UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 20192021

OR

Commission File Number 000-55117001-40305

VIRGINIA NATIONAL BANKSHARES CORPORATIONCORPORATION

(Exact name of Registrant as specified in its Charter)

Registrant’s telephone number, including area code: (434) (434) 817-8621

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the Registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. YES ☐No☒

Indicate by check mark if the Registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. YES ☐No☒

Indicate by check mark whether the Registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes☒ NO ☐

Indicate by check mark whether the Registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes☒ NO ☐

Indicate by check mark whether the Registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the Registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). YES ☐ NO ☒

The aggregate market value of the common stock held by non-affiliates of the Registrant, computed by reference to the last reported sale price of the common stock quoted on the OTCQX, operated by the OTC Markets Group, Inc.,The NASDAQ Capital Market, on June 28, 201930, 2021 (the last business day of the Registrant’s most recently completed second fiscal quarter) was approximately $82.6 million.$183.8 million.

The number of shares of Registrant’s Common Stock outstanding as of March 6, 202024, 2022 was 2,692,005.5,326,871.

DOCUMENTS INCORPORATED BY REFERENCE

2

Glossary of Acronyms and Defined Terms

3

Forward-Looking Statements and Factors that Could Affect Future Results

Certain statements contained or incorporated by reference in this annual report on Form 10-K are “forward-looking statements” as defined inwithin the meaning of the Private Securities ExchangeLitigation Reform Act of 1934,1995, including but not limited to, statements concerning future results of operations or financial position, borrowing capacity and future liquidity, future investment results, future credit exposure, future loan losses, plans and objectives for future operations, change in laws and regulations applicable to the Company and its subsidiaries, adequacy of funding sources, actuarial expected benefit payments, valuation of foreclosed assets, regulatory requirements, economic environment and other statements contained herein regarding matters that are not historical facts. Such statements are often characterized by use of qualified words such as “expect,” “believe,” “estimate,” “project,” “anticipate,” “intend,” “will,” “should,” or words of similar meaning or other statements concerning the opinions or judgment of the Company and its management about future events.These statements are not historical facts but instead are subject to numerous assumptions, risks and uncertainties, and represent only management’s belief regarding future events, many of which, by their nature, are inherently uncertain and outside management’s control. Any forward-looking statements made by the Company speak only as of the date on which such statements are made. The Company’s actual results and financial position may differ materially from the anticipated results and financial condition indicated in or implied by these forward-looking statements. The Company makes no commitment to update or revise forward-looking statements in order to reflect new information or subsequent events or changes in expectations.

Factors that could cause our actual results to differ materially from those in the forward-looking statements include, but are not limited to, the following:

5

More information on factors that could affect the Company’s forward-looking statements is included under Item 1A. Risk Factors. The foregoing list of important factors is not exclusive, and the Company willis not obligated to update any forward-looking statement, whether written or oral, that may be made from time to time.

3

6

Part I

General

Virginia National Bankshares Corporation (the “Company”)Part I

Item 1. BUSINESS.

General

The Company was incorporated under the laws of the Commonwealth of Virginia on February 21, 2013 at the direction of the Board of Directors of Virginia Nationalthe Bank (the “Bank”) for the purpose of acquiring all of the outstanding shares of the Bank and becoming the holding company of the Bank. On June 19, 2013, the shareholders of the Bank approved the Reorganization Agreement and Plan of Share Exchange, dated March 6, 2013, whereby the Bank would reorganize into a holding company structure (the “Reorganization”).structure. On December 16, 2013, when the Reorganization became effective, the Bank became a wholly-owned subsidiary of the Company, and each share of the Bank’s common stock was exchanged for one share of the Company’s common stock.

The Company is regulated under the Bank Holding Company Act of 1956, as amended (“BHC Act”),BHCA and is subject to inspection, examination and supervision by the Board of Governors of the Federal Reserve System (the “Federal Reserve Board” or “Federal Reserve”).Reserve. The Company is also under the jurisdiction of the Securities and Exchange Commission (“SEC”)SEC and is subject to the disclosure and regulatory requirements of the Securities Exchange Act of 1934, as amended, (the “Exchange Act”) as administered by the SEC. Virginia National Bankshares Corporation is headquartered at 404 People Place, Charlottesville, Virginia.

Virginia National Bank, the principal operating subsidiary of the Company, was organized in 1998 under federal law as a national banking association to engage in a general commercial and retail banking business. The Bank received its charter from the Office of the Comptroller of the Currency (the “OCC”)OCC and commenced operations on July 29, 1998. The Bank received fiduciary powers in January 2000. The Bank’s main office is in Charlottesville, Virginia.  The Bank’s deposits are insured up to the maximum amount provided by the Federal Deposit Insurance Act by the Federal Deposit Insurance Corporation (“FDIC”).  FDIC.

Prior to July 2018, the Bank had one wholly owned subsidiary, VNBTrust, National Association (“VNBTrust”), a national trust bank formed in 2007. Effective July 1, 2018, VNBTrust was merged into Virginia Nationalthe Bank. The Bank continues to offer trust and estate administration services under the name of VNB Trust and Estate Services and offers wealth and investment advisory services under the name Sturman Wealth Advisors, (“Sturman Wealth”), formerly known as VNB Investment Services.

The Bank, through its financial subsidiary Fauquier Bank Services, Inc., has equity ownership interests in Bankers Insurance, LLC, a Virginia independent insurance company, and Bankers Title Shenandoah, LLC, a title insurance company, both of which are owned by a consortium of Virginia community banks.

The Bank has another subsidiary, Special Properties Acquisition - VA, LLC, which was originally formed by Fauquier to hold other real estate owned; however, there are no assets currently held by this subsidiary.

The Bank is subject to the supervision, examination and regulations of the OCC and is also subject to regulations of the FDIC, the Federal Reserve and the Consumer Financial Protection Bureau (“CFPB”).CFPB.

During 2018, the Company formed Masonry Capital Management, LLC, (“Masonry Capital”), a registered investment advisor, which offers investment advisory and management services to clients through separately managed accounts and a private investment fund. The Company believes the formation of Masonry Capital allows the Company to offer its investment strategy to a wider range of clients.

References to the Company’s subsidiaries in this document include both the Bank and Masonry Capital.

As of December 31, 2019,In addition, the Company owns Fauquier Statutory Trust II (“Trust II”), which is an unconsolidated subsidiary. The subordinated debt owed to Trust II is reported as a liability of the Company.

The main offices of the Company, the Bank, Masonry Capital, VNB Trust Estate Services and its subsidiaries occupied five full-service banking facilities in the cities of Charlottesville and Winchester and the County of Albemarle, Virginia,Sturman Wealth, as well as corporate and Bank operations, are located in Charlottesville, Virginia.

Merger with Fauquier Bankshares, Inc. and The Fauquier Bank

On April 1, 2021, the Company merged with Fauquier, pursuant to the Agreement and Plan of Reorganization dated October 1, 2020, including a drive-through facilityrelated Plan of Merger. Pursuant to the Merger Agreement, Fauquier shareholders received 0.675 shares of Company stock for each share of Fauquier common stock, with additional office space for VNB Trustcash paid in lieu of fractional shares, resulting in the Company issuing 2,571,213 shares of common stock. In connection with the transaction, TFB, Fauquier's wholly-owned bank subsidiary, was merged with and Estate Services in Charlottesville.into the Bank. Refer to Note 2 - Business Combinations, in the Notes to Consolidated Financial Statements in Item 2. Properties8. Financial Statements and Supplementary Data, for additional information regarding locations.further detail on the accounting policy for business combinations, fair values of assets and liabilities assumed, assumptions used in determining the fair values of assets and liabilities and the resulting goodwill.

The multi-story office building at 404 People Place, Charlottesville, Virginia, also serves as the Company’s corporate headquarters and operations center, as well as the headquarters for Masonry Capital and for Sturman Wealth.  Additionally, the Company has loan production locations in Harrisonburg, Roanoke and Richmond, Virginia.

47

Products and Services

The Bank offers a full range of banking and related financial services, including checking accounts, NOW accounts, money market deposit accounts, certificates of deposit, individual retirement accounts, Certificate of Deposit Account Registry Service (CDARS™)CDARS™, Insured Cash Sweep^ICS® (ICS^®) and other depository services. The Bank actively solicits such accounts from individuals, businesses and charitable organizations within its trade area.areas. Other services offered by the Bank include automated teller machines (“ATMs”),ATMs, internet banking, treasury and cash management services and merchant card services. In addition, the Bank is affiliated with Visa®and MasterCard®, which isare accepted worldwide, and offers debit cards to consumer and business customers.

The Bank also offers short to long term commercial, real estate and consumer loans. The Bank is committed to being a reliable and consistent source of credit, providing loans that are priced based upon an overall banking relationship, easy access to the Bank’s local decision makers who possess strong local market knowledge, local delivery, fast response, and continuity in the banking relationship. The Bank originates residential mortgage loans and sells on the secondary market thoseloans. A third party is utilized for loans which the Bank does not wish to retain for its own loan portfolio due to the interest rate risks that are inherent with long-term fixed rate loans.

Wealth and investment advisory services and products are offered under the name ofthrough Sturman Wealth, Advisors, formerly known as VNB Investment Services, pursuant to networking agreements with a registered broker/dealer and a registered investment advisor to provide services through representatives who are also employees of the Company.

Trust and estate administration services are offered through VNB Trust and Estate Services.

Investment management services are offered through Masonry Capital, Management, LLC, whose flagship product for separately managed accounts and a private investment fund employs a value-based, catalyst-driven investment strategy. The financial instruments used include common and preferred stock, corporate bonds, bank loans and other debt securities, convertible securities, Exchange Traded Funds, (“EFTs”), options, warrants and cash equivalents.

The BankCompany primarily serves the Virginia communities in and around the Citycities of Charlottesville, Albemarle CountyWinchester, Manassas and Richmond, and the Citycounties of Winchester. The Bank also has loan production locations in Harrisonburg, Mechanicsville, RoanokeAlbemarle, Fauquier, Frederick and Richmond, Virginia.Prince William. Refer to Item 2. Properties for additional information regarding locations. The Bank’s locations are well-positioned in attractive markets. Within its market area,areas, there are various types of industry including higher education, medical and professional services, research and development companies and retail.  The Bank closed its Orange, Virginia office effective April 13, 2018; expanded messenger service continues to be available to the customers within and surrounding Orange, Virginia.

Competition

The Company engages in highly competitive activities. Each activity involves competition with other banks, as well as with non-banking enterprises that offer financial products and services that compete directly with the Company’s product and service offerings. The Company actively competes with other banks in its efforts to obtain deposits and make loans, in the scope and types of services offered, in interest rates paid on time deposits and charged on loans, and in other aspects of banking.

In addition to competing with other community and commercial banks within and outside its primary service areas, the Company competes with other financial institutions engaged in the business of making loans or accepting deposits, such as credit unions, insurance companies, small loan companies, finance companies, fintech companies, mortgage companies, certain governmental agencies and other enterprises. Competition for money market accounts with securities brokersdeposits and mutual fundsloans is strong.  Additional competition for deposits comes from governmentaffected by various factors including, without limitation, interest rates offered, the number and private issuerslocation of debt obligationsbranches and other investment alternatives for depositors such as money market funds.types of products offered, digital capabilities, and the reputation of the institution. Credit unions increasingly have been allowed to expand their membership definitions, and because they enjoy a favorable tax status, they have been able to offer more attractive loan and deposit pricing.

5

The market areas served by the Company are highly competitive with respect to banking. Competition for loans to businesses and professionals is intense, and pricing is important. Many of the Company’s competitors have substantially greater resources and lending limits than the Company and offer certain services such as extensive and established branch networks that the Company does not expect to match. Deposit competition is also very strong. Management believes, however, that a market exists for the personal and customized financial services an independent, community bank can offer.

Environmental, Social and Governance

The Company is taking proactive steps to conserve resources and improve the environment. Most of our back-office operations exist in a paperless environment and customers are encouraged to utilize online banking, including paperless statements, mobile banking and remote deposit capture, in an effort to reduce individual and collective carbon footprints. The Company is also reducing its carbon footprint by allowing some employees to continue to work from home, eliminating some branches in our market footprint, and reducing the number of employees working in our offices. The Company supports its customers who are actively engaged in “going-green” campaigns, including the use of renewable energy, which includes the installation of charging stations for those customers with electric vehicles.

8

Near the onset of the COVID-19 pandemic, the Company was proactively involved in facilitating the delivery of personal protective equipment to local businesses and nonprofits. The Company also participated in the SBA PPP as described in detail later in this report.

The Company has also made a significant financial and time commitment to community partners and nonprofit organizations who support the environment, education, and human services, which includes a homeless housing project, workforce readiness, kids in need, and health and wellness. Executive leadership and the Board of Directors of the Company are dynamically involved in the communities in which they serve, including serving on boards, making financial donations and volunteering time.

Almost immediately after the Tax Cut and Jobs Act of 2017 was signed into law on December 22, 2017, the Company made the decision to have an internal minimum wage of $15 per hour for all employees. This took effect on January 1, 2018. Also, since the onset of the COVID-19 pandemic, the Company has continued to pay its employees at 100% of their salaries and wages, even if the employees worked on a rotating, rather than a full-time, schedule. No benefits have been reduced for employees as a result of COVID-19 effects.

A portion of the Company’s Chief Executive Officer (CEO) compensation is based on his personal involvement on community nonprofit boards and his designing of programs that help the same nonprofits serve their constituents. Prior to the onset of and during the COVID-19 pandemic, the CEO helped design and launch the Financial Education Program for high school students, Driving Lives Forward program in conjunction with United Way and Carter Myers Car Dealership and a program that helps get individuals started in a banking career. The CEO also created a 15-month Board Development Program for young business people that educates them on how a Board operates in a publicly traded company. The CEO is also responsible for launching the Company’s executive diversity, equity and inclusion program which was started before the onset of the COVID-19 pandemic. The Company has also been involved for the past eight years in the small loan program, formerly known as Bank On, operated by the Coalition for Economic Opportunity, whose mission is to enhance access to fair, reasonable and just financial services for low- and moderate- income members of the community. The CEO, members of the Company’s executive team, and the Board of Directors are also involved in major fundraising activities for many of the community (local, state and national) nonprofits. The Company is also searching for its first DEI Officer and is reestablishing its DEI Committee, which was launched in 2019.

