The Company continues to build a strong presence in the business banking market, as well as expanding into other fee-based lines of business. In 2017, the Company purchased full ownership of Old Point Mortgage, LLC and launched Old Point Insurance, LLC. Through these comprehensive business services and new lines of business, the Company is able to service a highly lucrative market that offers increased opportunities for new fee-based revenue streams and to cross sell additional products.

General. Bank holding companies, banks and their affiliates are extensively regulated under both federal and state law. The following summary briefly describes significant provisions of currently applicable federal and state laws and certain regulations and the potential impact of such provisions. This summary is not complete and is qualified in its entirety by reference to the particular statutory or regulatory provisions or proposals. Because regulation of financial institutions changes regularly and is the subject of constant legislative and regulatory debate, no assurance can be given as to forecast how federal and state regulation and supervision of financial institutions may change in the future and affect the Company’s and the Bank’s operations.

As a public company, the Company is subject to the periodic reporting requirements of the Securities Exchange Act of 1934, as amended (the Exchange Act), which include, but are not limited to, the filing of annual, quarterly and other reports with the SEC. The Company is also required to comply with other laws and regulations of the SEC applicable to public companies.

As a national bank, the Bank is subject to regulation, supervision and regular examination by the Office of the Comptroller of the Currency (the Comptroller). The prior approval of the Comptroller or other appropriate bank regulatory authority is required for a national bank to merge with another bank or purchase the assets or assume the deposits of another bank. In reviewing applications seeking approval of merger and acquisition transactions, the bank regulatory authorities will consider, among other things, the competitive effect and public benefits of the transactions, the capital position of the constituent organizations and the combined organization, the risks to the stability of the U.S. banking or financial system, the applicant's performance record under the Community Reinvestment Act (the CRA) and fair housing initiatives, the data security and cybersecurity infrastructure of the constituent organizations and the combined organization, and the effectiveness of the subject organizations in combating money laundering activities. Each depositor's account with the Bank is insured by the FDIC to the maximum amount permitted by law. The Bank is also subject to certain regulations promulgated by the FRB and applicable provisions of Virginia law, insofar as they do not conflict with or are not preempted by federal banking law.

As a non-depository national banking association, Trust is subject to regulation, supervision and regular examination by the Comptroller. Trust's exercise of fiduciary powers must comply with regulations promulgated by the Comptroller at 12 C.F.R. Part 9 and with Virginia law.

The regulations of the FRB, the Comptroller and the FDIC govern most aspects of the Company's business, including deposit reserve requirements, investments, loans, certain check clearing activities, issuance of securities, payment of dividends, branching, and numerous other matters.  Further, the federal bank regulatory agencies have adopted guidelines and released interpretive materials that establish operational and managerial standards to promote the safe and sound operation of banks and bank holding companies.  These standards relate to the institution's key operating functions, including but not limited to internal controls, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, asset quality, earnings, compensation of management, information systems, data security and cybersecurity, and risk management.  As a consequence of the extensive regulation of commercial banking activities in the United States, the Company's business is particularly susceptible to changes in state and federal legislation and regulations, which may have the effect of increasing the cost of doing business, limiting permissible activities or increasing competition.

As a bank holding company, the Company is subject to the BHCA and regulation and supervision by the FRB. A bank holding company is required to obtain the approval of the FRB before making certain acquisitions or engaging in certain activities. Bank holding companies and their subsidiaries are also subject to restrictions on transactions with insiders and affiliates.

A bank holding company is required to obtain the approval of the FRB before it may acquire all or substantially all of the assets of any bank, and before it may acquire ownership or control of the voting shares of any bank if, after giving effect to the acquisition, the bank holding company would own or control more than 5 percent of the voting shares of such bank. The approval of the FRB is also required for the merger or consolidation of bank holding companies.

Pursuant to the BHCA, the FRB has the power to order any bank holding company or its subsidiaries to terminate any activity or to terminate its ownership or control of any subsidiary when the FRB has reasonable grounds to believe that continuation of such activity or ownership constitutes a serious risk to the financial soundness, safety or stability of any bank subsidiary of the bank holding company.

