HILLS BANCORPORATION 10-K

Item 1A. Risk Factors The performance of our Company is subject to various risks. We consider the risks described below to be the most significant risks we face, but such risks are not the only risk factors that could affect us. Additional risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially and adversely affect our business, financial condition or results of operations. For a discussion of the impact of risks on our financial condition and results of operations in recent years and on forward looking statements contained in this report, reference is made to Item 7 below. Economic and Market Risks We may be adversely affected by economic conditions in the local economies in which we conduct our operations, and in the United States in general. Our primary market includes the Iowa counties of Johnson, Linn and Washington. Our market has been one of the strongest economic areas in Iowa over the past ten years. The unemployment rate for our prime market area is favorable and the rate historically has been lower than the unemployment rates for both the United States and the State of Iowa. However, unfavorable or uncertain economic and market conditions may adversely affect our business and profitability. Our business faces various material risks, including credit risk, liquidity risk and the risk that the demand for our products and services will decrease. Consumer confidence, real estate values, interest rates and investment returns could make the types of loans we originate less profitable and could increase our credit risk and litigation expense. And, while the presence of the University of Iowa and its affiliated institutions has a significant favorable impact upon the regional economy, it is unclear what impact the State budget and funding models will have on the University of Iowa and the University of Iowa Hospitals and Clinics. The ongoing COVID-19 pandemic and measures intended to prevent its spread could have a material adverse effect on our business, results of operations and financial condition, and such effects will depend on future developments, which are highly uncertain and are difficult to predict. In December 2019, a novel coronavirus (COVID-19) was reported in China, and, in March 2020, the World Health Organization declared it a pandemic. On March 12, 2020, the President of the United States declared the COVID-19 outbreak in the United States a national emergency. The COVID-19 pandemic caused significant economic dislocation in the United States as many state and local governments ordered non-essential businesses to close and residents to shelter in place at home, which resulted in an unprecedented slow-down in economic activity and a related increase in unemployment throughout most of 2020 and 2021. Government response to the COVID-19 pandemic was sweeping, including passage of the Coronavirus Aid, Relief and Economic Security Act (CARES Act) which was signed into law on March 27, 2020 and further legislation was passed in December 2020, the Coronavirus Response and Relief Supplemental Appropriations Act 2021 , which extended many provisions in the CARES Act, but there can be no assurance that such steps will be effective or achieve their desired results in a timely fashion. Congress, the Federal Reserve Bank and the other U.S. state and federal financial regulatory agencies have taken actions to mitigate disruptions to economic activity and financial stability resulting from the COVID-19 pandemic. In addition, the federal banking agencies have encouraged financial institutions to prudently work with affected borrowers and passed measures to provide relief from reporting loan classifications due to modifications related to the COVID-19 outbreak. The broader U.S. and global economies slowly began reopening during the first half of 2021 as vaccines against COVID-19 became widely available. However, labor and supply disruptions resulting from the global pandemic continue, and the emergence of new variants of COVID-19 have created ongoing health and safety concerns that may lead to further disruptions in local, national and global economies. While significant progress has been made to combat the outbreak of COVID-19, and while it appears that the epidemiological conditions are trending in a positive direction, if there is a resurgence in the virus and any new variants thereof, the Company could experience further adverse effects on its business, financial condition, results of operations and cash flows. The Company could be subject to any of the following risks, any of which could have a material, adverse effect on our business, financial condition, liquidity, and results of operations: • demand for our products and services may decline, making it difficult to grow assets and income; Page 14 Table of Contents • decreased consumer confidence and business generally could lead to increased risk of loan delinquencies, problem assets, and foreclosures, resulting in increased charges and reduced income; • collateral for loans, especially real estate, may decline in value, which could cause loan losses to increase; • our allowance for credit losses may be insufficient given the significant economic uncertainties created by the pandemic and, as a result, may have to be increased if borrowers experience financial difficulties, which will adversely affect our net income; • the net worth and liquidity of loan guarantors may decline, impairing their ability to honor commitments to us; • as the result of the decline in the Federal Reserve Board’s target federal funds rate, the yield on our assets may decline to a greater extent than the decline in our cost of interest-bearing liabilities, reducing our net interest margin and spread and reducing net income; • a material decrease in net income or a net loss over several quarters could result in a decrease in the rate of our quarterly cash dividend; • we rely on third party vendors for certain services and the unavailability of a critical service due to the COVID-19 outbreak could have an adverse effect on us; and • Federal Deposit Insurance Corporation premiums may increase if the agency experiences additional resolution costs. Any one or a combination of the factors identified above could negatively impact our business, financial condition and results of operations and prospects. Even after the COVID-19 outbreak has subsided, the Company may continue to experience materially adverse impacts to our business as a result of the virus’s global economic impact, including the availability of credit, adverse impacts on our liquidity and any recession that has occurred or