Employees

The Company has a shared vision of guiding principles, core values and strategies that work and have guided the Company through both good and challenging times. The Company strives to ensure that its constituents believe in it as well, including its shareholders, customers, board, executive management and high performing employees. The Company believes that the shared vision, when properly aligned and communicated to all constituents, will produce more than above average performance in key metrics. As part of the shared vision, the Company is dedicated and committed to its shareholders, customers, employees and communities. A critical part of this dedication and commitment is attracting and retaining high performing employees who desire to enrich the lives of customers and communities the Company serves. To attract and retain high performing employees, the Company provides a competitive compensation and benefits program, including wellness benefits.

At December 31, 2021, the Company had 173 full time equivalent employees, of which 7 were part-time employees. None of its employees are represented by any collective bargaining unit. The Company considers relations with its employees to be good.

The Company owns BOLI policies on each executive officer and certain other senior officers of the Company. BOLI is a bank-eligible asset designed to recover costs of providing pre- and post-retirement benefits and/or to finance general employee benefit expenses. Under BOLI policies, each executive officer and certain other senior officers of the Company are the insured, and the Company is the owner and beneficiary of the policies. The insured has no claim to the insurance policy or to the policy’s cash value. Under separate split dollar agreements, a portion of any death benefit may be paid to the beneficiaries of the insured officer, subject to the terms and restrictions of the split dollar endorsement agreement between the insured officer and the Company.

9

Supervision and Regulation

The Company and the Bank are extensively regulated under both federal and state laws. The following description briefly addresses certain historic and current provisions of federal and state laws and certain regulations, proposed regulations and the potential impacts on the Company and the Bank. To the extent statutory or regulatory provisions or proposals are described in this report, the description is qualified in its entirety by reference to the particular statutory or regulatory provisions or proposals.

The Company

General. As a bank holding company registered under the BHC Act,BHCA, the Company is subject to supervision, regulation, and examination by the Federal Reserve. The Company is also registered under the bank holding company laws of Virginia and is subject to supervision, regulation, and examination by the Bureau of Financial Institutions of the Virginia State Corporation Commission (the “SCC”).Commission.

Permitted Activities. The permitted activities of a bank holding company are limited to managing or controlling banks, furnishing services to or performing services for its subsidiaries, and engaging in other activities that the Federal Reserve determines by regulation or order to be so closely related to banking, or managing or controlling banks, as to be a proper incident thereto. In determining whether a particular activity is permissible, the Federal Reserve must consider whether the performance of such an activity reasonably can be expected to produce benefits to the public that outweigh possible adverse effects. Possible benefits include greater convenience, increased competition, and gains in efficiency. Possible adverse effects include undue concentration of resources, decreased or unfair competition, conflicts of interest, and unsound banking practices. Despite prior approval, the Federal Reserve may order a bank holding company or its subsidiaries to terminate any activity or to terminate ownership or control of any subsidiary when the Federal Reserve has reasonable cause to believe that a serious risk to the financial safety, soundness or stability of any bank subsidiary of that bank holding company may result from such an activity.

Banking Acquisitions; Changes in Control. The BHC ActBHCA and related regulations require, among other things, the prior approval of the Federal Reserve in any case where a bank holding company proposes to (i) acquire direct or indirect ownership or control of more than 5% of the outstanding voting stock of any bank or bank holding company (unless it already owns a majority of such voting shares), (ii) acquire all or substantially all of the assets of another bank or bank holding company, or (iii) merge or consolidate with any other bank holding company. In determining whether to approve a proposed acquisition, the Federal Reserve will consider, among other factors, the following: the effect of the acquisition on competition; the public benefits expected to be received from the acquisition; any outstanding regulatory compliance issues of any institution that is a party to the transaction; the projected capital ratios and levels on a post-acquisition basis; the financial condition of each institution that is a party to the transaction and of the combined institution after the transaction; the parties’ managerial resources, as well as risk management and governance processes and systems; the parties’ compliance with the Bank Secrecy Act and anti-money laundering requirements; and the acquiring institution’s performance under the Community Reinvestment Act of 1977CRA and its compliance with fair housing and other consumer protection laws.

On July 9, 2021, President Biden issued an Executive Order on Promoting Competition in the American Economy, which, among other initiatives, encouraged the review of current practices and adoption of a plan for the revitalization of merger oversight under the BHCA and the Bank Merger Act. Making any formal changes to the framework for evaluating bank mergers would require an extended process, and any such changes are uncertain and cannot be predicted at this time. However, the adoption of more expansive or stringent standards may have an impact on the Company’s acquisition activity. Additionally, this Executive Order could influence the federal bank regulatory agencies’ expectations and supervisory oversight for banking acquisitions.

Subject to certain exceptions, the BHC ActBHCA and the Change in Bank Control Act, together with the applicable regulations, require Federal Reserve approval (or, depending on the circumstances, no notice of disapproval) prior to any person or company’s acquiring “control” of a bank or bank holding company. A conclusive presumption of control exists if an individual or company acquires the power, directly or indirectly, to direct the management or policies of an insured depository institution or to vote 25% or more of any class of voting securities of any insured depository institution. A rebuttable presumption of control existsmay exist if a person or company acquires 10%5% or more but less than 25% of any class of voting securities of an insured depository institution and either (i)certain other relationships are present between the institution has registered its securities withinvestor and the SEC under Section 12 of the Exchange Actbank holding company, or (ii) noif certain other person will own a greater percentage of that class ofownership thresholds for voting or total equity have been exceeded.

6

voting securities immediately after the acquisition.  The Company’s common stock is registered under Section 12 of the Exchange Act.

In addition, Virginia law requires the prior approval of the SCC for (i) the acquisition by a Virginia bank holding company of more than 5% of the voting shares of a Virginia bank or a Virginia bank holding company, or (ii) the acquisition by any other person of control of a Virginia bank holding company or a Virginia bank.

Source of Strength. Federal Reserve policy has historically required bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. The Dodd-Frank Wall Street Reform and Consumer Protection Act (“Dodd-Frank Act”) codified this policy as a statutory requirement.

10

Under this requirement, the Company is expected to commit resources to support the Bank, including at times when the Company may not be in a financial position to provide such resources. Any capital loans by a bank holding company to any of its subsidiary banks are subordinate in right of payment to depositors and to certain other indebtedness of such subsidiary banks. In the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

Safety and Soundness. There are a number of obligations and restrictions imposed on bank holding companies and their subsidiary banks by law and regulatory policy that are designed to minimize potential loss to the depositors of such depository institutions and the FDIC insurance fund in the event of a depository institution insolvency, receivership, or default. For example, under the Federal Deposit Insurance Company Improvement Act of 1991, to avoid receivership of an insured depository institution subsidiary, a bank holding company is required to guarantee the compliance of any subsidiary bank that may become “undercapitalized” with the terms of any capital restoration plan filed by such subsidiary with its appropriate federal bank regulatory agency up to the lesser of (i) an amount equal to 5% of the institution’s total assets at the time the institution became undercapitalized, or (ii) the amount that is necessary (or would have been necessary) to bring the institution into compliance with all applicable capital standards as of the time the institution fails to comply with such capital restoration plan.

Under the Federal Deposit Insurance Act, (“FDIA”), the federal bank regulatory agencies have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards relating to capital management, internal controls and information systems, internal audit systems, information systems, data security, loan documentation, credit underwriting, interest rate exposure and risk management, vendor management, corporate governance, and asset growth, as well as compensation, fees, and benefits. In general, the guidelines require, among other things, appropriate systems and practices to identify and manage the risk and exposures specified in the guidelines.

Capital Requirements. The Federal Reserve imposes certain capital requirements on bank holding companies under the BHC Act,BHCA, including a minimum leverage ratio and a minimum ratio of “qualifying” capital to risk-weighted assets. These requirements are described below under “The Bank – Capital Requirements.” Subject to its capital requirements and certain other restrictions, the Company is able to borrow money to make a capital contribution to the Bank, and such loans may be repaid from dividends paid by the Bank to the Company.

Limits on Dividends and Other Payments. The Company is a legal entity, separate and distinct from its subsidiaries. A significant portion of the revenues of the Company result from dividends paid to it by the Bank. There are various legal limitations applicable to the payment of dividends by the Bank to the Company and to the payment of dividends by the Company to its shareholders. The Bank is subject to various statutory and regulatory restrictions on its ability to pay dividends to the Company. The OCC has advised that a national bank should generally pay dividends only out of current operating earnings. Under current regulations, prior regulatory approval is required if cash dividends declared by the Bank in any given year exceed net income for that year, plus retained net profits of the two preceding years. The payment of dividends by the Bank or the Company may be limited by other factors, such as requirements to maintain capital above regulatory guidelines. Bank regulatory agencies have the authority to prohibit the Bank or the Company from engaging in an unsafe or unsound practice in conducting its respective business. The payment of dividends, depending on the financial condition of the Bank or the Company, could be deemed to constitute such an unsafe or unsound practice.

Under the FDIA, insured depository institutions, such as the Bank, are prohibited from making capital distributions, including the payment of dividends, if, after making such distributions, the institution would become “undercapitalized” (as such term is used in the statute). Based on the Bank’s current financial

7

condition, the Company does not expect that this provision will have any impact on its ability to receive dividends from the Bank.

In addition, the Company’s ability to pay dividends is limited by restrictions imposed by the Virginia Stock Corporation Act on Virginia corporations. In general, dividends paid by a Virginia corporation may be paid only if, after giving effect to the distribution, (i) the corporation is still able to pay its debts as they become due in the usual course of business, or (ii) the corporation’s total assets are greater than or equal to the sum of its total liabilities plus (unless the corporation’s articles of incorporation permit otherwise) the amount that would be needed, if the corporation were to be dissolved at the time of the distribution, to satisfy the preferential rights, upon the dissolution, of shareholders whose preferential rights are superior to those receiving the distribution.

The Bank

General. The Bank is supervised and regularly examined by the OCC. The various laws and regulations administered by the OCC and the other bank regulatory agencies affect corporate practices, such as the payment of dividends, incurrence of debt, and acquisition of financial institutions and other companies; they also affect business practices, such as the payment of interest on deposits, the charging of interest on loans, types of business conducted and location of offices. Certain of these laws and regulations are referenced above under “The Company.”

11

Regulatory Capital Requirements.Requirements. The OCC and the other federal bank regulatory agencies have issued risk-based and leverage capital guidelines applicable to U.S. banking organizations. Those regulatory agencies may from time to time require that a banking organization maintain capital above the minimum levels because of its financial condition or actual or anticipated growth.

The OCC and the other federal bankingbank regulatory agencies have adopted final rules regarding capital requirements and calculations of risk-weighted assets to implement the Basel III regulatory capital reforms fromframework as outlined by the Basel Committee on Banking Supervision (the “Basel Committee”)and standards for calculating risk-weighted assets and risk-based capital measurements (collectively, the Basel III Final Rules) that apply to banking institutions they supervise. For the purposes of these capital rules, (i) common equity tier 1 capital (CET1) consists principally of common stock (including surplus) and retained earnings; (ii) Tier 1 capital consists principally of CET1 plus non-cumulative preferred stock and related surplus, and certain provisionsgrandfathered cumulative preferred stocks and trust preferred securities; and (iii) Tier 2 capital consists of other capital instruments, principally qualifying subordinated debt and preferred stock, and limited amounts of an institution’s allowance for loan losses. Each regulatory capital classification is subject to certain adjustments and limitations, as implemented by the Dodd-Frank Act (the “BaselBasel III Capital Rules”).

Final Rules. The Basel III CapitalFinal Rules also establish risk weightings that are applied to many classes of assets held by community banks, importantly including applying higher risk weightings to certain commercial real estate loans. The Basel III Final Rules also include a requirement that banks maintain additional capital known as the “capital conservation buffer.”

The Basel III Final Rules and capital conservation buffer require banks and bank holding companies to comply with the followingmaintain:

The phase-in of the capital conservation buffer requirement began on January 1, 2016, at 0.625% of risk-weighted assets, increasing by the same amount each year until it was fully implemented at 2.5% on January 1, 2019.  The capital conservation buffer is designed to absorb losses during periods of economic stress.  Banking organizations with a ratio of common equityBasel III Final Rules permanently include in Tier 1 capital trust preferred securities issued prior to risk-weightedMay 19, 2010 by bank holding companies with less than $15 billion in total assets, abovesubject to a limit of 25% of Tier 1 capital. The Company expects that its trust preferred securities will be included in the minimum but below the conservation buffer face constraints on dividends, equity repurchases, and compensation based on the amount of the shortfall.Company’s regulatory capital as Tier 1 capital instruments until their maturity.

The Tier 1, common equity Tier 1,CET1, total capital to risk-weighted assets, and leverage ratios of the Company were 14.28%14.31%, 14.28%14.31%, 15.08%14.88% and 10.81%7.79%, respectively, as of December 31, 2019,2021, thus exceeding the minimum requirements. The Tier 1, common equity Tier 1,CET1, total capital to risk-weighted assets, and leverage ratios of the Bank were 14.18%14.15%, 14.18%14.15%, 14.98%14.72% and 10.73%7.69%, respectively, as of December 31, 2019,2021, also exceeding the minimum requirements.

With respect to the Bank, the “prompt corrective action” regulations pursuant to Section 38 of the FDIA were revised, effective as of January 1, 2015, to incorporate a common equity Tier 1 capital ratio and to increase certain other capital ratios.  To be “well capitalized” under the revised “prompt corrective action” regulations, a bank must have the following minimum capital ratios: (i) a common equity Tier 1CET1 capital ratio of at least 6.5%; (ii) a Tier 1 capital to risk-weighted assets ratio of at least 8.0%; (iii) a total capital to risk-weighted assets ratio of at least 10.0%; and (iv) a leverage ratio of at least 5.0%. The Bank exceeds the thresholds to be considered well capitalized as of December 31, 2019.2021. See “Prompt Corrective Action” below.