The Company is required to file periodic reports with the FRB and provide any additional information the FRB may require. The FRB also has the authority to examine the Company and its subsidiaries, as well as any arrangements between the Company and its subsidiaries, with the cost of any such examinations to be borne by the Company.  Banking subsidiaries of bank holding companies are also subject to certain restrictions imposed by federal law in dealings with their holding companies and other affiliates.

Regulatory Reform. The financial crisis of 2008, including the downturn of global economic, financial and money markets and the threat of collapse of numerous financial institutions, and other events led to the adoption of numerous laws and regulations that apply to, and focus on, financial institutions. The most significant of these laws is the Dodd-Frank Wall Street Reform and Consumer Protection Act (Dodd-Frank Act), which was enacted on July 21, 2010 and, in part, was intended to implement significant structural reforms to the financial services industry.  The Dodd-Frank Act implemented far-reaching changes across the financial regulatory landscape, including changes that have significantly affected the business of all bank holding companies and banks, including the Company and the Bank. Some of the rules that have been proposed and, in some cases, adopted to comply with the Dodd-Frank Act’s mandates are discussed further below.

In May 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the EGRRCPA) was enacted to reduce the regulatory burden on certain banking organizations, including community banks, by modifying or eliminating certain federal regulatory requirements. While the EGRRCPA maintains most of the regulatory structure established by the Dodd-Frank Act, it amends certain aspects of the regulatory framework for small depository institutions with assets of less than $10 billion as well as for larger banks with assets above $50 billion. In addition, the EGRRCPA included regulatory relief for community banks regarding regulatory examination cycles, call reports, application of the Volcker Rule (proprietary trading prohibitions), mortgage disclosures, qualified mortgages, and risk weights for certain high-risk commercial real estate loans. However, federal banking regulators retain broad discretion to impose additional regulatory requirements on banking organizations based on safety and soundness and U.S. financial system stability considerations.

The Company continues to experience ongoing regulatory reform. These regulatory changes could have a significant effect on how the Company conducts its business. The specific implications of the Dodd-Frank Act, the EGRRCPA, and other potential regulatory reforms cannot yet be fully predicted and will depend to a large extent on the specific regulations that are to be adopted in the future. Certain aspects of the Dodd-Frank Act and the EGRRCPA are discussed in more detail below.

Capital Requirements and Prompt Corrective Action. The FRB, the Comptroller and the FDIC have adopted risk-based capital adequacy guidelines for bank holding companies and banks pursuant to the Federal Deposit Insurance Corporation Improvement Act of 1991 (FDICIA) and the Basel III Capital Accords. See "Management's Discussion and Analysis of Financial Condition and Results of Operations – Capital Resources" in Item 7 of this report on Form 10-K.

Failure to meet statutorily mandated capital guidelines or more restrictive ratios separately established for a financial institution could subject the Company and its subsidiaries to a variety of enforcement remedies, including issuance of a capital directive, the termination of deposit insurance by the FDIC, a prohibition on accepting or renewing brokered deposits, limitations on the rates of interest that the institution may pay on its deposits, and other restrictions on its business.  In addition, an institution may not make a capital distribution, such as a dividend or other distribution that is in substance a distribution of capital to the owners of the institution if following such a distribution the institution would be undercapitalized. Thus, if the making of such dividend would cause the Bank to become undercapitalized, it could not pay a dividend to the Company.

