SmartFinancial (SMBK) Risk Analysis

We experience competition in our market from many other financial institutions. We compete with commercial banks, credit unions, savings and loan associations, mortgage banking firms, internet banks, consumer finance companies, securities brokerage firms, insurance companies, money market funds, and other mutual funds, as well as other community banks and super-regional and national financial institutions that operate offices in our service area. These competitors often have far greater resources than we do and are able to conduct more extensive and broader marketing efforts to reach both commercial and individual clients. Our competitors may be able to offer more attractive interest rates and other financial terms than we offer or have the ability to offer. Some of our non-bank competitors are not subject to the same extensive regulations we are and, therefore, may have greater flexibility in competing for business. We compete with these other financial institutions both in attracting deposits and in making loans. In addition, we must attract our client base from other existing financial institutions and from new residents. We expect competition to increase in the future as a result of legislative, regulatory and technological changes and the continuing trend of consolidation in the financial services industry. Our profitability depends upon our continued ability to successfully compete with an array of financial institutions in our service area. Our ability to compete successfully will depend on a number of factors, including, among other things, our ability to recruit and retain experienced and talented bankers at competitive compensation levels, build and maintain long-term client relationships while ensuring high ethical standards and safe and sound banking practices, compete with the scope, relevance and pricing of the products and services we provide, maintain a competitive level of client satisfaction with our products and services, keep pace with technological advances and invest in new technology (including those related to or involving artificial intelligence, machine learning, blockchain and other technologies), and depend on general economic trend and trends within our industry. Some of our competitors have reduced or eliminated certain service charges on deposit accounts, including overdraft fees, and additional competitors may be willing to reduce or eliminate service or other fees in order to attract additional customers. If the Company chooses to reduce or eliminate certain categories of fees, including those related to deposit accounts, fee income related to these products and services would be reduced. If the Company chooses not to take such actions, we may be at a competitive disadvantage in attracting customers for certain fee producing products. Increased competition could require us to increase the rates that we pay on deposits or lower the rates that we offer on loans, which could reduce our profitability. Our failure to compete effectively in our market could restrain our growth or cause us to lose market share, which could have a material adverse effect on our assets, business, cash flow, condition (financial or otherwise), liquidity, prospects and results of operations.

The small to medium-sized businesses that we lend to may have fewer resources to weather adverse business developments, including the continued elevated inflationary and interest rate environment, which may impair a borrower's ability to repay a loan or lease, and such impairment could have an adverse effect on our business, financial condition and results of operations. A substantial focus of our marketing and business strategy is to serve small to medium-sized businesses in our market areas. As a result, a relatively high percentage of our loan and lease portfolio consists of commercial loans to such businesses. We further anticipate an increase in the amount of loans to small to medium-sized businesses during 2025. Small to medium-sized businesses frequently have smaller market shares than their competition, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience substantial volatility in operating results, any of which may impair a borrower's ability to repay a loan or lease. In addition, the success of a small and medium-sized business often depends on the management skills, talents and efforts of one or two people or a small group of people, and the death, disability or resignation of one or more of these people could have an adverse impact on the business and its ability to repay its loan or lease. If general economic conditions negatively impact the markets in which we operate, and small to medium-sized businesses are adversely affected or our borrowers are otherwise harmed by adverse business developments, this, in turn, could have an adverse effect on our business, financial condition and results of operations.

Any future bank failures like those experienced in 2023 or similar events may negatively impact client confidence in the safety and soundness of regional banks and may generate market volatility among publicly traded bank holding companies and, in particular, regional banks like the Company. As a result, some clients have chosen, and may continue to choose, to maintain deposits with larger financial institutions or invest in higher yielding short-term fixed income securities, all of which could materially adversely impact the Company's liquidity, loan funding capacity, net interest margin, capital, and results of operations. While the Treasury, the Federal Reserve, and the FDIC have historically taken action to ensure that depositors of failed banks had access to their deposits, including uninsured deposit accounts, there is no guarantee that regional bank failures or bank runs will not occur in the future and, if they were to occur, they may have a material adverse impact on client and investor confidence in regional banks, negatively impacting our liquidity, capital, results of operations, and stock price.

We or our third-party (or fourth-party) vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to our business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in our implementation of AI technology and increase our compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce output or take action that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, which infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, we may rely on AI models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models, matters over which we may have limited visibility. Any of these risks could expose us to liability or adverse legal or regulatory consequences and harm our reputation and the public perception of our business or the effectiveness of our security measures.