The Basel III Capital Rules also changed the risk weights of assets to better reflect credit risk and other risk exposures.  These include a 150% risk weight for certain high volatility commercial real estate acquisition, development and construction loans and nonresidential mortgage loans that are 90 days past due or otherwise on nonaccrual status, a 20% credit conversion factor for the unused portion of a commitment with an original maturity of one year or less that is not unconditionally cancelable, a 250% risk weight for mortgage servicing rights and deferred tax assets that are not deducted from capital, and increased risk-weights for equity exposures.

8

In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms (the standards are commonly referred to as “Basel IV”).  Among other things, these standards revise the Basel Committee’s standardized approach for credit risk (including by recalibrating risk weights and introducing new capital requirements for certain “unconditionally cancellable commitments,” such as unused credit card lines of credit) and provide a new standardized approach for operational risk capital.  Under the proposed framework, these standards will generally be effective on January 1, 2022, with an aggregate output floor phasing-in through January 1, 2027.  Under the current capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches institutions, and not to the Company.  The impact of Basel IV on the Company and the Bank will depend on the manner in which it is implemented by the federal bank regulatory agencies.

On August 28, 2018, the Federal Reserve issued an interim final rule required by the Economic Growth, Regulatory Relief and Consumer Protection Act of 2018, which was signed into law on May 24, 2018 (the “EGRRCPA”), that expands the applicability of the Federal Reserve’s small bank holding company policy statement (the “SBHC Policy Statement”) to bank holding companies with total consolidated assets of less than $3 billion (up from the prior $1 billion threshold).  Under the SBHC Policy Statement, qualifying bank holding companies have additional flexibility in the amount of debt they can issue and are also exempt from the Basel III Capital Rules (subsidiary depository institutions of qualifying bank holding companies are still subject to capital requirements).  The Company currently has less than $3 billion in total consolidated assets and would likely qualify under the revised SBHC Policy Statement.  However, the Company does not currently intend to issue a material amount of debt or take any other action that would cause its capital ratios to fall below the minimum ratios required by the Basel III Capital Rules.

On September 17, 2019 the Federal Deposit Insurance CorporationFDIC finalized a rule that introducesintroduced an optional simplified measure of capital adequacy for qualifying community banking organizations, referred to as the community bank leverage ratio (CBLR) framework, as required by the Economic Growth, Regulatory Relief and Consumer Protection Act.EGRRCPA. The CBLR framework is designed to reduce burden by removing the requirements for calculating and reporting risk-based capital ratios for qualifying community banking organizations that opt into the framework.

In order to qualify for the CBLR framework, a community banking organization must have a tier 1 leverage ratio of greater than 9 percent,9%, less than $10 billion in total consolidated assets, and limited amounts of off-balance-sheet exposures and trading assets and liabilities. A qualifying community banking organization that opts into the CBLR framework and meets all requirements under the framework will be considered to have met the well-capitalized ratio requirements under the Prompt Corrective Actionprompt corrective action regulations and will not be required to report or calculate risk-based capital.capital under the Basel III Final Rules.

The CBLR framework will bewas made available for bankscommunity banking organizations to use in their March 31, 2020 Call Report. These CBLR rules were modified in response to the COVID-19 pandemic. See “Coronavirus Aid, Relief, and Economic Security Act and Consolidated Appropriations Act, 2021” below. The Company has decided not to optopted into the CBLR framework.

12

Prompt Corrective Action. Federal banking regulators are authorized and, under certain circumstances, required to take certain actions against banks that fail to meet their capital requirements. The federal bank regulatory agencies have additional enforcement authority with respect to undercapitalized depository institutions. “Well capitalized” institutions may generally operate without additional supervisory restriction. With respect to “adequately capitalized” institutions, such banks (i) cannot normally pay dividends or make any capital contributions that would leave it undercapitalized, (ii) cannot pay a management fee to a controlling person if, after paying the fee, it would be undercapitalized, and (iii) cannot accept, renew, or roll over any brokered deposit unless the bank has applied for and been granted a waiver by the FDIC.

Immediately upon becoming “undercapitalized,” a depository institution becomes subject to the provisions of Section 38 of the FDIA, which: (i) restrict payment of capital distributions and management fees; (ii) require that the appropriate federal banking agency monitor the condition of the institution and its efforts to restore its capital; (iii) require submission of a capital restoration plan; (iv) restrict the growth of the institution’s assets; and (v) require prior approval of certain expansion proposals. The appropriate federal banking agency for an undercapitalized institution also may take any number of discretionary supervisory actions if the agency determines that any of these actions is necessary to resolve the problems of the institution at the least possible long-term cost to the DIF, subject in certain cases to

9

specified procedures. These discretionary supervisory actions include: (a) requiring the institution to raise additional capital; (b) restricting transactions with affiliates; (c) requiring divestiture of the institution or the sale of the institution to a willing purchaser; and (d) any other supervisory action that the agency deems appropriate. These and additional mandatory and permissive supervisory actions may be taken with respect to significantly undercapitalized and critically undercapitalized institutions. The Bank met the definition of being “well capitalized” as of December 31, 2019.2021.

As described above in “The Bank – Capital Requirements,” the capital requirement rules issued by the OCC incorporate new requirements into the prompt corrective action framework.

Deposit Insurance. The deposits of the Bank are insured up to applicable limits by the Deposit Insurance Fund (“DIF”) of the FDIC and are subject to deposit insurance assessments based on average total assets minus average tangible equity to maintain the DIF. The basic limit on FDIC deposit insurance coverage is $250,000$250 thousand per depositor. Under the FDIA, the FDIC may terminate deposit insurance upon a finding that the institution has engaged in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations as an insured depository institution, or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC, subject to administrative and potential judicial hearing and review processes. As required by the Dodd-Frank Act, the FDIC has adopted a large-bank pricing assessment structure, set a target “designated“designated reserve ratio”ratio” of 2 percent2% for the DIF, and, in lieu of dividends, provides for a lower assessment rate schedule, when the reserve ratio reaches 2 percent2% and 2.5 percent.2.5%. An institution’sinstitution’s assessment rate is based on a statistical analysis of financial ratios that estimates the likelihood of failure over a three-year period, which considers the institution’sinstitution’s weighted average CAMELS component rating. The CAMELS component is a supervisory rating system designed to reflect financial and operational risks that a bank may face, including capital adequacy, asset quality, management capability, earnings, liquidity and sensitivity to market risk (“CAMELS”).risk. At December 31, 2019,2021, total base assessment rates for institutions that have been insured for at least five years range from 1.5 to 40 basis points,bps, with rates of 1.5 to 30 basis pointsbps applying to banks with less than $10 billion in assets. In 20192021 and 2018,2020, the Company expensed $36,000$858 thousand and $189,000,$187 thousand, respectively, in deposit insurance assessments. In 2019, the Company received a $155,000$155 thousand FDIC small bank credit assessment award, to bewhich was used partially in 2019 andwith the residual amount applied toward futurethe first quarter of 2020 assessments, as the deposit insurance fund reserve ratio exceeded 1.38%.

Transactions with Affiliates. Pursuant to Sections 23A and 23B of the Federal Reserve Act and Regulation W, the authority of the Bank to engage in transactions with related parties or “affiliates” or to make loans to insiders is limited. Loan transactions with an affiliate generally must be collateralized and certain transactions between the Bank and its affiliates, including the sale of assets, the payment of money or the provision of services, must be on terms and conditions that are substantially the same, or at least as favorable to the Bank, as those prevailing for comparable nonaffiliated transactions. In addition, the Bank generally may not purchase securities issued or underwritten by affiliates.

Loans to executive officers, directors, or to any person who directly or indirectly, or acting through or in concert with one or more persons, owns, controls, or has the power to vote more than 10% of any class of voting securities of a bank, (“10% Shareholders”), are subject to Sections 22(g) and 22(h) of the Federal Reserve Act and their corresponding regulations (Regulation O) and Section 13(k) of the Exchange Act relating to the prohibition on personal loans to executives (which exempts financial institutions in compliance with the insider lending restrictions of Section 22(h) of the Federal Reserve Act). Among other things, these loans must be made on terms substantially the same as those prevailing on transactions made to unaffiliated individuals and certain extensions of credit to those persons must first be approved in advance by a disinterested majority of the entire Board of Directors. Section 22(h) of the Federal Reserve Act prohibits loans to any of those individuals where the aggregate amount exceeds an amount equal to 15% of an institution’s unimpaired capital and surplus plus an additional 10% of unimpaired capital and surplus in the case of loans that are fully secured by readily marketable collateral, or when the aggregate amount on all of the extensions of credit outstanding to all of these persons would exceed the Bank’s

13

unimpaired capital and unimpaired surplus. Section 22(g) of the Federal Reserve Act identifies limited circumstances in which the Bank is permitted to extend credit to executive officers.

10

Community Reinvestment Act. The Bank is subject to the requirements of the Community Reinvestment Act of 1977 (“CRA”).CRA. The CRA imposes on financial institutions an affirmative and ongoing obligation to meet the credit needs of the local communities, including lowlow- and moderate incomemoderate-income neighborhoods. The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting such credit needs. In addition, in order for a bank holding company, like the Company, to commence any new activity permitted by the BHC Act, or to acquire any company engaged in any new activity permitted by the BHC Act, each insured depository institution subsidiary of the bank holding company must have received a rating of at least “satisfactory” in its most recent examination under the CRA. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The Bank received a “satisfactory” CRA rating in its most recent examination.

LIBOR and Other Benchmark Rates.Following the announcement by the U.K.’s Financial Conduct Authority in July 2017 that it will no longer persuade or require banks to submit rates for the London InterBank Offered Rate (LIBOR) after 2021, central banks and regulators around the world have commissioned working groups to find suitable replacements for Interbank Offered Rates (IBOR) and other benchmark rates and to implement financial benchmark reforms more generally. These actions have resulted in uncertainty regarding the use of alternative reference rates (ARRs) and could cause disruptions in a variety of markets, as well as adversely impact the Company’s business, operations and financial results.

To facilitate an orderly transition from LIBOR, IBOR and other benchmark rates to ARRs, the Company has established a focus committee, which includes members of senior management, including the Chief Credit Officer and Chief Financial Officer, among others. The task of this committee is to identify, assess and monitor risks associated with the expected discontinuation or unavailability of benchmarks, including LIBOR, achieve operational readiness and engage impacted clients in connection with the transition to ARRs.

Confidentiality of Customer Information. The Company and the Bank are subject to various laws and regulations that address the privacy of nonpublic personal financial information of customers. A financial institution must provide to its customers information regarding its policies and procedures with respect to the handling of customers’ personal information. Each institution must conduct an internal risk assessment of its ability to protect customer information. These privacy laws and regulations generally prohibit a financial institution from providing a customer’s personal financial information to unaffiliated parties without prior notice and approval from the customer.

Required Disclosure of Customer Information.Anti-Money Laundering Laws and Regulations. The Company is subject to several federal laws that are designed to combat money laundering, terrorist financing, and transactions with persons, companies or foreign governments designated by U.S. authorities (“AML laws”). This category of laws includes the Bank Secrecy Act of 1970, the Money Laundering Control Act of 1986, the USA PATRIOT Act of 2001, and the Bank are also subject to variousAnti-Money Laundering Act of 2020.

The AML laws and their implementing regulations that attemptrequire insured depository institutions, broker-dealers, and certain other financial institutions to combathave policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing. The Bank Secrecy Act requires all financial institutions to, among other things, create a system of controls designed to prevent money launderingAML laws and the financing of terrorism, andtheir regulations also imposes recordkeeping and reporting requirements. The USA Patriot Act (i) added further regulations to facilitateprovide for information sharing, among governmental entitiessubject to conditions, between federal law enforcement agencies and financial institutions, for the purpose of combating terrorism and money laundering, (ii) imposed standards for verifying customer identification at account opening, and (iii) requiredas well as among financial institutions, for counter-terrorism purposes. Federal banking regulators are required, when reviewing bank holding company acquisition and bank merger applications, to establishtake into account the effectiveness of the anti-money laundering programs.  The activities of the applicants. To comply with these obligations, the Company has implemented appropriate internal practices, procedures, and controls.

Office of Foreign Assets Control (“OFAC”),Control. OFAC which is a division of the U.S. Treasury, is responsible for helping to ensure that United States entities do not engage in transactions with “enemies” of the United States, as defined by various Executive Orders and Acts of Congress. If the Bank finds a name of an “enemy” of the United States on any transaction, account, or wire transfer that is on an OFAC list, it must freeze such account or place transferred funds into a blocked account, and report it to OFAC. Failure to comply with OFAC requirements could have serious legal, financial and reputational consequences for the Company.

Stress Testing. The federal banking agencies have implemented stress testing requirements for certain large or risky financial institutions, including bank holding companies and state-chartered banks and they emphasize that all banking organizations, regardless of size, should have the capacity to analyze the potential effect of adverse market conditions or outcomes on the organization’s financial condition. Based on existing regulatory guidance, the Company and the Bank are expected to consider the institution’s interest rate risk management, commercial real estate loan concentrations and other credit-related information, and funding and liquidity management during this analysis of adverse market conditions or outcomes.

Volcker Rule. The Dodd-Frank Act and regulations under that act prohibit insured depository institutions and their affiliates, except as permitted under certain limited circumstances, from (i) engaging in short-term proprietary trading for their own accounts and (ii) having certain ownership interests in, and relationships with, hedge funds or private equity funds. The Volcker Rule did not have a material impact on the Company's operations or financial position in 20192021 and 2018.2020.