may occur in the future. As a participating lender in the Paycheck Protection Program (PPP), the Company and the Bank are subject to additional risks of litigation from the Bank’s customers or other parties regarding the Bank’s processing of loans for the PPP and risks that the Small Business Administration (SBA) may not fund some or all PPP loan guarantees. Since the opening of the PPP, several other larger banks have been subject to litigation regarding the process and procedures that such banks used in processing applications for the PPP and claims related to agent fees. The Company and the Bank may be exposed to the risk of similar litigation from both customers and non-customers that approached the Bank regarding PPP loans. If any such litigation is filed against the Company or the Bank and is not resolved in a manner favorable to the Company or the Bank, it may result in significant financial liability or adversely affect the Company’s reputation. In addition, litigation can be costly, regardless of outcome. Any financial liability, litigation costs or reputational damage caused by PPP related litigation could have a material adverse impact on our business, financial condition and results of operations. Changing interest rates may adversely affect our profits. Our income and cash flows depend to a great extent on the difference between the interest rates earned by us on interest-earning assets such as loans and investment securities and the interest rates paid by us on interest-bearing liabilities such as deposits and borrowings. Our net interest margin will be affected by general economic conditions, fiscal and monetary policies of the federal government, and our ability to respond to changes in such rates. Our assets and liabilities are affected differently by a change in interest rates. An increase or decrease in rates, the length of loan terms or the mix of adjustable and fixed rate loans in our portfolio could have a positive or negative effect on our net income, capital and liquidity. We measure interest rate risk under various rate scenarios and using specific criteria and assumptions. A summary of this process is presented under the heading "Quantitative and Qualitative Disclosures about Market Risk" included under Item 7A of Part II of this Form 10-K. Although we believe our current level of interest rate sensitivity is reasonable and effectively managed, significant fluctuations in interest rates may have an adverse effect on our business, financial condition and results of operations. Also, our interest rate risk modeling techniques and assumptions may not fully predict or capture the impact of actual interest rate changes on our financial condition and results of operations. Changes in U.S. trade policies, such as the implementation of tariffs, and other factors beyond the Company’s control may adversely impact our business, financial condition and results of operations. The U.S. government has implemented tariffs on certain products from countries or entities such as Mexico, Canada, China and the European Union. These countries have issued or continue to threaten retaliatory tariffs against products from the United States, including agricultural products. The United States and these countries may impose additional tariffs and retaliatory tariffs in the future. Tariffs, retaliatory tariffs or other trade restrictions on products and materials that our customers import or export, including agricultural products such as soybeans, could cause the prices of our customers’ products to increase which could reduce demand for such products, or reduce our customer margins, and adversely impact their revenues, financial results and ability to service debt. This could adversely affect our financial condition and results of operations. In addition, to the Page 15 Table of Contents extent changes in the political environment have a negative impact on us or on the markets in which we operate, our business, results of operations and financial condition could be materially and adversely impacted in the future. We may be adversely impacted by recent legislation and potential additional legislation and rulemaking. The 2008-2009 recession produced a number of new laws that impact financial institutions including the Dodd-Frank Act. The Dodd-Frank Act established the Consumer Financial Protection Bureau (the “CFPB”) and granted it the broad authority to administer and enforce a new federal regulatory framework of consumer financial regulation. Any changes to state and federal banking laws and regulations may adversely impact our ability to expand services and to increase the value of our business. We are subject to extensive state and federal regulation, supervision, and legislation that govern almost all aspects of our operations. These laws may change from time to time and are primarily intended for the protection of consumers, depositors and the deposit insurance funds. In addition, our earnings are affected by the monetary policies of the Board of Governors of the Federal Reserve. These policies, which include regulating the national supply of bank reserves and bank credit, may have a major effect upon the source and cost of funds and the rates of return earned on loans and investments. The Federal Reserve influences the size and distribution of bank reserves through its open market operations and changes in cash reserve requirements against member bank deposits. We cannot predict what effect such act and any presently contemplated or future changes in the laws or regulations or their interpretations would have on us, including changes with the new government administration, but such changes could be materially adverse to our financial performance. Reduction in the value, or impairment of our investment securities, may impact our earnings and stockholders' equity. We maintained a balance of $555.90 million, or 13.74% of our assets, in investment securities at December 31, 2021. Changes in market interest rates may affect the value of these investment securities, with increasing interest rates generally resulting in a reduction of value. Although the reduction in value from temporary increases in market rates does not affect our income until the security is sold, it does result in an unrealized loss recorded in other comprehensive income that may reduce our stockholders' equity. Available-for-sale (AFS) debt securities in unrealized loss positions are evaluated for impairment related to credit losses at least quarterly. For AFS debt securities, a decline in fair value due to credit loss results in recording an allowance for credit losses to the extent