UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 20212022

OR

Commission File Number 0-21714

CSB BANCORP, INC.

(Exact name of Registrant as specified in its Charter)

Registrant’s telephone number, including area code: (330) (330) 674-9015

Securities registered pursuant to Section 12(b)12(g) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the Registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes☐No☒

Indicate by check mark if the Registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. Yes☐No☒

Indicate by check mark whether the Registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes☒No☐

Indicate by check mark whether the Registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes☒No☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes☐No☒

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the Registrant, based on the closing price of the shares of common stock as of June 30, 20212022 of $38.00 per share on the OTC Stock Market, was $95.2$94.3 million.

The number of shares of Registrant’s Common Stock outstanding as of March 15, 20222023 was 2,718,024.2,680,625.

DOCUMENTS INCORPORATED BY REFERENCE

PART I

ITEM 1. BUSINESS.

General

CSB Bancorp, Inc. (“CSB”), is a registered financial holding company under the Bank Holding Company Act of 1956, as amended, and was incorporated under the laws of the State of Ohio in 1991. The Commercial and Savings Bank of Millersburg, Ohio (the “Bank”), an Ohio banking corporation chartered in 1879, is a wholly owned subsidiary of CSB. The Bank is a member of the Federal Reserve System, and its deposits are insured up to the maximum amount provided by law by the Federal Deposit Insurance Corporation (“FDIC”). The primary regulators of the Bank are the Federal Reserve Board and the Ohio Division of Financial Institutions. CSB Investment Services, LLC, an Ohio limited liability company (“CSB Investment”), is a wholly owned subsidiary of CSB that is licensed to engage in the business of insurance in the State of Ohio. In this Annual Report on Form 10-K, CSB and its subsidiaries are sometimes collectively referred to as the “Company.”

Cautionary Statement Regarding Forward-Looking Information

Certain statements contained in this Annual Report on Form 10-K, which are not statements of historical fact, constitute forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. Words such as “anticipate”, “estimates”, “may”, “feels”, “expects”, “believes”, “plans”, “will”, “would”, “should”, “could” and similar expressions are intended to identify these forward-looking statements but are not the exclusive means of identifying such statements. Examples of forward-looking statements include: (i) projections of income or expense, earnings per share, the payment or non-payment of dividends, capital structure, and other financial items; (ii) statements of plans and objectives of the Company and of its management or Board of Directors, including those relating to products or services; (iii) statements of future economic performance; and (iv) statements of assumptions underlying such statements. Forward-looking statements are subject to risks and uncertainties that may cause actual results to differ materially.

Other factors not currently anticipated may also materially and adversely affect the Company’s business, financial condition, results of operations, or cash flows. There can be no assurance that future results will meet expectations. While the Company believes that the forward-looking statements in this Annual Report on Form 10-K are reasonable, the reader should not place undue reliance on any forward-looking statement. In addition, these statements speak only as of the date made. The Company does not undertake, and expressly disclaims, any obligation to update or alter any statements whether as a result of new information, future events, or otherwise, except as may be required by applicable law.

The Private Securities Litigation Reform Act of 1995 provides a “safe harbor” for forward-looking statements to encourage companies to provide prospective information so long as those statements are identified as forward-looking and are accompanied by meaningful cautionary statements identifying important factors that could cause actual results to differ materially from those discussed in the forward-looking statements. The Company desires to take advantage of the “safe harbor” provisions of the Private Securities Litigation Reform Act of 1995.

Business Overview and Lending Activities

CSB operates primarily through the Bank and CSB Investment Services, LLC, providing a wide range of banking, trust, financial, and brokerage services to corporate, institutional, and individual customers throughout northeast Ohio. The Bank provides retail and commercial banking services to its customers, including checking and savings accounts, time deposits, IRAs, safe deposit facilities, personal loans, commercial loans, real estate mortgage loans, installment loans, night depository facilities, brokerage, and trust services.

The Bank provides residential real estate, commercial real estate, commercial, and consumer loans to customers located primarily in Holmes, Stark, Tuscarawas, Wayne, and portions of surrounding counties in Ohio. The Bank’s market area has historically exhibited relatively stable economic conditions. With the onset of the COVID-19 pandemic and the resulting economic shutdown of nonessential businesses in March of 2020, economic activity in the Company’s market area slowed during the second quarter of 2020. During the remainder of 2020, economic stimulus and the reopening of businesses led to an increase in economic activity. Economic activity expanded moderatelyslowed slightly in the fourth quarter of 2021, stemming from2022 after growing modestly earlier in the year. Continued inflationary pressure led to households spending on necessities as opposed to discretionary items. Higher interest rates and increasing borrowing costs are also contributing to a continued recovery following the COVID-19 pandemic economic effectsslowing in 2020.loan demand. Reported unemployment levels in December 20212022 ranged from 2.0%2.9% to 3.5%4.0% in the four primary counties served by the Bank. These levels decreasedincreased from December 20202021 in all four counties served by the Bank. Labor demand increased modestlymoderately in some sectors not heavily affected by the pandemic andwhile wage pressures have elevated somewhat.eased somewhat over the past year. The local housing market continues to be strong with supply still relatively tight and low mortgage rates fueling higher demand.inventory levels keeping home prices from declining. Construction costs remain high as some supply chain disruptionsand higher interest rates have also contributed to the increase.slowing construction activity.

