Partner of the Financial Services Practice Group, Head of the European Finance and Risk Practice and Global head of the Corporate and Institutional Banking practice. He has over 25 years of experience consulting in the U.K., Continental Europe, and North America. Mr. Studer was a founding Director of TheCityUK, a founding advisory board member of the FICC Markets Standards Board and is a member of the Sustainable Markets Initiative. Pat Tomlinson, age 54, is President and Chief Executive Officer of Mercer and Vice Chair of Marsh McLennan, a position he assumed in April of 2024. He also serves as CEO of Marsh McLennan US and Canada, with responsibility for leading across businesses to address clients' increasingly interconnected risk, strategy and people challenges. From 2020 to 2024, Mr. Tomlinson served as Mercer's President of U.S. and Canada. Prior to that, he served as a U.S. and Canada business leader, leading the U.S. East Market, where he guided Mercer's Health, Wealth, and Career businesses to meet ever-changing client needs. Prior to joining Mercer in 2014, he spent 17 years with Aon and served as an officer in the U.S. Army. The Company is subject to the information reporting requirements of the Securities Exchange Act of 1934. In accordance with the Exchange Act, the Company files with, or furnishes to, the SEC its annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and proxy statement for its annual shareholders' meeting. The Company makes these reports and any amendments to these reports available free of charge through its website, www.marshmclennan.com, as soon as reasonably practicable after they are filed with or furnished to the SEC. The SEC also maintains a website at www.sec.gov that contains reports, proxy and information statements and other information regarding issuers, like the Company, that file electronically with the SEC.

OUR BUSINESSES RISK AND INSURANCE SERVICES The Risk and Insurance Services segment generated approximately 63% of the Company's total revenue in 2024 and employs approximately 52,400 colleagues worldwide. The Company conducts business in this segment through Marsh and Guy Carpenter.

MARSH Marsh is the world's leading insurance broker and risk advisor, serving companies, institutions and individuals. From its founding in 1871 to the present day, Marsh has demonstrated a commitment to thought leadership, innovation and insurance expertise to meet its clients' needs. Marsh's pioneering contributions include introducing the practice of client representation through brokerage, the discipline of risk management, the globalization of risk management services and the development of service platforms that identify, quantify, mitigate and transfer risk. Currently, approximately 48,800 Marsh colleagues provide risk management, insurance broking, insurance program management, risk consulting, analytical modeling and alternative risk financing services to a wide range of businesses, government entities, professional service organizations and individuals in over 130 countries. Marsh generated approximately 53% of the Company's total revenue in 2024.

