First Internet Bancorp (INBK) Risk Analysis

We may be involved from time to time in a variety of litigation, investigations, inquiries, or similar matters arising out of our business. Furthermore, litigation against banks tend to increase during economic downturns and periods of credit deterioration, which may occur or worsen as a result of current economic uncertainty. Most recently there has been an increase in class action lawsuits filed claiming deceptive practices or violations of account terms in connection with non-sufficient fees or overdraft charges. We manage these risks through internal controls, personnel training, insurance, litigation management, our compliance and ethics processes, and other means. However, the commencement, outcome, and magnitude of litigation cannot be predicted or controlled with any certainty. We establish reserves for legal claims when payments associated with the claims become probable and the losses can be reasonably estimated. However, our insurance may not cover all claims that may be asserted against us and indemnification rights to which we are entitled may not be honored, and any claims asserted against us, regardless of merit or eventual outcome, may harm our reputation. Should the ultimate judgments or settlements in any litigation or investigation significantly exceed our insurance coverage, they could have a material adverse effect on our business, financial condition, and results of operations. In addition, premiums for insurance covering the financial and banking sectors are rising. We may not be able to obtain appropriate types or levels of insurance in the future, nor may we be able to obtain adequate replacement policies with acceptable terms or at historic rates, if at all.

Our business faces increasing public, investor, activist, legislative and regulatory scrutiny related to ESG and anti-ESG, DEI and anti-DEI developments. We risk damage to our brand and reputation in certain sectors if we fail to act in response to ESG concerns, such as diversity, equity and inclusion, environmental stewardship, human capital management, support for our local communities, corporate governance and transparency, or fail to consider ESG factors in our business operations. Concerns over the long-term impacts of climate change have led and will likely continue to lead to global governmental efforts to mitigate those impacts. Consumers and businesses also may change their behavior and operations as a result of these concerns. The Company and its customers may need to respond to new laws and regulations as well as consumer and business preferences resulting from climate change concerns. We and our customers may face cost increases, asset value reductions and operating process changes. The impact on our customers will likely vary depending on their specific circumstances, including a significant presence in areas that are vulnerable to natural and man-made disasters that may be exacerbated by climate change, or reliance upon or a role in carbon intensive activities. Among the impacts to the Company could be a drop in demand for our products and services, particularly in certain sectors. In addition, we could face reductions in creditworthiness on the part of some customers or in the value of assets securing loans. Our efforts to take these risks into account may not be effective in protecting us from the negative impact of new laws and regulations or changes in consumer or business behavior. In response to ESG developments (including, in particular DEI initiatives), there are increasing instances of anti-ESG legislation and anti-DEI executive orders, adverse media coverage, regulation, and litigation that could have unintended impacts on ordinary banking operations and increase litigation or reputational risk related to actions we choose to take and impact the results of our operations. If legislatures in the states in which we operate adopt legislation intended to protect certain industries by limiting or prohibiting consideration of business and industry factors in lending activities, certain portions of our lending operations may be impacted.

Competition in the banking and financial services industry is strong. We compete with commercial banks, savings institutions, credit unions, finance companies, fintechs, mutual funds, insurance companies and securities brokerage and investment banking firms operating locally and nationwide. Some of our competitors have greater financial resources, name recognition and market presence than we do and offer certain services that we do not or cannot provide. Further, our credit union competitors benefit from competitive advantages, including the credit union exemption from paying federal income tax and can, therefore, more aggressively price many products and services. In addition, larger competitors may be able to price loans and deposits more aggressively than we do, which could affect our ability to increase our market share and remain profitable on a long-term basis.