Our operations rely on the secure processing, storage and transmission of confidential and other information in our computer systems and networks, including those we maintain with our service providers and vendors. Although we take protective measures and endeavor to modify these systems as circumstances warrant, the security of our computer systems, software and networks may be vulnerable to cyber-attacks, unauthorized access, misuse, computer viruses or other malicious code, phishing attempts, brute force attacks, exploiting software vulnerabilities (including "zero-day attacks"), ransomware or other malware, supply chain attacks, and other events that could have a security impact. We outsource many of our major systems, such as data processing, loan servicing and deposit processing systems. The failure of these systems, or the termination of a third-party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process new and renewal loans, gather deposits and provide customer service, compromise our ability to operate effectively, damage our reputation, result in a loss of customer business and/or subject us to additional regulatory scrutiny and possible financial liability, any of which could have a material adverse effect on our financial condition and results of operations. U.S. financial institutions have experienced significant distributed denial-of-service attacks, some of which involved sophisticated and targeted attacks intended to disable or degrade service, or sabotage systems. Other attacks have attempted to obtain unauthorized access to confidential information or destroy data, often through the introduction of computer viruses or malware, cyber-attacks and other means. To date, none of these types of attacks have had a material effect on our business or operations. However, no assurances can be provided that we may not suffer from such an attack in the future that may cause us material harm. Such security attacks can originate from a wide variety of sources, including persons who are involved with organized crime or who may be linked to terrorist organizations or hostile foreign governments. Those same parties may also attempt to fraudulently induce employees, customers or other users of our systems to disclose sensitive information in order to gain access to our data or that of our customers or clients. We are also subject to the risk that our employees may intercept and transmit unauthorized confidential or proprietary information. An interception, misuse or mishandling of personal, confidential or proprietary information being sent to or received from a customer or third party could result in legal liability, remediation costs, regulatory action and reputational harm to us. In addition, we provide our customers the ability to bank remotely, including over the internet or through their mobile device. The secure transmission of confidential information is a critical element of remote and mobile banking. Although we regularly add additional security measures to our computer systems and network infrastructure to mitigate the possibility of cyber security incidents, including firewalls and penetration testing, it is difficult or impossible to defend against every risk being posed by changing technologies, including artificial intelligence, as well as criminal intent on committing cyber-crime. Our network could be vulnerable to unauthorized access, computer viruses, phishing schemes, spam attacks, human error, natural disasters, power loss and other security incidents. We may be required to spend significant capital and other resources to protect against the threat of security incidents, or to alleviate problems caused by security incidents. To the extent that our activities or the activities of our customers involve the storage and transmission of confidential information, security incidents (including compromises of security of customer systems and networks) could expose us to claims, litigation and other possible liabilities. Any inability to prevent security incidents could also cause existing customers to lose confidence in our systems and could adversely affect our reputation, results of operations and ability to attract and maintain customers and businesses. In addition, a security incident could also subject us to additional regulatory scrutiny, sanctions, fines or penalties (which may not be covered by our insurance policies), negative publicity, release of sensitive and/or confidential information, diversion of the attention of management away from the operation of our business and increased cybersecurity protection and remediation costs, increases in operating expenses, lost revenues, expose us to civil litigation and possible financial liability and cause reputational damage. We maintain a system of internal controls and insurance coverage to mitigate against operational risks, including data processing system failures and errors and customer or employee fraud. If our internal controls fail to prevent or detect an occurrence, or if any resulting loss is not insured or exceeds applicable insurance limits, it could have a material adverse effect on our business, financial condition and results of operations.

Unlike larger organizations that are more geographically diversified, our branches are currently concentrated in East and Middle Tennessee, Alabama and the Florida Panhandle. As a result of this geographic concentration, our financial results depend largely upon economic conditions in these market areas. If the communities in which we operate do not grow or if prevailing economic conditions, locally or nationally, deteriorate, this may have a significant impact on the amount of loans that we originate, the ability of our borrowers to repay these loans and the value of the collateral securing these loans. An economic downturn caused by inflation, recession, unemployment, the imposition of tariffs and retaliatory responses, government action, health emergencies, disease pandemics, natural disasters, adverse effects of the U.S. government's decisions regarding its debt ceiling (including defaulting on its debt obligations or experiencing credit downgrades), or other factors beyond our control would likely contribute to the deterioration of the quality of our loan portfolio and reduce our level of deposits, which in turn would have an adverse effect on our business. In addition, some portions of our target market are in areas which a substantial portion of the economy is dependent upon tourism. The tourism industry tends to be more sensitive than the economy as a whole to changes in unemployment, inflation, wage growth, and other factors which affect consumer's financial condition and sentiment.

Liquidity represents an institution's ability to provide funds to satisfy demands from depositors, borrowers and other creditors by either converting assets into cash or accessing new or existing sources of incremental funds. Liquidity risk arises from the possibility that we may be unable to satisfy current or future funding requirements and needs. The objective of managing liquidity risk is to ensure that our cash flow requirements resulting from depositor, borrower and other creditor demands as well as our operating cash needs, are met, and that our cost of funding such requirements and needs is reasonable. We maintain an asset/liability and interest rate risk policy and a liquidity and funds management policy, including a contingency funding plan that, among other things, include procedures for managing and monitoring liquidity risk. Generally, we rely on deposits, repayments of loans and cash flows from our investment securities as our primary sources of funds. Our principal deposit sources include consumer, commercial and public funds customers in our markets. We have used these funds, together with wholesale deposit sources such as brokered deposits, along with Federal Home Loan Bank of Cincinnati ("FHLB Cincinnati") advances, federal funds purchased and other sources of short-term and long-term borrowings, to make loans, acquire investment securities and other assets and to fund continuing operations. An inability to maintain or raise funds in amounts necessary to meet our liquidity needs could have a substantial negative effect, individually or collectively, on SmartFinancial and SmartBank's liquidity. Our access to funding sources in amounts adequate to finance our activities, or on terms attractive to us, could be impaired by factors that affect us specifically or the financial services industry in general. For example, factors that could detrimentally impact our access to liquidity sources include a decrease in the level of our business activity due to a market downturn or adverse regulatory action against us, a reduction in our credit rating, any damage to our reputation or any other decrease in depositor or investor confidence in our creditworthiness and business. Our access to liquidity could also be impaired by factors that are not specific to us, such as severe volatility or disruption of the financial markets or negative views and expectations about the prospects for the financial services industry as a whole. Any such event or failure to manage our liquidity effectively could affect our competitive position, increase our borrowing costs and the interest rates we pay on deposits, limit our access to the capital markets, cause our regulators to criticize our operations and have a material adverse effect on our results of operations or financial condition. Our most important source of funds consists of our customer deposits. Such deposit balances can decrease when customers perceive alternative investments, such as the stock market, as providing a better risk/return tradeoff. If customers move money out of bank deposits and into other investments, we could lose a relatively low cost source of funds, which would require us to seek wholesale funding alternatives in order to continue to grow, thereby increasing our funding costs and reducing our net interest income and net income. Moreover, competition among U.S. banks and non-banks for customer deposits is intense and may increase the cost of deposits (particularly in an elevated rate environment) or prevent new deposits and may otherwise negatively affect our ability to grow our deposit base. In addition, our access to deposits may be affected by the liquidity and/or cash flow needs of depositors, which may be exacerbated in an inflationary, recessionary, or elevated rate environment. This may cause our deposit accounts to decrease in the future, and any such decrease could have a material adverse impact on our sources of funding. Loan repayments are a relatively stable source of funds but are subject to the borrowers' ability to repay loans, which can be adversely affected by a number of factors including changes in general economic conditions, adverse trends or events affecting business industry groups or specific businesses, declines in real estate values or markets, business closings or lay-offs, inflation, the imposition of tariffs and retaliatory responses, labor shortages, inclement weather, natural disasters, acts of war, prolonged government shutdowns and other factors. Furthermore, loans generally are not readily convertible to cash. Accordingly, we may be required from time to time to rely on secondary sources of liquidity to meet growth in loans, deposit withdrawal demands or otherwise fund operations. Such secondary sources include FHLB Cincinnati advances, brokered deposits, secured and unsecured federal funds lines of credit from correspondent banks, Federal Reserve borrowings and/or accessing the equity or debt capital markets. We anticipate we will continue to rely primarily on deposits, loan and lease repayments, and cash flows from our investment securities to provide liquidity. Additionally, where necessary, the secondary sources of borrowed funds described above will be used to augment our primary funding sources. If we are unable to access any of these secondary funding sources when needed, we might be unable to meet our customers' or creditors' needs, which would adversely affect our financial condition, results of operations, and liquidity.