2

Certain risks are involved in providing loans, including, but not limited to, the borrowers’ ability and willingness to repay the debt. Before the Bank extends a new loan or renews an existing loan to a customer, these risks are assessed through a review of the borrower’s past and current credit history, the collateral being used to secure the transaction, if any, and other factors. For all commercial loan relationships greater than $500,000 the Bank’s internal credit department performs an annual risk rating review. In addition to this review, an independent, outside loan review firm is engaged to review a sample of watch list and adversely classified credits over $250,000$500,000 and a sample of commercial loan relationships greater than $250,000.$1,000,000. The outside loan review will also assess management’s current credit grades and provide commentary with regard to assigned ratings and the need for a credit to be classified as a troubled debt restructuring, as well as assess management’s specific loan loss reserves for loans included in their sample that are considered to be impaired. In addition, any loan over $100,000 identified as a problem credit by management and/or the external loan review consultants is assigned to the Bank’s “loan watch list,” has a written action plan created specifically for the loan relationship and is subject to ongoing review at least quarterly by the Bank’s credit department and the assigned loan officer to ensure appropriate action is taken if deterioration continues.

2

Commercial loan rates are variable and fixed and include operating lines of credit and term loans made to businesses, primarily based on their ability to repay the loan from the cash flow of the business. Business assets such as equipment, accounts receivable, and inventory typically secure such loans. When the borrower is not an individual, the Bank generally obtains the personal guarantee of the business owner. These loans typically involve larger loan balances, are generally dependent on the cash flow of the business, and thus may be subject to a greater extent to adverse conditions in the general economy or in a specific industry. Management reviews the borrower’s cash flows when deciding whether to grant the credit in order to evaluate whether estimated future cash flows will be adequate to service principal and interest of the new obligation in addition to existing obligations.

Commercial real estate loans are primarily secured by borrower-occupied business real estate and are dependent on the ability of the related business to generate adequate cash flow to service the debt. Commercial real estate loans are generally originated with a loan-to-value ratio of 80% of the lower of cost or less.appraised value. Commercial construction loans are secured by commercial real estate and in most cases the Bank also provides the permanent financing. The Bank monitors advances and the maximum loan to value ratio is typically limited to the lesser of 90%80% of cost or 80% of appraisalappraised value. Management performs much of the same analysis when deciding whether to grant a commercial real estate loan as when deciding whether to grant a commercial loan.

Residential real estate loans carry both fixed and variable rates and are secured by the borrower’s residence. Such loans are made based on the borrower’s ability to make repayment from employment and other income. Management assesses the borrower’s ability and willingness to repay the debt through review of credit history and ratings, verification of employment and other income, review of debt-to-income ratios, and other measures of repayment ability. The Bank generally makes these loans in amounts of 80% or less of the value of the collateral or up to 97%95% of collateral value with private mortgage insurance. An appraisal from a qualified real estate appraiser or an evaluation based on comparable market values is obtained for substantially all loans secured by real estate. Residential construction loans are secured by residential real estate that generally will be occupied by the borrower upon completion. The Bank usually makes the permanent loan at the end of the construction phase. Generally, construction loans are made in amounts of 80% or less of the value of the as-completed collateral.

Home equity lines of credit are made to individuals and are secured by second or first mortgages on the borrower’s residence. Loans are based on similar credit and appraisal criteria used for residential real estate loans; however, loans up to 90% of the value of the property may be approved for borrowers with excellent credit histories. These loans typically bear interest at variable rates and require minimum monthly payments of the accrued interest.

Installment loans to individuals include unsecured loans and loans secured by recreational vehicles (“RV’s”), automobiles, and other consumer assets. Consumer loans for the purchase of new RV’s and new automobiles generally do not exceed 125% of Dealer Invoice on RV’s or 110% of the Manufacturer’s Suggested Retail Price (MSRP) of an automobile. Loans for used RV’s and automobiles do not exceed 120% of the “clean trade-in value” as reported in the current “NADA”“J.D. Power” used guides. Overdraft protection loans are unsecured personal lines of credit to individuals who have demonstrated good credit character with reasonably assured sources of income and satisfactory credit histories. Consumer loans generally involve more risk than residential mortgage loans because of the type and nature of collateral and, in certain types of consumer loans, absence of collateral. Since these loans are generally repaid from ordinary income of the individual or family unit, repayment may be adversely affected by job loss, divorce, ill health, or by a general decline in economic conditions. The Bank assesses the borrower’s ability and willingness to repay through a review of credit history, credit ratings, debt-to-income ratios, and other measures of repayment ability.

3

While CSB’s chief decision-makers monitor the revenue streams of the various financial products and services, operations are managed, and financial performance is evaluated on a Company-wide basis. Accordingly, all of the Company’s banking operations are considered by management to be aggregated in one reportable operating segment. For a discussion of the Company’s financial performance for the fiscal year ended December 31, 2021,2022, see the Consolidated Financial Statements and Notes to the Consolidated Financial Statements found in Item 8 of this Annual Report on Form 10-K.

Employees

On December 31, 2021,2022, the Company had 182183 employees, 153154 of which were employed on a full-time basis. CSB has no separate employees not also employed by the Bank. No employees are covered by collective bargaining agreements. Employees are provided benefit programs, some of which are contributory. Management considers its employee relations to be good.

