Newtek Business (NEWT) Risk Factors

Various agencies, particularly the Federal Trade Commission ("FTC"), have within the past few years attempted to pressure merchants to discontinue or modify various sales or other practices. As a part of the payment processing industry, processors such as NMS could experience pressure and/or litigation aimed at restricting access to credit card sales by such merchants. These efforts could cause an increase in the cost to NMS of doing business or otherwise make its business less profitable and may subject NMS to assess penalties for not taking actions deemed sufficiently aggressive to limit such practices. As a result of a litigation brought by the FTC in October 2012, NMS voluntarily entered into, and is presently operating under, a permanent injunction with respect to certain of its business practices.

As a result of the Acquisition, all SBA 7(a) loan originations are being transitioned to Newtek Bank in April 2023, and NSBF has ceased origination of SBA 7(a) loans, relinquished its PLP status and is winding-down its operations. During this wind down process, NSBF will be required to continue to own the SBA 7(a) loans and PPP Loans in its SBA loan portfolio to maturity, liquidation, charge-off, or (subject to SBA's prior written approval), sale or transfer. NSBF will be required to continue to service and liquidate its SBA Loan Portfolio, including processing forgiveness and loan reviews for PPP Loans, pursuant to an SBA approved lender service provider agreement with SBL. During the wind down process NSBF will be required to maintain minimum capital requirements established by the SBA, will be required to maintain certain amounts of restricted cash available to meet any obligations to the SBA, will have restrictions on its ability to make dividends and distributions to its parent, and will remain liable to SBA for post-purchase denials and repairs, from the proceeds generated by NSBF's SBA loan portfolio. Any future post-purchase denials and repairs demands on NSBF could negatively impact our results of operations. In addition, the Company has agreed to guarantee NSBF's obligations to the SBA and has deposited $10 million at Newtek Bank to secure NSBF's potential obligations to the SBA..

NSBF is licensed by the SBA as an SBLC. In order to operate as an SBLC, a licensee is required to maintain a minimum regulatory capital (as defined by SBA regulations) of the greater of (1) 10% of its outstanding loans receivable and other investments or (2) $1.0 million. Moreover, before consenting to a securitization, NSBF and other securitizers must, among other things, be considered well capitalized by the SBA. For NSBF and other SBLC securitizers, the SBA will consider it well capitalized if it maintains a minimum unencumbered paid in capital and paid in surplus equal to at least 10% of its assets, excluding the guaranteed portion of 7(a) loans. In addition, an SBLC is subject to certain other regulatory restrictions. Among other things, SBLCs are required to: establish, adopt, and maintain a formal written capital plan; submit to the SBA for review a credit policy that demonstrates the SBLC's compliance with the applicable regulations and the SBA's Standard Operating Procedures for origination, servicing and liquidation of 7(a) loans; submit to the SBA for review and approval annual validation, with supporting documentation and methodologies, demonstrating that any scoring model used by the SBLC is predictive of loan performance; obtain SBA approval for loan securitization and borrowings; and adopt and fully implement an internal control policy which provides adequate direction for effective control over and accountability for operations, programs, and resources. Additionally, in connection with our 2018 examination by the SBA, NSBF entered into a voluntary agreement with the SBA to meet certain other requirements and conditions. See "Item 1A. Risk Factors - Risks Related to SBA Lending - If NSBF or Newtek Bank fail to comply with SBA regulations in connection with the origination, servicing, or liquidation of an SBA 7(a) loan, liability on the SBA guaranty, in whole or in part, could be transferred to NSBF or Newtek Bank."

Since we sell the guaranteed portion of substantially all of our SBA 7(a) loan portfolio, we retain credit risk on the non-guaranteed portion of the SBA loans. We share pro rata with the SBA in any recoveries. In the event of default on an SBA loan, our pursuit of remedies against a borrower is subject to SBA approval. If we fail to comply with certain of the SBA's regulations in connection with the origination, servicing, or liquidation of an SBA 7(a) loan, the SBA may be released from liability on its guaranty of a 7(a) loan, and may refuse to honor a guaranty purchase request in full (referred to by SBA as a "denial") or in part (referred to by SBA as a "repair"), or recover all or part of the funds already paid in connection with a guaranty purchase. In the event of a repair or denial, liability on the guaranty, in whole or part, would be transferred to NSBF or Newtek Bank. In addition, the growth in the number of loans made by Newtek Bank, changes in SBA regulations and economic factors may adversely impact our current repair and denial rate. In connection with NSBF's 2018 examination by the SBA, NSBF entered into a voluntary agreement with the SBA pursuant to which NSBF established a segregated restricted cash account in the amount of $10 million to account for potential post-purchase repairs and denials of guaranteed portions of SBA 7(a) loans, and take certain actions to demonstrate the sufficiency of NSBF's liquidity and establish certain additional reporting and compliance procedures.