The Basel III Capital Rules and minimum capital ratios required to be maintained by banks were effective on January 1, 2015. The Basel III Capital Rules also include a requirement that banks maintain additional capital, or a capital conservation buffer (as described below) which was phased in beginning January 1, 2016 and became fully phased in as of January 1, 2019.  As fully phased in, the Basel III Capital Rules require banks to maintain (i) a minimum ratio of CET1 to risk-weighted assets of at least 4.5%, plus a 2.5% "capital conservation buffer" (which is added to the 4.5% CET1 ratio, effectively resulting in a minimum ratio of CET1 to risk-weighted assets of at least 7%), (ii) a minimum ratio of Tier 1 capital to risk-weighted assets of at least 6.0%, plus the capital conservation buffer (which is added to the 6.0% Tier 1 capital ratio, effectively resulting in a minimum Tier 1 capital ratio of 8.5%), (iii) a minimum ratio of total (that is, Tier 1 plus Tier 2) capital to risk-weighted assets of at least 8.0%, plus the capital conservation buffer (which is added to the 8.0% total capital ratio, effectively resulting in a minimum total capital ratio of 10.5%) and (iv) a minimum leverage ratio of 4%, calculated as the ratio of Tier 1 capital to average total assets, subject to certain adjustments and limitations.

The Basel III Capital Rules provide deductions from and adjustments to regulatory capital measures, and primarily to CET1, including deductions and adjustments that were not applied to reduce CET1 under historical regulatory capital rules.  For example, mortgage servicing rights, deferred tax assets dependent upon future taxable income and significant investments in non-consolidated financial entities must be deducted from CET1 to the extent that any one such category exceeds 10% of CET1 or all such categories in the aggregate exceed 15% of CET1.

Community Bank Leverage Ratio.As a result ofrequired by the EGRRCPA, the federal banking agencies were required to develop ahave implemented the Community Bank Leverage Ratio Framework (the CBLRF), which is based on the ratio of a bank’s tangible equity capital to average total consolidated assets) for banking organizations with assets of less than $10 billion, such as the Bank. On October 29, 2019, the federal banking agencies issued a final rule that implements the Community Bank Leverage Ratio Framework (the “CBLRF”).assets. To qualify for the CBLRF, a bank must have less than $10 billion in total consolidated assets, limited amounts of off-balance sheet exposures and trading assets and liabilities, and a leverage ratio greater than 9%. A bank that elects the CBLRF and has a leverage ratio greater than 9% will be considered to be in compliance with the Basel III capital requirements and exempt from the complex Basel III risk-based capital calculations and will also be deemed “well capitalized” under the prompt corrective action regulations.Prompt Corrective Action regulations, discussed below. A bank that falls out of compliance with the CBLRF will have a two-quarter grace period to come back into full compliance, provided its leverage ratio remains above 8% (a bank will be deemed well-capitalized“well capitalized” during the grace period). The CBLRF will bebecame available for banking organizations to use as ofbeginning March 31, 2020, (withwith the flexibility for banking organizations to subsequently opt into or out of the CBLRF, as applicable).applicable. The Company is evaluating whetherfederal banking agencies issued an interim final rule in April 2020 to implement certain provisions of the CARES Act that temporarily modified the minimum leverage ratio requirements of the CBLRF. The minimum leverage ratio requirement was reduced from 9% to 8% for the second through fourth quarters of 2020 and 8.5% through 2021. A bank that falls out of compliance with the CBLRF will have a two-quarter grace period to come back into full compliance, provided its leverage ratio remains no more than 100 basis points below the applicable minimum leverage ratio requirement. The Bank has not elected to opt in.into the CBLRF.

Small Bank Holding Company.The EGRRCPA also expanded the category of bank holding companies that may rely on the FRB’s Small Bank Holding Company Policy Statement by raising the maximum amount of assets a qualifying bank holding company may have from $1 billion to $3 billion. In addition to meeting the asset threshold, a bank holding company must not engage in significant nonbanking activities, not conduct significant off-balance sheet activities, and not have a material amount of debt or equity securities outstanding and registered with the SEC (subject to certain exceptions). The FRB may, in its discretion, exclude any bank holding company from the application of the Small Bank Holding Company Policy Statement if such action is warranted for supervisory purposes.

