FIRST CITIZENS BANCSHARES INC /DE/ 10-K

Item 1A. Risk Factors Risk Factor Summary We are subject to a number of risks and uncertainties that could have a material impact on our business, financial condition and results of operations and cash flows. As a financial services organization, certain elements of risk are inherent in our transactions and operations and are present in the business decisions we make. We encounter risks as part of the normal course of our business, and our success is dependent on our ability to identify, understand and manage the risks presented by our business activities. We categorize risks into the following areas, and the principal risks and uncertainties that management believes make an investment in us speculative or risky are summarized within their respective areas: • Strategic Risks: The risks to our earnings or capital arising from our business decisions or improper implementation of those decisions. ◦ We may be adversely affected by risks associated with completed, pending or any potential future acquisitions. 14 ◦ We may fail to realize all of the anticipated benefits of the CIT Merger, or those benefits may take longer to realize than expected. We may also encounter significant difficulties in integrating with the acquired operations. • Operational Risks: The risks of loss resulting from inadequate or failed processes, people and systems or from external events, including, but not limited to, the COVID-19 pandemic. ◦ We face significant operational risks in our businesses and may fail to maintain appropriate operational infrastructure and oversight. ◦ A cyber attack, information or security breach, or a technology failure of ours or of a third party could adversely affect our ability to conduct our business, manage our exposure to risk, result in the disclosure or misuse of confidential customer or employee data or proprietary information, increase our costs to maintain and update our operational and security systems and infrastructure. This could adversely impact our results of operations, liquidity and financial condition, as well as cause us legal or reputational harm. ◦ The continued economic impacts of the COVID-19 pandemic are expected to continue to affect our business, financial condition and results of operations. • Credit Risks: The risks that a borrower will fail to perform on an obligation or that our risk management processes will fail or be insufficient. ◦ If we fail to effectively manage credit risk, our business and financial condition will suffer. ◦ Our allowance for credit losses may prove to be insufficient to absorb losses in our loan portfolio. • Market Risks: The risks to our financial condition resulting from adverse movements in market rates or prices, including, but not limited to, interest rates, foreign exchange rates or equity prices. ◦ Unfavorable economic or political conditions, as considered through a range of metrics, have and could continue to adversely affect our business. ◦ Failure to effectively manage our interest rate risk could adversely affect us. • Liquidity Risks: The risks that we will be unable to meet our obligations as they come due because of an inability to (i) liquidate assets or obtain adequate funding, or (ii) unwind or offset specific exposures without significantly lowering market prices because of inadequate market depth or market disruptions, or that we will not meet the liquidity management requirements we expect to be applicable to us as a Category IV banking organization, subject to the applicable transition periods. ◦ If our current level of balance sheet liquidity were to experience pressure, it could affect our ability to pay deposits and fund our operations. ◦ We expect to be subject to enhanced liquidity risk management requirements as a Category IV banking organization, subject to the applicable transition periods, including reporting, liquidity stress testing, and a liquidity buffer, and failure to meet these requirements could result in regulatory and compliance risks, and possible restrictions on our activities. • Capital Adequacy Risks: The risks that our capital levels are inadequate to preserve our safety and soundness, support our ongoing business operations and strategies and provide us with support against unexpected or sudden changes in the business/economic environment. ◦ Our ability to grow is contingent upon access to capital, which may not be readily available to us. ◦ We are subject to capital adequacy and liquidity guidelines and, if we fail to meet these guidelines, our financial condition would be adversely affected. • Compliance Risks: The risks of loss or reputational harm to us resulting from regulatory sanctions, fines, penalties or losses due to our failure to comply with laws, rules, regulations or other supervisory requirements applicable to us. ◦ We operate in a highly regulated industry, and the laws and regulations that govern our operations, taxes, corporate governance, executive compensation and financial accounting and reporting, including changes in them or our failure to comply with them, may adversely affect us. ◦ We face compliance risks related to the specialty commercial business lines acquired from CIT. • Asset Risks: The risks that the value of our long-lived assets will be lower than expected, resulting in reduced income or depreciation over the remaining life of the asset or a lower sale value. ◦ We may not be able to realize our entire investment in the equipment that we lease to our customers. 15 • Financial Reporting Risks: The risks that our financial information is reported incorrectly or incompletely, including through the improper application of accounting standards or other errors or omissions. ◦ Accounting standards may change and increase our operating costs or otherwise adversely affect our results. ◦ Our accounting policies and processes are critical to the reporting of our financial condition and results of operations. They require management to make estimates about matters that are uncertain, and such estimates may be incorrect. The risks and uncertainties that management believes are material to an investment in us are described below. Additional risks and uncertainties that are not currently known to management or that management does not currently deem material could also have a material adverse impact on our financial condition, the results of our operations or our business. If such risks and uncertainties were to materialize or the likelihoods of the risks were to increase, we could be adversely affected, and the market price of our securities could significantly decline. Strategic Risks We may be adversely affected by risks associated with completed, pending or any potential future acquisitions. We plan to continue to grow our business organically. However, we have pursued and expect to continue to pursue acquisition opportunities that we believe support our business strategies and may enhance our profitability. We must generally satisfy a number of material conditions prior to consummating any acquisition including, in many cases, federal and state regulatory approval. We may fail to complete strategic and competitively significant business opportunities as a result of our inability to obtain required regulatory approvals in a timely manner or at all, or the approval for such opportunity could include conditions imposing additional costs or limitations that reduce the anticipated related benefits. On July 9, 2021, President Biden issued an Executive Order on Promoting Competition in the American Economy encouraging the United States Attorney General along with the federal banking agencies to review the framework for evaluating bank mergers and acquisitions under the BHC Act and the Bank Merger Act. Additionally, the Director of the CFPB has publicly sought a greater role for the CFPB in the evaluation of bank merger proposals. Any enhanced regulatory scrutiny of bank mergers and acquisitions and revision of the regulatory framework for approval of bank mergers could adversely affect the marketplace for bank merger transactions and could result in potential future acquisitions by us being delayed, impeded or restricted in certain respects and result in new rules that possibly limit the size of financial institutions that we may be able to acquire in the future or alter the terms for such transactions. We may be unsuccessful in identifying, consummating or integrating any potential acquisitions. Acquisitions of financial institutions, assets of financial institutions or other operating entities involve operational risks and uncertainties, and acquired companies or assets may have unknown or contingent liabilities, exposure to unexpected asset quality problems that require write downs or write-offs, additional regulatory requirements or difficulty retaining key employees and customers. Due to these and other issues relating to acquisitions, we may not be able to realize projected cost savings, synergies or other benefits associated with any such acquisition. Failure to efficiently integrate any acquired entities or assets into our existing operations could significantly increase our operating costs and consequently have material adverse effects on our financial condition and results of operations. We may fail to realize all of the anticipated benefits of the CIT Merger, or those benefits may take longer to realize than expected. We may also encounter significant difficulties in integrating with the acquired operations. The success of the CIT Merger, including anticipated benefits and cost savings, will depend, in substantial part, on our ability to successfully integrate the acquired operations in a manner that results in various benefits, such as anticipated synergies or cost savings, and that does not materially disrupt existing customer relationships or result in decreased revenues due to loss of customers. The process of integrating operations has resulted in a loss of key personnel and could cause an interruption of, or loss of momentum in, the activities of our business. Inconsistencies in standards, controls, procedures and policies could adversely affect us. The diversion of management’s attention and any delays or difficulties encountered in connection with the integration of the acquired operations could have an adverse effect on our business, financial condition, operating results and prospects. If we experience difficulties in the integration process, including those listed above, we may fail to realize the anticipated benefits of the CIT Merger in a timely manner or at all. In particular, the impacts of the pandemic caused by COVID-19 and its variants may make the integration more costly or more difficult to effect, which, in turn, may make it more difficult for us to realize anticipated synergies or cost savings in the amounts estimated or in the time frame contemplated or at all. 16 We have incurred and expect to continue to incur substantial expenses related to the integration of the operations acquired in connection with the CIT Merger. There are a large number of processes, policies, procedures, operations, technologies and systems that must be integrated in connection with the consummation of the CIT Merger, and integration remains in process and is expected to continue for some time. While we have attempted to accurately forecast a certain level of expenses that will be incurred in connection with such integration, there are many factors beyond our control that have affected and could continue to affect the total amount and the timing of the integration expenses. Moreover, many of the integration expenses that will be incurred are, by their nature, difficult to estimate accurately. These expenses could materially exceed our current estimates and, consequently, could materially adversely affect our future