We and our subsidiaries are subject to regulation by laws at the local, state, and federal levels. These laws and regulations, as well as their interpretation, could change from time to time, including as the result of interpretive guidance or other directives from the U.S. President and others in the executive branch, and new laws, regulations and interpretations could also come into effect. For example, the current U.S. presidential administration could support an enhanced regulatory agenda that imposes greater costs on all sectors and on financial services companies in particular. Any such new or changed laws or regulations could have a material adverse effect on our business, and political uncertainty could increase regulatory uncertainty in the near term. Changes to the laws and regulations governing our permitted investments may require a change to our investment strategy. Such changes could differ materially from our strategies and plans as set forth in this report and may shift our investment focus from the areas of expertise of our Adviser. Thus, any such changes, if they occur, could have a material adverse effect on our results of operations and the value of your investment in us.

Certain of our subsidiaries rely on Rule 3a-7 to exclude their securitization activities from the definition of an "investment company" under the 1940 Act. Additionally, the Company has determined that, after withdrawing its election to be treated as a business development company, it is not an "investment company" because it neither holds more than 40% of its assets in "investment securities," nor is it primarily engaged in, or holding itself out as being primarily engaged in, the business of investing, reinvesting or trading in securities. As a part of its determination, the Company has determined that certain of the loans held by its subsidiaries are neither securities nor "investment securities" under the 1940 Act. However, the staff of the SEC may disagree with our conclusions that (i) loans held by us and our subsidiaries are not securities as defined in the Act and that (ii) the Company did not meet the definition of an investment company under section 3 of the 1940 Act subsequent to our withdrawal of the election to be regulated as a BDC. If the SEC or a court determines that one or more of our subsidiaries' activities cause us to fall within the definition of an "investment company," and if no exemption is available, we could be required to register under the 1940 Act. Compliance with the 1940 Act, as a registered investment company, would require us to significantly alter our business and could impair our ability to operate as financial holding company, with potential adverse impacts on our business, and, thus, our shareholders.

Due to the Company's withdrawal of its election to be regulated as a BDC on January 6, 2023, the Company is no longer subject to FASB Accounting Standards Codification Topic 946, Financial Services – Investment Companies, which has resulted in a significant change in our accounting and financial reporting requirements. As a BDC, we were precluded from consolidating any entity other than another investment company that acted as an extension of our investment operations and facilitated the execution of our investment strategy or an investment in a controlled operating company that provided substantially all of its services to us. Beginning with the first quarter of 2023, we were required to consolidate the financial statements of certain of our controlled or majority-owned investments (now consolidated subsidiaries), which is a significant change in our accounting and financial reporting requirements. Our management has been and continues to be required to expend significant efforts in order to implement this change in accounting and financial reporting requirements, which could adversely affect the time and attention devoted to other aspects of our business and operations. These significant changes in our accounting and financial reporting requirements resulted in failures by the Company to adequately and timely identify financial reporting risks and the associated identification of key controls in connection therewith. As a result,we have identified material weaknesses in our internal controls that impacted the overall effectiveness of our internal controls over financial reporting. We have taken actions to enhance our internal controls over financial reporting relating to the material weaknesses identified as of the date of this Annual Report, and are still in the process of implementing a comprehensive remediation plan. See "Item 9A. Controls and Procedures" and "Item 1A. Risk Factors - Risks Related to Our Business and Structure - We have identified material weaknesses in our internal control over financial reporting which could, if not remediated, adversely affect our ability to report our financial condition and results of operations in a timely and accurate manner, investor confidence in our company and, as a result, the value of our common stock."

As of January 6, 2023, we are no longer regulated as a BDC and are no longer be subject to the regulatory provisions of the 1940 Act, which is designed to protect the interests of investors in investment companies, including certain laws and regulations related to insurance, custody, capital structure, composition of the Board, affiliated transactions, leverage limitations, and compensation arrangements. We do, however, continue to be subject to certain 1940 Act provisions related to asset coverage in relation to the 2024 and 2026 Notes. See "Item 1A. Risk Factors - Risks Related to Our Notes - We are subject to 150% asset coverage requirements due to covenants contained in the indentures under which the 2024 and 2026 Notes were issued."

