River Financial (RVRF) Risk Analysis

Consumer and commercial banking are highly competitive industries. Our market areas contain not only a large number of community and regional banks, but also a significant presence of the country's largest commercial banks. We compete with other state and national financial institutions, as well as savings and loan associations, savings banks, and credit unions, for deposits and loans. In addition, we compete with financial intermediaries, such as consumer finance companies, commercial finance companies, mortgage banking companies, insurance companies, securities firms, mutual funds, and several government agencies, as well as major retailers, all actively engaged in providing various types of loans and other financial services. Some of these competitors may have a long history of successful operations in our market areas and greater ties to local businesses and more expansive banking relationships, as well as more established depositor bases, fewer regulatory constraints, and lower cost structures than we do. Competitors with greater resources may possess an advantage through their ability to maintain numerous banking locations in more convenient sites, to conduct more extensive promotional and advertising campaigns, or to operate a more developed technology platform. Due to their size, many competitors may offer a broader range of products and services, as well as better pricing for certain products and services than we can offer. For example, in the current low interest rate environment, competitors with lower costs of capital may solicit our customers to refinance their loans with a lower interest rate. Further, increased competition among financial services companies due to the recent consolidation of certain competing financial institutions may adversely affect our ability to market our products and services. Technology has lowered barriers to entry and made it possible for banks to compete in our market areas without a retail footprint by offering competitive rates, and for non-banks to offer products and services traditionally provided by banks. There has been an increasing trend of credit unions acquiring banks. Credit unions are tax-exempt entities, which provides an advantage to the credit unions,when pricing loans and deposits. The acquisition of banks by credit unions lead to more rapid growth by, and increased competition from, credit unions. Further, credit unions could provide enhanced competition as we evaluate and pursue acquisition targets. The financial services industry could become even more competitive as a result of legislative, regulatory, and technological changes and continued consolidation. Banks, securities firms, and insurance companies can merge under the umbrella of a financial holding company, which can offer virtually any type of financial service, including banking, securities underwriting, insurance (both agency and underwriting), and merchant banking. Our ability to compete successfully depends on a number of factors, including: - our ability to develop, maintain, and build upon long-term customer relationships based on quality service and high ethical standards;- our ability to attract and retain qualified employees to operate our business effectively;- our ability to expand our market position;- the scope, relevance, and pricing of products and services that we offer to meet customer needs and demands;- the rate at which we introduce new products and services relative to our competitors;- customer satisfaction with our level of service; and - industry and general economic trends. Failure to perform in any of these areas could significantly weaken our competitive position, which could adversely affect our growth and profitability, which, in turn, could harm our business, financial condition, and results of operations.

Several of our large depositors have business, family, or other relationships with each other, which creates a risk that any one customer's withdrawal of its deposit could lead to a loss of other deposits from customers within the relationship. Withdrawals of deposits by any one of our largest depositors or by one of our related customer groups could force us to rely more heavily on borrowings and other sources of funding for our business and withdrawal demands, adversely affecting our net interest margin and results of operations. We may also be forced, as a result of any withdrawal of deposits, to rely more heavily on other, potentially more expensive and less stable funding sources. Consequently, the occurrence of any of these events could have a material adverse effect on our business, results of operations, financial condition, and future prospects.

Severe weather and natural disasters, including hurricanes, tornados, drought and floods, epidemics and pandemics, acts of war or terrorism or other external events could have a significant effect on our ability to conduct business. Such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue and/or cause us to incur additional expenses. Although management has established disaster recovery and business continuity policies and procedures, the occurrence of any such event could have a material adverse effect on our business, which, in turn, could have a material adverse effect on our financial condition and results of operations. The SEC and federal bank regulators have also recently updated their guidance for pandemics, which may cause us to change our operations and business continuity efforts. Pandemics, epidemics, trade wars, tariffs, and similar events and disputes, domestic and international, have adversely affected, and may continue to adversely affect economic activity globally, nationally and locally. Such events also may adversely affect business and consumer confidence, generally. We and our customers, and our respective suppliers, vendors and processors may be adversely affected. Any such adverse changes may adversely affect our profitability, growth, asset quality and financial condition.

The banking and financial services industries are undergoing rapid technological changes, with frequent introductions of new technology-driven products and services. In addition to enhancing our service to customers, the effective use of technology increases efficiency and enables us to reduce costs. Our future success will depend, in part, upon our ability to address the needs of our customers by using technology to provide products and services that enhance customer convenience and create additional efficiencies in operations. Many of our competitors have greater resources to invest in technological improvements, and we may not be able to effectively implement new technology-driven products and services, which could reduce our ability to effectively compete. We also rely on software developed by third-party vendors to process various transactions. In some cases, we have contracted with third parties to run their proprietary software on our behalf. These systems include, but are not limited to, general ledger, payroll, employee benefits, loan and deposit processing, and securities portfolio accounting. While we perform a review of controls instituted by the applicable vendors over these programs in accordance with industry standards and perform our own testing of user controls, we must rely on the continued maintenance of controls by these third-party vendors, including safeguards over the security of customer data.

Information security risks for financial institutions have generally increased in recent years, in part because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists, and other external parties. We are under continuous threat of loss due to hacking and cyber-attacks, especially as we continue to expand customer capabilities to utilize internet and other remote channels to transact business. Our risk and exposure to these matters remains heightened because of the evolving nature and complexity of these threats from cybercriminals and hackers, our plans to continue to provide internet banking and mobile banking channels, and our plans to develop additional remote connectivity solutions to serve our customers. Therefore, the secure processing, transmission, and storage of information in connection with our online banking services are critical elements of our operations. However, our network could be vulnerable to unauthorized access, computer viruses and other malware, phishing schemes, ransomware or other security failures. In addition, our customers may use personal smartphones, tablet PCs, or other mobile devices that are beyond our control systems in order to access our products and services. Our technologies, systems and networks, and our customers' devices, may become the target of cyber-attacks, electronic fraud, or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss, or destruction of our or our customers' confidential, proprietary, and other information, or otherwise disrupt our or our customers' or other third parties' business operations. As cyber threats continue to evolve, we may be required to spend significant capital and other resources to protect against these threats or to alleviate or investigate problems caused by such threats. To the extent that our activities or the activities of our customers involve the processing, storage, or transmission of confidential customer information, any breaches or unauthorized access to such information could present significant regulatory costs and expose us to litigation and other possible liabilities. Any inability to prevent these types of security threats could also cause existing customers to lose confidence in our systems and could adversely affect our reputation and ability to generate deposits. While we have not experienced any material losses relating to cyber-attacks or other information security breaches to date, we may suffer such losses in the future. The occurrence of any cyber-attack or information security breach could result in potential liability to clients, reputational damage, damage to our competitive position, and the disruption of our operations, all of which could adversely affect our financial condition or results of operations, lead to increased compliance and insurance costs and reduce shareholder value.

We depend heavily upon our senior management team. The loss of the services of a member of our senior management team, or an inability to attract other experienced banking personnel, could adversely affect our business. Some of these adverse effects could include the loss of personal contacts with existing or potential customers, as well as the loss of special technical knowledge, experience, and skills of such individuals who are responsible for our operations.