earnings. Our future results will suffer if we do not effectively manage our expanded operations following the CIT Merger . Following the consummation of the CIT Merger, the size and geographic and operational scope of our business has increased significantly. The CIT Merger more than doubled our asset size, increased the breadth and complexity of our business with the addition of new business lines in which we have not previously engaged and expanded our geographic scope to new geographic areas. Our future success depends, in part, upon the ability to manage this expanded business, which will pose substantial challenges for management, including challenges related to the management and monitoring of new and expanded operations and associated increased costs and complexity. We may be unsuccessful in this regard or fail to realize the expected operating efficiencies, cost savings and other benefits currently anticipated from the CIT Merger. We encounter significant competition that may reduce our market share and profitability. We compete with other banks and specialized financial services providers in our market areas. Our primary competitors include local, regional and national banks; credit unions; commercial finance companies; leasing companies; various wealth management providers; independent and captive insurance agencies; mortgage companies; and other non-bank providers of financial services. Some of our larger competitors, including certain banks with a significant presence in our market areas, have the capacity to offer products and services we do not offer. Some of our non-bank competitors operate in less stringent regulatory environments, and certain competitors are not subject to federal or state income taxes. The fierce competitive pressures that we face adversely affect pricing for many of our products and services. Additionally, technology and other changes are allowing parties to complete financial transactions that historically have involved banks through alternative methods without involving banks. For example, consumers can now maintain funds that would have historically been held as bank deposits in brokerage accounts, mutual funds or virtual accounts. Consumers can also complete transactions, such as paying bills or transferring funds directly without the assistance of banks. Transactions utilizing digital assets, including cryptocurrencies, stablecoins and other similar assets, have increased substantially. Certain characteristics of digital asset transactions, such as the speed with which such transactions can be conducted, the ability to transact without the involvement of regulated intermediaries, the ability to engage in transactions across multiple jurisdictions, and the anonymous nature of the transactions, are appealing to certain consumers. Accordingly, digital asset service providers—which, at present, are not subject to as extensive regulation as banking organizations and other financial institutions—have become active competitors for our customers’ banking business. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the lower cost of deposits as a source of funds could have a material adverse effect on our financial condition and results of operations. Certain provisions in our Certificate of Incorporation and Bylaws may prevent a change in management or a takeover attempt a shareholder might consider to be in their best interests. Certain provisions contained in our Amended and Restated Certificate of Incorporation (our “Certificate of Incorporation) and Amended and Restated Bylaws (our “Bylaws”) could delay or prevent the removal of our directors and other management. The provisions could also delay or make more difficult a tender offer, merger or proxy contest a shareholder might consider to be in their best interests. For example, our Certificate of Incorporation and Bylaws: • allow the Board to issue and set the terms of preferred shares without further shareholder approval; • limit who can call a special meeting of shareholders; and • establish advance notice requirements for nominations for election to the Board and proposals of other business to be considered at annual meetings of shareholders. 17 These provisions, as well as provisions of the BHCA and other relevant statutes and regulations that require advance notice and applications for regulatory approval of changes in control of banks and bank holding companies, may discourage bids for our common stock at a premium over market price, adversely affecting the price that could be received by our shareholders for our common stock. Additionally, the fact that the Holding family holds or controls shares representing approximately 50%, and in the past have held or controlled shares representing more than 50%, of the voting power of our common stock may discourage potential takeover attempts and bids for our common stock at a premium over market price. Our Bylaws provide that, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware will be the sole and exclusive forum for substantially all disputes between us and our shareholders. This could limit our shareholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees or agents. Our Bylaws provide that, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware will be the sole and exclusive forum for (i) any derivative action or proceeding brought on behalf of us; (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, other employees or shareholder to us or our shareholders; (iii) any action asserting a claim against us arising pursuant to any provision of the General Corporation Law of the State of Delaware or as to which the General Corporation Law of the State of Delaware confers jurisdiction on the Court of Chancery of the State of Delaware; or (iv) any action asserting a claim against us governed by the internal affairs doctrine. These choice of forum provisions do not preclude or contract the scope of exclusive federal or concurrent jurisdiction for any actions brought under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended. Accordingly, our choice of forum provisions will not relieve us of our duties to comply with the federal securities laws and the rules and regulations thereunder, and our shareholders will not be deemed to have waived our compliance with these laws, rules and regulations. These choice of forum provisions may limit a shareholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers or other employees or agents, which may discourage lawsuits against us and our directors, officers and other employees or agents. If a court were to find the choice of forum provision contained in our Bylaws to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, results of operations, and financial condition. Even if we are successful in defending against these claims, litigation could result in substantial costs and be a distraction to management and other employees. We rely on dividends from FCB for paying dividends on our common and preferred stock and servicing our debt obligations, and FCB’s ability to pay us dividends is restricted. As a financial holding company, we are a separate legal entity from FCB. We derive most of our revenue and cash flow from dividends paid by FCB. These dividends are the primary source from which we pay dividends on our common and preferred stock and interest and principal on our debt obligations. State and federal laws impose restrictions on the dividends that FCB may pay to us. In the event FCB is unable to pay dividends to us for an extended period of time, we may not be able to service our debt obligations or pay dividends on our common or preferred stock, and the inability to receive dividends from FCB could consequently have a material adverse effect on our business, financial condition and results of operations. Our financial performance depends upon our ability to attract and retain customers for our products and services, which may be adversely impacted by weakened consumer or business confidence and by any inability on our part to predict and satisfy customers’ needs and demands. Our financial performance is subject to risks associated with the loss of customer confidence and demand. A fragile, weakening or changing economy, or ambiguity surrounding the economic future, may lessen the demand for our products and services. Our performance may also be negatively impacted if we fail to attract and retain customers because we are not able to successfully anticipate, develop and market products and services that satisfy market demands. Such events could impact our performance through fewer loans, reduced fee income and fewer deposits, each of which could result in reduced net income. The COVID-19 pandemic, while disruptive to our customers and the economy, has not led to a significant decline in our products and services to date, but it could if its impact on us and our customers continues or increases in the future. 18 New technologies, and our ability to efficiently and effectively implement, market and deliver new products and services to our customers present competitive risks. The financial services industry is continually undergoing rapid technological change with frequent introduction of new technology-driven products and services. The effective use of technology increases efficiency and enables financial institutions to better serve customers and to reduce costs. The rapid growth of new digital technologies related to the digitization of banking services and capabilities, including through internet services, smart phones and other mobile devices, requires us to continuously evaluate our product and service offerings to ensure they remain competitive. These trends were accelerated by the COVID-19 pandemic increasing demand for mobile banking solutions. Our success depends in part on our ability to adapt and deliver our products and services in a manner responsive to evolving industry standards and consumer preferences. New technologies by banks and non-bank service providers may create risks if our products and services are no longer competitive with then-current standards, and could negatively affect our ability to attract or maintain a loyal customer base. We may not be able to effectively implement new technology-driven products and services that allow us to remain competitive or be successful in marketing these products and services to our customers. These risks may affect our ability to grow and could reduce our revenue streams from certain products and services, while increasing expenses associated with developing more competitive solutions, which could adversely affect our results of operations and financial condition. Operational Risks We face significant operational risks in our businesses and may fail to maintain appropriate operational infrastructure and oversight. Safely conducting and growing our business requires that we create and maintain an appropriate operational and organizational control infrastructure. Operational risk can arise in numerous ways, including employee fraud, customer fraud and control lapses in bank operations and information technology. Our dependence on our employees and internal and third party automated systems to record and process transactions may further increase the risk that technical failures or system-tampering will result in losses that are difficult to detect. We may be subject to disruptions of our operating systems arising from events that are wholly or partially beyond our control. Failure to maintain appropriate operational infrastructure and oversight can lead to loss of service to customers, legal actions and noncompliance with various laws and regulations, all of which could have a material adverse impact on our business, financial condition and results of operations. Our internal controls that are intended to safeguard and maintain our operational