If we do not comply with applicable laws, regulations or commitments, if we are deemed to have engaged in unsafe or unsound conduct, or if we do not satisfy our regulators' supervisory expectations, then we may be subject to increased scrutiny, supervisory criticism, governmental or private litigation and/or a wide range of potential monetary penalties or consequences, enforcement actions, criminal liability and/or reputational harm. Such actions could be public or of a confidential nature, and arise even if we are acting in good faith or operating under a reasonable interpretation of the law and could include, for example, monetary penalties, payment of damages or other monetary relief, restitution or disgorgement of profits, directives to take remedial action or to cease or modify practices, restrictions on growth or expansionary proposals, denial or refusal to accept applications, removal of officers or directors, prohibition on dividends or capital distributions, increases in capital or liquidity requirements and/or termination of Newtek Bank's deposit insurance. Additionally, compliance with applicable laws, regulations and commitments requires significant investment of management attention and resources. Any failure to comply with applicable laws, regulations or commitments could have an adverse effect on our business, financial condition and results of operations.

Political and public sentiment regarding financial institutions has in the past resulted and may in the future result in a significant amount of adverse press coverage, as well as adverse statements or charges by regulators or other government officials. Press coverage and other public statements that assert some form of wrongdoing (including, in some cases, press coverage and public statements that do not directly involve us) often result in some type of investigation by regulators, legislators and law enforcement officials or in lawsuits. Adverse publicity, governmental scrutiny and legal and enforcement proceedings can also have a negative impact on our reputation and on the morale and performance of our employees, which could adversely affect our business and results of operations. The financial services industry generally has been subject to negative publicity. Our reputation and business may be adversely affected by negative publicity or information regarding our business and personnel, whether or not accurate or true, that may be posted on social media or other internet forums or published by news organizations. Postings on these types of forums may also adversely impact risk positions of our clients and other parties that owe us money, securities or other assets and increase the chance that they will not perform their obligations to us or reduce the revenues we receive from their use of our services. The speed and pervasiveness with which information can be disseminated through these channels, in particular social media, may magnify risks relating to negative publicity. The rapid dissemination of negative information through social media, in part, is believed to have led to the collapse of Silicon Valley Bank, Signature Bank and First Republic Bank. These banks suffered a level of deposit withdrawals within a time period not previously experienced by a financial institution. We could also be subject to rapid deposit withdrawals or other outflows as a result of negative social media posts or other negative publicity.

Upon becoming a financial holding company, we became subject to a wide range of statutory and regulatory restrictions and requirements that will affect many aspects of our business, including our lending practices, capital structure, investment practices, dividend policy and growth. We may be required to restructure, terminate or divest certain of our businesses to comply with applicable requirements, which may impose additional costs and adversely affect our business, results of operations or financial condition. Failure to comply with laws, regulations, policies or other regulatory guidance could result in civil or criminal sanctions by regulatory agencies, civil monetary penalties and damage to our reputation. In addition, we will be required to serve as a "source of strength" to Newtek Bank. Congress and federal regulatory agencies continually review banking laws, regulations, policies and other supervisory guidance for possible changes. Other changes in the laws or regulations that will be applicable to us as a financial holding company, including changes in the interpretation or implementation of those regulations or policies, may negatively impact the profitability of our business activities, require us to change certain of our business practices, materially affect our business model, limit the activities in which we may engage, affect retention of key personnel, require us to raise additional regulatory capital, increase the amount of liquid assets that we hold, otherwise affect our funding profile or expose us to additional costs (including increased compliance costs). Any such changes may also require us to invest significant management attention and resources to make any necessary changes and may adversely affect our ability to conduct our business as previously conducted or our results of operations or financial condition.

We are unable to predict all of the ways in which any change in the regulatory environment could impact our anticipated business models or objectives. The laws and regulations governing lending, servicing, and debt collection activities or the regulatory or enforcement environment at the federal level or in any of the states in which we anticipate operating may change at any time which may have an adverse effect on our current or anticipated business. For example, the federal banking agencies issued a final rule in October 2023 that largely begins to apply in January 2026 and may make it more challenging and/or costly for insured depository institutions to achieve an Outstanding or Satisfactory CRA rating. If Newtek Bank is unable to maintain at least a "Satisfactory" CRA rating, its ability to complete the acquisition of another financial institution or open a new branch will be adversely impacted. Newtek Bank received a rating of "Satisfactory" in its most recent CRA performance evaluation. We are unable to predict how future legislative proposals or programs will be administered or implemented or in what form, or whether any additional or similar changes to statutes or regulations, including the interpretation or implementation thereof, will occur in the future. Any such action could affect us in substantial and unpredictable ways and could have an adverse effect on our anticipated business operations. Our inability to comply with regulatory requirements in a particular jurisdiction could have a material adverse effect on our anticipated operations in that market and on our reputation generally. No assurance can be given that applicable laws or regulations will not be amended or construed differently or that new laws and regulations will not be adopted, either of which could materially adversely affect our anticipated business.

