NBT Bancorp Inc. (the “Company”) is a registered financial holding company incorporated in the state of Delaware in 1986, with its principal headquarters located in Norwich, New York. The Company, on a consolidated basis, at December 31, 20212022 had assets of $12.0$11.74 billion and stockholders’ equity of $1.3$1.17 billion.

The principal assets of the Company consist of all of the outstanding shares of common stock of its subsidiaries, including NBT Bank, National Association (the “Bank”), NBT Financial Services, Inc. (“NBT Financial”), NBT Holdings, Inc. (“NBT Holdings”), CNBF Capital Trust I, NBT Statutory Trust I, NBT Statutory Trust II, Alliance Financial Capital Trust I and Alliance Financial Capital Trust II (collectively, the “Trusts”). The Company’s principal sources of revenue are the management fees and dividends it receives from the Bank, NBT Financial and NBT Holdings.

The Company’s business, primarily conducted through the Bank, consists of providing commercial banking, retail banking and wealth management services primarily to customers in its market area, which includes central and upstate New York, northeastern Pennsylvania, southern New Hampshire, western Massachusetts, Vermont, southern Maine and central Connecticut. The Company has been, and intends to continue to be, a community-oriented financial institution offering a variety of financial services. The Company’s business philosophy is to operate as a community bank with local decision-making, providing a broad array of banking and financial services to retail, commercial and municipal customers. The financial condition and operating results of the Company are dependent on its net interest income, which is the difference between the interest and dividend income earned on its earning assets, primarily loans and investments and the interest expense paid on its interest-bearing liabilities, primarily consisting of deposits and borrowings. Among other factors, net income is also affected by provisions for loan losses and noninterest income, such as insurance and otherservice charges on deposit accounts, card services income, retirement plan administration fees, wealth management revenue including financial services revenue,and trust revenue, insurance services, bank owned life insurance income and gains/losses on securities sales, bank owned life insurance income, ATM and debit card fees, retirement plan administration fees and service charges on deposit accounts, as well as noninterest expenses, such as salaries and employee benefits, occupancy, equipment,technology and data processing and communications,services, occupancy, professional fees and outside services, office supplies and postage, amortization of intangible assets, loan collection and other real estate owned (“OREO”) expenses, advertising, Federal Deposit Insurance Corporation (“FDIC”) expenses and other expenses.

The Bank, a full service commercial bank formed in 1856, provides a broad range of financial products to individuals, corporations and municipalities throughout central and upstate New York, northeastern Pennsylvania, southern New Hampshire, western Massachusetts, Vermont, southern Maine and central Connecticut.

Through its network of branch locations, the Bank offers a wide range of products and services tailored to individuals, businesses and municipalities. Deposit products offered by the Bank include demand deposit accounts, savings accounts, negotiable order of withdrawal (“NOW”) accounts, money market deposit accounts (“MMDA”) and certificate of deposit (“CD”) accounts. The Bank offers various types of each deposit account to accommodate the needs of its customers with varying rates, terms and features. Loan products offered by the Bank include indirect and direct consumer loans, home equity loans, mortgages, business banking loans and commercial loans, with varying rates, terms and features to accommodate the needs of its customers. The Bank also offers various other products and services through its branch network such as trust and investment services and financial planning and life insurance services. In addition to its branch network, the Bank also offers access to certain products and services electronically through 24-hour online, mobile and telephone channels that enable customers to check balances, make deposits, transfer funds, pay bills, access statements, apply for loans and access various other products and services.

Through NBT Financial Services, the Company operates EPIC Advisors, Inc. (“EPIC”), a retirement plan administrator. EPIC offers services including retirement plan consulting and recordkeeping services. EPIC’s headquarters are located in Rochester, New York.

Through NBT Holdings, the Company operates NBT Insurance Agency, LLC (“NBT Insurance”), a full-service insurance agency acquired by the Company on September 1, 2008. NBT Insurance’s headquarters are located in Norwich, New York. NBT Insurance offers a full array of insurance products, including personal property and casualty, business liability and commercial insurance, tailored to serve the specific insurance needs of individuals as well as businesses in a range of industries operating in the markets served by the Company.

The Trusts were organized to raise additional regulatory capital and to provide funding for certain acquisitions. CNBF Capital Trust I and NBT Statutory Trust I are Delaware statutory business trusts formed in 1999 and 2005, respectively, for the purpose of issuing trust preferred securities and lending the proceeds to the Company. In connection with the acquisition of CNB Bancorp, Inc., the Company formed NBT Statutory Trust II in February 2006 to fund the cash portion of the acquisition as well as to provide regulatory capital. In connection with the acquisition of Alliance Financial Corporation (“Alliance”), the Company acquired two statutory trusts, Alliance Financial Capital Trust I and Alliance Financial Capital Trust II, which were formed in 2003 and 2006, respectively. The Company guarantees, on a limited basis, payments of distributions on the trust preferred securities and payments on redemption of the trust preferred securities. The Trusts are variable interest entities for which the Company is not the primary beneficiary, as defined by Financial Accounting Standards Board (“FASB”) Accounting Standards Codification (“ASC”). In accordance with ASC, the accounts of the Trusts are not included in the Company’s consolidated financial statements.

The Bank has three operating subsidiaries, NBT Capital Corp., Broad Street Property Associates, Inc. and NBT Capital Management, Inc. NBT Capital Corp., formed in 1998, is a venture capital corporation. Broad Street Property Associates, Inc., formed in 2004, is a property management company. NBT Capital Management, Inc., formerly Columbia Ridge Capital Management, Inc., was acquired in 2016 and is a registered investment advisor that provides investment management and financial consulting services. One operating subsidiary, CNB Realty Trust, formed in 1998, was a real estate investment trust which was dissolved during 2021.

The financial services industry, including commercial banking, is highly competitive, and we encounter strong competition for deposits, loans and other financial products and services in our market area. The increasingly competitive environment is the result of the continued low rate environment, changes in regulation, changes in technology and product delivery systems, additional financial service providers and the accelerating pace of consolidation among financial services providers. The Company competes for loans, deposits and customers with other commercial banks, savings and loan associations, securities and brokerage companies, mortgage companies, insurance companies, finance companies, money market funds, credit unions and other nonbank financial service providers.

The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Banks, securities firms and insurance companies can merge under the umbrella of a financial holding company, which can offer virtually any type of financial service, including banking, securities underwriting, insurance (both agency and underwriting) and merchant banking. In addition, technology has lowered barriers to entry and made it possible for non-banks to offer products and services traditionally provided by banks, such as automatic transfer and automatic payment systems.

Some of the Company’s nonbanking competitors have fewer regulatory constraints and may have lower cost structures. In addition, some of the Company’s competitors have assets, capital and lending limits greater than that of the Company, have greater access to capital markets and offer a broader range of products and services than the Company. These institutions may have the ability to finance wide-ranging advertising campaigns and may be able to offer lower rates on loans and higher rates on deposits than the Company can offer. Some of these institutions offer services, such as credit cards and international banking, which the Company does not directly offer.