and organizational infrastructure and information have inherent limitations and may not be successful. A cyber attack, information or security breach, or a technology failure of ours or of a third party could adversely affect our ability to conduct our business, manage our exposure to risk, result in the disclosure or misuse of confidential customer or employee data or proprietary information, increase our costs to maintain and update our operational and security systems and infrastructure. This could adversely impact our results of operations, liquidity and financial condition, as well as cause us legal or reputational harm. Our businesses are highly dependent on the security and efficacy of our infrastructure, computer and data management systems, as well as those of third parties with whom we interact or on whom we rely. Our businesses rely on the secure processing, transmission, storage and retrieval of confidential, proprietary and other information in our computer and data management systems and networks, and in the computer and data management systems and networks of third parties. In addition, to access our network, products and services, our customers and other third parties may use personal mobile devices or computing devices that are outside of our network environment and are subject to their own cybersecurity risks, which may provide a point of entry for adverse effects on our own network environment. We, our customers, regulators and other third parties have been subject to, and are likely to continue to be the target of, cyber attacks. These cyber attacks include computer viruses, malicious or destructive code, ransomware, phishing attacks, denial of service or information or other security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary and other information of ours, our employees, our customers or of third parties, damages to systems, or other material disruption to our or our customers’ or other third parties’ network access or business operations. As cyber threats continue to evolve, we have been and will likely continue to be required to expend significant resources to continuously enhance our protective measures and may be required to expend significant resources to investigate and remediate any information security vulnerabilities or incidents. We may not be able to anticipate all security breaches, nor may we be able to implement guaranteed preventive measures against such security breaches. Additionally, a security breach may be difficult to detect, even after it occurs, which may compound the issues related to such breach. 19 Cybersecurity risks for banking organizations have significantly increased in recent years in part because of the proliferation of new technologies and the use of the internet to conduct financial transactions. These risks are expected to continue in the future as that proliferation intensifies. For example, we will likely see an increase in cybersecurity risks in the future as we continue to augment our mobile-payment and other internet-based product offerings and expand our internal usage of web-based products and applications. In addition, financially motivated attacks remain a challenge from a cybercrime perspective due to the increased sophistication and activities of organized crime groups, hackers, terrorist organizations, hostile foreign governments, disgruntled employees or vendors, activists and other external parties, including those involved in corporate espionage. Even the most advanced internal control environment may be vulnerable to compromise. Additionally, the increase of supply chain attacks including third parties with access to our data or those providing critical services, remain an emerging operational issue which could adversely affect our business, customers, reputation and operations. Although to date we are not aware of any material losses or other material consequences relating to technology failure, cyber attacks or other information or security breaches, whether directed at us or third parties, we may suffer such losses or other consequences in the future. We also face indirect technology, cybersecurity and operational risks relating to the customers and other third parties with whom we do business or upon whom we rely to facilitate or enable our business activities, including financial counterparties; financial intermediaries such as clearing agents, exchanges and clearing houses; vendors; regulators; and providers of critical infrastructure such as internet access and electrical power. As a result of increasing consolidation, interdependence and complexity of financial entities and technology systems, a technology failure, cyber attack or other information or security breach that significantly degrades, deletes or compromises the systems or data of one or more financial entities could have a material impact on counterparties or other market participants, including us. This consolidation interconnectivity and complexity increases the risk of operational failure, on both individual and industry-wide bases, as disparate systems need to be integrated, often on an accelerated basis. Any third-party technology failure, cyber attack or other information or security breach, termination or constraint could, among other things, adversely affect our ability to effect transactions, service our customers, manage our exposure to risk or expand our businesses. Cyber attacks or other information or security breaches, whether directed at us or third parties, may result in a material loss or have material consequences. Furthermore, the public perception that a cyber attack on our systems has been successful, whether or not this perception is correct, may damage our reputation with customers and third parties with whom we do business and may encourage further cyber attacks. A successful penetration or circumvention of system security could cause us negative consequences, including loss of customers and business opportunities, disruption to our operations and business, misappropriation or destruction of our confidential information and that of our customers, or damage to our customers’ and third parties’ computers or systems, and could result in a violation of applicable data privacy and protection laws and other laws, litigation exposure, regulatory fines, penalties or intervention, loss of confidence in our security measures, reputational damage, reimbursement or other compensatory costs, and additional compliance costs, any of which could adversely impact our results of operations, liquidity and financial condition. The continued economic impacts of the COVID-19 pandemic are expected to continue to affect our business, financial condition and results of operations. Beginning in early 2020, COVID-19 spread across most of the world, including the United States. The COVID-19 pandemic, sustained by the spread of new, more-transmissible coronavirus variants, has continued to cause severe disruptions to the United States economy, regional quarantines, business and school shutdowns, high unemployment, disruptions to supply chains and overall economic instability, which has adversely impacted the operations, activities and business of our customers. Effects have generally been felt across all industries, including financial services. In response to the national public health crisis, federal, state and local governments have imposed and continue to impose an array of restrictions on the way we conduct our operations and on our customers, business partners, vendors and employees. These restrictions, along with other economic factors including inflation risks, oil price volatility and changes in interest rates have and may continue to destabilize financial markets and negatively impact our customers’ business activities and operations, making it difficult for them to satisfy existing debt obligations. They also have led to periods of elevated unemployment and slower consumer spending, which, in turn, has previously temporarily increased our collection risk as deteriorating economic conditions correlate with lower credit quality metrics and higher customer defaults on loans. Economic pressures and uncertainty have and may continue to change consumer and business behaviors, which, in the short and long term, could affect borrowers’ creditworthiness and the demand for loans and other products and services we offer. We are actively monitoring the loan portfolio to identify changes in credit risk within a specific geography, loan class, or within a particular industry concentration; provision expense could increase as we incorporate these changes into our estimate on the allowance for credit losses. 20 Additionally, our operations have experienced modification as we continue to operate in a primarily remote working environment for many corporate employees and as we have adjusted branch operations and corporate processes. With continued uncertainty around outbreak severity and vaccine effectiveness and acceptance, particularly in regards to coronavirus variants, there may be increased absenteeism and lost productivity as a result of the remote workforce. We have seen an increased incidence of cybersecurity threats and fraud as cyber-criminals look to profit from the disruption and potential strain on information technology relating to a regularly remote working environment. The COVID-19 pandemic has significantly reduced demand for goods and service for many customers and other businesses in sectors that we service. In the retail sector, our exposure is primarily in the factoring business, principally in trade receivables, and to a lesser extent in the commercial real estate business. In the hospitality and transportation sectors, we have loan exposures to the restaurant, lodging, gaming, maritime, aviation and rail industries. The significant declines in the price of, or demand for, oil and gas may have negative effects on not only our loan exposures in the exploration and production sector, but may also lead to a decreased demand for our railcars, and could have a significant adverse effect on the demand for ships that are collateral for our loans. Further, we have exposure to small businesses through both equipment loans and leases and through SBA loans, which could be adversely affected by the extensive closure of businesses in many states during the COVID-19 pandemic. We also have exposure to single family residential mortgages, which could be adversely affected by job losses due to the economic dislocation resulting from the COVID-19 pandemic. Further, during the COVID-19 pandemic we implemented several forms of temporary relief to our consumer and commercial customers, including payment deferrals, suspension of foreclosures and evictions, and fee waivers for ATM transactions, overdrafts, and early withdrawal of certificates of deposit, which may adversely affect our revenue and results of operations or result in higher rates of default and increased credit losses in future periods. The effects of the COVID-19 pandemic on economic and market conditions have increased demands on credit facilities that we provide to our customers, which could have an adverse impact on our liquidity. Market volatility and general uncertainty in the capital markets related to the COVID-19 pandemic may also impact our business. Our access to capital and liquidity could be limited by market disruptions, which could be exacerbated by delays in customer payments or significant withdrawals from customer deposit accounts. In addition, the fair value of our assets and liabilities have been and will continue to be impacted by the changing market environment. This could also increase liquidity and capital adequacy risks, as well as long-lived asset impairment risk. As the government and its regulatory bodies respond to the COVID-19 pandemic, it increases the burden