The banking industry is extensively regulated and supervised under both federal and state laws and regulations that are intended primarily for the protection of depositors, customers, federal deposit insurance funds, and the banking system as a whole, not for the protection of security holders. We are subject to regulation and supervision by the FDIC, OCC and Federal Reserve. The laws and regulations applicable to us govern a variety of matters, including permissible types, amounts, and terms of loans and investments we may make, the maximum interest rate that may be charged, the amount of reserves we must hold against deposits we take, the types of deposits we may accept, maintenance of adequate capital and liquidity, changes in the control of Newtek Bank, N.A. and us, restrictions on dividends, and establishment of new offices. We must obtain approval from our regulators before engaging in certain activities or acquisitions, and there is the risk that such approvals may not be obtained, either in a timely manner or at all. Our regulators also have the ability to compel us to take, or restrict us from taking, certain actions entirely, such as actions that our regulators deem to constitute an unsafe or unsound banking practice. Our failure to comply with any applicable laws or regulations, or regulatory policies and interpretations of such laws and regulations, could result in sanctions by regulatory agencies, civil money penalties, or damage to our reputation, all of which could have a material adverse effect on our business, financial condition or results of operations. Federal and state banking laws and regulations, as well as interpretations and implementations of these laws and regulations, are continually undergoing substantial review and change. Financial institutions generally have also been subject to increased scrutiny from regulatory authorities. These changes and increased scrutiny have resulted and may continue to result in increased costs of doing business and may in the future result in decreased revenues and net income, reduce our ability to effectively compete to attract and retain customers, or make it less attractive for us to continue providing certain products and services. Any future changes in federal and state law and regulations, as well as the interpretations and implementations, or modifications or repeals, of such laws and regulations, could affect us in substantial and unpredictable ways, including those listed above or other ways that could have a material adverse effect on our business, financial condition or results of operations. Our inability to remain in compliance with regulatory requirements could have a material adverse effect on our operations in that market and on our reputation generally. No assurance can be given that applicable laws or regulations will not be amended or construed differently or that new laws and regulations will not be adopted, either of which could materially adversely affect our business, financial condition or results of operations. The USA PATRIOT Act of 2001 and the Bank Secrecy Act, or the BSA, require financial institutions to design and implement programs to prevent financial institutions from being used for money laundering and terrorist activities. If such activities are detected, financial institutions are obligated to file suspicious activity reports with FinCEN. These rules require financial institutions to establish procedures for identifying and verifying the identity of customers and beneficial owners of certain legal entity customers seeking to open new financial accounts. Federal and state bank regulators also have focused on compliance with Bank Secrecy Act and anti-money laundering regulations. Failure to comply with these regulations could result in fines or sanctions, including restrictions on conducting acquisitions or expanding activities. During the last several years, several banking institutions have received large fines for non-compliance with these laws and regulations. Although we have policies and procedures designed to assist in compliance with the BSA and other anti-money laundering laws and regulations, there can be no assurance that such policies or procedures will work effectively all of the time or protect us against liability for actions taken by our employees, agents, and intermediaries with respect to our business or any businesses that we may acquire. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us, which could have a material adverse effect on our business, financial condition or results of operations. Any changes in the Presidential Administration or control of Congress also increases the likelihood of further changes to laws, regulations and supervisory practices affecting financial institutions, which could include more stringent requirements and greater scrutiny from regulatory authorities.

Despite the fact that we have met all applicable minimum requirements of the Capco programs in which we still participate, each Capco remains subject to state regulation until it has invested 100% of its funds and otherwise remains in full legal compliance. There can be no assurance that we will continue to be able to do so. A major regulatory violation, while not fatal to our Capco business, would materially increase the cost of operating the Capcos.