Various in-state market competitors and out-of-state banks continue to enter or have announced plans to enter or expand their presence in the market areas where the Company currently operates. With the addition of new financial services providers within our market, the Company expects increased competition for loans, deposits and other financial products and services.

In order to compete with other financial services providers, the Company stresses the community nature of its banking operations and principally relies upon local promotional activities, personal relationships established by officers, directors and employees with the Company’s customers and specialized services tailored to meet the needs of the communities served. We also offer certain customer services, such as agricultural lending, that many of our larger competitors do not offer. While the Company’s position varies by market, the Company’s management believes that it can compete effectively as a result of local market knowledge, local decision making and awareness of customer needs.

The table below summarizes the Bank’s deposits and market share as of June 30, 20212022 by the thirty-eight counties of New York, Pennsylvania, New Hampshire, Massachusetts, Vermont, Maine and Connecticut. Market share is based on deposits of all commercial banks, credit unions, savings and loans associations and savings banks.

Source: S&P Global Market Intelligence

* Branch and ATM data is as of December 31, 2021.2022.

The Company’s enterprise security strategy revolves around people, processes and technology. The Company employs a defense in depth strategy, which combines physical control measures with logical control measures and uses a layered security model to provide end-to-end security of Company and client information. The high-level objective of the information security program is to protect the confidentiality, integrity and availability of all information assets in our environment. We accomplish this by building our program around six foundational control areas: program oversight and governance, safeguards and controls, security awareness training, service provider oversight, incident response and business continuity. The Company’s data security and privacy practices follow all applicable laws and regulations including the Gramm-Leach Bliley Act of 2001 (“GLBA”) and applicable privacy laws described under the heading Supervision and Regulation in this Item 1. Business section.

The controls identified in our enterprise security program are managed by various stakeholders throughout the Company and monitored by the information security team. All employees are required to complete information security and privacy training when they join the Company and then complete annual online training certification and ad hoc face to face trainings. The Company engages outside consultants to perform periodic audits of our information and data security controls and processes including penetration testing of the Company’s public facing websites and corporate networks. The Board of Directors requires the Company’s Information Security Officer to report to them the status of the overall information security and data privacy program on a recurring basis. More information can be located on the Company’s website https://www.nbtbank.com/Personal/Customer-Support/Fraud-Information-Center.

We retooled our initiativesOur commitment to diversity, equity and inclusion (“DEI”) to take into consideration our remote and hybrid working conditions overinitiatives remains stronger than ever. In 2022 the past 18 months. OurCompany named a full-time Chief Diversity Officer ledafter several years of leaders executing the responsibility of this role in a shared capacity. With full-time focus, the Chief Diversity Officer will continue to advance our DEI journey with strategies connected to engagement, careers and recruitment, innovation and measurement.

The Company’s DEI strategy has a commitment to enhancing our diversity making us more innovative and effective at meeting the needs of our customers and communities. The Company utilizes a variety of approaches to maximize diversity within each pool of candidates through both internal and external recruitment practices. It is the Company’s belief that these efforts will provide equitable opportunities and contribute to improved products and services, better customer engagement and ultimately enhanced stockholder return.

Both grassroots and executive sponsored strategies continue to be critical to our DEI initiatives. Executive sponsored strategies to continue our DEI journey. Executive sponsored strategies include providingsupport leadership opportunities with cross-functional/cross functional/geographic teams, webinarspanel discussions and virtual sessionsa fireside chat in support of women’s empowerment and being your authentic self and a financial contribution to a community center supporting LGBTQ youth. Our DEI Inclusion Roundtable supports grassroots efforts focusing on topics such as working parents and providing contribution support to employee interests such as a fundraiser for the LGBTQ community. Grassroot efforts include more focus andraising awareness of various cultural and diverse interests from our company-wide DEI Roundtable. The Roundtable also providedinterests. NBT Communities is an internal social media forum called NBT Communities where employees with similar interests across ourthe footprint have a way tocan connect and get to know each other. other around a variety of topics. In addition, the Inclusion Roundtable launched Coffee and Connections as a way for employees to convene for thirty minutes over coffee in a virtual setting to discuss generational diversity, neurodiversity, travel interests and more.

The Company has a DEI steering committee comprised of members of the executive team, including the Chief Executive Officer. The plan is shared with our Board of Directors, management and employees, who are often included in implementing specific action items.

Both the Roundtable and the Steering Committee utilized data from our September 2021 Employee Engagement survey to understand perspectives and create specific initiatives addressing employee feedback and perceptions. More information can be located on the Company’s website at https://www.nbtbank.com/about-us/Diversity-and-Inclusion/.

The Company’s focus on investing in our people includes key initiatives to attract, develop and retain our valued employees. Talent acquisition and more importantly, retention, arecontinue to be top priorities especially in the post-coronavirus (“COVID-19”) “great resignation”post-pandemic environment and boomer generation transition to retirement.considering the current challenges in the labor market. An Employee Referral Program was implemented in the third quarter resulting in current employees referring 18% of the new employees hired in 2022.

The Company seeks to further refine its workforce programs through itsculture by soliciting employee opinions using engagement survey which is planned on an annual basis with follow upsurveys. In addition, the Company regularly uses pulse surveys into explore further the interim. In addition to the pulse surveys conducted to understandsentiments behind employee well-being, attitudes about remote work, productivity, and work-life balance during the last 18 months, abalance. A full Engagement Survey was completed in September 20212022 to discover more aboutassess the overall level of employee engagement. We were pleased at the high level of engagement and participation and overall engagement atin the same high level as pre-pandemic.survey. Divisional and Corporate actions have beenare being developed to address areas employees suggested would like to be more knowledgeable and involved in.helpful. The Company believes our engaged employees will drive retention, encourage discretionary employee effort, and effort, ultimately correlating to aproduce better experienceexperiences for our customers.

The boardBoard of directorsDirectors and senior management have vigorously endorsed a no-tolerance stance for workplace harassment, biases and unethical behavior. The Company’s values-based Code of Business Conduct and Ethics is extensively communicated on our website and targeted internal communications platforms. Frequent training specific to managers and employees, regular publication of our whistleblower policy and reporting mechanisms provide framework to the Company’s motto of: “The right people. Doing the right things. In the right way.”

The Company is engaged in the communities where we do business and where our employees and directors live and work. We live out our core value of community involvement through investments of both money and the time of our employees.

Through our active contribution program, administered by market-based committees with representation from all lines of business, the Company contributed nearly $2.0 million in 2021, a 43% increase from 2020.2022. Our teams’ efforts to distribute philanthropic resources across our footprint ensure alignment with local needs and support for hundreds of organizations that provide health and human services and promote education, affordable housing, economic development, the arts and agriculture.

A consistent way that the Company and our employees support our communities across our markets is through giving to United Way chapters in the form of corporate pledges and employee campaign contributions. In 2021,2022, these commitments resulted in over $375,000$365,000 in funding for United Way chapters that provide resources to local organizations offering critical education, financial, food security and health services.