Consumer Financial Protection. The Bank is subject to a number of other federal and state consumer protection laws that extensively govern its relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act,

11

the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Servicemembers’ Civil Relief Act, Secure and Fair Enforcement for Mortgage Licensing Act, laws governing flood insurance, federal and state laws prohibiting unfair and deceptive business practices, foreclosure laws, and various regulations that implement some or all of the foregoing. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must deal with customers when taking deposits, making loans, collecting loans, and providing other services. If the Bank fails to comply with these laws and regulations, it may be subject to various penalties. Failure to comply with consumer protection requirements may also

14

result in failure to obtain any required bank regulatory approval for merger or acquisition transactions the Bank may wish to pursue or being prohibited from engaging in such transactions even if approval is not required.

The Dodd-Frank Act centralized responsibility for consumer financial protection by creating a new agency, the Consumer Financial Protection Bureau (the “CFPB”),CFPB, and giving it responsibility for implementing, examining, and enforcing compliance with federal consumer protection laws. The CFPB focuses on (i) risks to consumers and compliance with the federal consumer financial laws; (ii) the markets in which firms operate and risks to consumers posed by activities in those markets; (iii) depository institutions that offer a wide variety of consumer financial products and services; and (iv) non-depository companies that offer one or more consumer financial products or services. The CFPB is responsible for implementing, examining and enforcing compliance with federal consumer financial laws for institutions with more than $10 billion of assets. While the Bank, like all banks, is subject to federal consumer protection rules enacted by the CFPB, because the Company and the Bank have total consolidated assets of $10 billion or less, the OCC oversees the application to the Bank of most consumer protection aspects of the Dodd-Frank Act and other laws and regulations.

The CFPB has broad rulemaking authority for a wide range of consumer financial laws that apply to all banks, including, among other things, the authority to prohibit “unfair, deceptive, or abusive” acts and practices. Abusive acts or practices are defined as those that materially interfere with a consumer’s ability to understand a term or condition of a consumer financial product or service or take unreasonable advantage of a consumer’s (i) lack of financial savvy, (ii) inability to protect himself in the selection or use of consumer financial products or services, or (iii) reasonable reliance on a covered entity to act in the consumer’s interests. The CFPB can issue cease-and-desist orders against banks and other entities that violate consumer financial laws. The CFPB may also institute a civil action against an entity in violation of federal consumer financial law in order to impose a civil penalty or injunction. Further, regulatory positions taken by the CFPB with respect to financial institutions with more than $10 billion in assets may influence how other regulatory agencies apply the subject consumer financial protection laws and regulations.

Mortgage Banking Regulation. In connection with making mortgage loans, the Company and the Bank are subject to rules and regulations that, among other things, establish standards for loan origination, prohibit discrimination, provide for inspections and appraisals of property, require credit reports on prospective borrowers, in some cases restrict certain loan features and fix maximum interest rates and fees, require the disclosure of certain basic information to mortgagors concerning credit and settlement costs, limit payment for settlement services to the reasonable value of the services rendered, and require the maintenance and disclosure of information regarding the disposition of mortgage applications based on race, gender, geographical distribution and income level. The Company and the Bank are also subject to rules and regulations that require the collection and reporting of significant amounts of information with respect to mortgage loans and borrowers.

The Company’s and the Bank’s mortgage origination activities are subject to Regulation Z, which implements the Truth in Lending Act. Certain provisions of Regulation Z require creditors to make a reasonable and good faith determination based on verified and documented information that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms. Creditors are required to determine consumers’ ability to repay in one of two ways. The first alternative requires the creditor to consider the following eight underwriting factors when making the credit decision: (i) current or reasonably expected income or assets; (ii) current employment status; (iii) the monthly payment on the covered transaction; (iv) the monthly payment on any simultaneous loan; (v) the monthly payment for mortgage-related obligations; (vi) current debt obligations, alimony, and child support; (vii) the monthly

12

debt-to-income ratio or residual income; and (viii) credit history. Alternatively, the creditor can originate “qualified mortgages,” which are entitled to a presumption that the creditor making the loan satisfied the ability-to-repay requirements. In general, a “qualified mortgage” is a mortgage loan without negative amortization, interest-only payments, balloon payments, or terms exceeding 30 years. In addition, to be a qualified mortgage, the points and fees paid by a consumer cannot exceed 3% of the total loan amount, and the consumer’s debt-to-income ratio (“DTI”) must be below the prescribed threshold. Qualified mortgages that are “higher-priced” (e.g. subprime loans) garner a rebuttable presumption of compliance with the ability-to-repay rules, while qualified mortgages that are not “higher-priced” (e.g. prime loans) are given a safe harbor of compliance. Small creditors, as described below, may originate qualified mortgages that are not restricted by the specific DTI threshold (however, the DTI must still be considered). Small creditors are those financial institutions that meet the following requirements: (i) have assets below $2 billion (adjustable annually by CFPB); (ii) originated no more than 5002 thousand first-lien, closed-end residential mortgages subject to the ability-to-repay requirements in the preceding calendar year; and (iii) hold the qualified mortgage loan in its portfolio after origination. The Company, as a small creditor, does comply with the “qualified mortgage rules” and the other applicable Truth in Lending requirements.

Incentive Compensation.  In 2010, the federal bank Federal banking agencies have issued regulatory agencies issued comprehensive final guidance on incentive compensation policies(the Incentive Compensation Guidance) intended to ensure that the incentive compensation policies of financial institutionsbanking organizations do not undermine the safety and soundness of such institutionsorganizations by encouraging excessive risk-taking. The Interagency Guidance on Sound Incentive Compensation Policies, which covers all employees that have the ability to materially affect the risk profile of financial institutions, either individually or as part of a group, is based upon the key principles that a financial institution’s incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the institution’s ability to effectively identify and manage risks; (ii) be compatible with effective internal controls and risk management; and (iii) be supported by strong corporate governance, including active and effective oversight by the financial institution’s Board of Directors.

The Federal Reserve and the OCCFDIC will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of financial institutions,banking organizations, such as the Company and the Bank, that are not “large, complex banking organizations.” These reviews will be tailored to each financial institution based on the scope and complexity of the institution’s activities and the prevalence of incentive compensation arrangements.  The findings of the supervisory initiatives will be included in reports of examination.  Deficiencies examination, and deficiencies

15

will be incorporated into the institution’sorganization’s supervisory ratings, which can affect the institution’s ability to make acquisitions and take other actions.ratings. Enforcement actions may be taken against a financial institutionbanking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the institution’sorganization’s safety and soundness and the financial institutionorganization is not taking prompt and effective measures to correct the deficiencies.

​In 2016, the SEC and the federal banking agencies proposed rules that prohibit covered financial institutions (including bank holding companies and banks) from establishing or maintaining incentive-based compensation arrangements that encourage inappropriate risk taking by providing covered persons (consisting of senior executive officers and significant risk takers, as defined in the rules) with excessive compensation, fees or benefits that could lead to material financial loss to the financial institution. The proposed rules (i) outline factors to be considered when analyzing whether compensation is excessive and whether an incentive-based compensation arrangement encourages inappropriate risks that could lead to material loss to the covered financial institution, and (ii) establishes minimum requirements that incentive-based compensation arrangements must meet to be considered to not encourage inappropriate risks and to appropriately balance risk and reward. The proposed rules also impose additional corporate governance requirements on the boards of directors of covered financial institutions and impose additional record-keeping requirements. The comment period for these proposed rules has closed and a final rules haverule has not yet been published.

Cybersecurity. The federal bank regulatory agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a financial institution’s board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal bank regulatory agencies expect financial institutions to establish lines of defense and to ensure that their risk management processes address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyberattack. If the Company

13

or the Bank fails to meet the expectations set forth in this regulatory guidance, the Company or the Bank could be subject to various regulatory actions, including financial penalties. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats and the expanding use of technology-based products and services. The Company is, however, taking measures to combat these types of threats and manage risk to the Company and its customers.

In October 2016,On November 18, 2021, the federal bank regulatory agencies issued proposeda final rule to improve the sharing of information about cyber incidents that may affect the U.S. banking system. The rule requires a banking organization to notify its primary federal regulator of any significant computer-security incident as soon as possible and no later than 36 hours after the banking organization determines that a cyber incident has occurred. Notification is required for incidents that have materially affected – or are reasonably likely to materially affect – the viability of a banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. In addition, the rule requires a bank service provider to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect banking organization customers for four or more hours. Compliance with the final rule is required by May 1, 2022. The Company is currently assessing the impact of this rule, but does not anticipate any material impact to its respective operations at this time. With increased focus on cybersecurity, the Company and the Bank continue to monitor legislative, regulatory and supervisory developments related thereto.

Coronavirus Aid, Relief, and Economic Security Act and Consolidated Appropriations Act, 2021.In response to the COVID-19 pandemic, the CARES Act was signed into law on March 27, 2020 and the Consolidated Appropriations Act, 2021, was signed into law on December 27, 2020. Among other things, the CARES Act and CAA include the following provisions impacting financial institutions:

16

Future Regulation

From time to time, various legislative and regulatory initiatives are introduced in Congress and state legislatures, as well as by regulatory agencies. Such initiatives may include proposals to expand or contract the powers of bank holding companies and depository institutions or proposals to substantially change the financial institution regulatory system. Such legislation could change banking statutes and the operating environment of the Company and the Bank in substantial and unpredictable ways. If enacted, such legislation could increase or decrease the cost of doing business, limit or expand permissible activities, or affect the competitive balance among banks, savings associations, credit unions, and other financial institutions. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations, would have on the financial condition or results of operations of the Company or the Bank.

Effect of Governmental Monetary Policies

The Company’s operations are affected not only by general economic conditions but also by the policies of various regulatory authorities. In particular, the Federal Reserve uses monetary policy tools to impact money market and credit market conditions and interest rates to influence general economic conditions. These policies have a significant impact on overall growth and distribution of loans, investments, and deposits; they affect market interest rates charged on loans or paid for time and savings deposits. Federal Reserve monetary policies have had a significant effect on the operating results of commercial banks, including the Company, in the past and are expected to do so in the future.

Tax Reform

On December 22, 2017,In response to COVID-19, during the Presidentfirst quarter of 2020, the FOMC decreased the federal funds target rate, the interest rate at which depository institutions such as the Bank lend reserve balances to other depository institutions overnight on an uncollateralized basis, to a rate of zero to 25 bps. During the first quarter of 2022, the FOMC has increased the federal funds target rate by 25 bps and multiple members of the United States signed into lawFOMC have signaled an intent to continue to increase the Tax Cut and Jobs Act of 2017 (the “Tax Act”).  The legislation made key changes to the U.S. tax law, including the reduction of the U.S. federal corporate taxfunds target rate from a maximum of 35% to a flat 21%, effective January 1, 2018.  throughout 2022.

Reporting Obligations under Securities Laws; Availability of Information

The Company is subject to the periodic and other reporting requirements of the Exchange Act, including the filing of annual, quarterly and other reports with the SEC. Prior to the Reorganization in 2013, the Bank filed the periodic and annual reports required under the Exchange Act with the OCC. Annual reports on Form 10-K, quarterly reports on Form 10-Q and current reports on Form 8-K, plus any amendments to these reports, are available, free of charge, at www.vnbcorp.com. The Company’s SEC filings are posted and available as soon as reasonably practicable after the reports are filed electronically with the SEC. The information on the Company’s website is not incorporated into this report or any other filing the Company makes with the SEC. The SEC maintains an internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC at www.sec.gov.

1417

Employees

AtItem 1A. RISK FACTORS.

The Company’s business is subject to risk. The following discussion, along with management’s discussion and analysis and the financial statements and footnotes, sets forth the most significant risks and uncertainties that management believes could adversely affect the Company’s business, financial condition or results of operations. Additional risks and uncertainties that management is not aware of or that management currently deems immaterial may also have a material adverse effect on the Company’s business, financial condition or results of operations. There is no assurance that this discussion covers all potential risks that the Company faces.

Summary of Risk Factors

The following is a summary of the most significant risks and uncertainties that the Company believes could adversely affect its business, financial condition or results of operations.

Credit Risks

Liquidity Risks

Market Risks

Strategic Risks

Operational Risks

18

Legal, Regulatory and Compliance Risks

Risks Relating to the Company’s Common Stock

General Risk Factors

Risk Factors Associated with the Company’s Business

Credit Risks

The Company’s credit standards and its on-going credit assessment processes might not protect it from significant credit losses.

The Company assumes credit risk by virtue of making loans and extending loan commitments and letters of credit. The Company manages credit risk through a program of underwriting standards, the review of certain credit decisions and a continuous quality assessment process of credit already extended. The Company’s exposure to credit risk is managed through the use of consistent underwriting standards that emphasize local lending while avoiding highly leveraged transactions, as well as excessive industry and other concentrations. The Company’s credit administration function employs risk management techniques to help ensure that problem loans are promptly identified. While these procedures are designed to provide the Company with the information needed to implement policy adjustments where necessary and to take appropriate corrective actions, there can be no assurance that such measures will be effective in avoiding undue credit risk.

The Bank’s ALLL may be insufficient and any increases in the ALLL may have a material adverse effect on the Company’s financial condition and results of operations.

The Bank maintains an allowance for loan losses, which is a reserve established through a provision for loan losses charged to expense, that represents the Bank’s best estimate of probable losses that will be incurred within the existing portfolio of loans. The allowance, in the judgment of management, is necessary to reserve for estimated loan losses and risks inherent in the loan portfolio.

The level of the allowance reflects management’s evaluation of the level of loans outstanding, the level of nonperforming loans, historical loan loss experience, delinquency trends, underlying collateral values, the amount of actual losses charged to the reserve in a given period and assessment of present and anticipated economic conditions. The determination of the appropriate level of the ALLL inherently involves a high degree of subjectivity and requires the Bank to make significant

19

estimates of current credit risks and future trends, all of which may undergo material changes. The outbreak of COVID-19 and the unprecedented governmental response have made these subjective judgments even more difficult. Although the Bank believes the ALLL is a reasonable estimate of known and inherent losses in the loan portfolio, it cannot precisely predict such losses or be certain that the loan loss allowance will be adequate in the future. Deterioration of economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside the Bank’s control, may require an increase in the allowance for loan losses. In addition, bank regulatory agencies and the Bank’s auditors periodically review its ALLL and may require an increase in the provision for loan losses or the recognition of further loan charge-offs, based on judgments different than those of management. Further, if charge-offs in future periods exceed the allowance for loan losses, the Bank will need additional provisions to increase the allowance for loan losses.