We are subject to changing rules and regulations of federal and state government as well as the stock exchange on which our common stock is listed. These entities, including the Public Company Accounting Oversight Board, the SEC, the OCC and the Nasdaq Global Market, have issued a significant number of new and increasingly complex requirements and regulations over the course of the last several years and continue to develop additional regulations and requirements in response to laws enacted by Congress. Our efforts to comply with existing requirements, or any revised or amended requirements, have resulted in, and may continue to result in, an increase in expenses and a diversion of management's time from other business activities. In addition, our failure to keep pace with any such rules, or for our management to appropriately address compliance with such rules fully and in a timely manner, exposes us to an increasing risk of inadvertent non-compliance. While our management team takes reasonable efforts to ensure that we are in full compliance with all laws applicable to its operations, the increasing rate and extent of regulatory change increases the risk of a failure to comply, which may result in our ability to operate our business in the ordinary course or may subject us to potential fines, regulatory findings or other matters that may materially impact our business.

Credit card fraud occurs when a merchant's customer uses a stolen card (or a stolen card number in a card-not-present transaction) to purchase merchandise or services. In a traditional card-present transaction, if the merchant swipes the card, receives authorization for the transaction from the card issuing bank and verifies the signature on the back of the card against the paper receipt signed by the customer, the card issuing bank remains liable for any loss. In a fraudulent card-not-present transaction, even if the merchant receives authorization for the transaction, the merchant is liable for any loss arising from the transaction. Many NMS customers are small and transact a substantial percentage of their sales over the Internet or by telephone or mail orders. Because their sales are card-not-present transactions, these merchants are more vulnerable to customer fraud than larger merchants, and NMS could experience charge-backs arising from cardholder fraud more frequently with these merchants. Merchant fraud occurs when a merchant, rather than a customer, knowingly uses a stolen or counterfeit card or card number to record a false sales transaction or intentionally fails to deliver the merchandise or services sold in an otherwise valid transaction. Anytime a merchant is unable to satisfy a charge-back, NMS is ultimately responsible for that charge-back unless it has required that a cash reserve be established. We cannot assure that the systems and procedures NMS has established to detect and reduce the impact of merchant fraud are or will be effective. Failure to effectively manage risk and prevent fraud could increase NMS charge-back liability and adversely affect its results of operations.

Prior to January 6, 2023, we operated so as to qualify as a RIC, which generally allowed us to qualify for effective pass-through tax treatment. Upon withdrawing our election to be regulated as a BDC, we have ceased to qualify for such pass-through tax treatment, and we will have to pay corporate-level taxes on all of our income whether or not we distribute it, which we expect will substantially reduce the amount of income available for distribution to our shareholders and to repay our borrowings. The Company will no longer qualify as a RIC beginning with the 2023 taxable year. For more information, see "Item 7. Management's Discussion and Analysis of Financial Condition and Results of Operations - Executive Summary" and "Risk Factors - Risks Related to Converting to a Financial Holding Company" in our Annual Report on Form 10-K for the fiscal year ended December 31, 2021, filed with the SEC on March 1, 2022.

PMT collects and stores sensitive data about individuals in order to process the transactions and for other internal processes. If anyone penetrates its network security or the security of the third-party payroll processing platform in utilizes, or otherwise misappropriates sensitive individual data, PMT could be subject to liability or business interruption. PMT is subject to laws and rules issued by different agencies concerning safeguarding and maintaining the confidentiality of this information. Its activities have been, and will continue to be, subject to an increasing risk of cyber-attacks, the nature of which is continually evolving. Cyber-security risks include unauthorized access to privileged and sensitive customer information, including passwords and account information of PMT' customers. While it subjects its data systems to periodic independent testing and review, PMT cannot guarantee that its systems or the systems of the third-party payroll processing platform in utilizes will not be penetrated in the future. Experienced computer programmers and hackers may be able to penetrate PMT' network security or the security of its third-party payroll processing platform, and misappropriate or compromise our confidential information, create system disruptions, or cause shutdowns. As a result, PMT' customers' information may be lost, disclosed, accessed or taken without its customers' consent. If a breach of these systems occurs, PMT may be subject to liability, including claims for impersonation or other similar fraud claims. In the event of any such breach, PMT may also be subject to a class action lawsuit. Any significant violations of data privacy could result in the loss of business, litigation and regulatory investigations and penalties that could damage PMT' reputation, and the growth of its business could be adversely affected. For more information on risks relating to cybersecurity, see "Risks Related to Cybersecurity."

Through NMS, we collect and store sensitive data about merchants and cardholders, and we maintain a database of cardholder data relating to specific transactions, including payment, card numbers and cardholder addresses, in order to process the transactions and for fraud prevention and other internal processes. If anyone penetrates our network security or otherwise misappropriates sensitive merchant or cardholder data, we could be subject to liability or business interruption. While we subject these systems to periodic independent testing and review, we cannot guarantee that our systems will not be penetrated in the future. If a breach of our system occurs, we may be subject to liability, including claims for unauthorized purchases with misappropriated card information, impersonation or other similar fraud claims. Similar risks exist with regard to the storage and transmission of such data by our processors. In the event of any such a breach, we may also be subject to a class action lawsuit. SMBs are less prepared for the complexities of safeguarding cardholder data than their larger counterparts. In the event of noncompliance by a customer of card industry rules, we could face fines from payment card networks. There can be no assurance that we would be able to recover any such fines from such customer.