the fair value is less than the amortized cost basis. In assessing whether the impairment of investment securities is due to credit losses, we consider the length of time and extent to which the fair value has been less than cost, the financial condition and near-term prospects of the issuer, and the intent and ability to retain our investment in the security for a period of time sufficient to allow for any anticipated recovery in fair value. Growth levels in local and national real estate markets may impact our operations and/or financial condition. Change in growth in the national housing market as evidenced by reports of levels of new and existing home sales, inventories of houses on the market, property values, building permits, and the time houses remain on the market may indicate increased levels of credit risk. In past history of real estate growth, some lenders made many adjustable-rate mortgage loans, and lowered their credit standards with respect to mortgage loans and home equity loans. A subsequent slowdown in the national housing market created uncertainty and liquidity issues relating to the value of such mortgage loans, which caused disruption in credit markets. Management will continue to monitor that the Bank has maintained appropriate lending standards in times of real estate growth and decline. No assurance can be given that these conditions will not directly or indirectly affect our operations. The stock market can be volatile, and fluctuations in our operating results and other factors could cause our stock price to decline. The stock market has experienced, and may continue to experience, fluctuations that significantly impact the market prices of securities issued by many companies. Market fluctuations could adversely affect our stock price. These fluctuations have often been unrelated or disproportionate to the operating performance of particular companies. These broad market fluctuations, as well as general economic, systemic, political and market conditions, such as recessions, loss of investor confidence, or interest rate changes, may negatively affect the market price of our common stock. Moreover, our operating results may fluctuate and vary from period to period due to the risk factors set forth herein. As a result, period-to-period comparisons should not be relied upon as an indication of future performance. Our stock price could fluctuate significantly in response to the impact these risk factors have on our operating results or financial position. Page 16 Table of Contents Regulatory and Legal Risks We are subject to a variety of litigation or other proceedings, which could adversely affect our business. We are involved from time to time in a variety of litigation or other proceedings arising out of business or operations. We establish reserves for claims when appropriate under accounting principles generally accepted in the United States of America, but costs often may be incurred in connection with a matter before any reserve has been created. In addition, the actual costs associated with resolving a claim may be substantially higher than amounts that we have reserved. Substantial legal claims could have a detrimental impact on our business, results of operations, and financial condition and may cause reputational harm. If we do not continue to meet or exceed regulatory capital requirements and maintain our “well-capitalized” status, there could be an adverse effect on the manner in which we do business and on the confidence of our customers in us. Under regulatory capital adequacy guidelines, we must meet guidelines that involve quantitative measures of assets, liabilities and certain off-balance sheet items. Failure to meet minimum capital requirements could have a material effect on our financial condition and could subject us to a variety of enforcement actions, as well as certain restrictions on our business. Failure to maintain the status of “well-capitalized” under the regulatory framework could adversely affect the confidence that our customers have in us, which may lead to a decline in the demand for or a reduction in the prices that we are able to charge for our products and services. Failure to meet the guidelines could also limit our access to liquidity sources. Climate change and related legislative and regulatory initiatives may result in operational changes and expenditures that could significantly impact our business. The current and anticipated effects of climate change are creating an increasing level of concern for the state of the global environment. As a result, political and social attention to the issue of climate change has increased. In recent years, governments across the world have entered into international agreements to attempt to reduce global temperatures, in part by limiting greenhouse gas emissions. The U.S. Congress, state legislatures and federal and state regulatory agencies have continued to propose and advance numerous legislative and regulatory initiatives seeking to mitigate the effects of climate change. Consumers and businesses may also change their behavior on their own as a result of these concerns. The impact on our customers will likely vary depending on their specific attributes, including reliance on or role in carbon intensive activities. Our efforts to take these risks into account in making lending and other decisions, including by increasing our business with climate-friendly companies, may not be effective in protecting us from the negative impact of new laws and regulations or changes in consumer or business behavior. Given the lack of empirical data on the credit and other financial risks posed by climate change, it is difficult to predict how climate change may impact our financial condition and operations; however, as a banking organization, the physical effects of climate change may present certain unique risks. For example, weather disasters, shifts in local climates and other disruptions related to climate change may adversely affect the value of real properties securing our loans, which could diminish the value of our loan portfolio. Such events may also cause reductions in regional and local economic activity that may have an adverse effect on our customers, which could limit our ability to raise and invest capital in these areas and communities. There may be issues with environmental law compliance if we take possession of real property that secures a loan. A significant portion of our loan portfolio is secured by real property. We may foreclose on and take title to certain real property. There is a risk that hazardous substances could be found on the