In addition to corporate financial support of community organizations and causes, employees are encouraged and empowered to volunteer and be a resource in their communities. They invest their financial and other expertise as board members and serve in roles where they offer direct support to those in need by engaging in all manner of volunteer activities. New employees participate in an onboarding experience that includes a community service activity.

The Company offers a comprehensive array of financial products and services for consumers and businesses with options that are beneficial to unbanked and underbanked individuals. Deposit accounts include low balance savings and checking options that feature minimal or no monthly service fees, provide assistance rebuilding positive deposit relationships, and assistance for those just starting a new banking relationship. The new NBT iSelect Account was introduced in 2021 and certified as meeting the Bank On National Account Standard withStandards for 2021-2022 and again for 2023-2024. Over 3,200 NBT iSelect Accounts have been opened. These accounts feature no monthly charges for maintenance, inactivity or dormancy, no overdraft fees and no minimum balance requirement. An enhanced digital banking platform incorporates ready access through online and mobile services to current credit score information and a personal financial management tool for budget and expense tracking.

The Company is focused on making home ownership accessible to everyone in the communities we serve. Our suite of home lending products features innovative and flexible options, including government guaranteed programs like Federal Housing Administration (“FHA”) and U.S. Department of Veterans Affairs (“VA”) loans as well as programs developed in-house like our First Home Loan, Habitat for Humanity, Home in the City and Portfolio 97 programs. Our home lending team includes affordable housing loan originators, and we maintain longstanding relationships with affordable housing agency partners across our banking footprint that offer first-time homebuyer education programs and assistance with down payments and closing costs.

The Company is focused on the environment and committed to business practices and activities that encourage sustainability and minimize our environmental impact. In larger facilities, the Company conserves energy through the use of building energy management systems and motion sensor lighting controls. In new construction and renovations, the Company incorporates high-efficiency mechanical equipment, LED lighting, and modern building techniques to reduce our carbon footprint wherever possible. The Company has an ongoing initiative to replace existing lighting with LED lighting to reduce energy consumption.

The Company offers a financing product to homeowners on a national basis which provides an opportunity to power their homes with sustainable solar energy. It enables households toenergy and reduce their carbon footprint at an affordable price. Services like mobile and online banking, remote deposit capture, electronic loan payments, eStatements and combined statements enable us to support all customers in their efforts to consume less fuel and paper. We continue to digitize loan origination and deposit account opening processes, reducing trips to the bank and paper documents for our customers. Across our footprint, we host community shred days with multiple confidential document destruction companies to promote safe document disposal and recycling.

The Company, the Bank and certain of its non-banking subsidiaries are subject to extensive regulation under federal and state laws. The regulatory framework applicable to bank holding companies and their subsidiary banks is intended to protect depositors, federal deposit insurance funds and the stability of the U.S. banking system. This system is not designed to protect equity investors in bank holding companies, such as the Company.

Set forth below is a summary of the significant laws and regulations applicable to the Company and its subsidiaries. The description that follows is qualified in its entirety by reference to the full text of the statutes, regulations and policies that are described. Such statutes, regulations and policies are subject to ongoing review by Congress and state legislatures and federal and state regulatory agencies. A change in any of the statutes, regulations or regulatory policies applicable to the Company and its subsidiaries could have a material effect on the results of the Company.

In addition to the summary below, as a result of the COVID-19 pandemic, theCompany continues to monitor any guidance and developments from U.S. federal and state bank regulators issued several letters and other guidance to bank holding companies and banks regarding expectations for supporting the community and certain related temporary regulatory changes and accommodations. The Company continues to monitor guidance and developments related to COVID-19.the coronavirus (“COVID-19”) pandemic.

The Company is a registered bank holding company and financial holding company under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of, and regular examination by, the Board of Governors of the Federal Reserve System (the “Federal Reserve Board” or “FRB”) as its primary federal regulator. The Company is also subject to the jurisdiction of the Securities and Exchange Commission (“SEC”) and is subject to the disclosure and other regulatory requirements of the Securities Act of 1933, as amended, and the Securities Exchange Act of 1934, as amended (the “Exchange Act”), as administered by the SEC. The Company’s common stock is listed on the NASDAQ Global Select market under the ticker symbol, “NBTB,” and the Company is subject to the NASDAQ stock market rules.

The Bank is chartered as a national banking association under the National Bank Act. The Bank is subject to the supervision of, and to regular examination by, the Office of the Comptroller of the Currency (“OCC”) as its chartering authority and primary federal regulator. The Bank is also subject to the supervision and regulation, to a limited extent, of the FDIC as its deposit insurer. Financial products and services offered by the Company and the Bank are subject to federal consumer protection laws and implementing regulations promulgated by the Consumer Financial Protection Bureau (“CFPB”). The Company and the Bank are also subject to oversight by state attorneys general for compliance with state consumer protection laws. The Bank’s deposits are insured by the FDIC up to the applicable deposit insurance limits in accordance with FDIC laws and regulations. The non-bank subsidiaries of the Company and the Bank are subject to federal and state laws and regulations, including regulations of the FRB and the OCC, respectively.

Since the enactment of the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”), U.S. banks and financial services firms have been subject to enhanced regulation and oversight. The Trump administration and its appointees to the federal banking agencies enacted some legislation and took other steps to modify and scale back portions of the Dodd-Frank Act and certain of its implementing regulations. It is not clear at this time what the effect on the Company would be of any legislation or regulatory changes that may be enacted or implemented by the Biden administration, though major changes are not expected in the near term.

The Company is a bank holding company as defined by the BHC Act. The BHC Act generally limits the business of the Company to banking, managing or controlling banks and other activities that the FRB has determined to be so closely related to banking “as to be a proper incident thereto.” The Company has also qualified for and elected to be a financial holding company. Financial holding companies may engage in any activity, or acquire and retain the shares of a company engaged in any activity, that is either (1) financial in nature or incidental to such financial activity (as determined by the FRB in consultation with the Secretary of the Treasury), or (2) complementary to a financial activity and that does not pose a substantial risk to the safety and soundness of depository institutions or the financial system (as solely determined by the FRB). If a bank holding company seeks to engage in the broader range of activities permitted under the BHC Act for financial holding companies, (1) the bank holding company and all of its depository institution subsidiaries must be “well-capitalized” and “well-managed,” as defined in the FRB’s Regulation Y and (2) it must file a declaration with the FRB that it elects to be a “financial holding company.” In order for a financial holding company to commence any activity that is financial in nature, incidental thereto, or complementary to a financial activity, or to acquire a company engaged in any such activity permitted by the BHC Act, each insured depository institution subsidiary of the financial holding company must have received a rating of at least “satisfactory” in its most recent examination under the Community Reinvestment Act of 1977 (the “CRA”). See the section titled “Community Reinvestment Act of 1977” for further information relating to the CRA.

The BHC Act, the Bank Merger Act and other federal and state statutes regulate acquisitions of depository institutions and their holding companies. The BHC Act requires prior FRB approval for a bank holding company to acquire, directly or indirectly, 5% or more of any class of voting securities of a commercial bank or its parent holding company and for a company, other than a bank holding company, to acquire 25% or more of any class of voting securities of a bank or bank holding company (and sometimes a lower percentage if there are other indications of control). Under the Change in Bank Control Act, any person, including a company, may not acquire, directly or indirectly, control of a bank without providing 60 days’ prior notice and receiving a non-objection from the appropriate federal banking agency.

