ServisFirst Bancshares (SFBS) Risk Factors

The federal bank regulatory agencies have indicated their view that banks with high concentrations of loans secured by commercial real estate are subject to increased risk and should hold higher capital than regulatory minimums to maintain an appropriate cushion against loss that is commensurate with the perceived risk. Because a significant portion of our loan portfolio is dependent on commercial real estate, a change in the regulatory capital requirements applicable to us as a result of these policies could limit our ability to leverage our capital, which could have a material adverse effect on our business, financial condition, results of operations and prospects.

We have been, and may in the future be, negatively impacted by general business and economic conditions in the U.S., including inflation, recession, pandemic, political issues, regulatory issues and changes in the U.S. economy as a whole. In tandem with rising interest rates, continued inflationary pressures in the U.S. economy generally, and in our local markets specifically, may negatively impact our operations and profitability. Inflation drives down consumer spending, which could negatively impact the businesses we serve. Rising mortgage rates may also negatively impact our mortgage lending business. Substantially all of our borrowers and depositors are individuals and businesses located and doing business in our markets. Therefore, our continued success will depend on the general economic conditions in those areas, which we cannot predict with certainty. The majority of our borrowers are commercial firms, professionals and affluent customers located and doing business in such local markets. Accordingly, any regional or local economic downturn that affects any of the markets in which we operate, including existing or prospective property or borrowers in such markets may affect us and our profitability more significantly and more adversely than our more geographically-diversified competitors, which could have a material adverse effect on our business, financial condition, results of operations and prospects.

We attract and retain our management talent by empowering them to make certain business decisions on a local level. Lending authorities are assigned to regional chief executive officers and their banking teams based on their experience. Additionally, all loan relationships in excess of $5.0 million and every loan with an internal risk-grade of special mention or below is reviewed by our centralized credit administration department in Birmingham, Alabama. Moreover, for decisions that fall outside of the assigned authorities, our regional chief executive officers are required to obtain approval from our senior management team. Our local bankers may not follow our internal procedures or otherwise act in our best interests with respect to their decision-making. A failure of our employees to follow our internal policies, or actions taken by our employees that are negligent could have a material adverse effect on our business, financial condition, results of operations and prospects.

Information security risks for financial institutions have increased in recent years, in part because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists, and other external parties. We are under continuous threat of loss due to hacking and cyber-attacks. Our risk and exposure to these matters remains heightened because of the evolving nature and complexity, and the increasing frequency, of these threats from cybercriminals and hackers, our plans to continue to provide internet banking and mobile banking channels, and our plans to continue to develop additional remote connectivity solutions to serve our customers. Therefore, the secure processing, transmission, and storage of information in connection with our online banking services are critical elements of our operations. However, our network is vulnerable to unauthorized access, computer viruses and other malware, phishing schemes, human error or other security failures. In addition, our customers may use personal smartphones, tablet PCs, or other mobile devices that are beyond our control systems in order to access our products and services. Our technologies, systems and networks, and our customers' devices, have been and will continue to be the target of cyber-attacks, electronic fraud, or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss, or destruction of our or our customers' confidential, proprietary, and other information, or otherwise disrupt our or our customers' or other third parties' business operations. As cyber threats continue to evolve, we continue to spend significant capital and other resources to protect against these threats or to alleviate or investigate problems caused by such threats. To the extent that our activities or the activities of our customers involve the processing, storage, or transmission of confidential customer information, any breaches or unauthorized access to such information would present significant regulatory costs and expose us to litigation and other possible liabilities. Any inability to prevent these types of security threats could also cause existing customers to lose confidence in our systems and could adversely affect our reputation and ability to generate deposits. Additionally, our insurance may be inadequate to compensate us for losses due to a cyber-attack, hacking, or similar technology security breach. While we have not experienced any material losses relating to cyber-attacks or other information security breaches to date, we may suffer such losses in the future. The occurrence of any cyber-attack or information security breach could result in potential liability to clients, reputational damage, damage to our competitive position, and the disruption of our operations, all of which could adversely affect our financial condition or results of operations.