Competition

The financial services industry is highly competitive. In its primary market area of Holmes, Stark, Tuscarawas, Wayne and surrounding Ohio counties, the Bank competes for new deposit dollars and loans with other commercial banks, including both large regional banks and smaller community banks, as well as savings and loan associations, credit unions, finance companies, insurance companies, brokerage firms, investment companies, private lenders, and technology-based providers of financial services (sometimes referred to as “fintech” companies).

Competition within the financial service industry continues to increase as a result of mergers between, and expansion of, financial service providers within and outside of the Company’s primary market areas. In addition, securities firms and insurance companies that have elected to become financial holding companies may acquire commercial banks and other financial institutions, which can create additional competitive pressure.

3

Management believes the primary factors in competing for loans and deposits are interest rates, availability of services, quality of customer service, convenience, and name recognition. Some of the Company’s competitors may have greater resources and as such, higher lending limits, or fewer regulatory constraints and lower cost structures, all of which may adversely affect the Company’s ability to compete.

Investor Relations

The Company’s website address is www.csb1.com. The Company makes available its Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to those reports, free of charge on its website as soon as reasonably practicable after such material is electronically filed with the Securities and Exchange Commission (the “SEC”). The Company also makes available through its website, other reports filed with the SEC under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), including its proxy statements and reports filed by officers and directors under Section 16(a) of the Exchange Act, as well as the Company’s Code of Ethics. References to our website in this Annual Report on Form 10-K are provided as a convenience and do not constitute, and should not be deemed, an incorporation by reference of the information contained on, or available through, the website, and such information should not be considered part of this Annual Report on Form 10-K.

In addition, the Company’s filings are available on the SEC’s website at www.sec.gov free of charge as soon as reasonably practicable after the Company has filed the above referenced reports.

Supervision and Regulation of CSB and the Bank

CSB and the Bank are subject to extensive regulation by federal and state regulatory agencies. The regulation of financial holding companies and their subsidiaries by bank regulatory agencies is intended primarily for the protection of consumers, depositors, borrowers, the deposit insurance funds of the FDIC (the “DIF”), and the banking system as a whole and not for the protection of shareholders.

CSB is a bank holding company that has registered with the Federal Reserve Board (“FRB”) as a financial holding company under the Bank Holding Company Act of 1956, as amended (the “BHC Act”). Pursuant to the Gramm-Leach-Bliley Act of 1999 (“GLBA”), a qualifying bank holding company may elect to become a financial holding company and thereby affiliate with securities firms and insurance companies and engage in other activities that are financial in nature and not otherwise permissible for a bank holding company, if: (i) the holding company is "well managed" and "well capitalized" and (ii) each of its subsidiary banks (a) is well capitalized under the Federal Deposit Insurance Corporation Act of 1991 prompt corrective action provisions, (b) is well managed, and (c) has at least a "satisfactory" rating under the Community Reinvestment Act (the “CRA”). CSB has been a financial holding company since 2005. No regulatory approval is required for a financial holding company to acquire a company, other than a bank or savings association, engaged in activities that are financial in nature or incidental to activities that are financial in nature, as determined by the FRB. The financial holding company and its subsidiaries must continue to meet the above-described

4

requirements in order to continue to engage in activities that are financial in nature without being subjected to regulatory action or restriction, which could include divestiture of the subsidiary or subsidiaries.

GLBA defines “financial in nature” to include securities underwriting, dealing, and market making; sponsoring mutual funds and investment companies; insurance underwriting and agency; merchant banking; and activities that the FRB has determined to be closely related to banking. CSB is also subject to the disclosure and regulatory requirements of the Securities Act of 1933, as amended, the Exchange Act, and the regulations rules and regulations promulgated thereunder, as administered by the SEC.

The Bank, as an Ohio state-chartered bank and member of the Federal Reserve System, is subject to regulation, supervision, and examination by the Ohio Division of Financial Institutions and the FRB. Because the FDIC insures its deposits, the Bank is also subject to certain FDIC regulations. The FDIC is an independent federal agency which insures the deposits, up to prescribed statutory limits, of federally insured banks and savings associations, and safeguards the safety and soundness of the financial institution industry. The Bank’s deposits are insured up to applicable limits by the DIF, and the Bank is subject to deposit insurance assessments to maintain the DIF. In addition, the Bank is subject to regulations promulgated by the Consumer Financial Protection Bureau (the “CFPB”), which was established by the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, as amended (the “Dodd-Frank Act”).

The earnings, dividends, and other aspects of the operations and activities of CSB and the Bank are affected by state and federal laws and regulations, and by policies of various regulatory authorities. These policies include, for example, statutory maximum lending rates, requirements on maintenance of reserves against deposits, domestic monetary policies of the FRB, United States fiscal and economic policies, international currency regulations, and monetary policies, certain restrictions on relationships with many phases of the securities business, and capital adequacy, and liquidity restraints.

The following information describes selected federal and state statutory and regulatory provisions that have, or could have, a material impact on the Company’s business. This discussion is qualified in its entirety by reference to the full text of the particular statutory or regulatory provisions contained or referenced herein.

Regulation of Bank Holding Companies

As a financial holding company, CSB’s activities are subject to regulation by the FRB. CSB is subject to regular examinations by the FRB and is required to file reports and such additional information as the FRB may require.