Under the Bank Merger Act, prior approval of the OCC is required for a national bank to merge with another bank where the national bank is the surviving bank or to purchase the assets or assume the deposits of another bank. In reviewing applications seeking approval of merger and acquisition transactions, the federal banking agencies will consider, among other criteria, the competitive effect and public benefits of the transactions, the capital position of the combined banking organization, the applicant’s performance record under the CRA and the effectiveness of the subject organizations in combating money laundering activities.

As a financial holding company, the Company is permitted to acquire control of non-depository institutions engaged in activities that are financial in nature and in activities that are incidental to financial activities without prior FRB approval. However, the BHC Act, as amended by the Dodd-Frank Act, requires prior written approval from the FRB or prior written notice to the FRB before a financial holding company may acquire control of a company with consolidated assets of $10 billion or more.

The principal source of the Company’s liquidity is dividends from the Bank. The OCC oversees the ability of the Bank to make capital distributions, including dividends. The OCC generally prohibits a depository institution from making any capital distributions (including payment of a dividend) or paying any management fee to its parent holding company if the bank would thereafter be undercapitalized. The OCC’s prior approval is required if the total of all dividends declared by a national bank in any calendar year would exceed the sum of the bank’s net income for that year and its undistributed net income for the preceding two calendar years, less any required transfers to surplus. The National Bank Act also prohibits national banks from paying dividends that would be greater than the bank’s undivided profits after deducting statutory bad debt in excess of the bank’s allowance for loan losses.

The federal banking agencies have indicated that paying dividends that deplete a bank’s capital base to an inadequate level would be an unsafe and unsound banking practice and that banking organizations should generally pay dividends only out of current operating earnings. The appropriate federal regulatory authority is authorized to determine, based on the financial condition of a bank holding company or a bank, that the payment of dividends would be an unsafe or unsound practice and to prohibit such payment.

Transactions between the Bank and its affiliates, including the Company, are governed by Sections 23A and 23B of the Federal Reserve Act (the “FRA”) and the FRB’s implementing Regulation W. An “affiliate” of a bank includes any company or entity that controls, is controlled by or is under common control with such bank. In a bank holding company context, at a minimum, the parent holding company of a bank and companies that are controlled by such parent holding company, are affiliates of the bank. Generally, Sections 23A and 23B of the FRA are intended to protect insured depository institutions from losses in transactions with affiliates. These sections place quantitative and qualitative limitations on covered transactions between the Bank and its affiliates and require that all transactions between a bank and its affiliates occur on market terms that are consistent with safe and sound banking practices.

Section 22(h) of the FRA and its implementing Regulation O restricts loans to the Bank’s and its affiliates’ directors, executive officers and principal stockholders (“Insiders”). Under Section 22(h), loans to Insiders and their related interests may not exceed, together with all other outstanding loans to such persons and affiliated entities, the Bank’s loan-to-one borrower limit. Loans to Insiders above specified amounts must receive the prior approval of the Bank’s boardBoard of directors.Directors. Further, under Section 22(h) of the FRA, loans to directors, executive officers and principal stockholders must be made on terms substantially the same as offered in comparable transactions to other persons, except that such Insiders may receive preferential loans made under a benefit or compensation program that is widely available to the Bank’s employees and does not give preference to the Insider over the employees. Section 22(g) of the FRA places additional limitations on loans to the Bank’s and its affiliates’ executive officers.

The FDIC’s deposit insurance limit is $250,000 per depositor, per insured bank, for each account ownership category, in accordance with applicable FDIC regulations. The Bank’s deposit accounts are fully insured by the FDIC Deposit Insurance Fund (the “DIF”) up to the deposit insurance limits in accordance with applicable laws and regulations.

The FDIC uses a risk-based assessment system that imposes insurance premiums based upon a risk matrix that takes into account a bank’s capital level and supervisory rating (“CAMELS rating”). The risk matrix uses different risk categories distinguished by capital levels and supervisory ratings. As a result of the Dodd-Frank Act, the base for deposit insurance assessments is the consolidated average assets less average tangible equity. Assessment rates are calculated using formulas that take into account the risk of the institution being assessed.

Under FDIC laws and regulations, no FDIC-insured depository institution can accept brokered deposits unless it is well-capitalized or unless it is adequately capitalized and receives a waiver from the FDIC. Applicable laws and regulations also limits the interest rate that any depository institution that is not well-capitalized may pay on brokered deposits.

Under the Federal Deposit Insurance Act (“FDIA”), the FDIC may terminate deposit insurance upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC. The Bank’s management is not aware of any practice, condition or violation that might lead to the termination of its deposit insurance.

The Bank is also a member of the Federal Home Loan Bank (“FHLB”) of New York, which provides a central credit facility primarily for member institutions for home mortgage and neighborhood lending. The Bank is subject to the rules and requirements of the FHLB, including the requirement to acquire and hold shares of capital stock in the FHLB in an amount at least equal to the sum of 0.125% of mortgage related assets at the beginning of each year. The Bank was in compliance with FHLB rules and requirements as of December 31, 2021.2022.

The Dodd-Frank Act requires that any interchange transaction fee charged for a debit transaction be reasonable and proportional to the cost incurred by the issuer for the transaction. FRB regulations mandated by the Dodd-Frank Act limit interchange fees on debit cards to a maximum of 21 cents per transaction plus 5 basis points of the transaction amount. The rule also permits a fraud-prevention adjustment of 1 cent per transaction conditioned upon an issuer developing, implementing and updating reasonably designed fraud-prevention policies and procedures. Issuers that, together with their affiliates, have less than $10 billion of assets, are exempt from the debit card interchange fee standards. In addition, FRB regulations prohibit all issuers, including the Company and the Bank, from restricting the number of networks over which electronic debit transactions may be processed to less than two unaffiliated networks.

In December 2020, the OCC, together with the Board of Governors of the Federal Reserve System and the FDIC, issued an interim final rule to temporarily mitigate transition costs related to the COVID-19 pandemic on community banking organizations with less than $10 billion in total assets as of December 31, 2019. The rule allowsallowed organizations, including the Company, to use assets as of December 31, 2019, to determine the applicability of various regulatory asset thresholds. During 2020, the Company crossed the $10 billion threshold but elected to delay the regulatory implications of crossing the $10 billion threshold until 2022 for these debit card interchange fee standards. The Company will bebecame subject to the new standards starting in July 2022.

