Washington Bancorp (WASH) Risk Analysis

We are subject to tax law changes that could impact our effective income tax rate and our net deferred tax assets. Our net deferred tax assets are measured using enacted tax rates expected to apply to taxable income in the year in which the temporary differences are expected to be recovered or settled. We assess the deferred tax assets periodically to determine the likelihood of our ability to realize the benefits. A valuation allowance is established when it is more-likely-than-not that all or some portion of our deferred tax assets will not be realized. Management judgment is required in determining the appropriate recognition and valuation of deferred tax assets and liabilities, including projections of future taxable income, as well as the character of that income. A change in statutory tax rates and/or a change in realizability may result in a decrease or increase to our deferred tax assets. A decrease in our deferred tax assets could have a material adverse effect on our results of operations or financial condition. Local, state or federal tax authorities may interpret tax laws and regulations differently than we do and challenge tax positions that we have taken on tax returns. This may result in differences in the treatment of revenues, deductions, credits and/or differences in the timing of these items. The differences in treatment may result in payment of additional taxes, interest, penalties, or litigation costs that could have a material adverse effect on our results.

Natural disasters can disrupt our operations, result in damage to our properties, reduce or destroy the value of the collateral for our loans and negatively affect the economies in which we operate, which could have a material adverse effect on our results of operations and financial condition. A significant natural disaster, such as a hurricane, blizzard, flood, fire or earthquake, could have a material adverse impact on our ability to conduct business, and our insurance coverage may be insufficient to compensate for losses that may occur. Acts of terrorism, war, civil unrest, or future pandemics could cause disruptions to our business or the economy as a whole. While we have established and regularly test disaster recovery procedures, the occurrence of any such event could have a material adverse effect on our business, operations and financial condition.

In the ordinary course of business, we rely on electronic communications and information systems to conduct our business and to store sensitive data, including financial information regarding customers. Our electronic communications and information systems infrastructure, as well as the systems infrastructure of the third-party vendors we use to meet our data processing and communication needs, could be susceptible to cyberattacks, such as denial of service attacks, hacking, terrorist activities, or identity theft. Financial services institutions and companies engaged in data processing have reported breaches in the security of their websites or other systems, some of which have involved sophisticated and targeted attacks intended to obtain unauthorized access to confidential information, destroy data, disable or degrade service, or sabotage systems, often through the introduction of computer viruses or malware, cyber-attacks and other means. Denial of service attacks have been launched against a number of large financial services institutions. Hacking and identity theft risks, in particular, could cause serious reputational harm. Notwithstanding the strength of defensive measures, cybersecurity threats and the tactics, techniques, and procedures used in cyberattacks change, develop, and evolve rapidly and continuously, including from growth in third-party services that facilitate or carry out cyberattacks and from emerging technologies, including artificial intelligence, which may be used to enhance the tactics, techniques, and procedures described above and facilitate new cyber threats. Although to date we have not experienced any material losses relating to cyberattacks or other information security breaches, there can be no assurance that we will not suffer such losses in the future. A failure or circumvention of our security systems could have a material adverse effect on our business operations and financial condition. We regularly assess and test our security systems and disaster preparedness, including back-up systems, but the risks are ongoing. As a result, cybersecurity and the continued enhancement of our controls and processes to protect our systems, data and networks from attacks, unauthorized access or significant damage remain a priority. Accordingly, we may be required to expend additional resources to enhance our protective measures or to investigate and remediate any information security vulnerabilities or exposures. Any breach of our system security could result in disruption of our operations, unauthorized access to confidential customer information, significant regulatory costs, litigation exposure, and other possible damages, loss, or liability. Such costs or losses could exceed the amount of available insurance coverage, if any, and would adversely affect our earnings. Also, any failure to prevent a security breach or to quickly and effectively deal with such a breach could negatively impact customer confidence, damaging our reputation and undermining our ability to attract and keep customers.

We invest significant resources in information technology system enhancements in order to provide functionality and security at an appropriate level. We may not be able to successfully implement and integrate future system enhancements, which could adversely impact the ability to provide timely and accurate financial information in compliance with legal and regulatory requirements, which could result in sanctions from regulatory authorities. Such sanctions could include fines and suspension of trading in our stock, among others. In addition, future system enhancements could have higher than expected costs and/or result in operating inefficiencies, which could increase the costs associated with the implementation as well as ongoing operations. Failure to properly utilize system enhancements that are implemented in the future could result in impairment charges that adversely impact our financial condition and results of operations and could result in significant costs to remediate or replace the defective components. In addition, we may incur significant training, licensing, maintenance, consulting and amortization expenses during and after systems implementations, and any such costs may continue for an extended period of time.