The FRB has extensive enforcement authority over bank holding companies, including the ability to assess civil money penalties, issue cease and desist orders, and require that a bank holding company divest subsidiaries (including subsidiary banks). The FRB may initiate enforcement

4

actions for violations of laws and regulations, and for unsafe and unsound practices. Under FRB policies, a bank holding company is expected to act as a “source of strength” to its subsidiary banks and to commit resources to support those subsidiary banks. Under this policy, the FRB may require a bank holding company to contribute additional capital to an undercapitalized subsidiary bank.

The BHC Act requires the prior approval of the FRB in cases where a bank holding company proposes to acquire direct or indirect ownership or control of more than 5% of the voting shares of any bank that is not already majority-owned by it, acquire all or substantially all of the assets of another bank or another financial or bank holding company, or merge or consolidate with any other financial or bank holding company.

Economic Growth, Regulatory Relief and Consumer Protection Act

On May 25, 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the “Regulatory Relief Act”) was signed into law. The Regulatory Relief Act repealed or modified certain provisions of the Dodd-Frank Act and eased regulations on all but the largest banks (those with consolidated assets in excess of $250 billion). Bank holding companies with consolidated assets of less than $100 billion, including CSB, are no longer subject to enhanced prudential standards. The Regulatory Relief Act also relieves bank holding companies and banks with consolidated assets of less than $100 billion, including CSB, from certain record-keeping, reporting and disclosure requirements. Certain other regulatory requirements applied only to banks with assets in excess of $50 billion and so did not apply to CSB even before the enactment of the Regulatory Relief Act.

The Coronavirus Aid, Relief, and Economic Security Act of 2020

In response to the novel COVID-19 pandemic, the Coronavirus Aid, Relief, and Economic Security Act of 2020, as amended (the “CARES Act”), was signed into law on March 27, 2020, to provide national emergency economic relief measures. Many of the CARES Act’s programs are dependent upon the direct involvement of U.S. financial institutions, such as CSB, and have been implemented through rules and guidance adopted by federal departments and

5

agencies, including the U.S. Department of Treasury, the FRB, and other federal banking agencies, including those with direct supervisory jurisdiction over CSB. Furthermore, as COVID-19 evolves, federal regulatory authorities continue to issue additional guidance with respect to the implementation, lifecycle, and eligibility requirements for the various CARES Act programs as well as industry-specific recovery procedures for COVID-19. In addition, it is possible that Congress will enact supplementary COVID-19 response legislation, including amendments to the CARES Act or new bills comparable in scope to the CARES Act. For example, on December 27, 2020, the Consolidated Appropriations Act (the “CAA”) was signed into law, which, among other things, allowed certain banks to temporarily postpone implementation of the current expected credit loss (“CECL”) model (accounting standard), which is described below. CSB is continuing to assess the impact of the CARES Act and other statutes, regulations and supervisory guidance related to COVID-19.

The CARES Act amended the loan program of the Small Business Administration (the “SBA”), in which CSB participated, to create a guaranteed, unsecured loan program, the Paycheck Protection Program (the “PPP”), to fund operational costs of eligible businesses, organizations and self-employed persons during COVID-19. In June 2020, the Paycheck Protection Program Flexibility Act was enacted, which, among other things, gave borrowers additional time and flexibility to use PPP loan proceeds. Shortly thereafter, and due to the evolving impact of COVID-19, additional legislation was enacted authorizing the SBA to resume accepting PPP applications on July 6, 2020 and extending the PPP application deadline to August 8, 2020. As a participating lender in the PPP, CSB continues to monitor legislative, regulatory, and supervisory developments related thereto. On September 29, 2020, the federal bank regulatory agencies issued a final rule that neutralizes the regulatory capital and liquidity coverage ratio effects of participating in certain COVID-19 liquidity facilities due to the fact there is no credit or market risk in association with exposures pledged to such facilities. As a result, the final rule supports the flow of credit to households and businesses affected by COVID-19.

In December 2020, the Bipartisan-Bicameral Omnibus COVID Relief Deal was enacted to provide additional economic stimulus to individuals and businesses in response to the extended economic distress caused by the pandemic. This legislation included provisions for additional stimulus payments to individuals and their dependents, the extension of enhanced unemployment benefits, $284 billion of additional funds for a second round of PPP loans and a new simplified forgiveness procedure for PPP loans of $150,000 or less.

Certain provisions within the CARES Act encourage financial institutions to practice prudent efforts to work with borrowers impacted by the pandemic. Under these provisions, loan modifications deemed to be COVID-19 related would not be considered a troubled debt restructuring (TDR) if the loan was not more than 30 days past due as of December 31, 2019 and the deferral was executed between March 1, 2020 and the earlier of 60 days after the date of the termination of the COVID-19 national emergency or December 31, 2020. The banking regulators issued a similar guidance, which also clarified that a COVID-19 related modification should not be considered a TDR if the borrower was current on payments at the time the underlying loan modification program was implemented and if the modification is considered short-term. Section 541 of the Consolidated Appropriations Act, 2021, extended this relief to the earlier of 60 days after the end of the national emergency proclamation or January 1, 2022. The Bank implemented a short-term modification program that offered principal and interest payment deferrals for up to 3 to 4 months or interest only payments for 3 to 4 months. Borrowers were eligible for an additional payment deferral if situations warranted a need for an extension. Interest was deferred but continued to accrue during the deferment period and the maturity date on amortizing loans was extended by the number of months the payment was deferred. Consistent with issued regulatory guidance, modifications made under this program in response to COVID-19 were not  classified as troubled debt restructurings All modified loans have been returned to payment status.