property and we may be liable for remediation costs, personal injury and/or property damage. We may incur substantial expenses to comply with environmental laws which may materially reduce the property's value or limit our ability to dispose of the property. The remediation costs and any other financial liabilities associated with the property could have a material adverse effect on our financial condition and results of operations. Page 17 Table of Contents Credit and Lending Risks Our loan portfolio has a large concentration of real estate loans, which involve risks specific to real estate value. Real estate loans, which constitute a large portion of our loan portfolio, include home equity, commercial, construction and residential loans, and such loans are concentrated in the Bank’s trade area. As of December 31, 2021, 84.52% of our loans had real estate as a primary component of collateral. The market value of real estate may fluctuate significantly in a short period of time as a result of market conditions in the geographic area in which the real estate is located. Adverse developments affecting real estate values in our market could increase the credit risk associated with our loan portfolio. Also, real estate lending typically involves higher loan principal amounts and the repayment of the loans generally is dependent, in large part, on sufficient income from the properties securing the loans to cover operating expenses and debt service. Economic events or governmental regulations outside of the control of the borrower could adversely impact the future cash flow and market values of the affected properties. If the loans that are collateralized by real estate become troubled during a time when market conditions are declining or have declined, then we may not be able to realize the amount of security that we anticipated at the time of originating the loan, which could cause us to increase our provision for loan losses and adversely affect our operating results and financial condition. Our real estate loans also include construction loans, including land acquisition and development. Construction, land acquisition and development lending involves additional risks because funds are advanced based upon estimates of costs and the estimated value of the completed project. Because of the uncertainties inherent in estimating construction costs, as well as the market value of the completed project and the effects of governmental regulation on real property, it is relatively difficult to evaluate accurately the total funds required to complete a project and the related loan-to-value ratio. As a result, commercial construction loans often involve the disbursement of substantial funds with repayment dependent, in part, on the success of the ultimate project and the ability of the borrower to sell or lease the property, rather than the ability of the borrower or guarantor to repay principal and interest. If our appraisal of the value of the completed project proves to be overstated, we may have inadequate security for the repayment of the loan upon completion of construction of the project. Commercial loans make up a significant portion of our loan portfolio. Our commercial loans are primarily made based on the identified cash flow of the borrower and secondarily on the underlying collateral provided by the borrower. Repayment of our commercial loans is often dependent on the cash flows of the borrower, which may be unpredictable. Most often, this collateral is accounts receivable, inventory, machinery and equipment. In the case of loans secured by accounts receivable, the availability of funds for the repayment of these loans may be substantially dependent on the ability of the borrower to collect amounts due from its customers. The other types of collateral securing these loans may depreciate over time, may be difficult to appraise and may fluctuate in value based on the success of the business. Our agricultural loans may involve a greater degree of risk than other loans, and the ability of the borrower to repay may be affected by many factors outside of the borrower’s control. Payments on agricultural real estate loans are dependent on the profitable operation or management of the farm property securing the loan. The success of the farm may be affected by many factors outside the control of the borrower, including adverse weather conditions that prevent the planting of a crop or limit crop yields (such as hail, drought and floods), loss of livestock due to disease or other factors, changes in market prices for agricultural products (both domestically and internationally) and the impact of government regulation (including changes in price supports, subsidies and environmental regulation). In addition, many farms are dependent on a limited number of key individuals whose injury or death may significantly affect the successful operation of the farm. If the cash flow from a farming operation is diminished, the borrower’s ability to repay the loan may be impaired. The primary crops in our market areas are corn and soybeans. Accordingly, adverse circumstances affecting these crops could have an adverse effect on our agricultural real estate loan portfolio. We also originate agricultural operating loans. As with agricultural real estate loans, the repayment of operating loans is dependent on the successful operation or management of the farm property. Likewise, agricultural operating loans involve a greater degree of risk than lending on residential properties, particularly in the case of loans that are unsecured or secured by rapidly depreciating assets such as farm equipment or assets such as livestock or crops. The primary livestock in our market areas is hogs and turkeys. In these cases, any repossessed collateral for a defaulted loan may not provide an adequate source of repayment of the outstanding loan balance as a result of the greater likelihood of damage, loss or depreciation. Page 18 Table of Contents We may be required to repurchase mortgage loans or reimburse investors and others as a result of breaches in contractual representations and warranties. We sell residential mortgage loans to various parties that purchase mortgage loans for investment. The agreements under which we sell mortgage loans contain various representations and warranties regarding the origination and characteristics of the mortgage loans, including ownership of the loan, compliance with loan criteria set forth in the applicable agreement, validity of the lien securing the loan, absence of delinquent taxes or liens against the property securing the loan, and compliance with