FRB policy requires bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. Section 616 of the Dodd-Frank Act codifies the requirement that bank holding companies serve as a source of financial strength to their subsidiary depository institutions. A bank holding company’s failure to meet its obligations to serve as a source of strength to its subsidiary banks will generally be considered by the FRB to be an unsafe and unsound banking practice or a violation of FRB regulations or both. As a result, the Company is expected to commit resources to support the Bank, including at times when the Company may not be in a financial position to provide such resources. Any capital loan by the Company to the Bank is subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary banks. The U.S. Bankruptcy Code provides that, in the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

In addition, under the National Bank Act, if the Bank’s capital stock is impaired by losses or otherwise, the OCC is authorized to require payment of the deficiency by assessment upon the Company. If the assessment is not paid within three months, the OCC could order a sale of Bank stock held by the Company to cover any deficiency.

In July 2013, the FRB, the OCC and the FDIC approved final rules (the “Capital Rules”) that established a new capital framework for U.S. banking organizations. The Capital Rules generally implement the Basel Committee on Banking Supervision’s (the “Basel Committee”) December 2010 final capital framework referred to as “Basel III” for strengthening international capital standards. The Capital Rules revise the definitions and the components of regulatory capital, as well as address other issues affecting the numerator in banking institutions’ regulatory capital ratios. The Capital Rules also address asset risk weights and other matters affecting the denominator in banking institutions’ regulatory capital ratios and replace the existing general risk-weighting approach with a more risk-sensitive approach.

The Capital Rules: (1) require a capital measure called “Common Equity Tier 1” (“CET1”) and related regulatory capital ratio of CET1 to risk-weighted assets; (2) specify that Tier 1 capital consists of CET1 and “Additional Tier 1 capital” instruments meeting certain revised requirements; (3) mandate that most deductions/adjustments to regulatory capital measures be made to CET1 and not to the other components of capital; and (4) expand the scope of the deductions from and adjustments to capital as compared to existing regulations. Under the Capital Rules, for most banking organizations, including the Company, the most common form of Additional Tier 1 capital is non-cumulative perpetual preferred stock and the most common forms of Tier 2 capital are subordinated notes and a portion of the allocation for loan losses, in each case, subject to the Capital Rules’ specific requirements.

Pursuant to the Capital Rules, the minimum capital ratios as of January 1, 2015 are:

The Capital Rules also require a “capital conservation buffer,” composed entirely of CET1, on top of these minimum risk-weighted asset ratios. The capital conservation buffer is designed to absorb losses during periods of economic stress. Banking institutions with a ratio of CET1 to risk-weighted assets above the minimum but below the capital conservation buffer will face constraints on dividends, equity and other capital instrument repurchases and compensation based on the amount of the shortfall. The capital conservation buffer was phased in incrementally until when, on January 1, 2019, the capital conservation buffer was fully phased in, resulting in the capital standards applicable to the Company and the Bank including an additional capital conservation buffer of 2.5% of CET1, and effectively resulting in minimum ratios inclusive of the capital conservation buffer of (1) CET1 to risk-weighted assets of at least 7%, (2) Tier 1 capital to risk-weighted assets of at least 8.5% and (3) Total capital to risk-weighted assets of at least 10.5%. The risk-weighting categories in the Capital Rules are standardized and include a risk-sensitive number of categories, depending on the nature of the assets, generally ranging from 0% for U.S. government and agency securities, to 600% for certain equity exposures and resulting in higher risk weights for a variety of asset classes.

In addition, under the prior general risk-based capital rules, the effects of accumulated other comprehensive income or loss (“AOCI”) items included in stockholders’ equity (for example, marks-to-market of securities held in the available for sale (“AFS”) portfolio) under GAAP were excluded for the purposes of determining regulatory capital ratios. Under the Capital Rules, the effects of certain AOCI items are not excluded; however, banking organizations not using the advanced approaches, including the Company and the Bank, were permitted to make a one-time permanent election to continue to exclude these items in January 2015. The Capital Rules also preclude certain hybrid securities, such as trust preferred securities issued after May 19, 2010, from inclusion in bank holding companies’ Tier 1 capital.

Management believes that the Company is in compliance with the targeted capital ratios.

Pursuant to Section 38 of the FDIA, federal banking agencies are required to take “prompt corrective action” (“PCA”) should an insured depository institution fail to meet certain capital adequacy standards. At each successive lower capital category, an insured depository institution is subject to more restrictions and prohibitions, including restrictions on growth, restrictions on interest rates paid on deposits, restrictions or prohibitions on payment of dividends and restrictions on the acceptance of brokered deposits. Furthermore, if an insured depository institution is classified in one of the undercapitalized categories, it is required to submit a capital restoration plan to the appropriate federal banking agency and the holding company must guarantee the performance of that plan. Based upon its capital levels, a bank that is classified as well-capitalized, adequately capitalized or undercapitalized, may be treated as though it were in the next lower capital category if the appropriate federal banking agency, after notice and opportunity for hearing, determines that an unsafe or unsound condition or an unsafe or unsound practice, warrants such treatment.

For purposes of PCA, to be: (1) well-capitalized, an insured depository institution must have a total risk based capital ratio of at least 10%, a Tier 1 risk based capital ratio of at least 8%, a CET1 risk based capital ratio of at least 6.5%, and a Tier 1 leverage ratio of at least 5%; (2) adequately capitalized, an insured depository institution must have a total risk based capital ratio of at least 8%, a Tier 1 risk based capital ratio of at least 6%, a CET1 risk based capital ratio of at least 4.5%, and a Tier 1 leverage ratio of at least 4%; (3) undercapitalized, an insured depository institution would have a total risk based capital ratio of less than 8%, a Tier 1 risk based capital ratio of less than 6%, a CET1 risk based capital ratio of less than 4.5%, and a Tier 1 leverage ratio of less than 4%; (4) significantly undercapitalized, an insured depository institution would have a total risk based capital ratio of less than 6%, a Tier 1 risk based capital ratio of less than 4%, a CET1 risk based capital ratio of less than 3%, and a Tier 1 leverage ratio of less than 3%.; (5) critically undercapitalized, an insured depository institution would have a ratio of tangible equity to total assets that is less than or equal to 2%. At December 31, 2021,2022, the Bank qualified as “well-capitalized” under applicable regulatory capital standards.

Bank holding companies and insured depository institutions may also be subject to potential enforcement actions of varying levels of severity by the federal banking agencies for unsafe or unsound practices in conducting their business or for violation of any law, rule, regulation, condition imposed in writing by the agency or term of a written agreement with the agency. In more serious cases, enforcement actions may include the issuance of directives to increase capital; the issuance of formal and informal agreements; the imposition of civil monetary penalties; the issuance of a cease and desist order that can be judicially enforced; the issuance of removal and prohibition orders against officers, directors and other institution−affiliated parties; the termination of the insured depository institution’s deposit insurance; the appointment of a conservator or receiver for the insured depository institution; and the enforcement of such actions through injunctions or restraining orders based upon a judicial determination that the FDIC, as receiver, would be harmed if such equitable relief was not granted.

Section 619 of the Dodd-Frank Act, commonly known as the Volcker Rule, restricts the ability of banking entities from: (1) engaging in “proprietary trading” and (2) investing in or sponsoring certain covered funds, subject to certain limited exceptions. Under the Economic Growth, Regulatory Reform and Consumer Protection Act (“EGRRCPA”), depository institutions and their holding companies with less than $10 billion in assets, are excluded from the prohibitions of the Volcker Rule. During 2020, the Company crossed the $10 billion threshold, accordingly, we are subject to the Volcker Rule again. Given the Company’s size and the scope of its activities, the implementation of the Volcker Rule did not have a significant effect on its consolidated financial statements.