Current Expected Credit Loss Model

In December 2018,2019, the federal banking agencies issued a final rule to address regulatory treatment of credit loss allowances under the current expected loss (‘CECL”) models. The rule revised the federal banking agencies’ regulatory capital rules to identify which credit loss allowances under the CECL model are eligible for inclusion in regulatory capital and to provide banking organizations the option to phase in over three years the day-one adverse effects on regulatory capital that may result from the adoption of the CECL model. Concurrent with the enactment of the Coronavirus Aid, Relief, and Economic Security Act of 2020, as amended, federal banking agencies issued an interim final rule that delayed the estimated impact on regulatory capital resulting from the adoption of CECL. The interim final rule provided banking organizations that implemented CECL prior to the end of 2020 the option to delay for two years the estimated impact of CECL on regulatory capital relative to regulatory capital determined under the prior incurred loss methodology, followed by a three-year transition period to phase out the aggregate amount of capital benefit provided during the initial two-year delay. On August 26, 2020, the federal banking agencies issued a final rule that made certain technical changes to the interim final rule, including expanding the pool of eligible institutions. The bank is required to adopt the CECL model after January 1, 2023, since it is a smaller reporting company.

Regulatory Capital

The FRB adopted risk-based capital guidelines for bank holding companies and state member banks, designed to absorb losses. The guidelines provide a systematic analytical framework, which makes regulatory capital requirements sensitive to differences in risk profiles among banking organizations, takes off-balance sheet exposures expressly into account in evaluating capital adequacy and incentivizes holding liquid, low-risk assets. Capital levels as measured by

6

these standards are also used to categorize financial institutions for purposes of certain Prompt Corrective Action regulatory provisions.

In July 2013, the United States banking regulators issued new capital rules applicable to smaller banking organizations which also implement certain of the provisions of the Dodd-Frank Act (the “Basel III Capital Rules”). Community banking organizations, including CSB, began transitioning to the new rules on January 1, 2015. The new minimum capital requirements became effective on January 1, 2015; while a new capital conservation buffer and deductions from common equity capital phased in from January 1, 2016 through January 1, 2019, and most deductions from common equity tier 1 capital phased in from January 1, 2015 through January 1, 2019.

The Basel III Capital Rules include (i) a minimum common equity tier 1 capital ratio of 4.5%, (ii) a minimum tier 1 capital ratio of 6.0%, (iii) a minimum total capital ratio of 8.0%, and (iv) a minimum leverage ratio of 4.0%.

Common equity for the common equity tier 1 capital ratio includes common stock (plus related surplus) and retained earnings, plus limited amounts of minority interests in the form of common stock, less the majority of certain regulatory deductions.

Tier 1 capital includes common equity as defined for the common equity tier 1 capital ratio, plus certain non-cumulative preferred stock and related surplus, cumulative preferred stock and related surplus, and trust preferred securities that have been grandfathered (but which are not permitted going forward), and limited amounts of minority interests in the form of additional tier 1 capital instruments, less certain deductions.

Tier 2 capital, which can be included in the total capital ratio, includes certain capital instruments (such as subordinated debt) and limited amounts of the allowance for loan and lease losses, subject to new eligibility criteria, less applicable deductions.

The deductions from common equity tier 1 capital include goodwill and other intangibles, certain deferred tax assets, mortgage-servicing assets above certain levels, gains on sale in connection with a securitization, investments in a banking organization’s own capital instruments, and investments in the capital of unconsolidated financial institutions (above certain levels).

5

Under the guidelines, capital is compared to the relative risk related to the balance sheet. To derive the risk included in the balance sheet, one of several risk weights is applied to different balance sheet and off-balance sheet assets, primarily based on the relative credit risk of the counterparty. The capital amounts and classification are also subject to qualitative judgments by the regulators about components, risk weightings, and other factors.

The Basel III Capital Rules place restrictions on the payment of capital distributions, including dividends, and certain discretionary bonus payments to executive officers in the event the Company does not hold a capital conservation buffer of greater than 2.5% composed of common equity tier 1 capital above its minimum risk-based capital requirements, or if its eligible retained income is negative in that quarter and its capital conservation buffer ratio was less than 2.5% at the beginning of the quarter. Pursuant to the FRB’s Small Bank Holding Company Policy statement (“SBHC Policy”), as amended in September 2018, a bank holding company with assets of less than $3 billion and meeting certain other requirements is not required to comply with the consolidated capital requirements until such company exceeds $3 billion in assets or is otherwise determined by the FRB not to qualify as a small bank holding company. On December 31, 2021,2022, CSB was deemed to be a small bank holding company under the SBHC Policy and was not required to comply with the FRB’s regulatory capital requirements. The Bank, however, must comply with the new capital requirements.

The implementation of the Basel III Capital Rules did not have a material impact on CSB’s or the Bank’s capital ratios.

Prompt Corrective Action

The federal banking agencies have established a system of “prompt corrective action” to resolve certain of the problems of undercapitalized institutions. This system is based on five capital level categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized”, and “critically undercapitalized.”