The Company’s focus on lending to small to mid-sized community-based businesses may increase its credit risk.

Most of the Company’s commercial business and commercial real estate loans are made to small and mid-sized businesses and non-profits. These businesses generally have fewer financial resources in terms of capital or borrowing capacity than larger entities and have a heightened vulnerability to economic conditions. If general economic conditions in the market areas in which the Company operates negatively impact this important customer sector, the Company’s results of operations and financial condition may be adversely affected. Moreover, a portion of these loans have been made by the Company in recent years and the borrowers may not have experienced a complete business or economic cycle. Any deterioration of the borrowers’ businesses may hinder their ability to repay their loans with the Company, which could have a material adverse effect on its financial condition and results of operations. Steps to mitigate such risks include underwriting multiple sources of repayment, including but not limited, to business cash flow, personal guarantees, collateral, and government guarantees, where applicable. Although the Company has taken these mitigation steps, there is no guarantee that such practices will be effective to prevent the increased credit risk.

The Company’s concentration in loans secured by real estate may increase its future credit losses, which would negatively affect the Company’s financial results.

The Company offers a variety of secured loans, including commercial lines of credit, commercial term loans, real estate, construction, home equity, consumer and other loans. Credit risk and credit losses can increase if its loans are concentrated to borrowers who, as a group, may be uniquely or disproportionately affected by economic or market conditions. As of December 31, 2019,2021, approximately 78.4% of the Company’s loans are secured by real estate, both residential and commercial. The Company has established concentration limits that are regularly monitored by management and reported to the Board. A major change in the real estate market in the regions in which the Company operates, resulting in a deterioration in real estate values, or in the local or national economy, including changes caused by the COVID-19 pandemic, could adversely affect the Company’s customers’ ability to pay these loans, which in turn could adversely impact the Company. Risk of loan defaults and foreclosures are inherent in the banking industry, and the Company tries to limit its exposure to this risk by carefully underwriting and monitoring its extensions of credit. The Company cannot fully eliminate credit risk, and as a result, credit losses may occur in the future.

The Company has a moderate concentration of credit exposure in commercial real estate and loans with this type of collateral are viewed as having more risk of default.

As of December 31, 2021, the Company had 97 fullapproximately $374.0 million in loans secured by commercial real estate, which represented approximately 35.2% of total loans outstanding at that date; such loans consist of non-owner occupied commercial real estate, construction, land development, multi-family and other land loans. These types of loans are generally viewed as having more risk of default than residential real estate loans. They are also typically larger than residential real estate loans and consumer loans and depend on cash flows from the property to service the debt, successful completion of construction projects and, for development loans, sale of the underlying asset. It may be more difficult for commercial real estate borrowers to repay their loans in a timely manner, as commercial real estate borrowers’ abilities to repay their loans frequently depends on the successful rental of their properties. Cash flows may be affected significantly by general economic conditions, and a sustained downturn in the local economy or in occupancy rates in the local economy where the property is located could increase the likelihood of default. Because the Company’s loan portfolio contains a number of commercial real estate loans with relatively large balances, the deterioration of one or a few of these loans could cause a significant increase in its percentage of nonperforming loans. An increase in nonperforming loans could result in a loss of earnings from these loans, an increase in the provision for loan losses and an increase in charge-offs, all of which could have a material adverse effect on the Company’s financial condition. The Company’s banking regulators generally give commercial real estate lending greater scrutiny and may require banks with higher levels of commercial real estate loans to implement improved underwriting, internal controls, risk management policies and portfolio stress testing, as well as possibly higher levels of allowances for losses and capital as a result of commercial real estate lending growth and exposures, which could have a material adverse effect on the Company’s results of operations. Steps to mitigate such risks

20

include underwriting multiple sources of repayment, including but not limited, to business cash flow, personal guarantees, collateral, and government guarantees, where applicable. In addition, the Company has established concentration limits that are regularly monitored by management and reported to the Board. Although the Company has taken these mitigation steps, there is no guarantee that such practices will be effective to prevent the increased credit risk.

The Company’s results of operations are significantly affected by the ability of borrowers to repay their loans.

A significant source of risk for the Company is the possibility that losses will be sustained because borrowers, guarantors and related parties may fail to perform in accordance with the terms of their loan agreements. Most of the Company’s loans are secured but some loans are unsecured. With respect to the secured loans, the collateral securing the repayment of these loans may be insufficient to cover the obligations owed under such loans. Collateral values may be adversely affected by changes in economic, environmental and other conditions, including the impacts of the COVID-19 pandemic, declines in the value of real estate, changes in interest rates, changes in monetary and fiscal policies of the federal government, terrorist activity, environmental contamination and other external events. In addition, collateral appraisals that are out of date or that do not meet industry recognized standards may create the impression that a loan is adequately collateralized when it is not. The Company has adopted underwriting and credit monitoring procedures and policies, including regular reviews of appraisals and borrower financial statements, that management believes are appropriate to mitigate the risk of loss. An increase in nonperforming loans could result in a net loss of earnings from these loans, an increase in the provision for loan losses and an increase in loan charge-offs, all of which could have a material adverse effect on the Company’s financial condition and results of operations.

Liquidity Risks

The Company’s liquidity needs could adversely affect results of operations and financial condition.

The Company’s primary sources of funds are deposits and loan repayments. While scheduled loan repayments are a relatively stable source of funds, they are subject to the ability of borrowers to repay the loans. The ability of borrowers to repay loans can be adversely affected by a number of factors, including, but not limited to, changes in economic conditions, adverse trends or events affecting business industry groups, reductions in real estate values or markets, availability of, and/or access to, sources of refinancing, business closings or lay-offs, pandemics or endemics, inclement weather, natural disasters and international instability. Additionally, deposit levels may be affected by a number of factors, including, but not limited to, rates paid by competitors, general interest rate levels, regulatory capital requirements, returns available to customers on alternative investments and general economic conditions. Accordingly, the Company may be required from time equivalent employees.  Noneto time to rely on secondary sources of liquidity to meet withdrawal demands or otherwise fund operations. Such sources include FHLB advances, sales of securities and loans, federal funds lines of credit from correspondent banks and borrowings from the Federal Reserve Discount Window, as well as additional out-of-market time deposits and brokered deposits. While the Company believes that these sources are currently adequate, there can be no assurance they will be sufficient to meet future liquidity demands, particularly if the Company continues to grow and experiences increasing loan demand. The Company may be required to slow or discontinue loan growth, capital expenditures or other investments or liquidate assets should such sources not be adequate.

The Company may need to raise additional capital in the future and may not be able to do so on acceptable terms, or at all.

Access to sufficient capital is critical in order to enable the Company to implement its business plan, support its business, expand its operations and meet applicable capital requirements. The inability to have sufficient capital, whether internally generated through earnings or raised in the capital markets, could adversely impact the Company’s ability to support and to grow its operations. If the Company grows its operations faster than it generates capital internally, it will need to access the capital markets. The Company may not be able to raise additional capital in the form of additional debt or equity on acceptable terms, or at all. The Company’s ability to raise additional capital, if needed, will depend on, among other things, conditions in the capital markets at that time, the Company’s financial condition and its results of operations. Economic conditions and a loss of confidence in financial institutions may increase the Company’s cost of capital and limit access to some sources of capital. Further, if the Company needs to raise capital in the future, it may have to do so when many other financial institutions are also seeking to raise capital and would then have to compete with those institutions for investors. An inability to raise additional capital on acceptable terms when needed could have a material adverse impact on the Company’s business, financial condition and results of operations.

21

Market Risks

The Company may be adversely impacted by changes in market conditions.

The Company is directly and indirectly affected by changes in market conditions. Market risk generally represents the risk that values of assets and liabilities or revenues will be adversely affected by changes in market conditions. As a financial institution, market risk is inherent in the financial instruments associated with the Company’s operations and activities, including loans, deposits, securities, and short-term borrowings. A few of the market conditions that may shift from time to time, thereby exposing the Company to market risk, include fluctuations in interest rates, equity and futures prices, and price deterioration or changes in value due to changes in market perception or actual credit quality of issuers. The Company’s investment securities portfolio, in particular, may be impacted by market conditions beyond its control, including rating agency downgrades of the securities, defaults of the issuers of the securities, lack of market pricing of the securities, and inactivity or instability in the credit markets. Any changes in these conditions, in current accounting principles or interpretations of these principles could impact the Company’s assessment of fair value and thus the determination of other-than-temporary impairment of the securities in the investment securities portfolio, which could adversely affect the Company’s earnings and capital ratios.

Asset values also directly impact revenues in the Company’s wealth management businesses. The Company receives asset-based management fees based on the value of clients’ portfolios or investments in funds managed by the Company and, in some cases, the Company may also receive performance fees based on increases in the value of such investments. Declines in asset values can reduce the value of clients’ portfolios or fund assets, which in turn can result in lower fees earned for managing such assets.

Changes in economic conditions, especially in the areas in which the Company conducts operations, could materially and negatively affect its business.

The Company’s business is directly impacted by economic conditions, legislative and regulatory changes, changes in government monetary and fiscal policies, and inflation, all of which are beyond its control. A deterioration in economic conditions, whether caused by global, national or local concerns (including the COVID-19 pandemic), especially within the Company’s market area, could result in the following potentially material consequences: loan delinquencies increasing; problem assets and foreclosures increasing; demand for products and services decreasing; low cost or noninterest bearing deposits decreasing; and collateral for loans, especially real estate, declining in value, in turn reducing customers’ borrowing power, and reducing the value of assets and collateral associated with existing loans. A continued economic downturn could result in losses that materially and adversely affect the Company’s business.

The Company’s business is subject to interest rate risk, and variations in interest rates and inadequate management of interest rate risk may negatively affect financial performance.

Changes in the interest rate environment may reduce the Company’s profits. It is expected that the Company will continue to realize income from the differential or “spread” between the interest earned on loans, securities, and other interest-earning assets, and interest paid on deposits, borrowings and other interest-bearing liabilities. Net interest spreads are affected by the difference between the maturities and repricing characteristics of interest-earning assets and interest-bearing liabilities. In addition, loan volume and yields are affected by market interest rates on loans, and the current interest rate environment encourages extreme competition for new loan originations from qualified borrowers. The Company’s management cannot ensure that it can minimize interest rate risk. If the interest rates paid on deposits and other borrowings increase at a faster rate than the interest rates received on loans and other investments, the Company’s net interest income, and therefore earnings, could be adversely affected. Earnings could also be adversely affected if the interest rates received on loans and other investments fall more quickly than the interest rates paid on deposits and other borrowings. Accordingly, changes in levels of market interest rates could materially and adversely affect the net interest spread, asset quality, loan origination volume and the Company’s overall profitability.

The Company may be adversely affected by changes in the method of determining LIBOR, or the replacement of LIBOR with an alternative reference rate, for variable rate loans.

LIBOR and certain other interest rate benchmarks are the subject of recent national and international reform. Intercontinental Exchange, Inc., the company that administers LIBOR, stated in March 2021 that it would cease the publication of one week and two month LIBOR rates immediately after the LIBOR publication on December 31, 2021, and the remaining LIBOR rates immediately following the LIBOR publication on June 30, 2023. The U.S. federal banking agencies have issued statements to encourage U.S. banks to transition away from U.S. dollar LIBOR as soon as practicable and not to enter into new contracts that use U.S. dollar LIBOR after December 31, 2021.

22

Given LIBOR’s extensive use across financial markets, the transition away from LIBOR presents various risks and challenges to financial markets and institutions, including to the Company, and liquidity in the interbank markets on which those LIBOR estimates are based has been declining. It is not possible to predict the effect of these changes, other reforms or the establishment of alternative reference rates in the United Kingdom or elsewhere. Efforts in the United States to identify a set of alternative U.S. dollar reference rates include a proposal by the Alternative Reference Rates Committee of the Federal Reserve Board and the Federal Reserve Bank of New York for the market to transition from LIBOR to the Secured Overnight Financing Rate. Whether or not the SOFR attains market acceptance as a LIBOR replacement remains in question and the future of LIBOR at this time is uncertain. The Company has begun offering lending solutions to its customers based on SOFR and certain prime-linked variable rates, and has ceased origination of new loans or other products using a LIBOR rate or index.

The market transition away from LIBOR to alternative reference rates is a complex process and could have a range of effects on the Company’s business, financial condition and results of operations, including but not limited to by (i) adversely affecting the interest rates received or paid on the revenues and expenses associated with, or the value of the Company’s LIBOR-based assets and liabilities; (ii) adversely affecting the interest rates paid on or received from other securities or financial arrangements, given LIBOR’s historically prominent role in determining market interest rates globally, or (iii) resulting in disputes, litigation or other actions with borrowers or other counterparties about the interpretation or enforceability of certain fallback language contained in LIBOR-based loans, securities or other contracts. In addition, uncertainty regarding the nature of such potential changes, alternative reference rates or other reforms may adversely affect the trading market for securities on which the interest or dividend is determined by reference to LIBOR, including the Company’s trust preferred securities. The discontinuation of LIBOR could also result in operational, legal and compliance risks, and if the Company is unable to adequately manage such risks, they could have a material adverse impact on the Company’s reputation and on its business, financial condition, results of operations or future prospects.

The Company relies upon independent appraisals to determine the value of the real estate that secures a significant portion of its loans and the value of any foreclosed properties that may be carried on its books, and the values indicated by such appraisals may not be realizable if it is forced to foreclose upon such loans or liquidate such foreclosed property.

As indicated above, a significant portion of the Company’s loan portfolio consists of loans secured by real estate and it may also hold foreclosed properties from time to time. The Company relies upon independent appraisers to estimate the value of such real estate. Appraisals are only estimates of value and the independent appraisers may make mistakes of fact or judgment that adversely affect the reliability of their appraisals. In addition, events occurring after the initial appraisal may cause the value of the real estate to increase or decrease. As a result of any of these factors, the real estate securing some of the Company’s loans and any foreclosed properties that may be held by the Company may be more or less valuable than anticipated. If a default occurs on a loan secured by real estate that is less valuable than originally estimated, the Company may not be able to recover the outstanding balance of the loan. It may also be unable to sell any foreclosed properties for the values estimated by their appraisals.