applicable origination laws. We may be required to repurchase mortgage loans, indemnify the investor, or reimburse the investor for credit losses incurred on loans in the event of a breach of contractual representations or warranties. The agreements under which we sell mortgage loans require us to deliver various documents to the investor, and we may be obligated to repurchase any mortgage loan as to which the required documents are not delivered or are defective. We depend on the accuracy and completeness of information about customers and counterparties. In deciding whether to extend credit or enter into other transactions with customers and counterparties, we may rely on information furnished by or on behalf of customers and counterparties, including financial statements and other financial information. We also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors and accountants if made available. If this information is inaccurate, we may be subject to regulatory action, reputational harm or other adverse effects with respect to the operation of our business, our financial condition and our results of operation. Capital and Liquidity Risks If we are unable to continuously attract deposits and other short-term funding, our financial condition and our business prospects could be adversely affected. In managing our liquidity, our primary source of short-term funding is customer deposits. Our ability to continue to attract these deposits, and other short-term funding sources, is subject to variability based upon a number of factors, including the relative interest rates we are prepared to pay for these liabilities and the perception of safety of those deposits or short-term obligations relative to alternative short-term investments. The availability and cost of credit in short-term markets depends upon market perceptions of our liquidity and creditworthiness. Our efforts to monitor and manage liquidity risk may not be successful or sufficient to deal with dramatic or unanticipated changes in event-driven reductions in liquidity. In such events, our cost of funds may increase, thereby reducing our net interest revenue, or we may need to dispose of a portion of our investment portfolio, which, depending on market conditions, could result in our realizing a loss or experiencing other adverse consequences. Conditions in the financial markets may limit our access to funding to meet our liquidity needs. Liquidity is essential to our business, as we must maintain sufficient funds to respond to the needs of depositors and borrowers. An inability to raise funds through deposits, borrowings, the sale or pledging as collateral of loans and other assets could have a substantial adverse effect on our liquidity. Our access to funding sources in the amounts adequate to finance our activities could be impaired by factors that affect us specifically or the financial services industry in general. Factors that could adversely affect our access to liquidity sources include a decrease in the level of our business activity due to a market downturn or adverse regulatory action against us. Our ability to borrow could also be impaired by factors that are not specific to us, such as severe disruption of the financial markets or adverse news and expectations about the prospects for the financial services industry as a whole. As a part of our liquidity management, we use a number of funding sources in addition to core deposit growth and repayments and maturities of loans and investments. These sources include brokered money markets and certificates of deposit, federal funds purchased, lines of credit and Federal Home Loan Bank advances. Negative operating results or changes in industry conditions could lead to an inability to replace these additional funding sources at maturity. Our financial flexibility could be constrained if we are unable to maintain our access to funding or if adequate financing is not available to accommodate future growth at acceptable interest rates. Finally, if we are required to rely more heavily on more expensive funding sources to support future growth, our revenues may not increase proportionately to cover our costs. In this case, our results of operations and financial condition would be adversely affected. Page 19 Table of Contents Our profitability and liquidity may be adversely affected by deterioration in the credit quality of, or defaults by, third parties who owe us money or other assets. We are exposed to the risk that third parties that owe us money or other assets will not fulfill their obligations. These parties may default on their obligations to us due to bankruptcy, lack of liquidity, operational failure or other reasons. Our rights against third parties may not be enforceable in all circumstances. In addition, deterioration in the credit quality of third parties whose securities or obligations we hold could result in losses and/or adversely affect our ability to use those securities or obligations for liquidity purposes. Our financial condition has not been materially impacted by the deterioration in the credit quality of third parties except as related to borrower credit quality. Management believes that the allowance for credit losses is adequate to absorb probable losses on any existing loans that may become uncollectible but cannot predict loan losses with certainty and cannot assure that our allowance for credit losses will prove sufficient to cover actual losses in the future. Our growth may require us to raise additional capital in the future, but that capital may not be available. We may at some point need to raise additional capital to maintain our “well-capitalized” status. Any capital we obtain may result in the dilution of the interests of existing holders of our stock. Our ability to raise additional capital, if needed, will depend on conditions in the capital markets at that time, which are outside our control, and on our financial condition and performance. Accordingly, we cannot make assurances of our ability to raise additional capital if needed, or if the terms will be acceptable to us. Competitive and Strategic Risks We experience intense competition for loans and deposits. Competition in banking and financial services business in our market is highly competitive and is currently undergoing significant change. Our competitors include local commercial banks, local credit unions, online banks, mortgage companies, finance companies and other non-bank financial services providers. Increasingly, competitors are able to provide integrated financial services over a broad geographic area. Increased competition may result in