on our associates to quickly process and respond to changing regulatory guidance. This increases the risk of noncompliance, which could expose us to liability or other adverse effects. The effects of the COVID-19 pandemic will heighten specific risk factors and could impact substantially all risk factors described herein. Those effects will adversely affect our business operations and results at least until the outbreak has subsided to a manageable level, and the negative effects on the economy, our customers and our business and results likely will continue to be felt for some time afterwards. The full extent of the impact will depend on future developments that are highly uncertain including the duration and spread of the outbreak, its severity, vaccine effectiveness and acceptance, governmental actions to contain the virus (including its variants) and the long-term economic impact, both globally, as well as in our banking markets, which includes the potential for further recession. We are subject to litigation and other legal liability risks, and our expenses related to such risks may adversely affect our results. We are subject to litigation risks in the ordinary course of our business. Claims and legal actions, including supervisory actions by our regulators, that have been or may be initiated against us (including against entities that we acquire) from time to time could involve large monetary sums and significant defense costs. During the last credit crisis, we saw the number of cases and our expenses related to those cases increase and expect to see the same in future credit crises. The outcomes of such cases are always uncertain until finally adjudicated or resolved. In the course of our business, we may foreclose on and take title to real estate that contains or was used in the manufacture or processing of hazardous materials or that is subject to other environmental risks. In addition, we may lease equipment to our customers that is used to mine, develop, process or transport hazardous materials. As a result, we could be subject to environmental liabilities or claims for negligence, property damage or personal injury with respect to these properties or equipment. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination, accidents or other hazardous risks, or may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former 21 owner of a contaminated site or equipment involved in a hazardous incident, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination, property damage, personal injury or other hazardous risks emanating from the property or related to the equipment. We establish reserves for legal claims when payments associated with the claims become probable and our liability can be reasonably estimated. We may still incur legal costs for a matter even if we have not established a reserve. In addition, the actual amount paid in resolution of a legal claim may be substantially higher than any amounts reserved for the matter. The ultimate resolution of a legal proceeding, depending on the remedy sought and any relief granted, could materially adversely affect our results of operations and financial condition. Substantial legal claims or significant regulatory action against us could have material adverse financial effects or cause significant reputational harm to us, which in turn could seriously harm our business prospects. We may be exposed to substantial uninsured legal liabilities and regulatory actions which could adversely affect our results of operations and financial condition. For additional information, refer to the Notes to the Consolidated Financial Statements, Note T, Commitments and Contingencies, in this Annual Report on Form 10-K. We depend on qualified personnel for our success and may not be able to retain or attract such personnel. Our success depends to a great extent on our ability to attract and retain highly skilled and qualified executive officers and management, financial, compliance, technical, operations, sales, and support employees, which has taken on heightened importance because of the significant expansion of the size and geographic and operational scope of our business that occurred in connection with the CIT Merger. We face significant competition in the recruitment of qualified executive officers and employees. Losses of, or changes in, our current executive officers or other personnel and their expertise and services, or substantial increases in the costs of employee compensation or benefits, may disrupt our business and could adversely affect our financial condition and results of operations. We have developed an executive officer succession plan, but it may be ineffective, or we may fail in implementing it. We may be unsuccessful in retaining our current executive officers or other key personnel, or hiring additional key personnel to assist in executing our growth, expansion and acquisition strategies, all of which could cause those strategies to fail or be less successful than they would otherwise be. Our compensation practices are subject to review and oversight by the Federal Reserve, the FDIC and other regulators. The federal banking agencies have issued joint guidance on executive compensation designed to help ensure that a banking organization’s incentive compensation policies do not encourage imprudent risk taking and are consistent with the safety and soundness of the organization. In addition, the Dodd-Frank Act required those agencies, along with the SEC, to adopt rules to require reporting of incentive compensation and to prohibit certain compensation arrangements. In October 2021, the SEC signaled a renewed interest in its incentive compensation rulemaking initiative by re-opening the comment period on a proposed rule regarding “clawbacks” of incentive-based executive compensation. If as a result of complying with such rules we are unable to attract and retain qualified employees, or do so at rates necessary to maintain our competitive position, or if the compensation costs required to attract and retain employees become more significant, our performance, including our competitive position, could be materially adversely affected. We are exposed to losses related to fraud. As technology continues to evolve, criminals are using increasingly more sophisticated techniques to commit and hide fraudulent activity. Fraudulent activity that we are exposed to can come in many forms, including debit card/credit card fraud, check fraud, wire fraud, electronic scanning devices attached to ATM machines, social engineering, digital fraud and phishing attacks to obtain personal information and fraudulent impersonation of our customers through the use of falsified or stolen credentials. We expect that combating fraudulent activities as they evolve will require continued ongoing investments and attention in the future as significant fraud could cause us direct losses or impair our customer relationships, among other potential consequences, adversely impacting our reputation or results of operation. Our business and financial performance could be impacted by natural or man-made disasters, global pandemics, acts of war or terrorist activities, climate change or other adverse external events. Natural or man-made disasters (including, but not limited to, earthquakes, hurricanes, tornadoes, floods, fires, pollution, and explosions), global pandemics, acts of war, terrorist activities, climate change or other adverse external events could hurt our financial performance (i) directly through damage to our facilities or other impacts to our ability to conduct business in the ordinary course, and (ii) indirectly through such damage or impacts to our customers, suppliers or other counterparties. In particular, a significant amount of our business is concentrated in North Carolina, South Carolina, California, Texas, New York and Florida, including areas where our facilities and retail and commercial customers have been and in the future could be 22 impacted by hurricanes and flooding, earthquakes or wildfires. We also do business in Georgia, Virginia, Nebraska, Arizona, New Jersey, Hawaii, Nevada, as well as in Canada, all of which also include areas significantly exposed to the foregoing risks. We could also suffer adverse results to the extent that disasters, wars, terrorist activities, riots or civil unrest affect the broader markets or economy or our operations specifically. Our ability to minimize the consequences of such events is in significant measure reliant on the quality of our disaster recovery planning and our ability, if any, to forecast the events, and such quality and ability may be inadequate. There has been increasing political and social attention to the issue of climate change. Federal and state legislators and regulatory agencies have proposed and continue to advance numerous legislative and regulatory initiatives seeking to mitigate the negative effects of climate change. To the extent that these initiatives lead to the promulgation of new regulations or supervisory guidance applicable to us, we would expect to experience increased compliance costs and other compliance-related risks. Such climate change-related measures may also result in the imposition of taxes and fees, the required purchase of emission credits or the implementation of significant operational changes, each of which may require us to expend significant capital and incur compliance, operating, maintenance and remediation costs. We are unable to predict how climate change may impact our financial condition and operations; however, as a banking organization, the physical effects of climate change may present certain unique risks to us. For example, an increase in the frequency or magnitude of natural disasters, shifts in local climates and other disruptions related to climate change may adversely affect the value of real properties securing our loans, which could diminish the value of our loan portfolio. Such events may also cause reductions in regional and local economic activity that may have an adverse effect on our customers. Consumers and businesses in communities that we serve may change their behavior and preferences as a result of these issues and new climate change laws and regulations aimed at mitigating climate change. The impact on our customers will likely vary depending on their specific attributes, including their reliance on or role in carbon intensive activities; however, we could experience a drop in demand for our products and services, particularly in certain sectors . We may also be subject to adverse action from our regulators or other third parties, such as environmental advocacy organizations, in relation to how our business relates to or has addressed or failed to address climate change-related risks. Each of these outcomes could have a material adverse effect on our financial condition and results of operations. We rely on third party vendors to provide key components of our business infrastructure, and our vendors may be responsible for or contribute to failures that adversely affect our operations. Third party vendors provide key components of our business infrastructure, including certain data processing and information services. Their services could be difficult to quickly replace in the event of failure or other interruption in service. Failures of certain vendors to provide services could adversely affect our ability to deliver products and services to our customers. Third party vendors also present information security risks to us, both directly and indirectly through our customers. Our monitoring of significant vendor risks, including the financial stability of critical vendors, may be inadequate and incomplete. Vendor risks in particular are compounded by the COVID-19 pandemic, as unexpected disruptions can impact a third party vendor’s operations with little warning. The failure of a critical third party vendor to provide key components of our business infrastructure could substantially disrupt our business and cause us to incur significant expense while harming our relationships with our customers. The quality of our data could deteriorate and cause financial or reputational harm to the Bank. Our Data Governance program is reliant on the execution of procedures, process controls and system functionality, and errors may occur. Incomplete, inconsistent, or inaccurate data could lead to non-compliance with regulatory requirements and result in fines. Additionally, adverse impacts on customers could result in reputational harm and customer attrition. Inaccurate or incomplete data presents the risk that business decisions relying on such data will prove inefficient, ineffective or harmful to us. Additionally, information we provide to our investors and regulators may be negatively impacted by inaccurate or incomplete data, which could have a wide range of adverse consequences such as legal liability and reputational harm. Malicious action by an employee could result in harm to our customers or the Bank. Several high-profile cases of employee misconduct have occurred at other financial institutions. Such an event may lead to large regulatory fines, as well as an erosion in customer confidence, which could impact our financial and competitive position. Our employee code of ethics and policies governing our compensation, conduct and sales practices may be inadequate to deter and respond to potential employee misconduct. 