In August 2018, the FRB issued an interim final rule to apply the Small Bank Holding Company Policy Statement to bank holding companies with consolidated total assets of less than $3 billion. The policy statement, which, among other things, exempts certain bank holding companies from minimum consolidated regulatory capital ratios that apply to other bank holding companies. As a result of the interim final rule, which was effective August 30, 2018, the Company expects that it will be treated as a small bank holding company and will no longernot be subject to regulatory capital requirements. The comment period on the interim final rule closed on October 29, 2018 and, to date, the FRB.FRB has not issued a final rule to replace the interim final rule. The Bank remains subject to the regulatory capital requirements described above.

 The Dodd-Frank Act transferred to the growthFDIC increased discretion with regard to managing the required amount of reserves for the DIF, or the “designated reserve ratio.” The FDIA requires that the FDIC consider the appropriate level for the designated reserve ratio on at least an annual basis. As of December 31, 2021, the designated reserve ratio was 2.00% and the minimum designated reserve ratio was 1.35%. Although the DIF declined below the minimum level of 1.35% during 2020 due to the impact of significant deposit increases which led the FDIC to adopt a DIF restoration plan, and the DIF was 1.27% at December 30, 2021, the FDIC has not increased base assessment rates.

Incentive Compensation. The FRB, the Comptroller and the FDIC have issued regulatory guidance intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The FRB will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as the Company, that are not "large, complex banking organizations." The findings will be included in reports of examination, and deficiencies will be incorporated into the organization's supervisory ratings. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization's safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

In addition, in 2016, the SEC and the federal banking agencies proposed rules that prohibit covered financial institutions (including bank holding companies and banks) from establishing or maintaining incentive-based compensation arrangements that encourage inappropriate risk taking by providing covered persons (consisting of senior executive officers and significant risk takers, as defined in the rules) with excessive compensation, fees or benefits that could lead to material financial loss to the financial institution.  The proposed rules outline factors to be considered when analyzing whether compensation is excessive and whether an incentive-based compensation arrangement encourages inappropriate risks that could lead to material loss to the covered financial institution, and establishes minimum requirements that incentive-based compensation arrangements must meet to be considered to not encourage inappropriate risks and to appropriately balance risk and reward.  The proposed rules also impose additional corporate governance requirements on the boards of directors of covered financial institutions and impose additional record-keeping requirements.  The comment period for these proposed rules has closed and a final rule has not yet been published. However, in 2021, the SEC signaled a renewed interest in these matters by re-opening the comment period on a proposed rule regarding clawbacks of incentive-based executive compensation, which was originally proposed in 2015.

Federal Home Loan Bank of Atlanta. The Bank is a member of the Federal Home Loan Bank (FHLB) of Atlanta, which is one of 12 regional FHLBs that provide funding to their members for making housing loans as well as for affordable housing and community development loans. Each FHLB serves as a reserve, or central bank, for the members within its assigned region. Each FHLB makes loans to members in accordance with policies and procedures established by the Board of Directors of the FHLB. As a member, the Bank must purchase and maintain stock in the FHLB. Additional information related to the Bank’s FHLB stock can be found in Note 17:16, Fair Value Measurements of the Notes to Consolidated Financial Statements included in Item 8, “Financial Statements and Supplementary Data,” of this report on Form 10-K.

Community Reinvestment Act. The Company is subject to the requirements of the CRA, which imposes on financial institutions an affirmative and ongoing obligation to meet the credit needs of their local communities, including low and moderate-income neighborhoods, consistent with the safe and sound operation of those institutions. A financial institution's efforts in meeting community credit needs are currently assessed based on specified factors.  These factors also are considered in evaluating mergers, acquisitions and applications to open a branch or facility. At its last evaluation in 2019,2020, the Bank received an “Outstanding” CRA rating.

In August 2018, the CFPB published its final rule to update Regulation P pursuant to the amended Gramm-Leach-Bliley Act. Under this rule, certain qualifying financial institutions are not required to provide annual privacy notices to customers. To qualify, a financial institution must not share nonpublic personal information about customers except as described in certain statutory exceptions which do not trigger a customer’s statutory opt-out right. In addition, the financial institution must not have changed its disclosure policies and practices from those disclosed in its most recent privacy notice. The rule sets forth timing requirements for delivery of annual privacy notices in the event that a financial institution that qualified for the annual notice exemption later changes its policies or practices in such a way that it no longer qualifies for the exemption.