Our success depends, in large part, on our ability to attract and retain key personnel. Certain key personnel that have regular direct contact with customers and clients often build strong relationships that are important to our business. In addition, we rely on key personnel to manage and operate our business, including major revenue producing functions, such as loan and deposit generation and wealth management services. Competition for qualified personnel in the financial services industry can be intense, and we may not be able to hire or retain the key personnel that we depend upon for success. Frequently, we compete in the market for talent with entities that are not subject to comprehensive regulation, including with respect to the structure of incentive compensation. The unexpected loss of services of one or more of our key personnel could have a material adverse impact on our business because of their skills, knowledge of the markets in which we operate, years of industry experience and the difficulty of promptly finding qualified replacement personnel. Also, the loss of key personnel could jeopardize our relationships with customers and clients and could lead to the loss of accounts. Losses of such accounts could have a material adverse impact on our business.

Third-party vendors provide key components of our business infrastructure such as internet connections, network access and core application processing. While we have selected these third-party vendors carefully, we do not control them or their actions. Any problems caused by these third parties, including as a result of their not providing us their services for any reason or their performing their services poorly, could adversely affect our ability to deliver products and services to our customers or otherwise conduct our business efficiently and effectively. Replacing these third-party vendors could also entail significant delay and expense.

We operate in a highly competitive environment that includes financial and non-financial services firms, including traditional banks, online banks, financial technology companies, and investment management and wealth advisory firms, including commercial banks and trust companies, investment advisory firms, mutual fund companies, stock brokerage firms. These companies compete on the basis of, among other factors, size, location, quality and type of products and services offered, price, technology, brand recognition, and reputation. Emerging technologies, such as artificial intelligence (including machine learning and generative artificial intelligence) and quantum computing, have the potential to further intensify competition and accelerate disruption in the financial services industry. Financial technology companies now offer services traditionally provided by financial institutions. These firms use technology and mobile platforms to enhance the ability of companies and individuals to borrow, save and invest money. Additionally, financial technology companies and other firms have begun to offer services such as stablecoins that may serve as alternatives to traditional banking products such as deposits. Many of these non-financial services competitors have fewer regulatory constraints and may have lower cost structures than we do. Our long-term success depends on our ability to develop and execute strategic plans and initiatives; to develop competitive products and technologies; and to attract, retain and develop a highly skilled employee workforce. We may not be as timely or successful in assessing the evolving competitive landscape and developing or introducing new products and services as our competitors. Our business may be negatively impacted if we, or our third-party providers, do not timely develop and apply emerging technologies, or if our initiatives in these areas are deficient or fail. Our, or our third-party providers', inability or resistance to timely innovate or adapt operations, products, and services to evolving regulatory and market environments, industry standards, and consumer preferences could result in service disruptions, harm our business, and adversely affect our results of operations and reputation.

We are dependent on our reputation within our market area, as a trusted and responsible financial services company, for all aspects of our business with customers, employees, vendors, third-party service providers, and others, with whom we conduct business or potential future businesses. Negative public opinion about the financial services industry generally (including the types of banking and wealth management services that we provide) or us specifically could adversely affect our reputation and our ability to keep and attract customers and employees. Our actual or perceived failure to address various issues could give rise to negative public opinion and reputational risk that could cause harm to us and our business prospects. These issues include, but are not limited to, legal and regulatory requirements; properly maintaining customer and employee personal information; record keeping; money-laundering; sales and trading practices; ethical issues; appropriately addressing potential conflicts of interest; and the proper identification of the legal, reputational, credit, liquidity and market risks inherent in our products. Failure to appropriately address any of these issues could also give rise to additional regulatory restrictions and legal risks, which could, among other consequences, increase the size and number of litigation claims and damages asserted or subject us to enforcement actions, fines and penalties and cause us to incur related costs and expenses. The proliferation of social media websites utilized by us and other third parties, as well as the personal use of social media by our employees and others, including personal blogs and social network profiles, also may increase the risk that negative, inappropriate or unauthorized information may be posted or released publicly that could harm our reputation or have other negative consequences, including as a result of our employees interacting with our customers in an unauthorized manner in various social media outlets. Any damage to our reputation could affect our ability to retain and develop the business relationships necessary to conduct business, which in turn could negatively impact our financial condition, results of operations, and the market price of our common stock.