Our business and the business of our subsidiaries relies upon secure information technology systems for data processing, storage and reporting. Despite careful security and controls design, implementation and updating, ours and our subsidiaries' information technology systems could become subject to cyber-attacks. Cyber-attacks include, but are not limited to, gaining unauthorized access to digital systems (e.g., through "hacking", malicious software coding, social engineering or "phishing" attempts) for purposes of misappropriating assets or sensitive information, corrupting data, or causing operational disruption. Cyber-attacks may also be carried out in a manner that does not require gaining unauthorized access, such as causing denial-of service attacks on websites (i.e., efforts to make network services unavailable to intended users). Our employees have been and expect to continue to be the target of fraudulent calls, emails and other forms of activities. The result of these incidents may include disrupted operations, misstated or unreliable financial data, liability for stolen information, misappropriation of assets, increased cybersecurity protection and insurance costs, litigation and damage to our business relationships, regulatory fines or penalties, or other adverse effects on our business, financial condition or results of operations. In addition, we may be required to expend significant additional resources to modify our protective measures and to investigate and remediate vulnerabilities or other exposures arising from operational and security risks related to cyber-attacks. Our and our service providers' increased use of mobile and cloud technologies could heighten the risk of a cyber-attack as well as other operational risks, as certain aspects of the security of such technologies may be complex, unpredictable or beyond their control. Our and other service providers' reliance on mobile or cloud technology or any failure by mobile technology and cloud service providers to adequately safeguard their systems and prevent cyber-attacks could disrupt their operations and result in misappropriation, corruption or loss of personal, confidential or proprietary information. In addition, there is a risk that encryption and other protective measures against cyber-attacks may be circumvented, particularly to the extent that new computing technologies increase the speed and computing power available.

The occurrence of a disaster, such as a cyber-attack against us or against a third-party that has access to our data or networks, a natural catastrophe, an industrial accident, failure of our disaster recovery systems, or consequential employee error, could have an adverse effect on our ability to communicate or conduct business, negatively impacting our operations and financial condition. This adverse effect can become particularly acute if those events affect our electronic data processing, transmission, storage, and retrieval systems, or impact the availability, integrity, or confidentiality of our data. We and our subsidiaries depend heavily upon computer systems to perform necessary business functions. Despite our implementation of a variety of security measures, our computer systems, networks, and data, like those of other companies, could be subject to cyber-attacks and unauthorized access, use, alteration, or destruction, such as from physical and electronic break-ins or unauthorized tampering. If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary, and other information processed, stored in, and transmitted through our computer systems and networks. Such an attack could cause interruptions or malfunctions in our operations, which could result in financial losses, litigation, regulatory penalties, client dissatisfaction or loss, reputational damage, and increased costs associated with mitigation of damages and remediation. If unauthorized parties gain access to such information and technology systems, they may be able to steal, publish, delete or modify private and sensitive information, including nonpublic personal information related to stockholders (and their beneficial owners) and material nonpublic information. The systems we have implemented to manage risks relating to these types of events could prove to be inadequate and, if compromised, could become inoperable for extended periods of time, cease to function properly or fail to adequately secure private information. Breaches such as those involving covertly introduced malware, impersonation of authorized users and industrial or other espionage may not be identified even with sophisticated prevention and detection systems, potentially resulting in further harm and preventing them from being addressed appropriately. The failure of these systems or of disaster recovery plans for any reason could cause significant interruptions in our and our subsidiaries' operations and result in a failure to maintain the security, confidentiality or privacy of sensitive data, including personal information relating to stockholders, material nonpublic information and other sensitive information in our possession. A disaster or a disruption in the infrastructure that supports our business, including a disruption involving electronic communications or other services used by us or third parties with whom we conduct business, or directly affecting our headquarters, could have a material adverse impact on our ability to continue to operate our business without interruption. Our disaster recovery programs may not be sufficient to mitigate the harm that may result from such a disaster or disruption. In addition, insurance and other safeguards might only partially reimburse us for our losses, if at all. Third parties with which we do business may also be sources of cybersecurity or other technological risk. We outsource certain functions and these relationships allow for the storage and processing of our information, as well as client, counterparty, employee, and borrower information. While we engage in actions to reduce our exposure resulting from outsourcing, ongoing threats may result in unauthorized access, loss, exposure, destruction, or other cybersecurity incident that affects our data, resulting in increased costs and other consequences as described above. In addition, cybersecurity has become a top priority for regulators around the world, and some jurisdictions have enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal data. For example, the SEC recently enacted rules, effective as of December 18, 2023, requiring public companies to disclose material cybersecurity incidents that they experience on Form 8-K within four business days of determining that a material cybersecurity incident has occurred and to disclose on annual basis material information regarding their cybersecurity risk management, strategy, and governance. If we fail to comply with the relevant laws and regulations, we could suffer financial losses, a disruption of our businesses, liability to investors, regulatory intervention or reputational damage. We and our service providers continue to be impacted by the increase in remote work in response to the global COVID-19 pandemic. Policies of extended periods of remote working, whether by us or by our service providers, could strain technology resources, introduce operational risks and otherwise heighten the risks described above. Remote working environments may be less secure and more susceptible to hacking attacks, including phishing and social engineering attempts. Accordingly, the risks described above are heightened under current conditions.