23 Credit Risks If we fail to effectively manage credit risk, our business and financial condition will suffer. Effectively managing credit risks is essential for the operation of our business. There are credit risks inherent in making any loan, including risks of repayment, risks with respect to the period of time over which the loan may be repaid, risks relating to proper loan underwriting and guidelines, risks resulting from changes in economic and industry conditions, risks in dealing with individual borrowers and risks resulting from uncertainties as to the future value of collateral. Our loan approval procedures and our credit risk monitoring may be or become inadequate to appropriately manage the inherent credit risks associated with lending. Our credit administration personnel, policies and procedures may not adequately adapt to changes in economic or other conditions affecting customers and the quality of our loan portfolio. Any failure to manage such credit risks may materially adversely affect our business, consolidated results of operations and financial condition because it may lead to loans that we make not being paid back in part or in full on a timely basis or at all. Our allowance for credit losses may prove to be insufficient to absorb losses in our credit portfolios. We maintain an allowance for credit losses (“ACL”) that is designed to cover expected credit losses on loans that borrowers may not repay in their entirety. A reserve is also maintained in other liabilities to cover expected losses for unfunded commitments. The ACL may not be sufficient to cover actual credit losses, and future provisions for credit losses could materially and adversely affect our operating results. Accounting measurements related to asset impairment and the ACL require significant estimates that are subject to uncertainty and revisions driven by new information and changing circumstances. The significant uncertainties surrounding our borrowers’ abilities to conduct their businesses successfully through changing economic environments, competitive challenges and other factors complicate our estimates of the risk and amount of loss on any loan. Due to the degree of uncertainty and the susceptibility to change, the actual losses may vary substantially from current estimates. We also expect fluctuations in the ACL due to economic changes nationally as well as locally within the states in which we conduct business. This is especially true as the economy reacts to the continuation of and potential recovery from the COVID-19 pandemic. The reserve related to unfunded commitments may not be sufficient to cover actual losses, and future provisions for such losses could also materially and adversely affect our operating results and are also subject to significant uncertainties and fluctuations, particularly in light of the COVID-19 pandemic. As an integral part of their examination process, our banking regulators periodically review the ACL and may require us to increase it by recognizing additional provisions for credit losses charged to expense or to decrease the allowance by recognizing loan charge-offs, net of recoveries. Any such required additional credit loss provisions or loan charge-offs could have a material adverse effect on our financial condition and results of operations. Our concentration of loans to borrowers within the medical and dental industries, as well as the rail business, could impair our earnings if those industries experience economic difficulties. Statutory or regulatory changes relevant to the medical and dental industries, or economic conditions in the market generally, could negatively impact these borrowers’ businesses and their ability to repay their loans with us, which could have a material adverse effect on our financial condition and results of operations. Additionally, smaller practices such as those in the dental industry generally have fewer financial resources in terms of capital or borrowing capacity than larger entities, and generally have a heightened vulnerability to negative economic conditions. Consequently, we could be required to increase our ACL through additional provisions on our income statement, which would reduce reported net income. Due to our substantial concentration in our rail business, if there is a significant downturn in shipping by railcar, it could have a material adverse effect on our business and results of operations. The COVID-19 pandemic has created volatility and uncertainty in the economy, which has and is expected to continue to adversely impact our rail business. As described above, the significant declines in the price of, and demand for, oil and gas may lead to a decreased demand for our railcars. Economic conditions in real estate markets impacting collateral values and our reliance on junior liens may adversely impact our business and our results of operations. Real property collateral values may be impacted by economic conditions in the real estate market and may result in losses on loans that, while adequately collateralized at the time of origination, become inadequately collateralized over time. Our reliance on junior liens is concentrated in our consumer revolving mortgage loan portfolio. Approximately two-thirds of the consumer revolving mortgage portfolio is secured by junior lien positions, and lower real estate values for collateral underlying these loans may cause the outstanding balance of the senior lien to exceed the value of the collateral, resulting in a junior lien loan becoming effectively unsecured. Inadequate collateral values, rising interest rates and unfavorable economic conditions could 24 result in greater delinquencies, write-downs or charge-offs in future periods, which could have a material adverse impact on our results of operations and capital adequacy. Our financial condition could be adversely affected by the soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty and other relationships. We have exposure to numerous financial services providers, including banks, securities brokers and dealers and other financial services providers. Our monitoring of the financial conditions of financial institutions with which we have credit exposure is inherently limited and may be inadequate, and transactions with those institutions expose us to credit risk through the possibility of counterparty default. Market Risks Unfavorable economic or political conditions, as considered through a range of metrics, have and could continue to adversely affect our business. Our business is subject to periodic fluctuations based on international, national, regional and local economic conditions. These fluctuations are not predictable, cannot be controlled and have had and may continue to have or further have a material adverse impact on our operations and financial condition. Our banking operations are primarily located within several states but are locally oriented and community-based. Our retail and commercial banking activities are primarily concentrated within the same geographic footprint. The markets in which we have the greatest presence are North Carolina, South Carolina, California, Texas, New York, Florida and Canada. Worsening economic conditions within our markets, particularly within those with our greatest presence, could have a material adverse effect on our financial condition, results of operations and cash flows. Accordingly, we expect to continue to be dependent upon local business conditions, rail industry conditions and conditions in the local residential and commercial real estate markets we serve. Unfavorable changes in unemployment, real estate values, interest rates, foreign currency exchange rate fluctuations and other factors could weaken the economies of the communities we serve and otherwise adversely affect our business. Thus far, this includes declines in fee income and impacts on the fair value of our equity securities, but could create additional adverse impacts to provision for credit losses and declines in demand for our products and services. We conduct limited business operations in certain foreign jurisdictions, and we engage in certain cross border lending and leasing transactions. An economic recession or downturn or business disruption associated with the political environments in the international markets in which we operate could similarly adversely affect us. In addition, the political environment, the level of United States debt and global economic conditions can have a destabilizing effect on financial markets. Weakness in any of our market areas could have an adverse impact on our earnings, and consequently, our financial condition and capital adequacy. Failure to effectively manage our interest rate risk could adversely affect us. Our results of operations and cash flows are highly dependent upon net interest income. Interest rates are sensitive to economic and market conditions that are beyond our control, including the actions of the Federal Reserve’s Federal Open Market Committee (“FOMC”). Changes in monetary policy could influence interest income, interest expense, and the fair value of our financial assets and liabilities. If changes in interest rates on our interest-earning assets are not equal to the changes in interest rates on our interest-bearing liabilities, our net interest income and, therefore, our net income, could be adversely impacted. As interest rates rise, our interest expense will increase and our net interest margins may decrease, negatively impacting our performance and our financial condition. To the extent banks and other financial services providers compete for interest-bearing deposit accounts through higher interest rates, our deposit base could be reduced if we are unwilling to pay those higher rates. If we decide to compete with those higher interest rates, our cost of funds could increase and our net interest margins could be reduced. Additionally, higher interest rates may impact our ability to originate new loans. Increases in interest rates could adversely affect the ability of our borrowers to meet higher payment obligations. If this occurred, it could cause an increase in nonperforming assets and net charge-offs. The forecasts of future net interest