Strategic Risks

The Company faces strong and growing competition from financial services companies and other companies that offer banking and other financial services, which could negatively affect the Company’s business.

The Company encounters substantial competition from other financial institutions in its market area and competition is increasing. Ultimately, the Company may not be able to compete successfully against current and future competitors. Many competitors offer the same banking services that the Company offers in its service area. These competitors include national, regional and community banks. The Company also faces competition from many other types of financial institutions, including finance companies, mutual and money market fund providers, brokerage firms, insurance companies, credit unions, financial subsidiaries of certain industrial corporations, financial technology companies and mortgage companies. Increased competition may result in reduced business for the Company.

Additionally, banks and other financial institutions with larger capitalization and financial intermediaries not subject to bank regulatory restrictions have larger lending limits and are thereby able to serve the credit needs of larger customers. Areas of competition include interest rates for loans and deposits, efforts to obtain loans and deposits, and range and quality of products and services provided, including new technology-driven products and services. If the Company is unable to attract and retain banking customers, it may be unable to continue to grow loan and deposit portfolios and its results of operations and financial condition may otherwise be adversely affected.

The Company may not be able to successfully manage its long-term growth, which may adversely affect its results of operations and financial condition.

23

A key aspect of the Company’s long-term business strategy is its continued growth and expansion. The Company’s ability to continue to grow depends, in part, upon its ability to (i) open new branch offices or acquire existing branches or other financial institutions, such as Fauquier, (ii) attract deposits to those locations, and (iii) identify attractive loan and investment opportunities.

The Company may not be able to successfully implement its growth strategy if it is unable to identify attractive markets, locations or opportunities to expand in the future, or if the Company is subject to regulatory restrictions on growth or expansion of its operations. The Company’s ability to manage its growth successfully also will depend on whether it can maintain capital levels adequate to support its growth, maintain cost controls and asset quality and successfully integrate any businesses the Company acquires into its organization. As the Company identifies opportunities to implement its growth strategy by opening new branches or acquiring branches or other banks, it may incur increased personnel, occupancy and other operating expenses. In the case of new branches, the Company must absorb those higher expenses while it begins to generate new deposits, and there is a further time lag involved in redeploying new deposits into attractively priced loans and other higher yielding assets.

The Company may consider acquiring other businesses or expanding into new product lines that it believes will help it fulfill its strategic objectives. The Company expects that other banking and financial companies, some of which have significantly greater resources, will compete with it to acquire financial services businesses. This competition could increase prices for potential acquisitions that the Company believes are attractive. Acquisitions may also be subject to various regulatory approvals. If the Company fails to receive the appropriate regulatory approvals, it will not be able to consummate acquisitions that it believes are in its best interests.

When the Company enters into new markets or new lines of business, its lack of history and familiarity with those markets, clients and lines of business may lead to unexpected challenges or difficulties that inhibit its success. The Company’s plans to expand could depress earnings in the short run, even if it efficiently executes a growth strategy leading to long-term financial benefits.

The success of the Company’s strategy depends on its ability to identify and retain individuals with experience and relationships in its markets.

In order to be successful, the Company must identify and retain experienced key management members and sales staff with local expertise and relationships. Competition for qualified personnel is intense and there is a limited number of qualified persons with knowledge of and experience in the community banking and mortgage industry in the Company’s chosen geographic market. Even if the Company identifies individuals that it believes could assist it in building its franchise, it may be unable to recruit these individuals away from their current employers. In addition, the process of identifying and recruiting individuals with the combination of skills and attributes required to carry out the Company’s strategy is often lengthy. The Company’s inability to identify, recruit and retain talented personnel could limit its growth and could materially adversely affect its business, financial condition and results of operations.

Operational Risks

The Company is subject to a variety of operational risks, including reputational risk, legal and compliance risk, and the risk of fraud or theft by employees or outsiders.

The Company is exposed to many types of operational risks, including reputational risk, legal and compliance risk, the risk of fraud or theft by employees or outsiders, unauthorized transactions by employees, operational errors, clerical or record-keeping errors, and errors resulting from faulty or disabled computer or communications systems.

Reputational risk, or the risk to the Company’s earnings and capital from negative public opinion, could result from the Company’s actual or alleged conduct in any number of activities, including lending practices, corporate governance, and from actions taken by government regulators and community organizations in response to those activities. Negative public opinion can adversely affect the Company’s ability to attract and keep customers and employees and can expose it to litigation and regulatory action.

Further, if any of the Company’s financial, accounting, or other data processing systems fail or have other significant issues, the Company could be adversely affected. The Company depends on internal systems and outsourced technology to support these data storage and processing operations. The Company’s inability to use or access these information systems at critical points in time could unfavorably impact the timeliness and efficiency of the Company’s business operations. It could be adversely affected if one of its employees causes a significant operational break-down or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates its operations or systems. The Company is also at risk of the impact of natural disasters, terrorism and international hostilities on its systems and from the

24

effects of outages or other failures involving power or communications systems operated by others. The Company may also be subject to disruptions of its operating systems arising from events that are representedwholly or partially beyond its control (for example, computer viruses or electrical or communications outages), which may give rise to disruption of service to customers and to financial loss or liability. In addition, there have been instances where financial institutions have been victims of fraudulent activity in which criminals pose as customers to initiate wire and automated clearinghouse transactions out of customer accounts. Although the Company has policies and procedures in place to verify the authenticity of its customers, it cannot guarantee that such policies and procedures will prevent all fraudulent transfers. Such activity can result in financial liability and harm to the Company’s reputation. If any of the foregoing risks materialize, it could have a material adverse effect on the Company’s business, financial condition and results of operations.

Changes in accounting standards could impact reported earnings.

The authorities that promulgate accounting standards, including the FASB, the SEC and other regulatory authorities, periodically change the financial accounting and reporting standards that govern the preparation of the Company’s consolidated financial statements. These changes are difficult to predict and can materially impact how the Company records and reports its financial condition and results of operations. In some cases, the Company could be required to apply a new or revised standard retroactively, resulting in the restatement of financial statements for prior periods. Such changes could also require the Company to incur additional personnel or technology costs.

Failure to maintain effective systems of internal and disclosure control could have a material adverse effect on the Company’s results of operation and financial condition.

Effective internal and disclosure controls are necessary for the Company to provide reliable financial reports and effectively prevent fraud and to operate successfully as a public company. The Bank is also required to establish and maintain an adequate internal control structure over financial reporting pursuant to regulations of the FDIC. As a public company, the Company is required by the Sarbanes-Oxley Act to design and maintain a system of internal control over financial reporting and include management’s assessment regarding internal control over financial reporting. If the Company cannot provide reliable financial reports or prevent fraud, its reputation and operating results would be harmed. As part of the Company’s ongoing monitoring of internal control, it may discover material weaknesses or significant deficiencies in its internal control that require remediation. A “material weakness” is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis.

The Company’s inability to maintain the operating effectiveness of the controls described above could result in a material misstatement to the Company’s financial statements or other disclosures, which could have an adverse effect on its business, financial condition or results of operations. In addition, any failure to maintain effective controls or to timely effect any necessary improvement of the Company’s internal and disclosure controls could, among other things, result in losses from fraud or error, harm the Company’s reputation or cause investors to lose confidence in its reported financial information, all of which could have a material adverse effect on its results of operation and financial condition.

The Company depends on the accuracy and completeness of information about clients and counterparties, and the Company’s financial condition could be adversely affected if it relies on misleading or incorrect information.

In deciding whether to extend credit or to enter into other transactions with clients and counterparties, the Company may rely on information furnished to it by or on behalf of clients and counterparties, including financial statements and other financial information, which it does not independently verify. The Company also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. For example, in deciding whether to extend credit to clients, the Company may assume that a client’s audited financial statements conform with GAAP and present fairly, in all material respects, the financial condition, results of operations and cash flows of that client. The Company’s financial condition and results of operations could be negatively impacted to the extent it relies on financial statements that do not comply with GAAP or are materially misleading.

The Company’s success depends on its management team, and the unexpected loss of any of these personnel could adversely affect operations.

The Company’s success is, and is expected to remain, highly dependent on its management team. This is particularly true because, as a community bank, the Company depends on the management team’s ties to the community and customer relationships to generate business. The Company’s growth will continue to place significant demands on management, and the loss of any such person’s services may have an adverse effect upon growth and profitability. If the Company fails to retain or continue to recruit qualified employees, growth and profitability could be adversely affected.

25

The Company relies on other companies to provide key components of its business infrastructure.

Third parties provide key components of the Company’s business operations such as data processing, recording and monitoring transactions, online banking interfaces and services, internet connections and network access. While the Company has selected these third-party vendors carefully, it does not control their actions. Any problem caused by these third parties, including poor performance of services, failure to provide services, disruptions in communication services provided by a vendor and failure to handle current or higher volumes, could adversely affect the Company’s ability to deliver products and services to its customers and otherwise conduct its business, and may harm its reputation. Financial or operational difficulties of a third-party vendor could also hurt the Company’s operations if those difficulties interfere with the vendor’s ability to serve the Company. Replacing these third-party vendors could also create significant delay and expense. Accordingly, use of such third-parties creates an unavoidable inherent risk to the Company’s business operations.

The soundness of other financial institutions could adversely affect the Company.

The Company’s ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. The Company has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial industry. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have led to market-wide liquidity problems and could lead to losses or defaults by the Company or by other institutions. Many of these transactions expose the Company to credit risk in the event of default of its counterparty or client. In addition, credit risk may be exacerbated when the collateral held cannot be realized upon or is liquidated at prices insufficient to recover the full amount of the financial instrument exposure due. There is no assurance that any such losses would not materially and adversely affect results of operations.

The Company’s operations may be adversely affected by cybersecurity risks.

In the ordinary course of business, the Company collects and stores sensitive data, including proprietary business information and personally identifiable information related to its customers and employees in systems and on networks. The secure processing, maintenance, and use of this information is critical to operations and the Company’s business strategy. The Company has invested in accepted technologies, and continually reviews processes and practices that are designed to protect its networks, computers, and data from damage or unauthorized access. Despite these security measures, the Company’s computer systems and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other disruptions. A breach of any kind could compromise systems and the information stored there could be accessed, damaged or disclosed. A breach in security could result in legal claims, regulatory penalties, disruption in operations, and damage to the Company’s reputation, which could adversely affect its business and financial condition. Furthermore, as cyber threats continue to evolve and increase, the Company may be required to expend significant additional financial and operational resources to modify or enhance its protective measures, or to investigate and remediate any identified information security vulnerabilities.

In addition, multiple major U.S. retailers have experienced data systems incursions reportedly resulting in the thefts of credit and debit card information, online account information and other financial or privileged data. Retailer incursions affect cards issued and deposit accounts maintained by many banks, including Virginia National Bank. Although the Company’s systems are not breached in retailer incursions, these events can cause it to reissue a significant number of cards and take other costly steps to avoid significant theft loss to the Company and its customers. In some cases, the Company may be required to reimburse customers for the losses they incur. Other possible points of intrusion or disruption not within the Company’s control include internet service providers, electronic mail portal providers, social media portals, distant-server (cloud) service providers, electronic data security providers, data processing service providers, telecommunications companies, and smart phone manufacturers.

26

Consumers may increasingly decide not to use banks to complete their financial transactions, which would have a material adverse impact on the Company’s financial condition and operations.

Technology and other changes are allowing parties to complete financial transactions through alternative methods that historically have involved banks. For example, consumers can now maintain funds that would have historically been held as bank deposits in brokerage accounts, mutual funds or general-purpose reloadable prepaid cards. Consumers can also complete transactions such as paying bills or transferring funds directly without the assistance of banks. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the lower cost of deposits as a source of funds could have a material adverse effect on the Company’s financial condition and results of operations.

The Company’s ability to operate profitably may be dependent on its ability to integrate or introduce various technologies into its operations.

The market for financial services, including banking and consumer finance services, is increasingly affected by advances in technology, including developments in telecommunications, data processing, computers, automation, online banking and tele-banking. The Company’s ability to compete successfully in its market may depend on the extent to which it is able to implement or exploit such technological changes. If the Company is not able to afford such technologies, properly or timely anticipate or implement such technologies, or effectively train its staff to use such technologies, its business, financial condition or operating results could be adversely affected.

Legal, Regulatory and Compliance Risks

The Company operates in a highly regulated industry and the laws and regulations that govern the Company’s operations, corporate governance, executive compensation and financial accounting, or reporting, including changes in them or the Company’s failure to comply with them, may adversely affect the Company.

The Company is subject to extensive regulation and supervision that govern almost all aspects of its operations. These laws and regulations, among other matters, prescribe minimum capital requirements, impose limitations on the Company’s business activities, limit the dividends or distributions that it can pay, restrict the ability of institutions to guarantee its debt and impose certain specific accounting requirements that may be more restrictive and may result in greater or earlier charges to earnings or reductions in its capital than GAAP. Compliance with laws and regulations can be difficult and costly, and changes to laws and regulations often impose additional compliance costs.

The Company is currently facing increased regulation and supervision of its industry as a result of the financial crisis in the banking and financial markets. The Dodd-Frank Act instituted major changes to the banking and financial institutions regulatory regimes. Other changes to statutes, regulations or regulatory policies or supervisory guidance, including changes in interpretation or implementation of statutes, regulations, policies or supervisory guidance, could affect the Company in substantial and unpredictable ways. Such additional regulation and supervision has increased, and may continue to increase, the Company’s costs and limit its ability to pursue business opportunities. Further, the Company’s failure to comply with these laws and regulations, even if the failure was inadvertent or reflects a difference in interpretation, could subject it to restrictions on its business activities, fines and other penalties, any of which could adversely affect the Company’s results of operations, capital base and the price of its securities. Further, any new laws, rules and regulations could make compliance more difficult or expensive or otherwise adversely affect the Company’s business and financial condition.