EXECUTIVE OFFICERS OF THE COMPANY The executive officers of the Company are appointed annually by the Board of Directors. As of February 9, 2026 the executive officers are: Paul Beswick, age 51, is Senior Vice President and Global Chief Information and Operations Officer (CIOO) of Marsh. As CIOO, Mr. Beswick leads the Business and Client Services team and oversees Marsh's global Operations and Technology teams. Prior to assuming this expanded role in January 2025, Mr. Beswick served as Chief Information Officer from 2021 to 2025. He was previously a Partner and Global Head of Oliver Wyman Labs and the Digital Practice at Oliver Wyman where he worked in various sectors, including financial services, retail, transportation, telecoms, and consumer goods. Before this, Mr. Beswick headed Oliver Wyman's North American Retail Practice. Katherine J. Brennan, age 47, is Senior Vice President and General Counsel of Marsh. In this role, she leads Marsh's global legal, compliance and public affairs function, as well as its sustainability efforts. Ms. Brennan has held several legal and compliance leadership roles at the Company, serving most recently as General Counsel of Marsh Risk from 2021 to 2022. She also served as Deputy General Counsel, Corporate Secretary and Chief Compliance Officer for Marsh from 2017 to 2021, and prior to that, as General Counsel of Guy Carpenter. Ms. Brennan currently serves on the Board of the Red Cross of Greater New York. John Q. Doyle, age 62, is President and Chief Executive Officer of Marsh. Previously, from 2021 to 2022, he served as Group President and Chief Operating Officer, responsible for the strategy and operational objectives of the Company's four global businesses. He joined in 2016 as President of Marsh Risk, which he subsequently led as President and CEO from 2017 to 2021. Mr. Doyle has 40 years of leadership experience in professional and financial services. He began his career at AIG, where he held several executive-level positions. Mr. Doyle serves as the Chairman of the United States Treasury's Federal Advisory Committee on Insurance, as a member of the Business Roundtable, on the Board of Directors of the Partnership for New York City and on the Board of Overseers of the Maurice R. Greenberg School of Risk Management, Insurance and Actuarial Science at St. John's University. He is a Trustee of the Inner-City Scholarship Fund, and a member of the Board of the New York Police and Fire Widows' and Children's Benefit Fund. Carmen Fernandez, age 52, is Senior Vice President and Chief People Officer for Marsh. Prior to her appointment as Chief People Officer in January 2021, Ms. Fernandez held positions within the Company for 15 years, most recently Deputy CHRO, CHRO of Guy Carpenter, and HR leadership roles at Mercer, including North America HR Leader, Global HR Leader for the Career business and Chief of Staff in the Office of the CEO. Before joining Marsh, Ms. Fernandez worked in investment banking at Goldman Sachs and Bank of America. She began her career as a consultant with PricewaterhouseCoopers. John Jones, age 54, is Chief Marketing and Communications Officer of Marsh. Previously, he served as Chief Marketing and Communications Officer of Marsh Risk from 2018 to 2022. Mr. Jones joined the firm in 2016 as Senior Vice President of Business Planning, leading strategic planning and global growth initiatives. Prior to that, Mr. Jones was senior vice president of commercial marketing and strategy for AIG and has more than 25 years of marketing, communications and strategy experience. Dean Klisura, age 62, is President and Chief Executive Officer of Guy Carpenter, and serves as Vice Chair of Marsh. Prior to assuming this role in January 2022, he was President of Guy Carpenter, overseeing the North America, International, Specialty and Global Analytics & Advisory business units. Previously, Mr. Klisura was President of Marsh Risk Global Placement and Advisory Services, leading property and casualty placement activities globally, as well as leading Bowring Marsh, the Insurer Consulting Group, and Marsh Risk Consulting. He joined Marsh Risk in 1993 and held several key global leadership roles, including President of Global Specialties. Mark McGivney, age 58, is Senior Vice President and Chief Financial Officer of Marsh. Prior to assuming this role in January 2016, Mr. McGivney held several senior financial management positions since joining the Company in 2007. Most recently, he was Senior Vice President, Corporate Finance of Marsh, and was responsible for leading and directing the Company's Corporate Development, Treasury and Investor Relations functions from 2014 to 2016. Prior to that, he served as Chief Financial Officer of Marsh Risk, and Chief Financial Officer and Chief Operating Officer of Mercer. His experience prior to joining Marsh included senior finance positions at The Hanover Insurance Group as well as positions at Merrill Lynch and PricewaterhouseCoopers. 7 Martin South, age 61, is President and Chief Executive Officer of Marsh Risk. He assumed his current role in January 2022 and oversees all of Marsh Risk's businesses and operations globally. He also serves as Vice Chair of Marsh. Mr. South joined the Company for the first time in 1985 with Bowring Marsh. His industry experience includes senior leadership roles at Zurich Financial Services, where he was a member of the Group Management Board, responsible for all of Zurich's operations outside of North America and Europe, and CEO of Zurich's London operations. Since rejoining the Company in 2007, Mr. South has served as CEO of Marsh Risk's Asia-Pacific region, CEO of Marsh Risk U.K. and Ireland, CEO of Marsh Europe and CEO of Marsh Risk U.S. and Canada.

The Company also posts certain governance and other information for investors on its website. The Company encourages investors to visit these websites from time to time, as information is updated and new information is posted. Website references in this report are provided as a convenience and do not constitute, and should not be viewed as, incorporation by reference of the information contained on, or available through, the websites. Therefore, such information should not be considered part of this report.