We depend upon our ability to process, record and monitor our client transactions on a continuous basis. As customer, public and regulatory expectations regarding data privacy and information security have increased, our operational systems and infrastructure must continue to be safeguarded and monitored for potential failures, disruptions and breakdowns. Our business, financial, accounting and data processing systems, or other operating systems and facilities, may stop operating properly or become disabled or damaged as a result of a number of factors, including events that are wholly or partially beyond our control. For example, there could be electrical or telecommunications outages; natural disasters such as earthquakes, tornadoes and hurricanes; pandemics; events arising from local or larger-scale political or social matters, including terrorist acts; and, as described below, cyber-attacks. Although we have business continuity plans and other safeguards in place, our business operations may be adversely affected by significant and widespread disruption to our physical infrastructure or operating systems that support our business. Information security risks for financial institutions such as ours have generally increased in recent years in part because of the proliferation of new technologies, the use of digital technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists and other external parties. As noted above, our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks. Our business relies on digital technologies, computer and email systems, software and networks to conduct its operations. In addition, to access our products and services, our customers may use smartphones, tablets, personal computers and other mobile devices that are beyond our control systems. Although we have information security procedures and controls in place, our technologies, systems, networks and our customers' devices may become the target of cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of our or our customers' confidential, proprietary and other information, or otherwise disrupt our or our customers' or other third parties' business operations. Third parties with whom we do business or that facilitate our business activities, including financial intermediaries or vendors that provide services or security solutions for our operations, could also be sources of operational and information security risk to us, including from breakdowns or failures of their own systems or capacity constraints. Although to date we have not experienced any material losses relating to cyber-attacks or other information security breaches, like other companies, we and our vendors face a wide range of ongoing cyber threats that include phishing emails and social engineering schemes, ransomware threats, and criminal re-use of credentials sold on the dark web. There can be no assurance that we will not suffer such material losses in the future. Our risk and exposure to these matters remains heightened because of the evolving nature of these threats. As a result, cybersecurity and the continued development and enhancement of our controls, processes and practices designed to protect our systems, computers, software, company data, networks, and customer information from attack, damage or unauthorized access remain a focus for us. As threats continue to evolve, we may be required to expend additional resources to continue to modify or enhance our protective measures or to investigate and remediate information security vulnerabilities. Disruptions or failures in the physical infrastructure or operating systems that support our business and clients, or cyber-attacks or security breaches of the networks, systems or devices that our clients use to access our products and services, could result in client attrition, regulatory fines, penalties or intervention, breach investigation and notification expenses, reputational damage, claims or litigation, reimbursement or other compensation costs and/or additional compliance costs, any of which could materially and adversely affect our business, financial condition and results of operations.

Our future success and profitability are substantially dependent upon our management and the abilities of our senior executives. We believe that our future results will also depend in part upon our ability to attract and retain highly skilled and qualified management. Competition for senior personnel is intense, and we may not be successful in attracting and retaining such personnel. Changes in key personnel and their responsibilities may be disruptive to our business and could have a material adverse effect on our business, financial condition and results of operations.

The deposits of the Bank are insured by the FDIC up to legal limits and, accordingly, subject to the payment of FDIC deposit insurance assessments. The Bank's regular assessments are determined by its risk classification, which is based on a number of factors, including regulatory capital levels, asset growth and asset quality. In order to maintain a strong funding position and restore the reserve ratios of the DIF, the FDIC may increase deposit insurance assessment rates and may charge a special assessment to FDIC-insured financial institutions. Further increases in assessment rates or special assessments may occur in the future, especially if there are significant additional financial institution failures. Any future special assessments, increases in assessment rates or required prepayments in FDIC insurance premiums could reduce our profitability or limit our ability to pursue certain business opportunities, which could have a material adverse effect on our business, financial condition and results of operations.

Our success depends, to a certain extent, upon favorable economic and political conditions, local and national, as well as governmental monetary policies. Conditions such as recession, unemployment, trade wars and tariffs, changes in interest rates, inflation, money supply, and other factors beyond the Company's control may adversely affect deposit levels, costs, loan demand and/or asset quality and, therefore, our earnings. Further, any economic downturn could result in financial stress on our borrowers that would adversely affect consumer confidence, a reduction in general business activity and increased market volatility. The resulting economic pressure on consumers and businesses and the lack of confidence in the financial markets could adversely affect our business, financial condition, results of operations and stock price. Our ability to properly assess the creditworthiness of our customers and to estimate the losses inherent in our credit exposure would be made more complex by difficult or rapidly changing market and economic conditions. Accordingly, if market conditions worsen, we may experience increases in foreclosures, delinquencies, net charge-offs and customer bankruptcies, as well as more restricted access to funds.

We could experience other external events such as severe weather, natural disasters, acts of war, terrorism, civil unrest or widespread public health issues, including pandemics or epidemics caused by highly contagious or infectious disease, that could impair the ability of our customers to repay outstanding loans; impair the value of collateral, if any, securing outstanding loans; negatively impact our deposit base, loan originations or general demand for our services; cause significant property damage; result in loss of revenue or cause us to incur additional expenses or losses. We could also be adversely affected if key personnel or a significant number of employees were to become unavailable due to external events affecting the places they live. Although we have business continuity plans and other safeguards in place, there is no assurance that such plans and safeguards will completely mitigate the adverse impacts of any significant external event. The occurrence or continuation of any such event could materially adversely impact our business, our ability to provide our services, demand for our services, asset quality, financial condition and results of operations.