The Company is also subject to various laws and regulations that attempt to combat money laundering and terrorist financing. The Bank Secrecy Act requires all financial institutions to, among other things, create a system of controls designed to prevent money laundering and the financing of terrorism, and imposes recordkeeping and reporting requirements. The USA Patriot Act facilitates information sharing among governmental entities and financial institutions for the purpose of combating terrorism and money laundering, and requires financial institutions to establish anti-money laundering programs. Regulations adopted under the Bank Secrecy Act impose on financial institutions customer due diligence requirements, and the federal banking regulators expect that customer due diligence programs will be integrated within a financial institution’s broader Bank Secrecy Act and anti-money laundering compliance program. The Office of Foreign Assets Control (OFAC), which is a division of the U.S. Department of the Treasury, is responsible for helping to ensure that United States entities do not engage in transactions with "enemies" of the United States, as defined by various Executive Orders and Acts of Congress. If the Bank finds a name of an "enemy" of the United States on any transaction, account or wire transfer that is on an OFAC list, it must freeze such account or place transferred funds into a blocked account, file a suspicious activity report with the Treasury and notify the FBI.

Although these laws and programs impose compliance costs and create privacy obligations and, in some cases, reporting obligations, and compliance with all of the laws, programs, and privacy and reporting obligations may require significant resources of the Company and the Bank, these laws and programs do not materially affect the Bank’s products, services or other business activities.

Cybersecurity. The federal banking agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a financial institution’s board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal banking agencies expect financial institutions to establish lines of defense and ensure that their risk management processes also address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack. If the Company, the Bank or Trust fails to meet the expectations set forth in this regulatory guidance, the Company, the Bank or Trust could be subject to various regulatory actions and any remediation efforts may require significant resources. In addition, all federal and state bank regulatory agencies continue to increase focus on cybersecurity programs and risks as part of regular supervisory exams.

In October 2016, the federal banking agencies issued proposed rules on enhanced cybersecurity risk-management and resilience standards that would apply to very large financial institutions and to services provided by third parties to these institutions. The comment period for these proposed rules has closed and a final rule has not been published. Although the proposed rules would apply only to bank holding companies and banks with $50 billion or more in total consolidated assets, these rules could influence the federal banking agencies’ expectations and supervisory requirements for information security standards and cybersecurity programs of smaller financial institutions, such as the Company, the Bank and Trust.

Consumer Laws and Regulations. The Company is also subject to certain consumer laws and regulations that are designed to protect consumers in transactions with banks. While the list set forth herein is not exhaustive, these laws and regulations include the Truth in Lending Act, the Truth in Savings Act, the Electronic Funds Transfer Act, the Equal Credit Opportunity Act, the Fair Credit Reporting Act and the Fair Housing Act, among others. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions transact business with customers. The Company must comply with the applicable provisions of these consumer protection laws and regulations as part of its ongoing customer relations.

The CFPB is the federal regulatory agency responsible for implementing, examining and enforcing compliance with federal consumer financial laws for institutions with more than $10 billion of assets and, to a lesser extent, smaller institutions. The CFPB supervises and regulates providers of consumer financial products and services and has rulemaking authority in connection with numerous federal consumer financial protection laws (for example, but not limited to, the Truth in Lending Act and the Real Estate Settlement Procedures Act).  As a smaller institution (i.e., with assets of $10 billion or less), most consumer protection aspects of the Dodd-Frank Act will continue to be applied to the Company by the FRB and to the Bank and Trust by the Comptroller. However, the CFPB may include its own examiners in regulatory examinations by a smaller institution's prudential regulators and may require smaller institutions to comply with certain CFPB reporting requirements. In addition, regulatory positions taken by the CFPB and administrative and legal precedents established by CFPB enforcement activities, including in connection with supervision of larger bank holding companies and banks, could influence how the FRB and Comptroller apply consumer protection laws and regulations to financial institutions that are not directly supervised by the CFPB. The precise effect of the CFPB's consumer protection activities on the Company cannot be forecast. As of January 1, 2019,2021, the Company and the Bank are not subject to the direct supervision of the CFPB.