The federal banking agencies may (or in some cases must) take certain supervisory actions depending upon a bank’s capital level. For example, the banking agencies must appoint a receiver or conservator for a bank within 90 days after it becomes “critically undercapitalized” unless the bank’s primary regulator determines, with the concurrence of the FDIC, that other action would better achieve regulatory purposes. Banking operations otherwise may be significantly

7

affected depending on a bank’s capital category. For example, a bank that is not “well capitalized” generally is prohibited from accepting brokered deposits and offering interest rates on deposits higher than the prevailing rate in its market, and the holding company of any undercapitalized depository institution must guarantee, in part, specific aspects of the bank’s capital plan for the plan to be acceptable.

In order to be “well-capitalized,” a bank must have a minimum common equity tier 1 capital ratio of 6.5%, a total risk-based capital ratio of at least 10%10.0%, a tier 1 risk-based capital ratio of at least 8%8.0%, and a leverage ratio of at least 5%5.0%, and the bank must not be subject to any written agreement, order, capital directive, or prompt corrective action directive to meet and maintain a specific capital level for any capital measure.

As of December 31, 2021,2022, the Bank met the ratio requirements in effect at that date to be deemed “well-capitalized.” See Note 1312 – Regulatory Matters of the Notes to Consolidated Financial Statements, located in Item 8 Financial Statements and Supplementary Data of this 10-K. Management of the Company believes the Bank also meets the capital requirements to be deemed “well-capitalized” under the new guidelines.

Deposit Insurance

Substantially all of the deposits of the Bank are insured up to applicable limits by the Deposit Insurance Fund (‘DIF’),DIF, and the Bank is assessed quarterly deposit insurance premiums to maintain the DIF. Insurance premiums for each insured institution are determined based upon the institution’s capital level and supervisory rating provided to the FDIC by the institution’s primary federal regulator and other information deemed by the FDIC to be relevant to the risk posed to the Deposit Insurance Fund by the institution. The assessment rate is then applied to the amount of the institution’s assessment base to determine the institution’s insurance premium. The deposit insurance assessment base is calculated on average assets less average tangible equity.

The FDIC assesses a quarterly deposit insurance premium on each insured institution based on risk characteristics of the insured institution and may also impose special assessments in emergency situations. The premiums fund the DIF. Pursuant to the Dodd-Frank Act, the FDIC has established reserve ratios. On June 30, 2019, the reserve ratios were met and the FDIC applied credits for banks with assets of less than $10 billion ("small bank credits") beginning September 30, 2019 through the June 2020 premium payment. The FDIC rules further changed the method of determining risk-based assessment rates for established banks with less than $10 billion in assets to better ensure that banks taking on greater risks pay more for deposit insurance than banks that take on less risk.

6

As insurer, the FDIC is authorized to conduct examinations of, and to require reporting by, federally insured institutions. It also may prohibit any federally insured institution from engaging in any activity the FDIC determines by regulation or order to pose a serious threat to the Deposit Insurance Fund. The FDIC also has the authority to take enforcement actions against insured institutions. Insurance of deposits may be terminated by the FDIC upon a finding that the institution has engaged or is engaging in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order, or condition imposed by the FDIC or written agreement entered into with the FDIC.

The management of the Bank does not know of any practice, condition, or violation that might lead to termination of deposit insurance.

Limits on Dividends and Other Payments

There are various legal limitations on the extent to which subsidiary banks may finance or otherwise supply funds to their parent holding companies. Under applicable federal and state laws, subsidiary banks may not, subject to certain limited exceptions, make loans or extensions of credit to, or investments in the securities of, their bank holding companies. Subsidiary banks are also subject to collateral security requirements for any loan or extension of credit permitted by such exceptions.

Payments of dividends by the Bank are limited by applicable state and federal laws and regulations. The ability of CSB to obtain funds for the payment of dividends and for other cash requirements is largely dependent on the amount of dividends that may be declared by the Bank. However, the FRB expects CSB to serve as a source of strength for the Bank and may require CSB to retain capital for further investment in the Bank, rather than pay dividends to CSB shareholders. Payment of dividends by the Bank may be restricted at any time at the discretion of its applicable regulatory authorities if they deem such dividends to constitute an unsafe or unsound banking practice. These provisions could have the effect of limiting CSB’s ability to pay dividends on its common shares.

FRB policy requires CSB to provide notice to the FRB in advance of the payment of a dividend to CSB’s shareholders under certain circumstances and states that insured banks and bank holding companies should generally only pay

8

dividends out of current operating earnings. Additionally, The Ohio Revised Code, restricts the amount a Bank can dividend if the total amount of all dividends, including the proposed dividend, declared by the Bank in any calendar year exceeds the total of its retained net income of that year to date, combined with its retained net income of the two preceding years, unless the dividend is approved by the Ohio Division of Financial Institutions.

Consumer Protection Laws and Regulations

Banks are subject to regular examination to ensure compliance with federal statutes and regulations applicable to their business, including consumer protection statutes and implementing regulations. The Dodd-Frank Act established the CFPB, which has extensive regulatory and enforcement powers over consumer financial products and services. The CFPB has adopted numerous rules with respect to consumer protection laws, amending some existing regulations and adopting new ones, and has commenced enforcement actions. The following are just some of the consumer protection laws applicable to the Bank:

The banking regulators also use their authority under the Federal Trade Commission Act to take supervisory or enforcement action with respect to unfair or deceptive acts or practices by banks that may not necessarily fall within the scope of specific banking or consumer finance law.