The introduction of new technologies, primarily mobile payment capabilities, and the entry into the payment processing market of new competitors, Apple, Inc., for example, could dramatically change the competitive environment and require significant changes and costs for NMS to remain competitive. There is no assurance that NMS will have the capability to stay competitive with such changes.

PMT operates in industries that are subject to rapid technological advances and changing client needs and preferences. In order to remain competitive and responsive to client demands, PMT continually upgrades, enhances and expands its existing solutions and services. If PMT fails to respond successfully to technological challenges, the demand for its services may diminish.

PMT's payroll business relies heavily on its payroll, financial, accounting and other data processing systems. If any of these systems or any of the vendors which supply them fails to operate properly or becomes disabled even for a brief period of time, PMT could suffer financial loss, a disruption of its business, liability to clients, regulatory intervention or damage to its reputation. PMT has disaster recovery plans in place to protect its businesses against natural disasters, security breaches, military or terrorist actions, power or communication failures or similar events. Despite PMT' preparations, its disaster recovery plans may not be successful in preventing the loss of client data, service interruptions, and disruptions to its operations or damage to its important facilities.

The information technology business and its related technology involve a broad range of rapidly changing technologies. NTS equipment and the technologies on which it is based may not remain competitive over time, and others may develop superior technologies that render its products non-competitive, without significant additional capital expenditures. Some of NTS' competitors are significantly larger and have substantially greater market presence as well as greater financial, technical, operational, marketing and other resources and experience than NTS. In the event that such a competitor expends significant sales and marketing resources in one or several markets, NTS may not be able to compete successfully in such markets. We believe that competition will continue to increase, placing downward pressure on prices. Such pressure could adversely affect NTS gross margins if it is not able to reduce its costs commensurate with such price reductions. There can be no assurances that NTS will remain competitive.

NMS depends on the uninterrupted operations of our computer network systems, software and our processors' data centers. Defects in these systems or damage to them due to factors beyond its control could cause severe disruption to NMS' business and other material adverse effects on its payment processing businesses.

Credit risk in ACH payments arises when a party to a contract fails to deposit funds required to settle the contract. This can occur if a client of PMT suffers losses, enters into bankruptcy or defrauds PMT. In such an event, PMT could bear the financial burden of settling the customer's contract.

PMT generally determines the availability of customer (employer) funds prior to making payments to employees or taxing authorities, and such employer funds are generally transferred in to its accounts prior to making payments out. Due to the structure of the banking system however, there are times when PMT may make payroll or tax payments and not immediately receive the funds to do so from the employer. There can be no assurance that the procedures PMT has in place to prevent these occurrences or mitigate the damages will be sufficient to prevent loss to its business. In addition, PMT could incur unreimbursed costs or damages due to delays in processing customer payrolls or payroll taxes in a timely manner.

We expect that members of our Senior Lending Team and our Executive Committee will maintain their relationships with intermediaries, financial institutions, investment bankers, commercial bankers, financial advisors, attorneys, accountants, consultants, alliance partners, and other individuals within their networks, and we will rely, to a significant extent, upon these relationships to provide us with potential clients. If our Senior Lending Team and our executive officers fail to maintain its existing relationships or develop new relationships with potential clients, we may not be able to acquire new clients. In addition, individuals with whom members of our Senior Lending Team and our executive officers have relationships are not obligated to provide us with client opportunities, and, therefore, there is no assurance that such relationships will generate opportunities for us.