The FDIA provides that, in the event of the “liquidation or other resolution” of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

The Company is subject to federal consumer financial statutes and the regulations promulgated thereunder including, but not limited to:

The Bank Secrecy Act (“BSA”), as amended by the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (“USA PATRIOT Act”), imposes obligations on U.S. financial institutions, including banks and broker-dealer subsidiaries, to implement policies, procedures and controls which are reasonably designed to detect and report instances of money laundering and the financing of terrorism. Financial institutions also are required to respond to requests for information from federal banking agencies and law enforcement agencies. Information sharing among financial institutions for the above purposes is encouraged by an exemption granted to complying financial institutions from the privacy provisions of the GLBA and other privacy laws. Financial institutions that hold correspondent accounts for foreign banks or provide private banking services to foreign individuals are required to take measures to avoid dealing with certain foreign individuals or entities, including foreign banks with profiles that raise money laundering concerns and are prohibited from dealing with foreign “shell banks” and persons from jurisdictions of particular concern. The primary federal banking agencies and the Secretary of the Treasury have adopted regulations to implement several of these provisions. Since May 11, 2018, the Bank has been required to comply with the Customer Due Diligence Rule, which clarified and strengthened the existing obligations for identifying new and existing customers and explicitly included risk-based procedures for conducting ongoing customer due diligence. All financial institutions also are required to establish internal anti-money laundering programs. The effectiveness of a financial institution in combating money laundering activities is a factor to be considered in any application submitted by the financial institution under the Bank Merger Act. The Company has a BSA and USA PATRIOT Act board-approved compliance program commensurate with its risk profile.

The FCRA’s Red Flags Rule requires financial institutions with covered accounts (e.g., consumer bank accounts and loans) to develop, implement and administer an identity theft prevention program. This program must include reasonable policies and procedures to detect suspicious patterns or practices that indicate the possibility of identity theft, such as inconsistencies in personal information or changes in account activity.

The United States government has imposed economic sanctions that affect transactions with designated foreign countries, nationals and others. These are typically known as the “OFAC” rules based on their administration by the U.S. Treasury Department Office of Foreign Assets Control (“OFAC”). The OFAC-administered sanctions targeting countries take many different forms. Generally, they contain one or more of the following elements: (1) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on “U.S. persons” engaging in financial transactions relating to making investments in or providing investment-related advice or assistance to a sanctioned country; and (2) a blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest, by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. Failure to comply with these sanctions could have serious legal and reputational consequences.

The Company and the Bank are subject to federal laws, including the GLBA and certain state laws containing consumer privacy protection provisions. These provisions limit the ability of banks and other financial institutions to disclose nonpublic information about consumers to affiliated and non-affiliated third parties and limit the reuse of certain consumer information received from nonaffiliated financial institutions. These provisions require notice of privacy policies to clients and, in some circumstances, allow consumers to prevent disclosure of certain nonpublic personal information to affiliates or non-affiliated third parties by means of “opt out” or “opt in” authorizations.

The GLBA requires that financial institutions implement comprehensive written information security programs that include administrative, technical and physical safeguards to protect consumer information. Further, pursuant to interpretive guidance issued under the GLBA and certain state laws, financial institutions are required to notify clients of security breaches resulting in unauthorized access to their personal information. The Bank follows all GLBA obligations.

The Bank is also subject to data security standards, privacy and data breach notice requirements, primarily those issued by the OCC. The federal banking agencies, through the Federal Financial Institutions Examination Council, have adopted guidelines to encourage financial institutions to address cyber security risks and identify, assess and mitigate these risks, both internally and at critical third-partythird party services providers.

The Bank has a responsibility under the CRA, as implemented by OCC regulations, to help meet the credit needs of the communities it serves, including low- and moderate-income neighborhoods. The CRA does not establish specific lending requirements or programs for financial institutions nor does it limit an institution’s discretion to develop the types of products and services that it believes are best suited to its particular community, consistent with the CRA. Regulators periodically assess the Bank’s record of compliance with the CRA. The Bank’s failure to comply with the CRA could, at a minimum, result in regulatory restrictions on its activities and the activities of the Company. The Bank’s latestmost current CRA rating was “Satisfactory.”

Congress, state legislatures and financial regulatory agencies may introduce various legislative and regulatory initiatives that could affect the financial services industry, generally. Such initiatives may include proposals to expand or contract the powers of bank holding companies and/or depository institutions or proposals to substantially change the financial institution regulatory system. Such legislation could change banking statutes and the operating environment of the Company in substantial and unpredictable ways. If enacted, such legislation could increase or decrease the cost of doing business, limit or expand permissible activities or affect the competitive balance among banks, savings associations, credit unions and other financial institutions. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it or any implementing regulations would have on the financial condition or results of operations of the Company. A change in statutes, regulations or regulatory policies applicable to the Company or any of its subsidiaries could have a material effect on the business of the Company.

At December 31, 2021,2022, the Company had 1,8011,861 full-time equivalent employees. The Company’s employees are not presently represented by any collective bargaining group.

The Company’s website is http://www.nbtbancorp.com. The Company makes available free of charge through its website its Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and any amendments to those reports as soon as reasonably practicable after such material is electronically filed with or furnished to the SEC pursuant to Section 13(a) or 15(d) of the Exchange Act. We also make available through our website other reports filed with or furnished to the SEC under the Exchange Act, including our proxy statements and reports filed by officers and directors under Section 16(a) of that Act, as well as our Code of Business Conduct and Ethics and other codes/committee charters. The references to our website do not constitute incorporation by reference of the information contained in the website and such information should not be considered part of this document.

This Annual Report on Form 10-K and other reports filed with the SEC are available on the SEC’s website, which contains reports, proxy and information statements and other information regarding issuers that file electronically with the SEC. The SEC’s website address is www.sec.gov.

There are risks inherent to the Company’s business. The material risks and uncertainties that management believes affect the Company are described below. Any of the following risks could affect the Company’s financial condition and results of operations and could be material and/or adverse in nature. You should consider all of the following risks together with all of the other information in this Annual Report on Form 10-K.

The COVID-19 pandemic has had and continues to have, and another pandemic or public health crisis in the future could have, repercussions across domestic and global economies and financial markets. The global impact of the COVID-19 pandemic evolved rapidly and many countries, and state and local governmentseconomy in the United States including thoseand globally has experienced volatility in which we operate, reacted by instituting government restrictions, border closings, quarantines, “shelter-in-place” ordersrecent years and “social distancing” guidelines that, among other things, resulted inmay continue to do so for the foreseeable future, particularly as a dramatic increase in national unemployment and a significant economic contraction in 2020.