Regulations issued by the CFPB could adversely impact earnings due to, among other things, increased compliance costs or costs due to noncompliance.

The CFPB has broad rulemaking authority to administer and carry out the provisions of the Dodd-Frank Act with respect to financial institutions that offer covered financial products and services to consumers. The CFPB has also been directed to write rules identifying practices or acts that are unfair, deceptive or abusive in connection with any transaction with a consumer for a consumer financial product or service, or the offering of a consumer financial product or service. For example, the CFPB issued a final rule, effective January 10, 2014, requiring mortgage lenders to make a reasonable and good faith determination based on verified and documented information that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms, or to originate “qualified mortgages” that meet specific requirements with respect to terms, pricing and fees. The rule also contains additional disclosure requirements at mortgage loan origination and in monthly statements. The requirements under the CFPB’s regulations and policies could limit the Company’s ability to make certain types of loans or loans to certain borrowers, or could make it more expensive and/or time consuming to make these loans, which could adversely impact the Company’s profitability.

27

The Company is subject to laws regarding the privacy, information security and protection of personal information and any violation of these laws or another incident involving personal, confidential or proprietary information of individuals could damage the Company’s reputation and otherwise adversely affect its business.

The Company’s business requires the collection and retention of large volumes of customer data, including PII in various information systems that the Company maintains and in those maintained by third party service providers. The Company also maintains important internal company data such as PII about its employees and information relating to its operations. The Company is subject to complex and evolving laws and regulations governing the privacy and protection of PII of individuals (including customers, employees and other third-parties). For example, the Company’s business is subject to the Gramm-Leach-Bliley Act of 1999, which, among other things: (i) imposes certain limitations on the Company’s ability to share nonpublic PII about its customers with nonaffiliated third parties; (ii) requires that the Company provides certain disclosures to customers about its information collection, sharing and security practices and affords customers the right to “opt out” of any information sharing by it with nonaffiliated third parties (with certain exceptions); and (iii) requires that the Company develops, implements and maintains a written comprehensive information security program containing appropriate safeguards based on the Company’s size and complexity, the nature and scope of its activities, and the sensitivity of customer information it processes, as well as plans for responding to data security breaches. Various federal and state banking regulators and states have also enacted data breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in the event of a security breach. Ensuring that the Company’s collection, use, transfer and storage of PII complies with all applicable laws and regulations can increase the Company’s costs. Furthermore, the Company may not be able to ensure that customers and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused, the Company could be exposed to litigation or regulatory sanctions under privacy and data protection laws and regulations. Concerns regarding the effectiveness of the Company’s measures to safeguard PII, or even the perception that such measures are inadequate, could cause the Company to lose customers or potential customers and thereby reduce its revenues. Accordingly, any failure, or perceived failure, to comply with applicable privacy or data protection laws and regulations may subject the Company to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in significant liabilities, fines or penalties, and could damage the Company’s reputation and otherwise adversely affect its operations, financial condition and results of operations.

The Company’s business and earnings are impacted by governmental, fiscal and monetary policy over which it has no control.

The Company is affected by domestic monetary policy. The Federal Reserve regulates the supply of money and credit in the United States, and its policies determine in large part the Company’s cost of funds for lending, investing and capital raising activities and the return it earns on those loans and investments, both of which affect the Company’s net interest margin. The actions of the Federal Reserve also can materially affect the value of financial instruments that the Company holds, such as loans and debt securities, and also can affect the Company’s borrowers, potentially increasing the risk that they may fail to repay their loans. The Company’s business and earnings also are affected by the fiscal or other policies that are adopted by various regulatory authorities of the United States. Changes in fiscal or monetary policy are beyond the Company’s control and hard to predict.

Risks Related to the Company’s Common Stock

The Company is not obligated to pay dividends and its ability to pay dividends is limited.

The Company’s ability to make dividend payments on its common stock depends primarily on certain regulatory considerations and the receipt of dividends and other distributions from the Bank. There are various regulatory restrictions on the ability of banks, such as the Bank, to pay dividends or make other payments to their holding companies. The Company is currently paying a quarterly cash dividend to holders of its common stock at a rate of $0.30 per share. Although the Company has paid a quarterly cash dividend to the holders of its common stock since July 2013, holders of its common stock are not entitled to receive dividends, and the Company is not obligated to pay dividends in any particular amounts or at any particular times. Regulatory, economic and other factors may cause the Company’s Board to consider, among other things, the reduction of dividends paid on its common stock.

Future issuances of the Company’s common stock could adversely affect the market price of the common stock and could be dilutive.

28

The Company’s Board, without the approval of shareholders, could from time to time decide to issue additional shares of common stock or shares of preferred stock, which may adversely affect the market price of the shares of common stock and could be dilutive to the Company’s shareholders. Any sale of additional shares of the Company’s common stock may be at prices lower than the current market value of the Company’s shares. In addition, new investors may have rights, preferences and privileges that are senior to, and that could adversely affect, the Company’s existing shareholders. For example, preferred stock would be senior to common stock in right of dividends and as to distributions in liquidation. The Company cannot predict or estimate the amount, timing, or nature of its future offerings of equity securities. Thus, the Company’s shareholders bear the risk of future offerings diluting their stock holdings, adversely affecting their rights as shareholders, and/or reducing the market price of the Company’s common stock.

An investment in the Company’s common stock is not an insured deposit.

The Company’s common stock is not a bank deposit and, therefore, it is not insured against loss by the FDIC or by any collective bargaining unit. other public or private entity. An investment in the Company’s common stock is inherently risky for the reasons described in this “Risk Factors” section and elsewhere in this report and is subject to the same market forces that affect the price of common stock in any company and, as a result, shareholders may lose some or all of their investment.

The Company considers relations withqualifies as a “smaller reporting company,” and the reduced disclosure obligations applicable to smaller reporting companies may make its employeescommon stock less attractive to be good.investors.

The Company owns Bank Owned Life Insurance (“BOLI”) policiesis a “smaller reporting company” as defined in federal securities laws, and will remain a smaller reporting company until the fiscal year following the determination that the market value of its voting and non-voting common shares held by non-affiliates is more than $250 million measured on eachthe last business day of its second fiscal quarter, or its annual revenues are less than $100 million during the most recently completed fiscal year and the market value of its voting and non-voting common shares held by non-affiliates is more than $700 million measured on the last business day of its second fiscal quarter. Smaller reporting companies have reduced disclosure obligations, such as an exemption from providing selected financial data and an ability to provide simplified executive officercompensation information and certain other senior officersonly two years of audited financial statements. If some investors find the Company’s common stock less attractive because the Company may rely on these reduced disclosure obligations, there may be a less active trading market for its common stock and its stock price may be more volatile.

General Risk Factors

The ongoing COVID-19 pandemic and measures intended to prevent its spread may adversely affect the Company’s business, financial condition and operations; the extent of such impacts are highly uncertain and difficult to predict.

Global health and economic concerns relating to the COVID-19 pandemic and government actions taken to reduce the spread of the Company.  BOLIvirus have had a material adverse impact on the macroeconomic environment, and the outbreak has significantly increased economic uncertainty. The pandemic has resulted in federal, state and local authorities, including those who govern the markets in which it operates, implementing numerous measures to try to contain the virus. These measures, including shelter in place orders and business limitations and shutdowns, have significantly contributed to rising unemployment and negatively impacted consumer and business spending.

The COVID-19 pandemic has adversely impacted and may continue to adversely impact the Company’s workforce and operations and the operations of its customers and business partners. In particular, the Company may experience adverse effects due to a number of operational factors impacting it or its customers or business partners, including but not limited to: (i) loan losses resulting from financial stress experienced by the Company’s borrowers, especially those operating in industries hardest hit by government measures to contain the spread of the virus; (ii) collateral for loans, especially real estate, may decline in value, which could cause loan losses to increase; (iii) as a result of the decline in the Federal Reserve’s target federal funds rate, the yield on the Company’s assets may decline to a greater extent than the decline in its cost of interest-bearing liabilities, reducing net interest margin and spread, and reducing net income; (iv) operational failures, disruptions or inefficiencies due to changes in the Company’s normal business practices necessitated by its internal measures to protect employees and government-mandated measures intended to slow the spread of the virus; (v) possible business disruptions experienced by the Company’s vendors and business partners in carrying out work that supports its operations; (vi) decreased demand for the Company’s products and services due to economic uncertainty, volatile market conditions and temporary business closures; (vii) potential financial liability, loan losses, litigation costs or reputational damage resulting from the Company’s origination of loans as a participating lender in the PPP as administered through the SBA; and (viii) heightened levels of cyber and payment fraud, as cyber criminals try to take advantage of the disruption and increased online activity brought about by the pandemic.

29

The extent to which the pandemic impacts the Company’s business, liquidity, financial condition and operations will depend on future developments, which are highly uncertain and are difficult to predict, including, but not limited to, its duration and severity, the actions to contain it or treat its impact, and how quickly and to what extent normal economic and operating conditions can resume. In addition, the rapidly changing and unprecedented nature of COVID-19 heightens the inherent uncertainty of forecasting future economic conditions and their impact on the Company’s loan portfolio, thereby increasing the risk that the assumptions, judgments and estimates used to determine the ALLL and other estimates are incorrect. Further, the Company’s loan deferral program could delay or make it difficult to identify the extent of asset quality deterioration during the deferral period. As a result of these and other conditions, the ultimate impact of the pandemic is highly uncertain and subject to change, and the Company cannot predict the full extent of the impacts on its business, its operations or the global economy as a bank-eligible asset designedwhole. To the extent any of the foregoing risks or other factors that develop as a result of COVID-19 materialize, it could exacerbate the other risk factors discussed in this report or otherwise and materially and adversely affect the Company’s business, liquidity, financial condition and results of operations.

The Company is exposed to recover costsrisk of providing pre-environmental liabilities with respect to properties to which it takes title.

In the course of its business, the Company may foreclose and post-retirement benefits and/take title to real estate, potentially becoming subject to environmental liabilities associated with the properties. The Company may be held liable to a governmental entity or to finance general employee benefit expenses.  Under BOLI policies, each executive officerthird parties for property damage, personal injury, investigation and certain other senior officers ofclean-up costs or the Company are the insured, andmay be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. Costs associated with investigation or remediation activities can be substantial. If the Company is the owner or former owner of a contaminated site, it may be subject to common law claims by third parties based on damages and beneficiarycosts resulting from environmental contamination emanating from the property. These costs and claims could adversely affect the Company’s business.

Severe weather, earthquakes, other natural disasters, pandemics, acts of war or terrorism and other external events could significantly impact our business.

Severe weather, earthquakes, other natural disasters, pandemics (such as the policies.  The insuredCOVID-19 pandemic), acts of war or terrorism and other adverse external events could have a significant impact on our ability to conduct business. Such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, results in loss of revenue and/or cause the Company to incur additional expenses. Although management has no claim toestablished disaster recovery policies and procedures, the insurance policy or to the policy’s cash value.  Under separate split dollar agreements, a portionoccurrence of any death benefit may be paid to the beneficiariessuch events could have a material adverse effect on our business, financial condition and results of the insured officer, subject to the terms and restrictions of the split dollar endorsement agreement between the insured officer and the Company.operations.

Not requiredItem 1B. UNRESOLVED STAFF COMMENTS.

None

Item 2. PROPERTIES.

The Company and its subsidiaries currentlycurrently occupy fivesixteen full-service banking facilities in the cities of Charlottesville, Manassas, Richmond and Winchester, and the counties of Albemarle, County.Fauquier and Prince William. The Company’s main office, a full-service banking facility, operations, and offices of both Masonry Capital and Sturman Wealth Advisors are located at 404 People Place, Charlottesville, Virginia. Full-service banking facilities are also located at 222 East Main Street, Charlottesville, Virginia; 1580 Seminole Trail, Charlottesville, Virginia; 1900 Arlington Boulevard, Charlottesville, Virginia; and 3119 Valley Avenue, #102, Winchester, Virginia.  VNB Trust and Estate Services is located at 112103 Third Street, SE, Charlottesville, Virginia, which is partVirginia. Of the fifteen locations used as bank branches and commercial lending offices, eight of the same leased space thatbuildings are owned by the Company uses to operate a drive-through location at 301 East Water Street, Charlottesville, Virginia.  The Company closed its banking facility at the 102 East Main Street, Orange, Virginia location effective April 13, 2018.  The Bank offers messenger services to customers previously serviced through the Orange Office.and seven are leased from nonaffiliates. Leases with affiliates are described below.

The five-story building located at 404 People Place, Charlottesville, Virginia, (the “Pantops Building”), just east of the Charlottesville city limits on Pantops Mountain, was constructed by the Bank on a pad site leased in 2005 from Pantops Park, LLC for a term of twenty years, with seven five-year renewal options. William D. Dittmar, Jr., a director of the Company, is the manager and indirect owner of Pantops Park, LLC. Monthly rent for this space is a fair market rate as verified by an independent third-party appraisal. The building, consisting of approximately 43,000 square feet, was completed in early 2008, and the Bank opened this full-service office in April 2008. In addition to the Company’s use of this building as outlined in the preceding paragraph, a portion of the additional space is leased to tenants.

The propertydrive-through location at 301 East Water Street, Charlottesville, which is a limited-service banking facility, and the adjoining office space located at 1580 Seminole Trail,112 Third Street, SE, Charlottesville Virginia has been fullyis leased from East Main Investments, LLC. Hunter E. Craig, a director of the Company and the Bank, serves as manager of East Main Investments, LLC, which is owned by the Company since 2012.  As of December 31, 2019, all of the other locations were leased from parties other than related parties other than the Pantops Building.  The banking facility located at 1900 Arlington Boulevard, Charlottesville, Virginia, was constructed by the Bank on a pad site which is leased by the Company; this facility has additional space not occupied by the banking facility that has been leased to tenants.Mr. Craig and his spouse.

