RISKS AND OPPORTUNITIES

Ensuring Effective Risk Management

Effective risk management helps us manage the impact of events and attain business objectives. We ensure this with our robust risk management framework and a holistic approach of continually identifying, monitoring, evaluating and managing risks. Amidst rising geopolitical turbulence and global supply chain issues, we are increasing our agility to tackle emerging risks and capitalize on new opportunities.

Risk Management Framework

We have a well-defined framework and procedures for Enterprise Risk Management (ERM), prepared under the supervision of the Executive Board. These cover information security, operations, delivery, and key support functions. The procedures include risk identification, analysis, response, tracking, management discussion and mitigation.

Our respective functions and project teams maintain risk registries, which are centrally reviewed and periodically monitored by compliance and governance teams responsible for specific risk areas. Additionally, our defined risk appetite reflects the broader risk levels we can assume, manage, and incorporate into our strategy.

We ensure effective ERM through a robust governance mechanism involving the Chief Information Security Officer (CISO), Chief Information Officer (CIO), and the Engineering and Business Excellence (EBE) team, who work together with the Executive Board.

Key Risks and Mitigation Actions

Risks

Foreign currency fluctuation

International operations account for a substantial part of our revenues, and unfavorable movements in foreign currency might affect our profitability.


Customer credit

The inability to obtain payments owed by our customers can impact our working capital cycle and lead to losses.


Availability of credit and liquidity management

Our inability to maintain an optimal liquidity level may prevent us from meeting future cash and collateral obligations.

Mitigating actions

  • We manage Foreign Exchange (FX) risk in two ways:
    • Natural hedge – Matching payables and receivables in foreign currency to neutralize currency swings
    • Simple derivatives – Using plain vanilla forward exchange contracts with a residual life of up to one year, structured as a ladder to cover probable transactions/inflows. The Risk Management Committee of the Board guides and monitors hedging strategies
  • Reporting certain metrics, such as constant currency revenue growth, to enable a currency-neutral understanding of business growth

  • We maintain short billing and collection cycles, with a strong focus on collections, resulting in low debtor days of 87 as of March 31, 2024
  • We continuously assess customer creditworthiness, assign credit limits, and adhere to contractual terms for timely collections

  • We focus on monitoring our positions and maintaining adequate sources of financing through various banks under multiple banking arrangements
  • We have access to undrawn borrowing facilities

Risks

Concentration of revenues

We are dependent on a few customers and a specific geography for most of our revenues. Our inability to attract new customers, retain existing ones, or any unfavorable macroeconomic scenario in our key target market may impact revenues.


New and emerging technology disruption

Amidst the rapid evolvement of IT industry, the inability to develop new technology capabilities may impact new business opportunities.


Profitability and sustenance of the business

An increase in wages and the inability to accurately compute contract pricing through various cost estimations may impact profitability.


Business expansion

The inability to secure new orders and enhance our workforce's bandwidth will result in stagnation. Additionally, we face the challenge of contractual clauses that may restrict our ability to offer services to different customers.

Mitigating actions

  • The majority of our revenues come from the U.S. However, sustained growth in other regions has led to a decline in the U.S. revenue share
  • We maintain close relationships and sustained engagements with customers to understand their needs
  • We leverage our extensive portfolio of offerings to cross-sell and upsell to existing customers

  • We have established competence in several next-generation technologies such as blockchain, AI, drones, robotics, and edge computing, among others
  • We have dedicated Centers of Excellence (CoEs) and collaborate with globally leading firms to further build niche skills
  • We constantly run upskilling and reskilling programs to make Happiest Minds future-ready. This includes clearly defined training programs, both online courses and on-the-job learning, in our new Business Unit focusing on Generative AI technologies
  • A significant portion of our business is executed through offshoring from India, leveraging the advantage of lower wage costs
  • Expansion into tier II cities, where labor costs are lower, further enhances our low-cost advantage
  • We utilize the expertise of our team along with technology tools for cost estimations and contract pricing
  • Our ability to deliver high-quality solutions ensures better pricing power