a decrease in the amounts of loans and deposits, reduced spreads between loan rates and deposit rates or loan terms that are less favorable to us. Competition may also accelerate investments in technology or infrastructure. Any of these results could have a material adverse effect on our ability to grow and remain profitable. New products and services are essential to remain competitive but may subject us to additional risks. We consistently attempt to offer new products and services to our customers to remain competitive. There can be risks and uncertainties associated with these new products and services especially if they are newer to market products and services. We may spend significant time and resources in development of new products and services to market to customers. Through our development and implementation process we may incur risks associated with delivery timetables, pricing and profitability, compliance with regulations, effect on internal controls and shifting customer preferences. Failure to successfully manage these risks could have a material effect on our financial condition, result of operations, and business. Our customers may decide to use non-bank competitors for financial transactions, which could result in loss of business. Advancement in technology and other changes are increasing the ability for customers to complete financial transactions that have traditionally involved banks through non-bank competitors. Elimination of banks as intermediaries of financial transactions could result in the loss of customer deposits as well as fee income to us. We are subject to risks associated with negative publicity. Reputational risk arises from the potential that negative publicity regarding our business practices, whether true or not, could cause a decline in our customer base, costly litigation, or revenue reductions. In addition, our success in maintaining our reputation depends on the ability to adapt to a rapidly changing environment including increasing reliance on social media. Page 20 Table of Contents Accounting and Tax Risks Our allowances for credit losses for loans and debt securities may prove inadequate or we may be negatively affected by credit risk exposures. Also, future additions to our allowance for credit losses will reduce our future earnings. Our business depends on the creditworthiness of our customers. As with most financial institutions, we maintain allowances for credit losses for loans and debt securities to provide for defaults and nonperformance, which represent an estimate of expected losses over the remaining contractual lives of the loan and debt security portfolios. This estimate is the result of our continuing evaluation of specific credit risks and loss experience, current loan and debt security portfolio quality, present economic, political and regulatory conditions, including, but not limited to, the ongoing economic impact of the COVID-19 pandemic and the related uncertainties created thereby, industry concentrations, reasonable and supportable forecasts for future conditions and other factors that may indicate losses. The determination of the appropriate levels of the allowances for loan and debt security credit losses inherently involves a high degree of subjectivity and judgment and requires us to make estimates of current credit risks and future trends, all of which may undergo material changes. Generally, our nonperforming loans and OREO reflect operating difficulties of individual borrowers and weaknesses in the economies of the markets we serve. The allowances may not be adequate to cover actual losses, and future allowance for credit losses could materially and adversely affect our financial condition, results of operations and cash flows. Our accounting policies and methods are fundamental to how we report our financial condition and results of operations, and we use estimates in determining the fair value of certain of our assets, the expected credit losses related to loans and debt securities, and the amount of other loss contingencies as of the balance sheet date, which estimates are subject to very large uncertainty. A portion of our assets are carried on the balance sheet at fair value, including debt securities available for sale. Generally, for assets that are reported at fair value, we use quoted market prices or valuation models that utilize observable market data inputs to estimate their fair value as of the balance sheet date. In certain cases, observable market prices and data may not be readily available or their availability may be diminished due to market conditions. We use financial models to value certain of these assets. These models are complex and use asset-specific collateral data and market inputs for interest rates. Although we have processes and procedures in place governing valuation models and their testing and calibration, such assumptions are complex as we must make judgments about the effect of matters that are inherently uncertain. Different assumptions could have resulted in significant changes in valuation, which in turn would have affected earnings or resulted in significant changes in the dollar amount of assets reported on the balance sheet or both. We may be adversely affected by changes in U.S. tax laws and regulations. Changes in tax laws at national or state levels could have an effect on the Company’s short-term and long-term earnings. Changes in tax laws could affect the Company’s earnings as well as its customers’ financial positions, or both. Changes in tax laws could also require the revaluation of the Company’s net deferred tax position, which could have a material adverse effect on our results of operations and financial condition. Operational Risks Our growth strategy relies heavily on our management team, and the unexpected loss of key managers and/or officers may adversely affect our operations. Our success is dependent on experienced senior management with a strong local community network. Our ability to retain the current management team is key to the successful implementation of our growth strategy. It is equally important that we are able to continue to attract and retain quality and community-focused managers and officers. The unexpected loss of one of our key managers and/or officers or the inability to attract qualified personnel could have an adverse effect on our operations, financial condition and reputation. The potential for business interruption exists throughout our organization. Integral to our performance is the continued efficacy of our technical systems, operational infrastructure, relationships with third parties and