See Note 56 – Premises and Equipment and Note 67 – Leases in the notes Notes to consolidated financial statementsConsolidated Financial Statements in Item 8. Financial Statements and Supplementary Data for information with respect to the amounts at which the Company’s premises and equipment are carried and commitments under long-term leases. All of the Company's properties are in good operating condition and are adequate for the Company's present and anticipated future needs.

1530

Item 3. LEGAL PROCEEDINGS.

In the ordinary course of its operations, the Company and/or its subsidiaries are parties to various legal proceedings from time to time. Based on the information presently available, and after consultation with legal counsel, management believes that the ultimate outcome of such proceedings, in the aggregate, will not have a material adverse effect on the business or financial condition of the Company and its subsidiaries.

Item 4. MINE SAFETY DISCLOSURES.

Not applicable

1631

Part II

Item 5. MARKET FOR REGISTRANT’S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES.

Common Stock Performance and Dividends

Virginia National Bankshares Corporation’s common stock is quotedlisted for trading on the OTC Markets Group’s OTCQX tier (“OTCQX”)NASDAQ Capital Market under the symbol VABK. As of December 31, 2019,2021, the Company had issued and outstanding 2,692,0055,308,335 shares of common stock, which included 4,00037,011 shares of restricted stock that have not yet vested. These shares were held by approximately 450680 registered shareholders of record, not including beneficial holders of securities held in street name at a brokerage or other firm.

The payment of dividends is at the discretion of the Company’s Board of Directors and is subject to various federal and state regulatory limitations. As a bank holding company, the ability to pay dividends is dependent upon the overall performance and capital requirements of the Bank.

Prior to April 5, 2021, the Company's common stock was quoted on the OTC Markets Group's OTCQX tier, also under the symbol VABK. The data in the table below represents the high sales and low sales prices that occurred between April 5, 2021 and December 31, 2021 as reported by NASDAQ and the high bid and low bid quotations that occurred for the periods shown,between January 1, 2020 and April 1, 2021 as reported by the OTCQX. The OTCQX for the years ended December 31, 2019 and December 31, 2018.  These over-the-counter market quotations reflect inter-dealer prices, without retail mark-up, mark-down or commission and may not necessarily represent actual transactions. Additionally, the table shows the dividends declared per quarter in 20192021 and 2018.2020.

On June 13, 2019, the Company’s Board of Directors declared a 5% stock dividend to be paid on July 5, 2019 to shareholders of record as of June 26, 2019.  In addition, on March 16, 2018, the Company’s Board of Directors declared a 5% stock dividend to be paid on April 13, 2018 to shareholders of record as of April 3, 2018.  Shareholders received cash in lieu of fractional shares. American Stock Transfer and Trust Company is the Company’s stock transfer agent and registrar.

17

Recent Issuances of Unregistered Securities

During the past three years, the Company issuedNo unregistered shares of the Company’s common stock as outlined in the table below in connection with the exercise of stock options by current directors, former directors and employees under (a) the Company’s 2003 Stock Incentive Plan and (b) the Company’s Amended and Restated 2005 Stock Incentive Plan prior to the registration of that plan on Form S-8 filed with the Securities and Exchange Commission on July 25, 2017.  These shares were not registered under the Securities Act and were issued in reliance upon the exemption from registration provided by Section 4(a)(2) of the Securities Act on the basis that such issuance did not involve any public offering.  Shares issued prior to July 5, 2019 and/2020 or April 13, 2018 have been adjusted for the 5% stock dividends effective on such dates.2021.

Item 6. [RESERVED].

Not required.applicable.

1832

Item 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS.

The following discussion provides information about the major components of the results of operations and financial condition, liquidity, and capital resources of Virginia National Bankshares Corporation. This discussion and analysis should be read in conjunction with the consolidated financial statements and notesNotes to consolidated financial statementsConsolidated Financial Statements in Item 8. Financial Statements and Supplementary Data.

Merger with Fauquier

On April 1, 2021, the Company merged with Fauquier, pursuant to the Agreement and Plan of Reorganization dated October 1, 2020, including a related Plan of Merger. Pursuant to the Merger Agreement, Fauquier shareholders received 0.675 shares of Company stock for each share of Fauquier common stock, with cash paid in lieu of fractional shares, resulting in the Company issuing 2,571,213 shares of common stock. In connection with the transaction, TFB, Fauquier's wholly-owned bank subsidiary, was merged with and into the Bank.

Impact of COVID-19

The COVID-19 pandemic has caused, and will likely continue to cause, economic and social disruption, significantly affecting many industries, including many of our clients. Significant uncertainty exists regarding the magnitude of the impact and duration of this pandemic. Following are brief descriptions of areas within the Company that have been negatively impacted.

Allowance for loan losses -The Company’s consolidated financial statements include estimates and assumptions made by management which affect the reported amounts of assets and liabilities, including the level of the ALLL that is established. The ALLL calculation and resulting provision for loan losses are impacted by changes in economic conditions. During the first and second quarters of 2020, the Company downgraded the economic qualitative factors within its ALLL model in light of the effects of the COVID-19 pandemic on the economy. No additional downgrades of such factors were taken during the third and fourth quarters of 2020,or the first quarter of 2021. During the second quarter of 2021, the Company upgraded the economic qualitative factors, resulting in a release of a portion of the reserves for loan losses related to the pandemic, as credit deterioration since the onset of COVID-19 had not been experienced to the extent anticipated. No additional changes were made to the economic qualitative factors during the third or fourth quarters of 2021. If economic conditions improve or worsen, the Company could experience changes in the required ALLL. It is possible that asset quality metrics could decline in the future if the effects of the COVID-19 pandemic are sustained.

Potential credit exposures -While most industries have been adversely impacted by the COVID-19 pandemic, the Company has exposures on its balance sheet as of December 31, 2021 in the following categories of loans that are considered to have higher risk of significant impact:

Note that the loan balances and percentages above do not include PPP loans made to entities within such categories.

Loan deferrals - In accordance with guidance from regulators and the CARES Act, the Bank worked with borrowers who have been adversely affected by COVID-19 to defer principal only, or principal and interest payments for a 90- to 180-day period. While interest will continue to accrue to income, in accordance with GAAP, if the Company ultimately incurs a credit loss on these deferred payments, interest income would need to be reversed and therefore, interest income in future periods could be negatively affected. Loan deferrals as of December 31, 2021 amount to $1.2 million and consist of only two loans. Both loans are 100% government-guaranteed for which the deferrals were approved by the United States Department of Agriculture. In accordance with interagency guidance issued in March 2020 and the CARES Act, these short-term deferrals are not considered TDRs.

PPP Loans - Primarily within the second quarter of 2020 and the first quarter of 2021, the Company devoted significant resources to accept PPP applications, a program designed to provide a direct incentive for small businesses to keep employees on their payroll. In total, the Company, including the Bank and TFB, funded

33

$207.5 million in PPP loans, with average origination fees of 3.9%, assisting many nonprofits and local businesses through this program. As of December 31, 2021, 89.9% of the total dollars of PPP loans had been forgiven by the SBA, with $20.7 million outstanding. Loans funded through the PPP are fully guaranteed by the U.S. government. The Company believes that it performed the required due diligence pursuant to the established SBA criteria; nonetheless, if a determination is made that certain loans did not meet the criteria established for the program, the Company may be required to establish additional ALLL through provision for loan loss expense, which will negatively impact net income.

Credit quality standards - Throughout the onset of this pandemic, the Company has maintained its high standards of credit quality on organic loan funding to limit credit risk exposure.

Capital and Liquidity

As of December 31, 2021, capital ratios of the Company were in excess of regulatory requirements. While currently included in the category of “well capitalized” by bank regulators, a prolonged economic recession could adversely impact reported and regulatory capital ratios.

The Company maintains access to multiple sources of liquidity. Management has also enhanced its capital, liquidity, loan and deposit stress tests, as well as capital and liquidity contingency plans to validate how the Company can react effectively to the economic downturn caused by this pandemic and other potential impacts on the economy.

Goodwill

As of December 31, 2021, the goodwill on the Company's balance sheet was not deemed to be impaired. However, management may determine that goodwill is required to be evaluated for impairment in the future due to the presence of a triggering event, which may have a negative impact on the Company’s results of operations.

Operations, Processes, Controls and Business Continuity Plan

The Company reacted quickly to the COVID-19 pandemic and began internal social distancing in mid-March 2020, as well as distancing from the public by keeping drive-thru services available, and encouraging customers to conduct transactions at ATMs, through online banking and the mobile app. The Company also increased consumer and business mobile deposit limits to encourage customers to make deposits remotely from the safety of their home or business. The Company implemented a schedule whereby most staff members worked remotely, allowing the remaining essential staff to create more distance between each other within the offices. The Company temporarily increased the number of staff in the client service center to assist more customers by telephone and encourage them to utilize online and mobile banking. The client service center was also temporarily moved to a larger location to allow for appropriate social distancing. In addition, the Company enhanced disinfecting procedures to include hospital-grade cleaning solution and foggers, increased the frequency of cleaning and issued personal protective equipment, including N-95 and disposable face masks, face shields, sneeze guards, gloves and thermometers, to employees, along with specific instructions for use, to enhance their safety. The Company also installed disinfecting protective strips to high touch areas, placed free-standing air filter machines throughout our facilities, purchased COVID-19 instant test kits for on-site testing and provided antibody testing options to all employees. Management provides frequent email communications and social media updates regarding COVID-19, helpful tips and status of Company initiatives, as well as warning customers of potential scams during this pandemic.

The Company’s preparedness resulted in minimal impact to the Company’s operations as a result of the COVID-19 pandemic. Effective and thorough business continuity planning allowed for successful deployment of most employees to work in a remote environment. No material operational or internal control risks have been identified to date, and the Company has enhanced fraud-related controls.

Application of Critical Accounting Policies and Critical Accounting Critical Estimates

The accounting and reporting policies followed by the Company conform, in all material respects, to accounting principles generally accepted in the United States (“GAAP”)GAAP and to general practices within the financial services industry. The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the financial statements and accompanying notes. While the Company bases estimates on historical experience, current information, and other factors deemed to be relevant, actual results could differ from those estimates.

34

The Company considers accounting estimates to be critical to reported financial results if (i) the accounting estimate requires management to make assumptions about matters that are highly uncertain and (ii) different estimates that management reasonably could have used for the accounting estimate in the current period, or changes in the accounting estimate that are reasonably likely to occur from period to period, could have a material impact on the Company’s financial statements.The Company’s accounting policies are fundamental to understanding management’s discussion and analysis of financial condition and results of operations.

Following are the accounting policies and estimates that the Company considers as critical:

On a semi-annual basis, the Company evaluates the estimate of cash flows expected to be collected on PCI loans. Estimates of cash flows for PCI loans require significant judgment. Subsequent decreases to the expected cash flows will generally result in a provision for loan losses resulting in an increase to the allowance for loan losses. Subsequent significant increases in cash flows may result in a reversal of post-acquisition provision for loan losses or a transfer from nonaccretable difference to accretable yield that increases interest income over the remaining life of the loan or pool(s) of loans. Disposals of loans, which may include sale of loans to third parties, receipt of payments in full or in part from the borrower or foreclosure of the collateral, result in removal of the loan from the PCI loan portfolio at its carrying amount.

PCI loans are not classified as nonperforming loans by the Company at the time they are acquired, regardless of whether they had been classified as nonperforming by the previous holder of such loans, and they will not be classified as nonperforming so long as, at semi-annual re-estimation periods, we believe we will fully collect the new carrying value of the pools of loans.

The Company accounts for purchased performing loans using the contractual cash flows method of recognizing discount accretion based on the Acquired Loans’ contractual cash flows. Purchased performing loans are recorded at fair value, including a credit discount. The fair value discount is accreted as an adjustment to yield over the estimated lives of the loans. There is no allowance for loan losses established at the acquisition date for purchased performing loans. A provision for loan losses may be required for any deterioration in these loans in future periods.

35

19

On December 22, 2017, the President of the United States signed into law the Tax Cuts and Jobs Act (“Tax Act”).  The legislation significantly changed U.S. tax law by, among other things, lowering corporate income tax rates, implementing a territorial tax system, and imposing a repatriation tax on deemed repatriated earnings of foreign subsidiaries.  The Tax Act permanently reduced the U.S. corporate income tax rate from a maximum of 35% to a flat 21% rate, effective January 1, 2018.  The Securities and Exchange Commission staff issued Staff Accounting Bulletin No. 118 to address the application of U.S. GAAP in situations when a registrant does not have the necessary information available, prepared, or analyzed (including computations) in reasonable detail to complete the accounting for certain income tax effects of the Tax Act. The Company recognized the provisional tax impacts related to the revaluation of deferred tax assets and liabilities and included these amounts in its Consolidated Financial Statements for the year ended December 31, 2017.

See Note 1 – Summary of Significant Accounting Policies and Note 911 – Income Taxes, in the notesNotes to consolidated financial statements,Consolidated Financial Statements, for further detail on the accounting policies for income taxes and for components of the deferred tax assets and liabilities.

20

Non-GAAP Presentations

The accounting and reporting policies of the Company conform to GAAP and prevailing practices in referringthe banking industry. However, certain non-GAAP measures are used by management to itssupplement the evaluation of the Company’s performance. These include adjusted ROAA, adjusted ROAE, adjusted net income, adjusted earnings per share, adjusted ALLL to total loans, tangible book value per share and the following fully-taxable equivalent measures: net interest income-FTE, efficiency ratio-FTE and net interest income,margin-FTE. Interest on tax-exempt loans and securities is referring to income computed in accordance with GAAP, unless otherwise noted. Management’s Discussion and Analysis of Consolidated Financial Condition and Results of Operations also refer to various calculations that are non-GAAP presentations. They include:

21

36

A reconcilement of the non-GAAP financial measures used by the Company to evaluate and measure the Company's performance to the most directly comparable GAAP financial measures is presented below:

3The reconcilement below shows how these non-GAAP measures areefficiency ratio, GAAP basis, is computed from their respective GAAP measures (dollars in thousands except per share amounts):by dividing noninterest expense by the sum of net interest income and noninterest income.