The Bank's mortgage origination activities are also subject to Regulation Z, which implements the Truth in Lending Act. Certain provisions of Regulation Z require mortgage lenders to make a reasonable and good faith determination, based on verified and documented information, that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms. Alternatively, mortgage lender  can  originate  "qualified mortgages", which are generally defined as mortgage loans without negative amortization, interest-only payments, balloon payments, terms exceeding 30 years, and points and fees paid by a consumer equal to or less than 3% of the total loan amount. Under the EGRRCPA, most residential mortgages loans originated and held in portfolio by a bank with less than $10 billion in assets will be designated as “qualified mortgages.” Higher-priced qualified mortgages (e.g., subprime loans) receive a rebuttable presumption of compliance with ability-to-repay rules, and other qualified mortgages (e.g., prime loans) are deemed to comply with the ability-to-repay rules. The Bank does not originateoriginates first mortgage loans at this time, and the first mortgages it purchasesloans that comply with Regulation Z's "qualified mortgage" rules. The Bank does originatealso originates second mortgages, or equity loans, and these loans do not conform to the qualified mortgage criteria but comply with applicable ability-to-repay rules.

Volcker Rule. The Dodd-Frank Act prohibits bank holding companies and their subsidiary banks from engaging in proprietary trading except in limited circumstances, and places limits on ownership of equity investments in private equity and hedge funds (the Volcker Rule). The EGRRCPA, exemptedand final rules adopted to implement the EGRRCPA, exempt all banks with less than $10 billion in assets (including their holding companies and affiliates) from the Volcker Rule, provided thatthe institution has total trading assets and liabilities of five percentfive% or less of total assets, subject to certain limited exceptions. In December 2018, the federal banking agencies invited public comment on a proposal to exclude community banks from the application of the Volcker Rule. The Company believes that its financial condition and its operations are not and will not be significantly affected by the Volcker Rule, amendments thereto, or its implementing regulations.

Call Reports and Examination Cycle. All institutions, regardless of size, submit a quarterly call report that includes data used by federal banking agencies to monitor the condition, performance, and risk profile of individual institutions and the industry as a whole. The EGRRCPA contained provisions expanding the number of regulated institutions eligible to use streamlinestreamlined call report forms. In November 2018,June 2019, consistent with the provisions of the EGRRCPA, the federal banking agencies issued a proposalfinal rule to permit insured depository institutions with total assets of less than $5 billion that do not engage in certain complex or international activities to file the most streamlined version of the quarterly call report, and to reduce data reportable on certain streamlined call report submissions.

In December 2018, consistent with the provisions of the EGRRCPA, the federal banking agencies jointly adopted final rules that permit banks with up to $3 billion in total assets, that received a composite CAMELS rating of “1” or “2,” and that meet certain other criteria (including not having undergone any change in control during the previous 12-month period, and not being subject to a formal enforcement proceeding or order), to qualify for an 18-month on-site examination cycle.

Future Regulation. From time to time, various legislative and regulatory initiatives are introduced in Congress and state legislatures, as well as by regulatory agencies. Such initiatives may include proposals to expand or contract the powers of bank holding companies and depository institutions or proposals to substantially change the financial institution regulatory system. Such legislation could change banking statutes and the operating environment of the Company in substantial and unpredictable ways. If enacted, such legislation could increase or decrease the cost of doing business, limit or expand permissible activities or affect the competitive balance among banks, savings associations, credit unions, and other financial institutions. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations, would have on the financial condition or results of operations of the Company. A change in statutes, regulations or regulatory policies applicable to the Company or the Bank (or Trust) could have a material effect on our business.

Global credit market conditions could return to being disrupted and volatile. Although the Company remains well capitalized and has not suffered any liquidity issues, the cost and availability of funds may be adversely affected by illiquid credit markets. Any future turbulence in the U.S. and international markets and economy may adversely affect the Company's liquidity, financial condition and profitability.

In addition, Hampton Roads is home to one of the largest military installations in the world and one of the largest concentrations of Department of Defense personnel in the United States. Some of the Company's customers may be particularly sensitive to the level of federal government spending on the military or on defense-related products. Federal spending is affected by numerous factors, including macroeconomic conditions, presidential administration priorities, and the ability of the federal government to enact relevant appropriations bills and other legislation. Any of these factors could result in future cuts to military or defense spending or increased uncertainty about federal spending, which could have a severe negative impact on individuals and businesses in the Company's primary service area. Any related increase in unemployment rates or reduction in business development activities in the Company's primary service area could lead to reductions in loan demand, increases in loan delinquencies, problem assets and foreclosures and reductions in loan collateral value, which could have a material adverse effect on the Company's operating results and financial condition.

The Company does originate first mortgage loans. TRID also applies to second mortgages originated by the Company (but not to equity lines of credit). In recent years, the Company has made significant changes to its residential real estate business, including investments in technology and employee training. These CFPB rules, in addition to other previously-issued and to-be-issued CFPB regulations, could materially affect the Company's ability to originate and sell residential real estate loans or limit the terms on which the Company may offer products, which could adversely affect the Company's financial condition and results of operations.

If the Company were to require additional capital, including to fund additional capital contributions to the Bank, as a result of the Basel III Capital Rules, it could be required to access the capital markets on short notice and in relatively weak economic conditions, which could result in raising capital that significantly dilutes existing stockholders. Additionally, the Company may be forced to limit banking operations and activities, and growth of loan portfolios and interest income, to focus on retention of earnings to improve capital levels. Higher capital levels may also lower the Company's return on equity.

Natural disasters, severe weather events, acts of war or terrorism, pandemics or endemics, climate change and other external events could significantly impact our business. Natural disasters, including severe weather events of increasing strength and frequency due to climate change, acts of war (including the ongoing conflict in Ukraine) or terrorism, pandemics (including the COVID-19 pandemic) or endemics and other adverse external events could have a significant adverse impact on the business operations of the Company, third parties who perform operational services for the Company or its customers and the Company’s borrowers and customers. Such events could affect the stability of the Company’s deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in lost revenue or cause the Company to incur additional expenses. Although management has established disaster recovery policies and procedures, the occurrence of any such event could have a material adverse effect on the Company’s business, which, in turn, could have a material adverse effect on the Company’s financial condition and results of operations.

The potential effects of the 2019 novel coronavirus (or “COVID-19”) outbreak on international trade (including supply chains and export levels), travel, employee productivity and other economic activities, and concerns regarding the extent that COVID-19 may spread, may have a destabilizing effect on financial markets and economic activity and may increasingly affect international trade (including supply chains and export levels), travel, employee productivity and other economic activities. COVID-19 has the potentialClimate change or societal responses to negatively impact the Company’s and its customers’ costs, demand for the Company’s products and services, and the U.S. economy or certain sectors thereof and, thus,climate change could adversely affect the Company’s business financial condition, and resultsperformance, including indirectly through impacts on its customers and vendors.Climate change can increase the likelihood of operations. Further, COVID-19 maythe occurrence and severity of natural disasters and can also result in health or other government authorities requiring the closurelonger-term shifts in climate patterns such as extreme heat, sea level rise and more frequent and prolonged drought. The effects of climate change may have a significant effect on the Company’s branch offices or the offices or other businesses of the Company’s customers, whichgeographic markets, and could significantly disrupt the Company’s operations and the operations of the Company’s customers. The extent of the adverse impact of the COVID-19 outbreak on the Company, cannot be predicted at this time.