The current worldwide financial markets situation, as well as various social, political, economic and other conditions and events (including political tensions in the United States and around the world, wars and other forms of conflict, terrorist acts, security operations and catastrophic events such as natural disasters, epidemics and pandemics) may create uncertainty and have significant impacts on issuers, industries, governments and other systems, including the financial markets, to which companies and their investments are exposed. As global systems, economies and financial markets are increasingly interconnected, events that once had only local impact are now more likely to have regional or even global effects. Events that occur in one country, region or financial market will, more frequently, adversely impact issuers in other countries, regions or markets, including in established markets such as the United States. These impacts can be exacerbated by failures of governments and societies to adequately respond to an emerging event or threat. Uncertainty can result in or coincide with, among other things: increased volatility in the financial markets for securities, derivatives, loans, credit and currency; a decrease in the reliability of market prices and difficulty in valuing assets; greater fluctuations in spreads on debt investments and currency exchange rates; increased risk of default (by both government and private obligors and issuers); further social, economic, and political instability; nationalization of private enterprise; greater governmental involvement in the economy or in social factors that impact the economy; changes to governmental regulation and supervision of the loan, securities, derivatives and currency markets and market participants and decreased or revised monitoring of such markets by governments or self-regulatory organizations and reduced enforcement of regulations; limitations on the activities of investors in such markets; controls or restrictions on foreign investment, capital controls and limitations on repatriation of invested capital; the significant loss of liquidity and the inability to purchase, sell and otherwise fund investments or settle transactions (including, but not limited to, a market freeze); unavailability of currency hedging techniques; substantial, and in some periods extremely high rates of inflation, which can last many years and have substantial negative effects on credit and securities markets as well as the economy as a whole; recessions; and difficulties in obtaining and/or enforcing legal judgments. In addition, the war between Russia and Ukraine, and resulting market volatility, could adversely affect our business, financial condition or results of operations. In response to the war between Russia and Ukraine, the United States have imposed sanctions or other restrictive actions against Russia. The ongoing war and the measures in response could have a negative impact on the economy and business activity globally and could have a material adverse effect on our business, financial condition, cash flows and results of operations. The severity and duration of the war and its impact on global economic and market conditions are impossible to predict. In addition, sanctions could also result in Russia taking counter measures or retaliatory actions which could adversely impact our business, including, but not limited to, cyberattacks targeting private companies, individuals or other infrastructure upon which our business and the business of our clients rely. Any of the above factors, including sanctions, export controls, tariffs, trade wars and other governmental actions, could have a material adverse effect on our business, financial condition, cash flows and results of operations and could cause the market value of our common shares and/or debt securities to decline. We monitor developments and seek to manage our investments in a manner consistent with achieving our investment objective, but there can be no assurance that we will be successful in doing so.

Climate change is widely considered to be a significant threat to the global economy. Climate change creates physical and financial risk and some we, or subsidiaries or our clients may be adversely affected by climate change. For example, the needs of customers of energy companies vary with weather conditions, primarily temperature and humidity. To the extent weather conditions are affected by climate change, energy use could increase or decrease depending on the duration and magnitude of any changes. Increases in the cost of energy could adversely affect the cost of operations of our subsidiaries or clients if the use of energy products or services is material to their business. A decrease in energy use due to weather changes may affect some of our subsidiaries' or clients' financial condition, through decreased revenues. Extreme weather conditions in general require more system backup, adding to costs, and can contribute to increased system stresses, including service interruptions. In December 2015 the United Nations, of which the U.S. is a member, adopted a climate accord (the "Paris Agreement") with the long-term goal of limiting global warming and the short-term goal of significantly reducing greenhouse gas emissions. On November 4, 2016, the past administration announced that the U.S. would cease participation in the Paris Agreement with the withdrawal taking effect on November 4, 2020. However, on January 20, 2021, President Joseph R. Biden signed an executive order to rejoin the Paris Agreement. As a result, some we, our subsidiaries or our clients may become subject to new or strengthened regulations or legislation, which could increase their operating costs and/or decrease their revenues.

NIA insurance agency business is subject to comprehensive regulation in the various states in which it conducts business. NIA's success will depend in part upon its ability to satisfy these regulations and to obtain and maintain all required licenses and permits. NIA's failure to comply with any statutes and regulations could have a material adverse effect on it. Furthermore, the adoption of additional statutes and regulations, changes in the interpretation and enforcement of current statutes and regulations could have a material adverse effect on it.