HILLS BANCORPORATION 10-K

Item 1A. Risk Factors The performance of our Company is subject to various risks. We consider the risks described below to be the most significant risks we face, but such risks are not the only risk factors that could affect us. Additional risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially and adversely affect our business, financial condition or results of operations. For a discussion of the impact of risks on our financial condition and results of operations in recent years and on forward looking statements contained in this report, reference is made to Item 7 below. Risks Related to the Company's Business We may be adversely affected by economic conditions in the local economies in which we conduct our operations, and in the United States in general. Our primary market includes the Iowa counties of Johnson, Linn and Washington. Our market has been one of the strongest economic areas in Iowa exhibiting economic growth over the past ten years. The unemployment rate for our prime market area is favorable and the rate historically has been lower than the unemployment rates for both the United States and the State of Iowa. However, unfavorable or uncertain economic and market conditions may adversely affect our business and profitability. Our business faces various material risks, including credit risk, liquidity risk and the risk that the demand for our products and services will decrease. Consumer confidence, real estate values, interest rates and investment returns could make the types of loans we originate less profitable and could increase our credit risk and litigation expense. And, while the presence of the University of Iowa and its affiliated institutions has a significant favorable impact upon the regional economy, it is unclear what impact the State budget and funding models will have on the University of Iowa and the University of Iowa Hospitals and Clinics. The ongoing COVID-19 pandemic and measures intended to prevent its spread could have a material adverse effect on our business, results of operations and financial condition, and such effects will depend on future developments, which are highly uncertain and are difficult to predict. In December 2019, a novel coronavirus (COVID-19) was reported in China, and, in March 2020, the World Health Organization declared it a pandemic. On March 12, 2020, the President of the United States declared the COVID-19 outbreak in the United States a national emergency. The COVID-19 pandemic has caused significant economic dislocation in the United States as many state and local governments ordered non-essential businesses to close and residents to shelter in place at home. This has resulted in an unprecedented slow-down in economic activity and a related increase in unemployment. Since the COVID-19 outbreak, more than 65 million people have filed claims for unemployment, and stock markets have experienced significant volatility and, in particular, bank stocks have significantly declined in value. In response to the COVID-19 outbreak, the Federal Reserve Board has reduced the benchmark fed funds rate to a target range of 0% to 0.25%, and the yields on 10 and 30-year treasury notes have declined to historic lows. The federal banking agencies have encouraged financial institutions to prudently work with affected borrowers and have passed multiple rounds of legislation to provide relief from reporting loan classifications due to modifications related to the COVID-19 outbreak. Finally, the spread of the coronavirus caused the Company to modify its business practices, including employee travel, employee work locations, and cancellation of physical participation in meetings, events and conferences. The Company may take further actions as may be required by government authorities or that it determines are in the best interests of employees, customers and business partners. There is no certainty that such measures will be sufficient to mitigate the risks posed by the virus or will otherwise be satisfactory to government authorities. In addition, the success of the Company’s operations substantially depends on the management skills of its executive officers and directors, many of whom have held officer and director positions with the Company for many years. The Company’s Treasurer and Chief Financial Officer resigned in September 2020. The Company has commenced a search for a chief financial officer and will make a subsequent announcement regarding such appointment upon completion. Pending the completion of its search, the Company retained an outside consultant to assist the Chief Executive Officer in managing the responsibilities of the Chief Financial Officer position. The unanticipated loss or unavailability of key employees due to the outbreak could harm our ability to operate our business or execute our business strategy. Given the ongoing and dynamic nature of the circumstances, it remains difficult to predict the full impact of the COVID-19 outbreak on our business. The United States government has taken steps to attempt to mitigate some of the more severe anticipated economic effects of the virus, including the passage of the Coronavirus Aid, Relief, and Economic Security Act (CARES Act). Further legislation was passed in December 2020, the Coronavirus Response and Relief Supplemental Appropriations Act 2021 , which extended many provisions in the CARES Act, but there can be no assurance that such steps Page 14 Table of Contents will be effective or achieve their desired results in a timely fashion. The extent of such impact from the COVID-19 outbreak and related mitigation efforts will depend on future developments, which are highly uncertain, including but not limited to, the duration and spread of the outbreak, its severity, the actions to contain the virus or treat its impact, the broad distribution of vaccines, and how quickly and to what extent normal economic and operating conditions can resume. As a result, the Company could be subject to any of the following risks, any of which could have a material, adverse effect on our business, financial condition, liquidity, and results of operations: • demand for our products and services may decline, making it difficult to grow assets and income; • if the economy is unable to substantially reopen, and high levels of unemployment continue for an extended period of time, loan delinquencies, problem assets, and foreclosures may increase, resulting in increased charges and reduced income; • collateral for loans, especially real estate, may decline in value, which could cause loan losses to increase; • our allowance for loan losses may be insufficient given the significant economic uncertainties created by the pandemic and, as a result, may have to be increased if borrowers experience financial difficulties beyond forbearance periods, which will adversely affect our net income; • the net worth and liquidity of loan guarantors may decline, impairing their ability to honor commitments to us; • as the result of the decline in the