the array of personnel involved with bank operations. Failure by any or all of these resources subjects us to Page 21 Table of Contents risks that may vary in size, scale and scope. This includes, but is not limited to, operational or technical failures, ineffectiveness or exposure due to interruption in third-party support, as well as the loss of key individuals or failure on the part of key individuals to perform properly. These risks are heightened during data system changes or conversions. Although management has established policies and procedures to address such failures, the occurrence of any such event could have a material adverse effect on our business, which, in turn, could have a material adverse effect on our financial condition and results of operations. Our risk management framework may not be effective in mitigating risk and loss. We maintain an enterprise risk management program that is designed to identify, quantify, monitor, report and control the risks that we face. These include credit, liquidity, market, operational, reputational, compliance, strategic, information technology and security, and trust risks. While we assess this program on an ongoing basis, there can be no assurance that its approach and framework for risk management and related controls will effectively mitigate risk and limit losses in our business. If conditions or circumstances arise that expose flaws or gaps in the risk management program or if its controls break down, the performance and value of our business could be adversely affected. Our internal controls may be ineffective. We regularly review and update our internal controls, disclosure controls and procedures, and corporate governance policies and procedures. Any system of controls, however well-designed and operated, is based in part on certain assumptions and may provide only reasonable, not absolute, assurances that the objectives of the controls are met. Any failure or circumvention of our controls and procedures or failure to comply with regulations related to controls and procedures could have a material adverse effect on our business, financial condition and results of operation. The replacement of LIBOR could adversely affect the Company’s revenue or expenses and the value of those assets or obligations. LIBOR and certain other “benchmarks” are the subject of recent national, international and other regulatory guidance and proposals for reform. These reforms may cause such benchmarks to perform differently than in the past or have other consequences which cannot be predicted. LIBOR is set based on interest information reported by certain banks, which may stop reporting such information after 2021. It is uncertain at this time whether LIBOR will change or cease to exist or the extent to which those entering into financial contracts will transition to any particular benchmark. While there is no consensus on what rate or rates may become accepted alternatives to LIBOR, a group of large banks, the Alternative Reference Rate Committee or ARRC, selected by the Federal Reserve Bank of New York, started in May 2018 to publish the Secured Overnight Finance Rate or SOFR as an alternative to LIBOR. SOFR is a broad measure of the cost of borrowing cash overnight collateralized by Treasury securities, given the depth and robustness of the U.S. Treasury repurchase market. At this time, it is impossible to predict whether SOFR will become an accepted alternative to LIBOR. The market transition away from LIBOR to an alternative reference rate, including SOFR, is complex and could have a range of adverse effects on the Bank’s business, financial condition and results of operations. In particular, any such transition could: • adversely affect the interest rates paid or received on, and the revenue and expenses associated with, the Bank’s floating rate obligations, loans, deposits, derivatives and other financial instruments tied to LIBOR rates, or other securities or financial arrangements given LIBOR’s role in determining market interest rates globally; • adversely affect the value of the Bank’s floating rate obligations, loans, deposits, derivatives and other financial instruments tied to LIBOR rates, or other securities or financial arrangements given LIBOR’s role in determining market interest rates globally; • prompt inquiries or other actions from regulators in respect of the Bank’s preparation and readiness for the replacement of LIBOR with an alternative reference rate; • result in disputes, litigation or other actions with counterparties regarding the interpretation and enforceability of certain fallback language in LIBOR-based securities; and • require the transition to or development of appropriate systems and analytics to effectively transition the Bank’s risk management processes from LIBOR-based products to those based on the applicable alternative pricing benchmark, such as SOFR. The manner and impact of this transition, as well as the effect of these developments on the Bank’s funding costs, loan and investment and trading securities portfolios, asset-liability management, and business, is uncertain. Page 22 Table of Contents We are subject to risks associated with technological changes and the resources needed to implement the changes. Our industry is susceptible to significant technological changes as there continue to be a high level of new technology driven products and services introduced. Technological advancement aids us in providing customer service and increases efficiency. Our national competitors may have more resources to invest in technological changes. As a result they may be able to offer products and services that are more technologically advanced and that may put us at a competitive disadvantage. Our future may depend on our ability to analyze technological changes to determine the best course of action for our business, customers and shareholders. We rely heavily on our network security and any system failure or data breach could subject us to increased costs as well as reputational risk. Our operations are dependent on our ability to process financial transactions in a secure manner. Failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors and other service providers, could disrupt our business or the businesses of our customers, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, increase our costs and cause losses. We must ensure that information is properly protected from a variety of threats such as cyber attacks, error, fraud, sabotage, terrorism, industrial espionage, privacy violation, service interruption, and natural disaster. These threats arise from numerous