  • We continually enhance our workforce by attracting and retaining talent to execute projects. In FY 2023-24, 251 people were added
  • We have successfully enabled clients to achieve tangible outcomes with our solutions, leading to sustained repeat and new orders
  • Our diverse technology and vertical capabilities enable participation in several new opportunities. In FY 2022-23, we acquired Sri Mookambika Infosolutions, strengthening our healthcare vertical and aligning well with our Product Engineering Services business
  • We have expanded our expertise and global footprint with the acquisitions of PureSoftware and Aureus in early FY 2024-25. PureSoftware adds 1,200 professionals to Happiest Minds, enhancing its presence in the BFSI and Healthcare and Life Sciences sectors, and extending its geographical reach in the USA, UK, India, Mexico, Singapore, Malaysia, and Africa. Aureus, bringing 150 specialists and headquartered in Denver with a development center in Hyderabad, strengthens Happiest Minds' capabilities in digital transformation through Data, AI, and Application Modernization, particularly for the Insurance, Re-insurance, and Healthcare sectors

Risks

Talent availability

We depend on our talent to deliver solutions to clients. The inability to attract and retain talent may impact business opportunities.


Optimal resource utilization

The inability to maintain high resource utilization and productivity will impact profitability


Contractual commitments and project delivery challenges

The inability to uphold contractual commitments may lead to the termination of agreements and affect future business opportunities.

Mitigating actions

  • We are based in India, providing access to a large pool of talented engineers. Our robust talent management program enables us to hire the right talent and enhance their skills
  • We offer learning and development programs to ensure continuous upskilling and provide enhanced career opportunities
  • We run several wellness programs, offer benefits, and provide industry-standard compensation to ensure higher retention

  • We consistently achieve high resource utilization by promptly transitioning our people from completed projects, accurately forecasting demand, and deploying the right resources to the right projects
  • Increased demand for IT products and services will further improve utilization as more business opportunities arise

  • We ensure high-quality control and process execution standards, effective resource utilization, sustained client engagements, and high productivity levels to deliver projects
  • Our solid team of engineers and partnerships with leading global vendors enable us to deliver high-quality products and services as per terms and within the stipulated time frame

Risks

Compliance with local legislation

Non-compliance with the local laws of the regions in which we operate may lead to litigation or license cancelation.


Restriction on immigration or work permits

We depend on our Indian personnel to provide onsite support to clients. Any geopolitical tension or unfavorable changes in immigration laws may impact project delivery.


Data privacy and information security risks

The inability to ensure customer data privacy and protect systems or clouds from cyberattacks may expose us to litigation risks.


IP risks

The inability to protect our intellectual properties (IPs) may lead to missed opportunities. Furthermore, we also face risks of non-compliance with third-party open-source software terms or IP infringement claims against our solutions, which may result in discontinuation of services to clients and fines.

Mitigating actions

  • We have stringent policies and checks, along with an integrated compliance tool, which ensures good governance and compliance with local laws. This is supported by timely reminders and alerts
  • We consult and seek guidance from professional experts in certain cases for the correct interpretation of local laws

  • The current immigration scenario is mostly conducive in the countries where we operate. We continuously monitor local immigration laws, including any regulatory changes or events due to geopolitical reasons, to plan our activities accordingly
  • We monitor the time and effort spent by our people onsite to avoid tax incidents

  • Happiest Minds' security and privacy policies and procedures are based on the ISO 27001 security standard and ISO 27701 privacy standard. These standards comply with data privacy regulations such as the EU’s General Data Protection Regulation (GDPR) for the data protection and privacy of EU residents, the California Consumer Privacy Act (CCPA) for the privacy rights of Californian residents, and the upcoming Digital Personal Data Protection Act, 2023 in India
  • In addition to our organization's compliance with ISO standards, we regularly assess our cybersecurity risks and have adopted multiple cybersecurity standards, including NIST, CIS, and Zero Trust architecture, to ensure prevention, detection, and response to any cybersecurity threats
  • We adhere to stringent regulations for handling customer data, which all Happiest Minds follow along with a written confidentiality agreement. Furthermore, all members and partners are required to attend mandatory security and privacy awareness programs to ensure compliance

    • We utilize licensed third-party commercial software, monitored by our in-house team, to mitigate issues of infringement, warranties, or other contractual protections. Open-source tools are used in certain cases with prior verification and approval by the IT/legal team
    • We ensure the development of novel solutions and protect our technical know-how by registering intellectual property and undertaking confidentiality obligations from all stakeholders involved in projects
    • We take necessary insurance to mitigate any eventualities related to IP risks
    • All Happiest Minds are made aware of IP protection and sign IP declarations upon joining