Additionally, ifAs economic conditions relating to the COVID-19 pandemic have improved, the Federal Reserve has anshifted its focus to limiting inflationary and other potentially adverse effect on (1) customer deposits, (2)effects of the abilityextensive pandemic-related government stimulus, which signals the potential for a continued period of our borrowerseconomic uncertainty even though the pandemic has subsided. In addition, there are continuing concerns related to, satisfy their obligationsamong other things, the level of U.S. government debt and fiscal actions that may be taken to us, (3)address that debt, a potential resurgence of economic and political tensions with China and the demand for our loans or our other products and services, (4) other aspectsRussian invasion of our business operations, or (5)Ukraine, all of which may have a destabilizing effect on financial markets and economic activity. Economic pressure on consumers and overall economic uncertainty may result in changes in consumer and business spending, borrowing and saving habits. These economic conditions and/or other negative developments in the domestic or international credit markets or economies may significantly affect the markets in which we do business, the value of our loans and investments, and our ongoing operations, costs and profitability. Declines in real estate markets,values and sales volumes and high unemployment or economic growth, this could, depending on the extent of the declineunderemployment may also result in customer deposits orhigher than expected loan defaults, materially and adversely affect our liquidity and financial condition and our results of operations could be materially and adversely affected.

The Company’s success depends primarily on the general economic conditions in central and upstate New York, northeastern Pennsylvania, southern New Hampshire, western Massachusetts, Vermont, southern Maine, central Connecticut and the specific local markets in which the Company operates. Unlike larger national or other regional banks that are more geographically diversified, the Company provides banking and financial services to customers primarily in the upstate New York areas of Norwich, Syracuse, Oneonta, Amsterdam-Gloversville, Albany, Binghamton, Utica-Rome, Plattsburgh, Glens Falls and Ogdensburg-Massena, the northeastern Pennsylvania areas of Scranton and Wilkes-Barre, Berkshire County, Massachusetts, southern New Hampshire, Vermont, southern Maine and central Connecticut. The local economic conditions in these areas have a significant impact on the demand for the Company’s products and services as well as the ability of the Company’s customers to repay loans, the value of the collateral securing loans and the stability of the Company’s deposit funding sources.

A downturn in theseour local economies could cause significant increases in nonperforming loans, which could negatively impact our earnings. Declines in real estate values in our market areas could cause any of our loans to become inadequately collateralized, which would expose us to greater risk of loss. Additionally, a decline in real estate values could result in the decline of originations of such loans, as most of our loans and the collateral securing our loans are located in those areas.

Our branch locations and our customers’ properties may be adversely impacted by flooding, wildfires, high winds and other effects of severe weather conditions that may be caused or exacerbated by climate change. These events can force property closures, result in property damage and/or result in delays in expansion, development or renovation of our properties and those of our customers. Even if these events do not directly impact our properties or our customers’ properties, they may impact us and our customers through increased insurance, energy or other costs. In addition, changes in laws or regulations, including federal, state or city laws, relating to climate change could result in increased capital expenditures to improve the energy efficiency of our branch locations and/or our customers’ properties.

The Company’s earnings and financial condition, like that of most financial institutions, are largely dependent upon net interest income, which is the difference between interest earned from loans and investments and interest paid on deposits and borrowings. The narrowing of interest rate spreads could adversely affect the Company’s earnings and financial condition. The Company cannot predict with certainty, or control, changes in interest rates. Regional and local economic conditions and the policies of regulatory authorities, including monetary policies of the FRB, affect rates and, therefore, interest income and interest expense. In order to address rising inflation, it is expected that the FRB will raiseraised interest rates;rates in 2022 and may continue to do so; however, the magnitude of any such further increase is not currently known. High interest rates could also affect the amount of loans that the Company can originate because higher rates could cause customers to apply for fewer mortgages or cause depositors to shift funds from accounts that have a comparatively lower cost to accounts with a higher cost. The Company may also experience customer attrition due to competitor pricing.pricing on both deposits and loans. If the cost of interest-bearing deposits increases at a rate greater than the yields on interest-earning assets increase, net interest income will be negatively affected. Changes in the asset and liability mix may also affect net interest income. Similarly, lower interest rates cause higher yielding assets to prepay and floating or adjustable rate assets to reset to lower rates. If the Company is not able to reduce its funding costs sufficiently, due to either competitive factors or the maturity schedule of existing liabilities, then the Company’s net interest margin will decline.

Any substantial or unexpected change in, or prolonged change in market interest rates could have a material adverse effect on the Company’s financial condition and results of operations. See the section captioned “Net Interest Income” in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations and Item 7A. Quantitative and Qualitative Disclosure About Market Risk located elsewhere in this report for further discussion related to the Company’s management of interest rate risk.

As of December 31, 2021,2022, approximately 52%50% of the Company’s loan portfolio consisted of commercial and industrial, agricultural, commercial construction and commercial real estate loans. These types of loans generally expose a lender to greater risk of non-payment and loss than residential real estate loans because repayment of the loans often depends on the successful operation of the property, the income stream of the borrowers and, for construction loans, the accuracy of the estimate of the property’s value at completion of construction and the estimated cost of construction. Such loans typically involve larger loan balances to single borrowers or groups of related borrowers compared to residential real estate loans. Because the Company’s loan portfolio contains a significant number of commercial and industrial, agricultural, construction and commercial real estate loans with relatively large balances, the deterioration of one or a few of these loans could cause a significant increase in nonperforming loans. An increase in nonperforming loans could result in a net loss of earnings from these loans, an increase in the provision for loan losses and/or an increase in loan charge-offs, all of which could have a material adverse effect on the Company’s financial condition and results of operations. See the section captioned “Loans” in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations located elsewhere in this report for further discussion related to our commercial and industrial, agricultural, construction and commercial real estate loans.

The Company maintains an allowance for loan losses, which is an allowance established through a provision for loan losses charged to expense, that represents management’s best estimate of expected credit losses within the existing portfolio of loans. The allowance, in the judgment of management, is necessary to reserve for estimated loan losses and risks inherent in the loan portfolio. The determination of the appropriate level of the allowance for loan losses inherently involves a high degree of subjectivity and requires the Company to make significant estimates of current credit risks, forecast economic conditions and future trends, all of which may undergo material changes. Changes in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of the Company’s control, may require an increase in the allowance for loan losses. Bank regulatory agencies periodically review the Company’s allowance for loan losses and may require an increase in the provision for loan losses or the recognition of further loan charge-offs, based on judgments different from those of management. In addition, if charge-offs in future periods exceed the allowance for loan losses, the Company may need additional provisions to increase the allowance for loan losses. These potential increases in the allowance for loan losses would result in a decrease in net income and, possibly, capital and may have a material adverse effect on the Company’s financial condition and results of operations. See the section captioned “Risk Management – Credit Risk” in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations located elsewhere in this report for further discussion related to the Company’s process for determining the appropriate level of the allowance for loan losses. Management expects that the CECL model may create more volatility in the level of our allowance for loan losses from quarter to quarter as changes in the level of allowance for loan losses will be dependent upon, among other things, macroeconomic forecasts and conditions, loan portfolio volumes and credit quality.