Customer Privacy

Under the GLBA, federal banking agencies have adopted rules that limit the ability of banks and other financial institutions to disclose non-public information about consumers to nonaffiliated third parties. These limitations require distribution of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to nonaffiliated third parties.

USA Patriot Act

The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001, as amended (the “Patriot Act”), and related regulations require regulated financial institutions to establish a program specifying procedures for obtaining

7

identifying information from customers seeking to open new accounts and establish enhanced due diligence policies, procedures and controls designed to detect and report suspicious activity.

The Bank has established policies and procedures to be compliant with the requirements of the Patriot Act.

Office of Foreign Assets Control Regulation

The United States Treasury Department’s Office of Foreign Assets Control (“OFAC”) administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. CSB is responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious financial, legal and reputational consequences, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and civil money penalties against institutions found to be violating these obligations.

9Cybersecurity

Cybersecurity

In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish several lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing Internet-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption, and maintenance of the financial institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the financial institution or its critical service providers fall victim to this type of cyber-attack. If CSB fails to observe the regulatory guidance, it could be subject to various regulatory sanctions, including financial penalties.

In February 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.

In November 2021, federal banking agencies issued a final rule that became effective in May 2022 requiring banking organizations that experience a cybersecurity incident to notify certain entities. A cybersecurity incident occurs when actual or potential harm to the confidentiality, integrity, or availability of information or an information system occurs, or there is a violation or imminent threat of a violation to banking security policies and procedures. The affected bank must notify its respective federal regulator of the cybersecurity incident as soon as possible and no later than 36 hours after the bank determines a cybersecurity incident that rises to the level of a notification incident has occurred. These notifications are intended to promote early awareness of threats to banking organizations and will help banks react to those threats before they manifest into larger incidents. This rule also requires bank service providers to notify their bank organization customers of a cybersecurity incident that has caused, or is reasonably likely to cause, a material service disruption or degradation for four or more hours.

Furthermore, once final rules are adopted, the Cyber Incident Reporting for Critical Infrastructure Act, enacted in March 2022, will require certain covered entities to report a covered cyber incident to the U.S. Department of Homeland Security’s Cybersecurity & Infrastructure Security Agency (“CISA”) within 72 hours after it reasonably believes an incident has occurred. Separate reporting to CISA will also be required within 24 hours, if a ransom payment is made as a result of a ransomware attack.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. CSB expects this trend of state-level activity in those areas to continue and is continually monitoring developments in the states in which our customers are located.

In the ordinary course of business, CSB relies on electronic communications and information systems to conduct its operations and to store sensitive data. CSB employs an in-depth, layered, defensive approach that leverages people, processes and technology to manage and maintain cybersecurity controls. CSB employs a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of CSB’s defensive measures, the threat from cyber-attacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures. While to date, CSB has not detected a significant compromise, significant data loss or any material financial losses related to cybersecurity attacks, CSB’s systems and those of its customers and third-party service providers are under constant threat and it is possible that CSB could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internetinternet banking, mobile banking and other technology-based products and services by us and our customers.

Effect of Environmental Regulation

Compliance with federal, state, and local provisions regulating the discharge of materials into the environment, or otherwise relating to the protection of the environment, has not had a material effect upon the capital expenditures, earnings, or competitive position of CSB or its subsidiaries. CSB believes the nature of the operations of its subsidiaries has little, if any, environmental impact. CSB, therefore, anticipates no material capital expenditures for environmental control facilities for its current fiscal year or for the foreseeable future.

8

CSB believes its primary exposure to environmental risk is through the lending activities of the Bank. In cases where management believes environmental risk potentially exists, the Bank mitigates environmental risk exposure by requiring environmental site assessments at the time of loan origination to confirm collateral quality as to commercial real estate parcels posing higher than normal potential for environmental impact, as determined by reference to present and past uses of the subject property and adjacent sites.

Executive and Incentive Compensation

Public companies will be required, once stock exchanges adopt additional listing requirements under the Dodd-Frank Act and rules adopted by the SEC in October 2022, to adopt and implement “clawback” procedures policies for incentive compensation payments and to disclose the details of the procedures which allow recovery of incentive compensation that was paid on the basis of erroneous financial information necessitating an accounting restatement due to material noncompliance with financial reporting requirements. This clawback policy is intended to apply to compensation paid within the three completed fiscal years immediately preceding the date the issuer is required to prepare a restatement a three-year look-back window of the restatement and would cover all executives (including former executives) who received incentive awards.

Future Legislation

Various and significant legislation affecting financial institutions and the financial industry is from time to time adopted by the U.S. Congress and state legislatures, and regulatory agencies frequently adopt or amend regulations. Such legislation and regulation may continue to change banking laws and regulations and the operating environment of CSB and its subsidiaries in substantial and unpredictable ways and could significantly increase or decrease costs of doing business, limit or expand permissible activities, or affect the competitive balance among financial institutions. The nature and extent of future legislative and regulatory changes affecting financial institutions remains very unpredictable.