Federal Reserve Board’s target federal funds rate, the yield on our assets may decline to a greater extent than the decline in our cost of interest-bearing liabilities, reducing our net interest margin and spread and reducing net income; • a material decrease in net income or a net loss over several quarters could result in a decrease in the rate of our quarterly cash dividend; • we rely on third party vendors for certain services and the unavailability of a critical service due to the COVID-19 outbreak could have an adverse effect on us; and • Federal Deposit Insurance Corporation premiums may increase if the agency experiences additional resolution costs. Any one or a combination of the factors identified above could negatively impact our business, financial condition and results of operations and prospects. Even after the COVID-19 outbreak has subsided, the Company may continue to experience materially adverse impacts to our business as a result of the virus’s global economic impact, including the availability of credit, adverse impacts on our liquidity and any recession that has occurred or may occur in the future. As a participating lender in the Paycheck Protection Program (PPP), the Company and the Bank are subject to additional risks of litigation from the Bank’s customers or other parties regarding the Bank’s processing of loans for the PPP and risks that the Small Business Administration (SBA) may not fund some or all PPP loan guarantees. The CARES Act included a loan program administered through the SBA referred to as the PPP. Under the PPP, small businesses and other entities and individuals can apply for loans from existing SBA lenders and other approved regulated lenders that enroll in the program, subject to numerous limitations and eligibility criteria. The initial PPP opened on April 3, 2020 through August 2020, with another round of PPP funding approved in December 2020 with the Coronavirus Response and Relief Supplemental Appropriations Act 2021 ; however, there has been some ambiguity in the laws, rules and guidance regarding the operation of the PPP, which exposes the Company to risks relating to noncompliance with the PPP. Since the opening of the PPP, several other larger banks have been subject to litigation regarding the process and procedures that such banks used in processing applications for the PPP and claims related to agent fees. The Company and the Bank may be exposed to the risk of similar litigation from both customers and non-customers that approached the Bank regarding PPP loans. If any such litigation is filed against the Company or the Bank and is not resolved in a manner favorable to the Company or the Bank, it may result in significant financial liability or adversely affect the Company’s reputation. In addition, litigation can be costly, regardless of outcome. Any financial liability, litigation costs or reputational damage caused by PPP related litigation could have a material adverse impact on our business, financial condition and results of operations. The Bank also has credit risk on PPP loans if a determination is made by the SBA that there is a deficiency in the manner in which the loan was originated, funded, or serviced by the Bank, such as an issue with the eligibility of a borrower to receive a PPP loan, which may or may not be related to the ambiguity in the laws, rules and guidance regarding the operation of the PPP. In the event of a loss resulting from a default on a PPP loan and a determination by the SBA that there was a deficiency in the manner in which the PPP loan was originated, funded, or serviced by the Company, the SBA may deny its liability under the guaranty, reduce the amount of the guaranty, or, if it has already paid under the guaranty, seek recovery of any loss related to the deficiency from the Company. Page 15 Table of Contents Our profitability and liquidity may be adversely affected by deterioration in the credit quality of, or defaults by, third parties who owe us money or other assets. We are exposed to the risk that third parties that owe us money or other assets will not fulfill their obligations. These parties may default on their obligations to us due to bankruptcy, lack of liquidity, operational failure or other reasons. Our rights against third parties may not be enforceable in all circumstances. In addition, deterioration in the credit quality of third parties whose securities or obligations we hold could result in losses and/or adversely affect our ability to use those securities or obligations for liquidity purposes. Our financial condition has not been materially impacted by the deterioration in the credit quality of third parties except as related to borrower credit quality. Management believes that the allowance for loan losses is adequate to absorb probable losses on any existing loans that may become uncollectible but cannot predict loan losses with certainty and cannot assure that our allowance for loan losses will prove sufficient to cover actual losses in the future. Our allowance for loan losses may not be adequate to cover actual losses. Like all financial institutions, we maintain an allowance for loan losses to provide for loan defaults and non-performance. Our allowance for loan losses is based on our historical loss experience as well as an evaluation of the risks associated with our loan portfolio, including the size and composition of the loan portfolio, current economic conditions and concentrations within the portfolio. The determination of the appropriate level of the allowance for loan losses inherently involves a high degree of subjectivity and requires us to make significant estimates of current credit risks and future trends, all of which may undergo material changes. Economic conditions affecting borrowers, including, but not limited to, the ongoing economic impact of the COVID-19 pandemic and the related uncertainties created thereby, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of our control, may require an increase in the allowance for loan losses. In addition, bank regulatory agencies periodically review our allowance for loan losses and may require an increase in the provision for loan losses or the recognition of further loan charge-offs, based on judgments different than those of management. In addition, if charge-offs in future periods exceed expectations, we will need additional provisions to increase the allowance for loan losses. Any increases in the allowance for loan losses may result in a decrease in net income and capital, and may have a material adverse effect on our financial condition and results of operations. In June 2016, the Financial Accounting Standards Board (FASB) issued ASU 2016-13, "Financial Instruments - Credit Losses (Topic 326), Measurement of Credit Losses on Financial Instruments," which replaces the current "incurred loss" model for recognizing credit losses with an "expected loss" model referred to as the Current Expected Credit Loss model, or CECL. Under the CECL model, we will be required to present certain financial assets carried at amortized cost, such as loans held for investment and held-to-maturity debt securities, at the net amount expected to be collected. The measurement of expected credit losses is to be based on information about past events, including historical experience, current conditions, and reasonable and supportable forecasts that affect the collectability of the reported amount. This measurement will take place at the time the financial asset is first added to the balance sheet and periodically thereafter. This differs significantly from the "incurred loss" model required under current GAAP, which delays recognition until it is probable a loss has been incurred. Accordingly, we expect that the adoption of the CECL model will materially affect how we determine our allowance for loan losses and could require us to significantly increase our allowance. Moreover, the CECL model may create more volatility in the level of our allowance for loan losses. The Company is currently finalizing the CECL model and upon adoption of ASU 2016-13 (CECL) in the first quarter of 2021 anticipates an increase to the allowance for credit losses for loans of approximately $2 to $4 million and an unfunded commitment liability of approximately $3 to $4 million. See Note 1 for further discussion. Our loan portfolio has a large concentration of real estate loans, which involve risks specific to real estate value. Real estate loans, which constitute a large portion of our loan portfolio, include home equity, commercial, construction and residential loans, and such loans are concentrated in the Bank’s trade area. As of December 31, 2020, 82.69% of our loans had real estate as a primary component of collateral. The market value of real estate may fluctuate significantly in a short period of time as a result of market conditions in the geographic area in which the real estate is located. Adverse developments affecting real estate values in our market could increase the credit risk associated with our loan portfolio. Also, real estate lending typically involves higher loan principal amounts and the repayment of the loans generally is dependent, in large part, on sufficient income from the properties securing the loans to cover operating expenses and debt service. Economic events or governmental regulations outside of the control of the borrower could adversely impact the future cash flow and market values of the affected properties. Page 16 Table of Contents If the loans that are collateralized by real estate become troubled during a time when market conditions are declining or have declined, then we may not be able to realize the amount of security that we anticipated at the time of originating the loan, which could cause us to increase our provision for loan losses and adversely affect our operating results and financial condition. Our real estate loans also include construction loans, including land acquisition and development. Construction, land acquisition and development lending involves additional risks because funds are advanced based upon estimates of costs and the estimated value of the completed project. Because of the uncertainties inherent in estimating construction costs, as well as the market value of the completed project and the effects of governmental regulation on real property, it is relatively difficult to evaluate accurately the total funds required to complete a project and the related loan-to-value ratio. As a result, commercial construction loans often involve the disbursement of substantial funds with repayment dependent, in part, on the success of the ultimate project and the ability of the borrower to sell or lease the property, rather than the ability of the borrower or guarantor to repay principal and interest. If our appraisal of the value of the completed project proves to be overstated, we may have inadequate security for the repayment of the loan upon completion of construction of the project. Commercial loans make up a significant portion of our loan portfolio. Our commercial loans are primarily made based on the identified cash flow of the borrower and secondarily on the underlying collateral provided by the borrower. Repayment of our commercial loans is often dependent on the cash flows of the borrower, which may be unpredictable. Most often, this collateral is accounts receivable, inventory, machinery and equipment. In the case of loans secured by accounts receivable, the availability of funds for the repayment of these loans may be substantially dependent on the ability of the borrower to collect amounts due from its customers. The other types of collateral securing these loans may depreciate over time, may be difficult to appraise and may fluctuate in value based on the success of the business. There may be issues with environmental law compliance if we take possession of real property that secures a loan. A significant portion of our loan portfolio is secured by real property. We may foreclose on and take title to certain real property. There is a risk that hazardous substances could be found on the property and we may be liable for remediation costs, personal injury and/or property damage. We may incur substantial expenses to comply with environmental laws which may materially reduce the property's value or limit our ability to dispose of the property. The remediation costs and any other financial liabilities associated with the property could have a material adverse effect on our financial condition and results of operations. Our agricultural loans may involve a greater degree of risk than other loans, and the ability of the borrower to repay may be affected by many factors outside of the borrower’s control. Payments on agricultural real estate loans are dependent on the profitable operation or management of the farm property securing the loan. The success of the farm may be affected by many factors outside the control of the borrower, including adverse weather conditions that prevent the planting of a crop or limit crop yields (such as hail, drought and floods), loss of livestock due to disease or other factors, changes in market prices for agricultural products (both domestically and internationally) and the impact of government regulation (including changes in price supports, subsidies and environmental regulation). In addition, many farms are dependent on a limited number of key individuals whose injury or death may significantly affect the successful operation of the farm. If the cash flow from a farming operation is diminished, the borrower’s ability to repay the loan may be impaired. The primary crops in our market areas are corn and soybeans. Accordingly, adverse circumstances affecting these crops could have an adverse effect on our agricultural real estate loan portfolio. We also originate agricultural operating loans. As with agricultural real estate loans, the repayment of operating loans is dependent on the successful operation or management of the farm property. Likewise, agricultural operating loans involve a greater degree of risk than lending on residential properties, particularly in the case of loans that are unsecured or secured by rapidly depreciating assets such as farm equipment or assets such as livestock or crops. The primary livestock in our market areas is hogs and turkeys. In these cases, any repossessed collateral for a defaulted loan may not provide an adequate source of repayment of the outstanding loan balance as a result of the greater likelihood of damage, loss or depreciation. Page 17 Table of Contents The ongoing impact of the derecho storm could have a material adverse effect on our business, results of operations and financial condition, and such effects will depend on future developments, which are highly uncertain and are difficult to predict. On August 10, 2020, a derecho impacted Eastern Iowa, primarily Cedar Rapids, Iowa and the surrounding areas. The derecho caused widespread high winds up to 140 mph, the equivalent of a Category 4 hurricane, torrential rain, large hail and low-class tornadoes. The damage from the derecho was significant across the east central Iowa area, including wide-scale utility disruptions, residential and commercial property damage and severe damage to corn and soybeans crops. The Bank has assisted customers impacted by the derecho by providing short-term loan modifications to defer principal payments on loans totaling $21.36 million, $14.87 million of which were still active as of December 31, 2020, primarily for 1 to 4 family non-owner occupied, multifamily and commercial real estate loans. Further deterioration to the local economy caused by the derecho could have a materially negative impact on the Bank’s financial condition and results of operation in future periods. We may be required to repurchase mortgage loans or reimburse investors and others as a result of breaches in contractual representations and warranties. We sell residential mortgage loans to various parties that purchase mortgage loans for investment. The agreements under which we sell mortgage loans contain various representations and warranties regarding the origination and characteristics of the mortgage loans, including ownership of the loan, compliance with loan criteria set forth in the applicable agreement, validity of the lien securing the loan, absence of delinquent taxes or liens against the property securing the loan, and compliance with applicable origination laws. We may be required to repurchase mortgage loans, indemnify the investor, or reimburse the investor for credit losses incurred on loans in the event of a breach of contractual representations or warranties. The agreements under which we sell mortgage loans require us to deliver various documents to the investor, and we may be obligated to repurchase any mortgage loan as to which the required documents are not delivered or are defective. We depend on the accuracy and completeness of information about customers and counterparties. In deciding whether to extend credit or enter into other transactions with customers and counterparties, we may rely on information furnished by or on behalf of customers and counterparties, including financial statements and other financial information. We also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors and accountants if made available. If this information is inaccurate, we may be subject to regulatory action, reputational harm or other adverse effects with respect to the operation of our business, our financial condition and our results of operation. If we are unable to continuously attract deposits and other short-term funding, our financial condition and our business prospects could be adversely affected. In managing our liquidity, our primary source of short-term funding is customer deposits. Our ability to continue to attract these deposits, and other short-term funding sources, is subject to variability based upon a number of factors, including the relative interest rates we are prepared to pay for these liabilities and the perception of safety of those deposits or short-term obligations relative to alternative short-term investments. The availability and cost of credit in short-term markets depends upon market perceptions of our liquidity and creditworthiness. Our efforts to monitor and manage liquidity risk may not be successful or sufficient to deal with dramatic or unanticipated changes in event-driven reductions in liquidity. In such events, our cost of funds may increase, thereby reducing our net interest revenue, or we may need to dispose of a portion of our investment portfolio, which, depending on market conditions, could result in our realizing a loss or experiencing other adverse consequences. Conditions in the financial markets may limit our access to funding to meet our liquidity needs. Liquidity is essential to our business, as we must maintain sufficient funds to respond to the needs of depositors and borrowers. An inability to raise funds through deposits, borrowings, the sale or pledging as collateral of loans and other assets could have a substantial adverse effect on our liquidity. Our access to funding sources in the amounts adequate to finance our activities could be impaired by factors that affect us specifically or the financial services industry in general. Factors that could adversely affect our access to liquidity sources include a decrease in the level of our business activity due to a market downturn or adverse regulatory action against us. Our ability to borrow could also be impaired by factors that are not specific to us, such as severe disruption of the financial markets or adverse news and expectations about the prospects for the financial services industry as a whole. Page 18 Table of Contents As a part of our liquidity management, we use a number of funding sources in addition to core deposit growth and repayments and maturities of loans and investments. These sources include brokered money markets and certificates of deposit, federal funds purchased, lines of credit and Federal Home Loan Bank advances. Negative operating results or changes in industry conditions could lead to an inability to replace these additional funding sources at maturity. Our financial flexibility could be constrained if we are unable to maintain our access to funding or if adequate financing is not available to accommodate future growth at acceptable interest rates. Finally, if we are required to rely more heavily on more expensive funding sources to support future growth, our revenues may not increase proportionately to cover our costs. In this case, our results of operations and financial condition would be adversely affected. Reduction in the value, or impairment of our investment securities, may impact our earnings and stockholders' equity. We maintained a balance of $416.54 million, or 11.02% of our assets, in investment securities at December 31, 2020. Changes in market interest rates may affect the value of these investment securities, with increasing interest rates generally resulting in a reduction of value. Although the reduction in value from temporary increases in market rates does not affect our income until the security is sold, it does result in an unrealized loss recorded in other comprehensive income that may reduce our stockholders' equity. Further, we periodically test our investment securities for other-than-temporary impairment in value. In assessing whether the impairment of investment securities is other-than-temporary, we consider the length of time and extent to which the fair value has been less than cost, the financial condition and near-term prospects of the issuer, and the intent and ability to retain our investment in the security for a period of time sufficient to allow for any anticipated recovery in fair value. Our growth strategy relies heavily on our management team, and the unexpected loss of key managers and/or officers may adversely affect our operations. Our success is dependent on experienced senior management with a strong local community network. Our ability to retain the current management team is key to the successful implementation of our growth strategy. It is equally important that we are able to continue to attract and retain quality and community-focused managers and officers. The unexpected loss of one of our key managers and/or officers or the inability to attract qualified personnel could have an adverse effect on our operations, financial condition and reputation. The Company’s Treasurer and Chief Financial Officer resigned in September 2020. The Company has commenced a search for a chief financial officer and will make a subsequent announcement regarding such appointment upon completion. Pending the completion of its search, the Company retained an outside consultant to assist the Chief Executive Officer in managing the responsibilities of the Chief Financial Officer position. The potential for business interruption exists throughout our organization. Integral to our performance is the continued efficacy of our technical systems, operational infrastructure, relationships with third parties and the array of personnel involved with bank operations. Failure by any or all of these resources subjects us to risks that may vary in size, scale and scope. This includes, but is not limited to, operational or technical failures, ineffectiveness or exposure due to interruption in third-party support, as well as the loss of key individuals or failure on the part of key individuals to perform properly. These risks are heightened during data system changes or conversions. Although management has established policies and procedures to address such failures, the occurrence of any such event could have a material adverse effect on our business, which, in turn, could have a material adverse effect on our financial condition and results of operations. Our risk management framework may not be effective in mitigating risk and loss. We maintain an enterprise risk management program that is designed to identify, quantify, monitor, report and control the risks that we face. These include credit, liquidity, market, operational, reputational, compliance, strategic, information technology and security, and trust risks. While we assess this program on an ongoing basis, there can be no assurance that its approach and framework for risk management and related controls will effectively mitigate risk and limit losses in our business. If conditions or circumstances arise that expose flaws or gaps in the risk management program or if its controls break down, the performance and value of our business could be adversely affected. Our internal controls may be ineffective. We regularly review and update our internal controls, disclosure controls and procedures, and corporate governance policies and procedures. Any system of controls, however well-designed and operated, is based in part on certain assumptions and may provide only reasonable, not absolute, assurances that the objectives of the controls are met. Any failure or circumvention of our controls and procedures or failure to comply with regulations related to controls and procedures could have a material adverse effect on our business, financial condition and results of operation. Page 19 Table of Contents We are subject to a variety of litigation or other proceedings, which could adversely affect our business. We are involved from time to time in a variety of litigation or other proceedings arising out of business or operations. We establish reserves for claims when appropriate under accounting principles generally accepted in the United States of America, but costs often may be incurred in connection with a matter before any reserve has been created. In addition, the actual costs associated with resolving a claim may be substantially higher than amounts that we have reserved. Substantial legal claims could have a detrimental impact on our business, results of operations, and financial condition and may cause reputational harm. Risks Related to the Banking Industry in General and Community Banking in Particular Changes in U.S. trade policies, such as the implementation of tariffs, and other factors beyond the Company’s control may adversely impact our business, financial condition and results of operations. The U.S. government has implemented tariffs on certain products from countries or entities such as Mexico, Canada, China and the European Union. These countries have issued or continue to threaten retaliatory tariffs against products from the United States, including agricultural products. The United States and these countries may impose additional tariffs and retaliatory tariffs in the future. Tariffs, retaliatory tariffs or other trade restrictions on products and materials that our customers import or export, including agricultural products such as soybeans, could cause the prices of our customers’ products to increase which could reduce demand for such products, or reduce our customer margins, and adversely impact their revenues, financial results and ability to service debt. This could adversely affect our financial condition and results of operations. In addition, to the extent changes in the political environment have a negative impact on us or on the markets in which we operate, our business, results of operations and financial condition could be materially and adversely impacted in the future. In January 2020, passage of the United States-Mexico-Canada (USMCA) trade agreement helped to alleviate some of these risks. The USMCA updates trading rules to better reflect 21st century technology, regulates labor and environmental standards in Mexico, tightens the rules the auto industry must follow to trade vehicles duty free across the three countries and provides tariff-free trade in North America. We may be adversely impacted by recent legislation and potential additional legislation and rulemaking. The 2008-2009 recession produced a number of new laws that impact financial institutions including the Dodd-Frank Act. The Dodd-Frank Act established the Consumer Financial Protection Bureau (the “CFPB”) and granted it the broad authority to administer and enforce a new federal regulatory framework of consumer financial regulation. Any changes to state and federal banking laws and regulations may adversely impact our ability to expand services and to increase the value of our business. We are subject to extensive state and federal regulation, supervision, and legislation that govern almost all aspects of our operations. These laws may change from time to time and are primarily intended for the protection of consumers, depositors and the deposit insurance funds. In addition, our earnings are affected by the monetary policies of the Board of Governors of the Federal Reserve. These policies, which include regulating the national supply of bank reserves and bank credit, may have a major effect upon the source and cost of funds and the rates of return earned on loans and investments. The Federal Reserve influences the size and distribution of bank reserves through its open market operations and changes in cash reserve requirements against member bank deposits. We cannot predict what effect such act and any presently contemplated or future changes in the laws or regulations or their interpretations would have on us, including changes with the new government administration, but such changes could be materially adverse to our financial performance. Changing interest rates may adversely affect our profits. Our income and cash flows depend to a great extent on the difference between the interest rates earned by us on interest-earning assets such as loans and investment securities and the interest rates paid by us on interest-bearing liabilities such as deposits and borrowings. Our net interest margin will be affected by general economic conditions, fiscal and monetary policies of the federal government, and our ability to respond to changes in such rates. Our assets and liabilities are affected differently by a change in interest rates. An increase or decrease in rates, the length of loan terms or the mix of adjustable and fixed rate loans in our portfolio could have a positive or negative effect on our net income, capital and liquidity. We measure interest rate risk under various rate scenarios and using specific criteria and assumptions. A summary of this process is presented under the heading "Quantitative and Qualitative Disclosures about Market Risk" included under Item 7A of Part II of this Form 10-K. Although we believe our current level of interest rate sensitivity is reasonable and effectively managed, significant fluctuations in interest rates may have an adverse effect on our business, financial condition and results of operations. Also, our interest rate risk modeling techniques and assumptions may not fully predict or capture the impact of actual interest rate changes on our financial condition and results of operations. Page 20 Table of Contents The replacement of LIBOR could adversely affect the Company’s revenue or expenses and the value of those assets or obligations. LIBOR and certain other “benchmarks” are the subject of recent national, international and other regulatory guidance and proposals for reform. These reforms may cause such benchmarks to perform differently than in the past or have other consequences which cannot be predicted. LIBOR is set based on interest information reported by certain banks, which may stop reporting such information after 2021. It is uncertain at this time whether LIBOR will change or cease to exist or the extent to which those entering into financial contracts will transition to any particular benchmark. While there is no consensus on what rate or rates may become accepted alternatives to LIBOR, a group of large banks, the Alternative Reference Rate Committee or ARRC, selected by the Federal Reserve Bank of New York, started in May 2018 to publish the Secured Overnight Finance Rate or SOFR as an alternative to LIBOR. SOFR is a broad measure of the cost of borrowing cash overnight collateralized by Treasury securities, given the depth and robustness of the U.S. Treasury repurchase market. At this time, it is impossible to predict whether SOFR will become an accepted alternative to LIBOR. The market transition away from LIBOR to an alternative reference rate, including SOFR, is complex and could have a range of adverse effects on the Bank’s business, financial condition and results of operations. In particular, any such transition could: • adversely affect the interest rates paid or received on, and the revenue and expenses associated with, the Bank’s floating rate obligations, loans, deposits, derivatives and other financial instruments tied to LIBOR rates, or other securities or financial arrangements given LIBOR’s role in determining market interest rates globally; • adversely affect the value of the Bank’s floating rate obligations, loans, deposits, derivatives and other financial instruments tied to LIBOR rates, or other securities or financial arrangements given LIBOR’s role in determining market interest rates globally; • prompt inquiries or other actions from regulators in respect of the Bank’s preparation and readiness for the replacement of LIBOR with an alternative reference rate; • result in disputes, litigation or other actions with counterparties regarding the interpretation and enforceability of certain fallback language in LIBOR-based securities; and • require the transition to or development of appropriate systems and analytics to effectively transition the Bank’s risk management processes from LIBOR-based products to those based on the applicable alternative pricing benchmark, such as SOFR. The manner and impact of this transition, as well as the effect of these developments on the Bank’s funding costs, loan and investment and trading securities portfolios, asset-liability management, and business, is uncertain. We experience intense competition for loans and deposits. Competition in banking and financial services business in our market is highly competitive and is currently undergoing significant change. Our competitors include local commercial banks, local credit unions, online banks, mortgage companies, finance companies and other non-bank financial services providers. Increasingly, competitors are able to provide integrated financial services over a broad geographic area. Increased competition may result in a decrease in the amounts of loans and deposits, reduced spreads between loan rates and deposit rates or loan terms that are less favorable to us. Competition may also accelerate investments in technology or infrastructure. Any of these results could have a material adverse effect on our ability to grow and remain profitable. Growth levels in local and national real estate markets may impact our operations and/or financial condition. Change in growth in the national housing market as evidenced by reports of levels of new and existing home sales, inventories of houses on the market, property values, building permits, and the time houses remain on the market may indicate increased levels of credit risk. In past history of real estate growth, some lenders made many adjustable-rate mortgage loans, and lowered their credit standards with respect to mortgage loans and home equity loans. A subsequent slowdown in the national housing market created uncertainty and liquidity issues relating to the value of such mortgage loans, which caused disruption in credit markets. Management will continue to monitor that the Bank has maintained appropriate lending standards in times of real estate growth and decline. No assurance can be given that these conditions will not directly or indirectly affect our operations. We are subject to risks associated with technological changes and the resources needed to implement the changes. Our industry is susceptible to significant technological changes as there continue to be a high level of new technology driven products and services introduced. Technological advancement aids us in providing customer service and increases efficiency. Our national competitors may have more resources to invest in technological changes. As a result they may be able to offer Page 21 Table of Contents products and services that are more technologically advanced and that may put us at a competitive disadvantage. Our future may depend on our ability to analyze technological changes to determine the best course of action for our business, customers and shareholders. We rely heavily on our network security and any system failure or data breach could subject us to increased costs as well as reputational risk. Our operations are dependent on our ability to process financial transactions in a secure manner. Failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors and other service providers, could disrupt our business or the businesses of our customers, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, increase our costs and cause losses. We must ensure that information is properly protected from a variety of threats such as cyber attacks, error, fraud, sabotage, terrorism, industrial espionage, privacy violation, service interruption, and natural disaster. These threats arise from numerous sources including human error, fraud on the part of employees or third parties, technological failure, telecommunication outages, and severe weather conditions. Information security risks for financial institutions like us have increased recently in part because of new technologies, the increased use of the internet and telecommunications technologies (including mobile devices and cloud computing) to conduct financial and other business transactions, political activism, and the increased sophistication and activities of organized crime. Although we employ detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by persistent sophisticated attacks and malware designed to avoid detection. While we have not been materially impacted by cyber incidents, we have been subject to other intentional cyber incidents from third parties over the last several years, including denial of service attacks which attempt to interrupt service to customers and malicious software attacks on computer systems which attempt to allow unauthorized entrance. We also face risks related to cyber attacks and other security breaches in connection with card transactions that typically involve the transmission of sensitive information regarding our customers through various third parties. Some of these parties have in the past been the target of security breaches and cyber attacks, and because the transactions involve third parties and environments that we do not control or secure, future security breaches or cyber attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them. We also rely on numerous other third party service providers to conduct other aspects of our business operations and face similar risks relating to them. While we conduct security assessments on our higher risk third party service providers, we cannot be sure that their information security protocols are sufficient to withstand a cyber attack or other security breach. There can be no assurance that cyber incidents will not occur and they could occur more frequently and on a more significant scale. We devote significant resources to implement, maintain, monitor and regularly upgrade our systems and networks with measures such as intrusion detection and prevention and firewalls to safeguard critical business applications. The additional cost to the Company of our cyber security monitoring and protection systems and controls includes the cost of hardware and software, third party technology providers, consulting, and legal fees, in addition to the incremental cost of our personnel who focus a substantial portion of their responsibilities on cyber security. In addition, because cyber attacks can change frequently we may be unable to implement effective preventive or proactive measures in time. With the assistance of third-party service providers, we intend to continue to implement security technology and establish procedures to maintain network security, but there is no assurance that these measures will be successful. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. Any activity that jeopardizes our network and the security of the information stored thereon may result in significant cost and have a significant adverse effect on our reputation. We maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber risks. Such insurance coverage may be insufficient to cover all losses. Any successful cyber attack or other security breach involving the misappropriation or other unauthorized disclosure of confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyber attack may also subject the Company to regulatory investigations, litigation or enforcement, or require the payment of regulatory fines or penalties or undertaking costly remediation efforts with respect to third parties affected by a cyber security incident, all or any of which could adversely affect the Company’s business, financial condition or results of operations and damage its reputation. Page 22 Table of Contents Loss of key third-party vendor relationships or failure of a vendor to protect information of our customers or employees could adversely affect our business or result in losses. We rely on third-party vendors to provide key components of our business operations such as data processing, recording and monitoring transactions, online and mobile banking interfaces and services, internet connections and network access. While we have performed due diligence procedures in selecting vendors, we do not control their actions. In the event that one or more of our vendors suffers a bankruptcy or otherwise becomes unable to continue to provide products or services, or fails to protect non-public personal information of our customers or employees, we may suffer operational impairments, reputational damage and financial losses. Replacing these third-party vendors could create significant delay and expense. Accordingly, use of such third parties creates an inherent risk to our business operations. New products and services are essential to remain competitive but may subject us to additional risks. We consistently attempt to offer new products and services to our customers to remain competitive. There can be risks and uncertainties associated with these new products and services especially if they are newer to market products and services. We may spend significant time and resources in development of new products and services to market to customers. Through our development and implementation process we may incur risks associated with delivery timetables, pricing and profitability, compliance with regulations, effect on internal controls and shifting customer preferences. Failure to successfully manage these risks could have a material effect on our financial condition, result of operations, and business. Our customers may decide to use non-bank competitors for financial transactions, which could result in loss of business. Advancement in technology and other changes are increasing the ability for customers to complete financial transactions that have traditionally involved banks through non-bank competitors. Elimination of banks as intermediaries of financial transactions could result in the loss of customer deposits as well as fee income to us. We are subject to risks associated with negative publicity. Reputational risk arises from the potential that negative publicity regarding our business practices, whether true or not, could cause a decline in our customer base, costly litigation, or revenue reductions. In addition, our success in maintaining our reputation depends on the ability to adapt to a rapidly changing environment including increasing reliance on social media. We may be adversely affected by changes in U.S. tax laws and regulations. The Tax Cuts and Jobs Act was signed into law in December 2017, reforming the U.S. tax code. The legislation includes lowering the federal corporate income tax rate to 21 percent beginning in 2018 from a maximum rate of 35 percent, modifying the U.S. taxation of income earned outside the U.S. and limiting or eliminating various deductions, tax credits and/or other tax preferences. The legislation could negatively impact our customers because it lowers the existing caps on mortgage interest deductions and limits the state and local tax deductions. These changes could make it more difficult for borrowers to make their loan payments and could also negatively impact the housing market, which could adversely affect our business and loan growth. Also, the changes in the government administration could result in changes to U.S. tax laws and regulations. Risks Related to the Company's Common Stock Our stock is thinly traded. The average daily trading volume of our common stock is relatively small compared to many public companies. The desired market characteristics of depth, liquidity, and orderliness require the substantial presence of willing buyers and sellers in the marketplace at any given time. In our case, this presence depends on the individual decisions of a relatively small number of investors and general economic and market conditions over which we have no control. Due to the relatively small trading volume of our common stock, significant sales of our common stock, or the expectation of these sales, could cause the stock price to fall more than would be justified by the inherent worth of the Company. Conversely, attempts to purchase a significant amount of our stock could cause the market price to rise above the reasonable inherent worth of the Company. Page 23 Table of Contents The stock market can be volatile, and fluctuations in our operating results and other factors could cause our stock price to decline. The stock market has experienced, and may continue to experience, fluctuations that significantly impact the market prices of securities issued by many companies. Market fluctuations could adversely affect our stock price. These fluctuations have often been unrelated or disproportionate to the operating performance of particular companies. These broad market fluctuations, as well as general economic, systemic, political and market conditions, such as recessions, loss of investor confidence, or interest rate changes, may negatively affect the market price of our common stock. Moreover, our operating results may fluctuate and vary from period to period due to the risk factors set forth herein. As a result, period-to-period comparisons should not be relied upon as an indication of future performance. Our stock price could fluctuate significantly in response to the impact these risk factors have on our operating results or financial position. There can be no assurances concerning continuing dividend payments. Our common stockholders are only entitled to receive the dividends declared by our Board of Directors. Although we have historically paid annual dividends on our common stock, there can be no assurances that we will be able to continue to pay regular annual dividends or that any dividends we do declare will be in any particular amount. The primary source of money to pay our dividends comes from dividends paid to the Company by the Bank. The Bank’s ability to pay dividends to the Company is subject to, among other things, its earnings, financial condition and applicable regulations, which in some instances limit the amount that may be paid as dividends. If we do not continue to meet or exceed regulatory capital requirements and maintain our “well-capitalized” status, there could be an adverse effect on the manner in which we do business and on the confidence of our customers in us. Under regulatory capital adequacy guidelines, we must meet guidelines that involve quantitative measures of assets, liabilities and certain off-balance sheet items. Failure to meet minimum capital requirements could have a material effect on our financial condition and could subject us to a variety of enforcement actions, as well as certain restrictions on our business. Failure to maintain the status of “well-capitalized” under the regulatory framework could adversely affect the confidence that our customers have in us, which may lead to a decline in the demand for or a reduction in the prices that we are able to charge for our products and services. Failure to meet the guidelines could also limit our access to liquidity sources. Our growth may require us to raise additional capital in the future, but that capital may not be available. We may at some point need to raise additional capital to maintain our “well-capitalized” status. Any capital we obtain may result in the dilution of the interests of existing holders of our stock. Our ability to raise additional capital, if needed, will depend on conditions in the capital markets at that time, which are outside our control, and on our financial condition and performance. Accordingly, we cannot make assurances of our ability to raise additional capital if needed, or if the terms will be acceptable to us. Item 1B. Unresolved Staff Comments None.