The Company faces substantial competition in all areas of its operations from a variety of different competitors, many of which are larger and may have more financial resources. Such competitors primarily include national, regional and community banks within the various markets in which the Company operates. Additionally, various banks continue to enter or have announced plans to enter the market areas in which the Company currently operates. The Company also faces competition from many other types of financial institutions, including, without limitation, savings and loans, credit unions, finance companies, brokerage firms, insurance companies and other financial intermediaries. The financial services industry could continue to become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Technology has lowered barriers to entry and made it possible for non-banks to offer products and services traditionally provided by banks, such as automatic transfer and automatic payment systems. Many of the Company’s competitors have fewer regulatory constraints and may have lower cost structures. Additionally, due to their size, many competitors may be able to achieve economies of scale and, as a result, may offer a broader range of products and services as well as better pricing for those products and services than the Company can.

The Company’s ability to compete successfully depends on a number of factors, including, among other things:

Failure to perform in any of these areas could significantly weaken the Company’s competitive position, which could adversely affect the Company’s growth and profitability, which, in turn, could have a material adverse effect on the Company’s financial condition and results of operations.

The purpose of the Company’s liquidity management is to meet the cash flow obligations of its customers for both deposits and loans. The primary liquidity measurement the Company utilizes is called basic surplus, which captures the adequacy of the Company’s access to reliable sources of cash relative to the stability of its funding mix of average liabilities. This approach recognizes the importance of balancing levels of cash flow liquidity from short and long-term securities with the availability of dependable borrowing sources, which can be accessed when necessary. However, competitive pressure on deposit pricing could result in a decrease in the Company’s deposit base or an increase in funding costs. In addition, liquidity will come under additional pressure if loan growth exceeds deposit growth. These scenarios could lead to a decrease in the Company’s basic surplus measure to an amount below the minimum policy level of 5%. To manage this risk, the Company has the ability to purchase brokered time deposits, borrow against established borrowing facilities with other banks (Federal funds) and enter into repurchase agreements with investment companies. Depending on the level of interest rates applicable to these alternatives, the Company’s net interest income, and therefore earnings, could be adversely affected. See the section captioned “Liquidity Risk” in Item 7.

The Company is a separate and distinct legal entity from its subsidiaries. It receives substantially all of its revenue from dividends from its subsidiaries. These dividends are the principal source of funds to pay dividends on the Company’s common stock and interest and principal on the Company’s debt. Various federal and/or state laws and regulations limit the amount of dividends that the Bank may pay to the Company. In addition, the Company’s right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of the subsidiary’s creditors. In the event the Bank is unable to pay dividends to the Company, the Company may not be able to service debt, pay obligations or pay dividends on the Company’s common stock. The inability to receive dividends from the Bank could have a material adverse effect on the Company’s business, financial condition and results of operations.

The credit rating agency rating our indebtedness regularly evaluates the Company and the Bank. Credit ratings are based on a number of factors, including our financial strength and ability to generate earnings, as well as factors not entirely within our control, including conditions affecting the financial services industry generally and the economy and changes in rating methodologies. There can be no assurance that the Company will maintain our current credit ratings. A downgrade of the credit ratings of the Company or the Bank could adversely affect our access to liquidity and capital, significantly increase our cost of funds, and decrease the number of investors and counterparties willing to lend to the Company or purchase our securities. This could affect our growth, profitability, and financial condition, including liquidity.

The Company relies on third parties to provide key components for its business operations, such as data processing and storage, recording and monitoring transactions, online banking interfaces and services, internet connections and network access. While the Company selects these third-partythird party vendors carefully, it does not control their actions. Any problems caused by these third parties, including those resulting from breakdowns or other disruptions in communication services provided by a vendor, failure of a vendor to handle current or higher volumes, cyber-attacks and security breaches at a vendor, failure of a vendor to provide services for any reason or poor performance of services by a vendor, could adversely affect the Company’s ability to deliver products and services to its customers and otherwise conduct its business. Financial or operational difficulties of a third-partythird party vendor could also hurt the Company’s operations if those difficulties interfere with the vendor’s ability to serve the Company. Replacing these third party vendors also could create significant delays and expense that adversely affect the Company’s business and performance.

From time to time, the Company may implement new lines of business or offer new products and services within existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed. In developing and marketing new lines of business and/or new products and services, the Company may invest significant time and resources. Initial timetables for the introduction and development of new lines of business and/or new products or services may not be achieved and price and profitability targets may not prove attainable. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also impact the successful implementation of a new line of business or a new product or service. Furthermore, any new line of business and/or new product or service could have a significant impact on the effectiveness of the Company’s system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or new products or services could have a material adverse effect on the Company’s business, results of operations and financial condition.

We are subject to extensive federal and state regulation and supervision. Banking regulations are primarily intended to protect depositors’ funds, the DIF and the safety and soundness of the banking system as a whole, not stockholders. These regulations affect the Company’s lending practices, capital structure, investment practices, dividend policy and growth, among other things. Congress and federal regulatory agencies continually review banking laws, regulations and policies for possible changes. Changes to statutes, regulations or regulatory policies, including changes in interpretation or implementation of statutes, regulations or policies, could affect the Company in substantial and unpredictable ways. Such changes could subject the Company to additional costs, limit the types of financial services and products the Company may offer and/or limit the pricing the Company may charge on certain banking services, among other things.Compliance personnel and resources may increase our costs of operations and adversely impact our earnings.

Failure to comply with laws, regulations or policies could result in sanctions by regulatory agencies, civil money penalties and/or reputation damage, which could have a material adverse effect on our business, financial condition and results of operations. While the Company has policies and procedures designed to prevent any such violations, there can be no assurance that such violations will not occur. See the section captioned “Supervision and Regulation” in Item 1. Business of this report for further information.

As of December 31, 2021,2022, we had total assets of $12.0approximately $11.74 billion. The Dodd-Frank Act, including the Durbin Amendment, and its implementing regulations impose enhanced supervisory requirements on bank holding companies with more than $10 billion in total consolidated assets. For bank holding companies with more than $10 billion in total consolidated assets, such requirements include, among other things:

The EGRRCPA, which was enacted in 2018, amended the Dodd-Frank Act to raise the $10 billion stress testing threshold to $250 billion, among other things. The federal financial regulators issued final rules in 2019 to increase the threshold for these stress testing requirements from $10 billion to $250 billion, consistent with the EGRRCPA.

The Company attempts to maximize net interest income and net income, while actively managing its liquidity and interest rate sensitivity through the mix of various core deposit products and other sources of funds, which in turn fund an appropriate mix of earning assets. The changes in the Company’s asset mix and sources of funds, and the resulting impact on net interest income, on aan FTE basis, are discussed below. The following table includes the condensed consolidated average balance sheet, an analysis of interest income/expense and average yield/rate for each major category of earning assets and interest-bearing liabilities on a taxable equivalent basis. Interest income for tax-exempt securities and loans has been adjusted to a taxable-equivalent basis using the statutory Federal income tax rate of 21% for 2022, 2021 2020 and 2019.2020.