income by our interest rate risk monitoring system are estimates and may be inaccurate. Actual interest rate movements may differ from our forecasts, and unexpected actions by the FOMC may have a direct impact on market interest rates. In response to the economic conditions resulting from the outbreak of the COVID-19 pandemic, the Federal Reserve’s target federal funds rate has been reduced nearly to 0%. Stimulus payments related to the COVID-19 pandemic made by the federal government to businesses, non-profit organizations, taxpayers and others have had the incidental 25 effect of adding to inflationary pressures. In an effort to counteract such pressures, the Federal Reserve has signaled its intent to raise interest rates in 2022. Increased interest rates may increase the cost of deposits and our other funding sources. Accounting for acquired assets may result in earnings volatility. Fair value discounts that are recorded at the time an asset is acquired are accreted into interest income based on accounting principles generally accepted in the United States (“GAAP”). The rate at which those discounts are accreted is unpredictable and the result of various factors including prepayments and estimated credit losses. Post-acquisition credit deterioration results in the recognition of provision expense. Additionally, the income statement impact of adjustments to the indemnification asset recorded in certain FDIC-assisted transactions may occur over a shorter period of time than the adjustments to the covered assets. Fair value discount accretion, post-acquisition impairment and adjustments to the indemnification asset may result in significant volatility in our earnings. Volatility in earnings could unfavorably influence investor interest in our common stock, thereby depressing the market value of our stock and the market capitalization of our company. The performance of equity securities and corporate bonds in our investment securities portfolio could be adversely impacted by the soundness and fluctuations in the market values of other financial institutions. Our investment securities portfolio contains certain equity securities and corporate bonds of other financial institutions. As a result, a portion of our investment securities portfolio is subject to fluctuation due to changes in the financial stability and market value of other financial institutions, as well as interest rate sensitivity to economic and market conditions. Such fluctuations could reduce the value of our investment securities portfolio and consequently have an adverse effect on our results of operations. We have seen volatile earnings impacts related to the fair value of equity securities in recent periods. We may be adversely impacted by the transition from LIBOR as a reference rate. We have loans, borrowings and other financial instruments with attributes that are either directly or indirectly dependent on the London Interbank Offered Rate (“LIBOR”). In 2017, the United Kingdom’s Financial Conduct Authority (the “FCA”) announced that after 2021 it would no longer compel banks to submit the rates required to calculate LIBOR. In November 2020, to facilitate an orderly LIBOR transition, the Office of the Comptroller of the Currency, the FDIC and the Federal Reserve jointly announced that entering into new contracts using LIBOR as a reference rate after December 31, 2021, would create a safety and soundness risk. On March 5, 2021, the FCA announced that all LIBOR settings will either cease to be provided by any administrator or no longer be representative immediately after December 31, 2021, in the case of 1-week and 2-month United States dollar LIBOR, and immediately after June 30, 2023, in the case of the remaining United States dollar LIBOR settings. In the United States, efforts to identify a set of alternative United States dollar reference interest rates are ongoing, and the Alternative Reference Rate Committee (the “ARRC”) has recommended the use of a Secured Overnight Funding Rate (“SOFR”). SOFR is different from LIBOR in that it is a backward-looking secured rate rather than a forward-looking unsecured rate. These differences could lead to a greater disconnect between the Bank’s costs to raise funds for SOFR as compared to LIBOR. For cash products and loans, the ARRC has also recommended Term SOFR, which is a forward-looking SOFR based on SOFR futures and may in part reduce differences between SOFR and LIBOR. To further reduce differences between replacement indices and substitute indices, some market practitioners have also gravitated towards credit sensitive alternative reference rates besides SOFR. At this time, it is not possible to predict whether and to what extent banks will continue to provide submissions for the calculation of LIBOR. Similarly, there is still uncertainty around how quickly replacement reference rates will develop sufficient liquidity and industry-wide usage, or what the effect of any such changes in views or alternatives may be on the markets for LIBOR-indexed financial instruments. The transition from LIBOR is complex and is expected to create additional costs and risks. Since proposed replacement reference rates, such as SOFR, are calculated differently, payments under contracts referencing such rates will differ from those referencing LIBOR. If LIBOR rates are no longer available, and we are required to implement replacement reference rates for the calculation of interest rates under our loan agreements with borrowers, we may incur significant expense in effecting the transition and may be subject to disputes or litigation with our borrowers over the appropriateness or comparability to LIBOR of the replacement reference rates. Consequently, failure to adequately manage this transition process with our customers could adversely impact our reputation and potentially introduce additional legal risks. The replacement reference rates could also result in a reduction in our interest income. We may also receive inquiries and other actions from regulators with respect to our preparation and readiness for the replacement of LIBOR with replacement reference rates. The transition will change our market risk profiles, requiring changes to risk and pricing models, systems, contracts, valuation tools and product design, and 26 failure to adequately manage this transition process could consequently have a material adverse effect on our business, financial condition and results of operations. The value of our goodwill may decline in the future. At December 31, 2021, we had $346.1 million of goodwill recorded as an asset on our balance sheet. We test goodwill for impairment at least annually, comparing the estimated fair value of a reporting unit with its net book value. We also test goodwill for impairment when certain events occur, such as a significant decline in our expected future cash flows, a significant adverse change in the business climate or a sustained decline in the price of our common stock. These tests may result in a write-off of goodwill deemed to be impaired, which could have a significant impact on our financial results. The market price of our common stock may be volatile due to its relative illiquidity and other factors. Although publicly traded, our common stock, particularly our Class B common stock, has less liquidity and public float than many other large, publicly traded financial services companies. Lower liquidity increases the price volatility of our common stock and could make it difficult for our shareholders to sell or buy our common stock at specific prices. Excluding the impact of liquidity, the market price of our common stock can fluctuate widely in response to other factors, including expectations of financial and operating results, actual operating results, actions of institutional shareholders, speculation in the press or the investment community, market perception of acquisitions, including the CIT Merger, rating agency upgrades or downgrades, stock prices of other companies that are similar to us, general market expectations related to the financial services industry and the potential impact of government actions affecting the financial services industry. For example, the closing price per share of our Class A common stock on the Nasdaq Global Select Market ranged from a low of $568.46 to a high of $907.04 during the year ended December 31, 2021. Liquidity Risks If our current level of balance sheet liquidity were to experience pressure, it could affect our ability to pay deposits and fund our operations. Our deposit base represents our primary source of core funding and balance sheet liquidity. We typically have the ability to stimulate core deposit growth through reasonable and effective pricing strategies. However, in circumstances where our ability to generate needed liquidity is impaired, we need access to non-core funding such as borrowings from the Federal Home Loan Bank and the Federal Reserve, Federal Funds purchased lines and brokered deposits. While we maintain access to these non-core funding sources, some sources are dependent on the availability of collateral as well as the counterparty’s willingness and ability to lend. Failure to access sources of liquidity may affect our ability to pay deposits and fund our operations. We expect to be subject to enhanced liquidity risk management requirements as a Category IV banking organization, subject to the applicable transition periods, including reporting, liquidity stress testing, and a liquidity buffer, and failure to meet these requirements could result in regulatory and compliance risks, and possible restrictions on our activities. As a result of the consummation of the CIT Merger, our total consolidated assets exceed $100 billion, and therefore we expect to be subject to enhanced liquidity risk management requirements as a Category IV banking organization, including reporting, liquidity stress testing and a liquidity buffer, subject to the applicable transition periods. Were we to meet or exceed certain thresholds for asset size and other risk-based factors, we would become subject to additional requirements under the Tailoring Rules. We expect to incur significant expense in continuing to develop policies, programs and systems designed to comply with all such requirements applicable to us. Failure to develop and maintain an adequate liquidity risk management and monitoring process may lead to adverse regulatory action (including possible restrictions on our activities). Fee revenues from overdraft and nonsufficient funds programs constitute a significant portion of our non-interest income and may be subject to increased supervisory scrutiny. Revenues derived from transaction fees associated with overdraft and nonsufficient funds (“NSF”) programs represent a significant portion of our non-interest income. In 2021, we collected approximately $54.9 million in overdraft and NSF fees, although we expect this amount to be reduced significantly in 2022 due to the reduction in our fees for overdrafts and elimination of NSF fees announced in January 2022. In 2021, certain members of Congress and the leadership of the CFPB expressed a heightened interest in bank overdraft and NSF programs. In December 2021, the CFPB published a report providing data on banks’ overdraft and NSF fee revenues as well as observations regarding consumer protection issues relating 27 to such programs and in January 2022, the CFPB published an initiative seeking public input on experiences with respect to such fees, among others. The CFPB has indicated that it intends to pursue enforcement actions against banking organizations, and their executives, that oversee overdraft practices that are deemed to be unlawful. In response to this increased congressional and regulatory scrutiny, and in anticipation of enhanced supervision and enforcement of overdraft practices in the future, certain banking organizations have begun to modify their overdraft programs. In January 2022, we announced an elimination of NSF fees and a decrease in overdraft fees. Continued competitive pressures from our peers, as well as any adoption by our regulators of new rules or supervisory guidance or more aggressive examination and enforcement policies in respect of banks’ overdraft fee practices, could cause us to further modify our program and practices in ways that may have a negative impact on our revenue and earnings, which, in turn, could have an adverse effect on our financial condition and results of operations. In addition, as supervisory expectations and industry practices regarding overdraft fee programs change, our continued charging of overdraft fees may result in negative public opinion and increased reputation risk. Capital Adequacy Risks Our ability to grow is contingent upon access to capital, which may not be readily available to us. Our primary capital sources have been retained earnings and debt issued through both private and public markets. Rating agencies regularly evaluate our creditworthiness and assign credit ratings to us and FCB. The ratings of the agencies are based on a number of factors, some of which are outside our control. In addition to factors specific to our financial strength and performance, the rating agencies also consider conditions generally affecting the financial services industry. We may not be able to maintain our current credit ratings. Rating reductions could adversely affect our access to funding sources and the cost of obtaining funding. Based on existing capital levels, we and FCB are well-capitalized under current leverage and risk-based capital standards. Our ability to grow is contingent on our ability to generate or otherwise access sufficient capital to remain well-capitalized under current and future capital adequacy guidelines. We are subject to capital adequacy and liquidity guidelines and, if we fail to meet these guidelines, our financial condition would be adversely affected. Under regulatory capital adequacy guidelines and other regulatory requirements, we, together with FCB, must meet certain capital and liquidity guidelines, subject to qualitative judgments by regulators about components, risk weightings and other factors. We are subject to capital rules issued by the Federal Reserve including required minimum capital and leverage ratios. These requirements could adversely affect our ability to pay dividends, restrict certain business activities or compel us to raise capital, each of which may adversely affect our results of operations or financial condition. Refer to the “Regulatory Considerations” section in Item 1. Business of this Annual Report on Form 10-K for additional information regarding the capital requirements under the Dodd-Frank Act and Basel III. We expect to be required to submit an annual capital plan to the Federal Reserve and to be subject to supervisory stress testing under the Federal Reserve’s CCAR process on a biennial basis as a Category IV banking organization, subject to the applicable transition periods. Under the CCAR process, the Federal Reserve will evaluate our planned capital distributions (e.g., dividends) included in our capital plan over the planning horizon (i.e., nine consecutive quarters, beginning with the quarter preceding the quarter in which the capital plan is submitted over which the relevant projections extend) to determine whether we will be able to meet our ongoing capital needs under a range of different economic scenarios. Failure to obtain a non-objection on our capital plan submitted to the Federal Reserve, or to demonstrate capital adequacy under the CCAR process, could result in restrictions in our ability to make dividends or other capital distributions. Refer to the “Regulatory Considerations” section of Item 1. Business of this Annual Report on Form 10-K for additional information regarding the annual capital plan submission to the Federal Reserve and supervisory stress testing under the CCAR process. 28 In connection with the CIT Merger, we assumed CIT’s outstanding debt obligations and preferred stock, and our resulting level of indebtedness could adversely affect our ability to raise additional capital and to meet our obligations under our existing indebtedness. In connection with the CIT Merger, we assumed certain of CIT’s outstanding indebtedness and CIT’s obligations related to its outstanding preferred stock. In February 2022, we redeemed approximately $2.9 billion of outstanding senior unsecured notes that we assumed in the CIT Merger. Our existing debt, together with any future incurrence of additional indebtedness, and the assumption of CIT’s outstanding notes and preferred stock, could have consequences that are materially adverse to our business, financial condition or results of operations. For example, it could: (i) limit our ability to obtain additional financing for working capital, capital expenditures, debt service requirements, acquisitions and general corporate or other purposes; (ii) restrict us from making strategic acquisitions or cause us to make non-strategic divestitures; (iii) restrict us from paying dividends to our shareholders; (iv) increase our vulnerability to general economic and industry conditions; or (v) require a substantial portion of cash flow from operations to be dedicated to the payment of principal and interest on our indebtedness and dividends on the preferred stock, thereby reducing our ability to use cash flows to fund our operations, capital expenditures and future business opportunities. Refer to the “Business Combinations” and “Borrowings” sections of Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations of this Annual Report on Form 10-K for further discussion of the debt we assumed in the CIT Merger, conversion of CIT Preferred Stock into BancShares Preferred Stock, and the redemption of approximately $2.9 billion of debt that we assumed in the CIT Merger. Compliance Risks We operate in a highly regulated industry, and the laws and regulations that govern our operations, taxes, corporate governance, executive compensation and financial accounting and reporting, including changes in them or our failure to comply with them, may adversely affect us. We operate in a highly regulated industry and are subject to many laws, rules, and regulations at both the federal and state levels. These broad-based laws, rules, and regulations include, but are not limited to, expectations relating to anti-money laundering, lending limits, client privacy, fair lending, prohibitions against unfair, deceptive or abusive acts or practices, regulatory reporting, and community reinvestment, In addition, we must comply with other regulations that protect the deposit insurance fund and the stability of the United States financial system, including laws and regulations that, among other matters, prescribe minimum capital requirements, impose limitations on our business activities and investments, limit the dividends or distributions that we can pay, restrict the ability of our bank subsidiaries to guarantee our debt and impose certain specific accounting requirements that may be more restrictive and may result in greater or earlier charges to earnings or reductions in our capital than GAAP. Compliance with laws and regulations can be difficult and costly, and changes in laws and regulations often result in additional compliance costs. We are subject to extensive federal and applicable state regulation and supervision, primarily through FCB and certain nonbank subsidiaries. Banking regulations are primarily intended to protect depositors’ funds, federal deposit insurance funds, and the banking system as a whole, not shareholders. These regulations affect our lending practices, capital structure, investment practices, dividend policy, and growth, among other things. Congress and federal regulatory agencies continually review banking laws, regulations, and policies for possible changes. The Sarbanes-Oxley Act of 2002 and the related rules and regulations issued by the SEC and The Nasdaq Stock Market LLC (“Nasdaq”), as well as numerous other more recently enacted statutes and regulations, including the Dodd-Frank Act, EGRRCPA, and regulations promulgated thereunder, have increased the scope, complexity and cost of corporate governance and reporting and disclosure practices, including the costs of completing our external audit and maintaining our internal controls. Such additional regulation and supervision may limit our ability to pursue business opportunities and result in a material adverse impact on our financial condition and results of operations. Changes to statutes, regulations, or regulatory policies, including changes in interpretation or implementation of statutes, regulations, or policies, could affect us in substantial and unpredictable ways. Such changes could subject us to additional costs, limit the types of financial services and products we may offer, or increase the ability of nonbanks to offer competing financial services and products, among other things. Failure to comply with laws, regulations, or policies could result in sanctions by regulatory agencies (including potential limitations on our future acquisitions or operations, or requirements to forfeit assets), civil money penalties, or reputation damage. 29 We face compliance risks related to the specialty commercial business lines acquired from CIT. In connection with the CIT Merger, we acquired new business lines that are subject to new compliance risks. Our new rail business line is subject to various laws, rules and regulations administered by authorities in jurisdictions that were not applicable to us prior to the CIT Merger. In the United States, our equipment leasing operations, including for railcars, ships, and other equipment, are subject to rules and regulations relating to safety, operations, maintenance and mechanical standards promulgated by various federal and state agencies and industry organizations, including the United States Department of Transportation, the Federal Railroad Administration, the Association of American Railroads, the Maritime Administration, the United States Coast Guard, and the United States Environmental Protection Agency. We are also subject to regulation by governmental agencies in foreign countries in which we do business as a result of the CIT Merger. Our business operations and our equipment financing and leasing portfolios may be adversely impacted by rules and regulations promulgated by governmental and industry agencies, which could require substantial modification, maintenance, or refurbishment of our railcars, ships or other equipment, or could potentially make such equipment inoperable or obsolete. Failure to comply with these laws, rule and regulations could result in sanctions by regulatory agencies (including potential limitations on our future acquisitions or operations, or requirements to forfeit assets), civil money penalties, or reputation damage. Additionally, we may incur significant expenses in our efforts to comply with these laws, rules and regulations, and these laws, rules and regulations. We expect to be a Category IV banking organization and therefore we expect to be subject to enhanced prudential standards and enhanced supervision under the Dodd-Frank Act, as amended by the EGRRCPA, and implemented by the Tailoring Rules, subject to the applicable transition periods. As a result of consummation of the CIT Merger, our total consolidated assets exceed $100 billion, and therefore we expect to be subject to enhanced prudential standards under Section 165 of the Dodd-Frank Act, as amended by the EGRRCPA, and implemented by the Tailoring Rules, subject to the applicable transition periods. If we fail to develop and maintain at a reasonable cost the systems and processes necessary to comply with the standards and requirements imposed by these rules, it could have a material adverse effect on our business, financial condition or results of operations. Additionally, as we grow, and our assets exceed certain thresholds, regulatory requirements that we are subject to, as well as our compliance expenses, will increase. Refer to the “Regulatory Considerations” section of Item 1. Business of this Annual Report on Form 10-K for additional information regarding the Tailoring Rules. The CFPB has reshaped the consumer financial laws through rulemaking and enforcement of the prohibitions against unfair, deceptive and abusive business practices. Compliance with any such change may impact the business operations of depository institutions offering consumer financial products or services, including FCB. The CFPB has broad rulemaking authority to administer and carry out the provisions of the Dodd-Frank Act with respect to financial institutions that offer covered financial products and services to consumers. The CFPB is responsible for adopting rules identifying practices or acts that are unfair, deceptive or abusive in connection with any transaction with a consumer for a consumer financial product or service, or the offering of a consumer financial product or service. The CFPB has initiated enforcement actions against a variety of bank and non-bank market participants with respect to a number of consumer financial products and services that has resulted in those participants expending significant time, money and resources to adjust to the initiatives being pursued by the CFPB. The CFPB has pursued a more aggressive enforcement policy in respect of a range of regulatory compliance matters under the Biden Administration. CFPB enforcement actions may serve as precedent for how the CFPB interprets and enforces consumer protection laws, including practices or acts that are deemed to be unfair, deceptive or abusive, with respect to all supervised institutions, which may result in the imposition of higher standards of compliance with such laws. Moreover, we are subject to supervision and examination by the CFPB for compliance with the CFPB’s regulations and policies. The limitations and restrictions that may be placed upon us by the CFPB with respect to our consumer product offerings and services may produce significant, material effects on our profitability. We may be adversely affected by changes in United States and foreign tax laws and other tax laws and regulations. Corporate tax rates affect our profitability and capital levels. We are subject to the income tax laws of the United States, its states and their municipalities and to those of the foreign jurisdictions in which we do business. These tax laws are complex and may be subject to different interpretations. We must make judgments and interpretations about the application of these tax laws when determining our provision for income taxes, our deferred tax assets and liabilities and our valuation allowance. Changes to the tax laws, administrative rulings or court decisions could increase our provision for income taxes and reduce our net income. The United States corporate tax code may be reformed by the United States Congress and additional guidance may be issued by the United States Department of the Treasury. Changes in tax laws and regulations, and income tax rates in particular, 30 could have an adverse impact on our financial condition and results of operations. These changes could also affect our regulatory capital ratios as calculated in accordance with the Basel III Rules. We are subject to ESG risks such as climate risk, hiring practices, diversity, racial and social justice issues, including in relation to our counterparties, which may adversely affect our reputation and ability to retain employees and customers. We are subject to a variety of risks arising from environmental, social and governance (“ESG”) matters. ESG matters include, but are not limited to, climate risk, hiring practices, the diversity of our work force, and racial and social justice issues involving our personnel, customers and third parties with whom we otherwise do business. Investors have begun to consider the steps taken and resources allocated by financial institutions and other commercial organizations to address ESG matters when making investment and operational decisions. If our ESG practices do not meet (or are viewed as not meeting) investor or other industry stakeholder expectations and standards, which continue to evolve, our reputation and employee and customer retention may be negatively impacted. The Biden Administration, through Executive Orders and leadership appointments at the federal agencies, has communicated and sought to implement an agenda focused on oversight and legislative initiatives in a variety of areas material to our business, including addressing climate-related risks, promoting diversity and equality within the banking industry and addressing other ESG matters relevant to us. We could also incur additional costs and require additional resources to monitor, report and comply with various ESG practices. Further, we may be exposed to negative publicity based on the identity and activities of those to whom we lend and with which we otherwise do business and the public’s view of the approach and performance of our customers and business partners with respect to ESG matters. Asset Risks We may not be able to realize our entire investment in the equipment that we lease to our customers. Our loans and leases include a significant portion of leased equipment, including, but not limited to, railcars and locomotives, technology and office equipment and medical equipment. The realization of equipment values (residual values) during the life and at the end of the term of a lease is an important element in the profitability of our leasing business. At the inception of each lease, we record a residual value for the leased equipment based on our estimate of the future value of the equipment at the end of the lease term or end of the equipment’s estimated useful life. If the market value of leased equipment decreases at a rate greater than we projected, whether due to rapid technological or economic obsolescence, unusual wear and tear on the equipment, excessive use of the equipment, recession or other adverse economic conditions impacting supply and demand, it could adversely affect the current values or the residual values of such equipment. Financial Reporting Risks Accounting standards may change and increase our operating costs or otherwise adversely affect our results. FASB and the SEC periodically modify the standards governing the preparation of our financial statements. The nature of these changes is not predictable and has impacted and could further impact how we record transactions in our financial statements, which had led to and could lead to material changes in assets, liabilities, shareholders’ equity, revenues, expenses and net income. For example, ASU 2016-13 Measurement of Credit Losses on Financial Instruments, became effective January 1, 2020, and substantially changed the accounting for credit losses on loans and other financial assets. In some cases, we could be required to apply new or revised standards retroactively, resulting in changes to previously reported financial results or a cumulative adjustment to retained earnings. Implementation of new accounting rules or standards could additionally require us to implement technology changes which could impact ongoing earnings. Our accounting policies and processes are critical to the reporting of our financial condition and results of operations. They require management to make estimates about matters that are uncertain, and such estimates may be incorrect. Accounting policies and processes are fundamental to how we record and report our financial condition and results of operations. Management must exercise judgment in selecting and applying many of these accounting policies and processes so they comply with GAAP. In some cases, management must select the accounting policy or method to apply from two or more alternatives, any of which may be reasonable under the circumstances, yet may result in us reporting materially different results than would have been reported under a different alternative. Management has identified certain accounting policies as being critical because they require management to make difficult, subjective or complex conclusions about matters that are uncertain. Materially different amounts could be reported under different conditions or using different assumptions or estimates. Because of the uncertainty surrounding management’s 31 judgments and the estimates pertaining to these matters, we may be required to adjust accounting policies or restate prior period financial statements. Refer to “Critical Accounting Estimates” included in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations of this Annual Report on Form 10-K. Our business is highly quantitative and requires widespread use of financial models for day-to-day operations; these models may produce inaccurate predictions that significantly vary from actual results, and we may rely on these inaccurate predictions in making decisions that ultimately adversely affect our business. We rely on quantitative models to measure risks and to estimate certain financial values. Such models may be used in many processes including, but not limited to, the pricing of various products and services, classifications of loans, setting interest rates on loans and deposits, quantifying interest rate and other market risks, forecasting losses, measuring capital adequacy and calculating economic and regulatory capital levels. Models may also be used to estimate the value of financial instruments and balance sheet items. Inaccurate or erroneous models present the risk that business decisions relying on the models will prove inefficient, ineffective or harmful to us. Additionally, information we provide to our investors and regulators may be negatively impacted by inaccurately designed or implemented models. For further information on risk monitoring, refer to the “Risk Management” section included in Item 7A. Quantitative and Qualitative Disclosure about Market Risk of this Annual Report on Form 10-K. We may fail to maintain an effective system of internal control over financial reporting, which could hinder our ability to prevent fraud and provide reliable financial reports to key stakeholders. We must have effective internal controls over financial reporting in order to provide reliable financial reports, to effectively prevent fraud and to operate successfully as a public company. If we are unable to provide reliable financial reports or prevent fraud, our reputation and operating results will be harmed and we may violate regulatory requirements or otherwise become subject to legal liability. We may discover material weaknesses or significant deficiencies requiring remediation, which would require additional expense and diversion of management attention, among other consequences. A “material weakness” is a deficiency, or a combination of deficiencies, in internal controls over financial reporting such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis. Any failure to maintain effective internal controls or to implement any necessary improvement of our internal controls in a timely manner could, among other things, result in losses from fraud or error, harm our reputation or cause investors to lose confidence in our reported financial information, each of which could have a material adverse effect on our results of operations and financial condition and the market value of our common stock.