sources including human error, fraud on the part of employees or third parties, technological failure, telecommunication outages, and severe weather conditions. Information security risks for financial institutions like us have increased recently in part because of new technologies, the increased use of the internet and telecommunications technologies (including mobile devices and cloud computing) to conduct financial and other business transactions, political activism, and the increased sophistication and activities of organized crime. Although we employ detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by persistent sophisticated attacks and malware designed to avoid detection. While we have not been materially impacted by cyber incidents, we have been subject to other intentional cyber incidents from third parties over the last several years, including denial of service attacks which attempt to interrupt service to customers and malicious software attacks on computer systems which attempt to allow unauthorized entrance. We also face risks related to cyber attacks and other security breaches in connection with card transactions that typically involve the transmission of sensitive information regarding our customers through various third parties. Some of these parties have in the past been the target of security breaches and cyber attacks, and because the transactions involve third parties and environments that we do not control or secure, future security breaches or cyber attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them. We also rely on numerous other third party service providers to conduct other aspects of our business operations and face similar risks relating to them. While we conduct security assessments on our higher risk third party service providers, we cannot be sure that their information security protocols are sufficient to withstand a cyber attack or other security breach. There can be no assurance that cyber incidents will not occur and they could occur more frequently and on a more significant scale. We devote significant resources to implement, maintain, monitor and regularly upgrade our systems and networks with measures such as intrusion detection and prevention and firewalls to safeguard critical business applications. The additional cost to the Company of our cyber security monitoring and protection systems and controls includes the cost of hardware and software, third party technology providers, consulting, and legal fees, in addition to the incremental cost of our personnel who focus a substantial portion of their responsibilities on cyber security. In addition, because cyber attacks can change frequently we may be unable to implement effective preventive or proactive measures in time. With the assistance of third-party service providers, we intend to continue to implement security technology and establish procedures to maintain network security, but there is no assurance that these measures will be successful. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. Any activity that jeopardizes our network and the security of the information stored thereon may result in significant cost and have a significant adverse effect on our reputation. We maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber risks. Such insurance coverage may be insufficient to cover all losses. Any successful cyber attack or other security breach involving the misappropriation or other unauthorized disclosure of confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyber attack may also subject the Company to regulatory investigations, litigation or enforcement, or require the payment of regulatory fines or penalties or undertaking costly Page 23 Table of Contents remediation efforts with respect to third parties affected by a cyber security incident, all or any of which could adversely affect the Company’s business, financial condition or results of operations and damage its reputation. Loss of key third-party vendor relationships or failure of a vendor to protect information of our customers or employees could adversely affect our business or result in losses. We rely on third-party vendors to provide key components of our business operations such as data processing, recording and monitoring transactions, online and mobile banking interfaces and services, internet connections and network access. While we have performed due diligence procedures in selecting vendors, we do not control their actions. In the event that one or more of our vendors suffers a bankruptcy or otherwise becomes unable to continue to provide products or services, or fails to protect non-public personal information of our customers or employees, we may suffer operational impairments, reputational damage and financial losses. Replacing these third-party vendors could create significant delay and expense. Accordingly, use of such third parties creates an inherent risk to our business operations. Risks Related to the Company's Common Stock Our stock is thinly traded. The average daily trading volume of our common stock is relatively small compared to many public companies. The desired market characteristics of depth, liquidity, and orderliness require the substantial presence of willing buyers and sellers in the marketplace at any given time. In our case, this presence depends on the individual decisions of a relatively small number of investors and general economic and market conditions over which we have no control. Due to the relatively small trading volume of our common stock, significant sales of our common stock, or the expectation of these sales, could cause the stock price to fall more than would be justified by the inherent worth of the Company. Conversely, attempts to purchase a significant amount of our stock could cause the market price to rise above the reasonable inherent worth of the Company. There can be no assurances concerning continuing dividend payments. Our common stockholders are only entitled to receive the dividends declared by our Board of Directors. Although we have historically paid annual dividends on our common stock, there can be no assurances that we will be able to continue to pay regular annual dividends or that any dividends we do declare will be in any particular amount. The primary source of money to pay our dividends comes from dividends paid to the Company by the Bank. The Bank’s ability to pay dividends to the Company is subject to, among other things, its earnings, financial condition and applicable regulations, which in some instances limit the amount that may be paid as dividends. Item 1B. Unresolved Staff Comments None.