Statistical Disclosures

The following schedules present, for the periods indicated, certain financial and statistical information of the Company as required under the SEC’s “Subpart 1400 of regulation S-K”, as amended on September 11, 2020, or a specific reference as to the location of required disclosures in Item 7 Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) or Item 8 Financial Statements and Supplementary Data of this Annual Report on Form 10-K.

10

Distribution of Assets, Liabilities, and Stockholders’ Equity; Interest Rates and Interest Differential

The information set forth under the heading, “Average Balance Sheets and Net Interest Margin Analysis” located in Item 7 MD&A is incorporated by reference herein.

The information set forth under the heading, “Rate/Volume Analysis of Changes in Income and Expense” located in Item 7 MD&A is incorporated by reference herein.

Investment Portfolio

The following is a schedule of maturities for each category of debt securities and the related weighted average yield of such securities as of December 31, 2021:2022:

The weighted average yields are calculated using amortized cost of investments and are based on coupon rates for securities purchased at par value, and on effective interest rates considering amortization or accretion if securities were purchased at a premium or discount. The weighted average yield on tax-exempt obligations is presented on a tax-equivalent basis based on the Company’s marginal federal income tax rate of 21%.

11

9

Loan Portfolio

The following is a schedule of maturities of loans based on contract terms and assuming no amortization or prepayments, as of December 31, 2021:2022:

The following is a schedule of fixed rate and variable rate loans due after one year from December 31, 2021.2022.

For the year ended December 31, 2022, interest income recognized on impaired loans amounted to $50 thousand, while $73 thousand would have been recognized had the loans been performing under their contractual terms. For the year ended December 31, 2021, interest income recognized on impaired loans amounted to $147 thousand, while $265 thousand would have been recognized had the loans been performing under their contractual terms. For the year ended December 31, 2020, interest income recognized on impaired loans amounted to $119 thousand, while $354 thousand would have been recognized had the loans been performing under their contractual terms. For the year ended December 31, 2019, interest income recognized on impaired loans amounted to $134 thousand, while $316 thousand would have been recognized had the loans been performing under their contractual terms.

Impaired loans are comprised of commercial, commercial real estate, and residential real estate loans, and are carried at the present value of expected cash flows discounted at the loan’s effective interest rate or at fair value of the collateral if the loan is collateral dependent. A portion of the allowance for loan losses is allocated to impaired loans.

Smaller-balance homogeneous loans are evaluated for impairment in total. Such loans include residential first-mortgage loans secured by one to four-family residences, residential construction loans, automobile loans, home equity loans, and second-mortgage loans. These consumer loans are included in nonaccrual and past due disclosures above as well as impaired loans when they become nonperforming. Commercial loans and mortgage loans secured by other properties are evaluated individually for impairment. When analysis of borrower operating results and financial condition indicates that underlying cash flows of the borrower’s business are not adequate to meet its debt service requirements, the loan is evaluated for impairment. Impaired loans or portions thereof, are charged-off when deemed uncollectible.

On December 31, 2021,2022, no loans were identified for which management had serious doubts about the borrowers’ ability to comply with present loan repayment terms that are not included in the tables set forth above. On a monthly basis, the Company internally classifies certain loans based on various factors. On December 31, 2021,2022, these amounts, including impaired and nonperforming loans, amounted to $13$16 million of substandard loans and no doubtful loans.

As of December 31, 2021,2022, there were no concentrationswas one concentration of loans greater than 10% of total loans that wereis not otherwise disclosed as a category of loans in the loan portfolio table set forth above. Loans to lessors of non-residential buildings totaled $73 million, or 12% of total loans as of December 31, 2022.

12

Summary of Loan Loss Experience

The following schedule presents an analysis of net charge-offs (recoveries) to average loans, and related ratios for the years ended December 31:

10

The allowance for loan losses balance and provision charged to expense are determined by management based on periodic reviews of the loan portfolio, past loan loss experience, economic conditions, and various other circumstances subject to change over time. In making this judgment, management reviews selected large loans, as well as impaired loans, other delinquent, nonaccrual and problem loans, and loans to industries experiencing economic difficulties. The collectability of these loans is evaluated after considering current operating results and financial position of the borrower, estimated market value of collateral, guarantees and the Company’s collateral position versus other creditors. Judgments, which are necessarily subjective, as to the probability of loss and amount of such loss are formed on these loans, as well as other loans taken together.

The following schedule is a breakdown of the allowance for loan losses allocated by type of loan and related ratios. While management’s periodic analysis of the adequacy of the allowance for loan losses may allocate portions of the allowance for specific problem-loan situations, the entire allowance is available for any loan charge-offs that occur.

Deposits

13

Deposits

The following is a schedule of average deposit amounts and average rates paid on each category for the periods indicated:

The Bank does not have any material deposits by foreign depositors. The total uninsured portion of all deposit accounts greater than $250 thousand was $267 million as of December 31, 2022, and $265 million as of December 31, 2021, and $241 million as of December 31, 2020.2021. The following is a schedule of maturities of time certificates of deposit in amounts greater than $250 thousand as of December 31, 2021:2022:

14

ITEM 1A. RISK FACTORS.

Not Required for Smaller Reporting Companies.Applicable.

ITEM 1B. UNRESOLVED STAFF COMMENTS.

Not applicable.

11

ITEM 2. PROPERTIES.

The Bank operates sixteen banking centers as noted below: