ZIONS BANCORPORATION, NATIONAL ASSOCIATION /UT/
For the period ended Dec 31, 2025. Filed Feb 24, 2026.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2025 · Filed Feb 24, 2026
ZION$64.76-0.3%Stored close · as of Nov 6, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2024-12-31; filed 2025-02-25.
0000109380-25-000040
Item 1A. Risk FactorsCurrent report: 10-K
Period ended 2025-12-31; filed 2026-02-24.
0000109380-26-000046
Item 1A. Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 113 previous paragraphs and 136 current paragraphs.
14 unchanged; 62 reworded; 60 added; 37 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (60)
Current report
Our ability to generate revenue and expand our business is inherently linked to the prudent and strategic management of risk. These risks are comprehensively defined within our Risk Management Framework, which serves as the foundation for our enterprise-wide approach to risk oversight.
Current report
In the “Risk Management” section in MD&A on page 56, we describe certain policies, procedures, and internal controls designed to identify, assess, and manage these risks. However, despite these measures, we cannot guarantee that all risks will be effectively prevented or mitigated, nor can we eliminate their potential impact on our operations or financial performance.
Current report
Although not comprehensive, the following sections outline the significant risk factors that could affect our business.
Current report
We operate through seven separately managed affiliate banks across our Western U.S. footprint. At December 31, 2025, our banking operations in Utah, Idaho, Texas, and California represented 77% of our commercial lending portfolio, 72% of our CRE lending portfolio, and 71% of our consumer lending portfolio.
Current report
Adverse economic conditions could negatively affect our performance and overall financial condition.
Current report
Additionally, external factors such as tariffs, export controls, sanctions, restrictive immigration policies, elevated unemployment, civil unrest, and other political or trade-related developments affecting domestic and global markets may heighten economic uncertainty. Collectively, these conditions could lead to reduced loan demand, higher credit losses, and lower fee income, among other adverse effects.
Current report
Fluctuations in the availability and sources of liquidity and capital could restrict our operational flexibility and constrain future growth opportunities.
Current report
We also rely on our investment securities portfolio as a source of contingent liquidity through cash flows, maturities, and secured borrowing capacity. The portfolio consists of instruments that can be readily pledged or converted to cash and is managed to support our asset‑liability profile by helping to mitigate interest rate mismatches between loans and deposits. Any unexpected changes in portfolio runoff, market valuations, or the availability of secured borrowing markets could adversely affect our liquidity position and the effectiveness of our asset‑liability management strategies.
Current report
Unfavorable rating actions by credit rating agencies could negatively impact our organization as well as the holders of our securities.
Current report
Challenges experienced by other financial institutions could negatively impact the broader financial markets and, in turn, indirectly have an adverse effect on our operations.
Current report
Events in the financial services industry during 2023 illustrated this dynamic. A number of regional and community banks experienced deposit outflows and heightened liquidity pressures, which in turn contributed to broad market concerns about the financial condition and creditworthiness of other institutions. These developments resulted in—and similar occurrences may again result in—significant and cascading disruptions across financial markets and the deposit environment, increased operating costs, reduced fee income, and increased volatility and downward pressure on the market value of our common stock.
Current report
We may face challenges in attracting and retaining qualified personnel or effectively fostering our corporate culture. Additionally, recruiting and compensation costs may increase as a result of evolving workplace dynamics, market conditions, economic factors, and regulatory changes.
Current report
Our ability to successfully execute strategic initiatives, deliver high-quality services, and remain competitive may be adversely affected if we are unable to recruit and retain qualified personnel, or if employee compensation and benefits expenses increase significantly. Regulatory guidance and rules issued by banking authorities impose restrictions on the structure and amount of compensation that financial institutions may offer, which can hinder our capacity to attract and retain key personnel. These constraints may place us at a disadvantage relative to competitors—particularly financial technology firms and other entities not subject to the same regulatory limitations—when competing for skilled professionals.
Current report
Additionally, broader economic conditions and evolving workforce dynamics, including shifting employee priorities, regulatory expectations, increased geographic mobility, and the adoption of remote work models, may further challenge our talent retention efforts and contribute to increased compensation demands, associated costs, or other operational challenges. Moreover, inflationary pressures have led to increased compensation costs, a trend that is expected to persist and may continue to impact our financial performance. If we experience such adverse effects with respect to our employees, our business, financial condition, and results of operations could be adversely or materially impacted.
Current report
We have undertaken, and continue to implement, significant initiatives to improve operating efficiency and strengthen our internal control environment. The ultimate success, timely completion, and overall impact of these efforts may differ significantly from expectations, and any such deviation could have a material adverse effect on our organization.
Current report
We continue to invest in a variety of strategic initiatives designed to enhance our product and service offerings while simplifying business operations. These initiatives include organizational restructuring, efficiency enhancements, and the replacement or upgrading of technology systems. These initiatives, along with other significant changes, remain ongoing and are at varying stages of development. Due to the inherent complexity of such projects, estimates related to timelines, costs, anticipated savings, operational efficiencies, and other potential outcomes are subject to change and may vary significantly. Accordingly, there can be no assurance that the expected benefits or intended results of these initiatives will be realized.
Current report
Our ability to remain competitive increasingly depends on maintaining robust technological capabilities and continuously identifying and developing innovative, value-added products for both current and prospective customers. Competitive pressures in technology arise from traditional banking and nontraditional sources. Larger banks often benefit from greater resources and economies of scale, enabling them to maintain advanced capabilities and accelerate the development or adoption of digital and emerging technologies.
Current report
In addition, fintechs and other technology-driven platforms are expanding their presence, offering a wide variety of products and services that challenge traditional banking models. The growing experimentation with and adoption of advanced technologies—such as AI, quantum computing, tokenized deposits, blockchain, stablecoins, and other digital currencies, including the potential issuance, acceptance, and integration of central bank digital currencies—has the potential to fundamentally reshape the financial services landscape. Regulatory developments related to these emerging technologies, including the recent enactment of the Guiding and Establishing National Innovation for U.S. Stablecoins Act of 2025 (“GENIUS Act”) and the potential passage of the Digital Asset Market Clarity Act of 2025 (“CLARITY Act”), further underscore this shift. Failure to keep pace with technological advancements could adversely affect our competitive position, diminish customer satisfaction, and reduce the accessibility and relevance of our products and services.
Current report
We operate in a highly competitive environment, both in the range of products and services we provide and across the geographic markets in which we conduct business.
Current report
Consolidation in our industry—whether through smaller banks merging to create larger, more competitive institutions or through combinations of banks and non-bank entities—may intensify competitive pressures, particularly in affected regions or for specific products. To the extent we expand into new markets, we may encounter competitors with greater experience and established customer relationships, which could adversely impact our ability to compete effectively. Failure to adequately respond to these competitive dynamics could hinder our ability to attract and retain customers across our businesses.
Current report
We may face significant operational disruptions in connection with the execution of our various strategic projects and initiatives. Potential challenges include extended implementation timelines, budget overruns, loss of key personnel, technological issues, and processing errors. Additionally, disruptions may arise from capacity limitations, service level deficiencies, suboptimal performance, and costs associated with system replacements and upgrades.
Current report
Such issues could adversely affect our systems, operational processes, internal controls, procedures, workforce, and customer experience. In the event of a significant disruption, we could be subject to increased regulatory oversight, exposure to civil litigation, and potential financial liabilities or reputational risk. These outcomes could materially affect our control environment, operational efficiency, and overall financial performance.
Current report
We continue to face persistent and increasingly sophisticated attempts to defraud the Bank and our customers from a variety of sources. The frequency of these schemes may increase in an adverse economic environment. Our ability to identify and prevent fraud depends on the effectiveness of our systems, processes, and personnel; however, despite the safeguards we have implemented, some fraudulent activities may still go undetected. As a result, we may not be able to detect, prevent, or mitigate all future incidents, which could lead to material financial losses. Furthermore, even in cases where we are not financially responsible for reimbursing customers for fraudulent losses, such incidents can harm our reputation and impair our ability to attract and retain customers.
Current report
We utilize models to support the Bank’s management and decision-making processes. Inaccurate assumptions or non-representative training data within these models could lead to unreliable outputs or suboptimal decisions, which could adversely affect our operations.
Current report
We rely on various external suppliers to perform operational activities that support our business operations. While these partnerships offer strategic and operational advantages, they also present a range of risks. These risks vary based on factors including the nature and volume of data accessed or processed by suppliers, the concentration of services they deliver, their exposure to downstream service providers, and the geographic locations—both domestic and international— from which services are provided. Our internal control and third-party risk management frameworks may not always provide adequate oversight or mitigate all potential exposure. Substandard performance by third-party providers can adversely affect our ability to deliver products and services effectively, disrupt business continuity, and negatively impact customer experience. Moreover, replacing or identifying suitable alternatives for underperforming suppliers can be difficult and costly, particularly when swift transitions are required due to unforeseen circumstances.
Current report
Additionally, many of our suppliers have experienced operational challenges arising from inflationary pressures, wars and geopolitical conflicts, international trade policies, cyber threats, natural disasters, and other disruptive events. These external factors may, in turn, adversely affect our operations and service delivery.
Current report
The development and use of AI technologies present risks and challenges that could materially and adversely affect our business, financial condition, and results of operations.
Current report
We are in the early stages of integrating AI into certain aspects of our business operations with the objective of enhancing employee productivity and operational efficiency. At present, we have not implemented fully autonomous AI-driven systems in critical decision-making processes or client-facing activities. Instead, we utilize certain AI solutions to support, inform, or augment decision-making and client interactions, with all final actions subject to human oversight and review. We anticipate that AI technologies may become increasingly integrated into our operations over time. Additionally, some vendors or third-party service providers may incorporate AI within their products, services, or processes, which could indirectly impact our business.
Current report
AI models present unique risks, including the potential for “hallucinations”—instances where the system produces outputs that appear credible but are factually incorrect or misleading. Such errors may lead to inaccurate information being used in decision-making or communicated externally. AI models may also reflect biases inherent in their training data, which could lead to inaccurate outputs, inadvertent disclosure of confidential information, infringement of intellectual property rights, lack of transparency, or other adverse outcomes. The complexity of many AI models also makes them difficult to fully assess, potentially exposing us to financial liability, regulatory scrutiny, or reputational harm.
Current report
We are also exposed to risks arising from the use of AI by threat actors to commit fraud, misappropriate funds, and facilitate cyberattacks. If leveraged against us—or against other financial institutions, securities exchanges, or similar organizations—AI‑enabled threats could pose risks to our operational stability.
Current report
Any reliance on AI introduces a number of risks and challenges. The legal and regulatory environment governing AI remains uncertain and is evolving rapidly, both in the U.S. and internationally. Emerging frameworks include regulations specifically targeting AI technologies. Changes in applicable laws and regulations may require us to modify our approach to AI adoption, increase compliance costs, and heighten the risk of non-compliance. Additionally, challenges in monitoring and governing models over time—including changes in data inputs—may result in unintended deterioration in model accuracy.
Current report
For more information about our approach to managing technology-related risks, see “Operational, Technology, and Cybersecurity Risk Management” in MD&A on page 78.
Current report
Emerging technologies—including generative AI, mobile platforms, quantum computing, and cloud computing—continue to heighten operational and cybersecurity risks. The complexity and unpredictability of these technologies, as well as limited control over certain aspects of their security, present additional challenges. Threat actors employ a variety of tactics, including exploiting system vulnerabilities or misconfigurations, launching denial-of-service attacks, deploying ransomware, compromising business email systems, deceiving employees through email phishing and social engineering, and targeting our suppliers. These threats can be difficult to detect over extended periods and may be further exacerbated by the use of AI.
Current report
Third-party providers, including suppliers and their subcontractors, present operational and information security risks. These risks include potential security breaches or failures within their systems or those of their downstream partners. In such instances, we may not receive timely notification of incidents affecting our services or data, nor have the ability to participate in related investigations, disclosures, or remediation efforts. Additional risks may arise from human error, noncompliance with security protocols, or intentional misconduct by employees or third parties. Our ability to control and monitor the operational and cybersecurity measures implemented by third-party providers is limited, and under applicable laws, regulations, or contractual obligations, we may be held responsible for cyber incidents within third-party systems that impact us or our customers.
Current report
Furthermore, system upgrades and enhancements may introduce risks related to implementation and integration with existing infrastructure. Given the complexity and interdependence of our technology environment, efforts to improve security can inadvertently lead to system disruptions or new vulnerabilities. Additional risks may arise if hardware and software vendors are unable to deliver timely patches or if we are unable to implement necessary updates promptly—particularly in cases where threat actors are actively exploiting known vulnerabilities.
Current report
Despite substantial investments in cybersecurity, our systems may remain susceptible to evolving threats, and our mitigation efforts may be deemed inadequate by regulatory authorities or courts. Any failure, disruption, or security incident—whether actual or perceived—affecting our communications and information technology systems or those of our third-party providers could impact our operations and services, damage our reputation, result in loss of customer business, increase regulatory scrutiny, expose us to civil litigation and financial liability, and lead to other material adverse consequences.
Current report
Furthermore, any insurance coverage we maintain may be insufficient to fully compensate for losses arising from the foregoing risks. We also cannot assure that such coverage will remain available on acceptable terms, or at all, or that insurers will not deny coverage for future claims.
Current report
Regulators, federal and state legislatures, the current administration, the U.S. Congress, and other governing or advisory bodies continue to implement rules, laws, and policies that affect financial institutions and public companies. These measures are often intended to promote, restrict, or penalize particular activities or industries, thereby influencing their access to financial services.
Current report
Additionally, initiatives such as the current administration's recent proposal to cap credit card interest rates at 10%, along with similar federal and state proposals to limit bank fees and interest rates, may negatively affect bank profitability and limit their ability to offer certain products and services. As a provider of financial products and services across multiple industries and geographic markets, we are subject to these regulatory frameworks and may be affected by future legislative developments. Because the scope and impact of these laws and regulations continue to change, their ultimate effect on our business operations and financial performance cannot be predicted.
Showing the first 40 of 60 passages. Open the source sections for the rest.
Removed paragraphs (37)
Previous report
We have developed comprehensive policies, procedures, and controls to address these risks. However, we cannot guarantee that our actions will effectively prevent or mitigate the impact of these risks on our business or performance. Although not comprehensive, below we describe some of our material risk factors.
Previous report
We provide a wide range of banking products and related services through our local management teams and distinctive brands across Arizona, California, Colorado, Idaho, Nevada, New Mexico, Oregon, Texas, Utah, Washington, and Wyoming. At December 31, 2024, loan balances from our banking operations in Utah, Idaho, Texas, and California accounted for 77% of the commercial lending portfolio, 70% of the CRE lending portfolio, and 70% of the consumer lending portfolio.
Previous report
We could be negatively affected by adverse economic conditions.
Previous report
Changes in the levels and sources of liquidity and capital may limit our operations and potential growth.
Previous report
Unfavorable rating actions from rating agencies could adversely affect both us and the holders of our securities.
Previous report
Challenges faced by other financial institutions could adversely affect financial markets as a whole and have indirect adverse effects on us.
Previous report
This phenomenon has been evident in recent times, as financial institutions like ours were impacted by concerns regarding the soundness or creditworthiness of other financial institutions or reports of systemic deterioration in asset classes, such as commercial real estate. These concerns caused substantial and cascading disruptions within the financial markets and deposits environment, increased expenses, reduced bank fees, and adversely impacted the market price and volatility of our common stock.
Previous report
We may not be able to hire or retain qualified personnel or effectively promote our corporate culture, and recruiting and compensation costs may increase due to changes in the workplace, marketplace, economy, and regulatory environment.
Previous report
Our ability to execute our strategy, provide services, and remain competitive may be compromised if we are unable to recruit or retain qualified personnel, or if employee compensation and benefits costs increase substantially. Bank regulatory agencies have issued regulations and guidance that limit the manner and amount of compensation that banking organizations can provide to employees. These regulations and guidance may adversely affect our ability to attract and retain key personnel. Some of these limitations may not apply to institutions with which we compete for talent, particularly as we increasingly compete with financial technology providers and other entities that may not be subject to the same compensation limitations. If we experience such adverse effects with respect to our employees, our business, financial condition, and results of operations could be adversely or materially impacted.
Previous report
Our ability to retain talent may also be adversely affected by changes in the economy and workforce trends, priorities, migration, modes of delivery and other considerations, such as the increased ability of employees to work remotely across many industries. This growth in remote work, along with changing priorities and benefits, has led to increased compensation and related expenses, as well as workplace challenges. These challenges include fewer opportunities for face-to-face interactions, training and mentoring new employees, promoting a cohesive corporate culture, and increased competition for experienced labor, particularly in high-demand and highly skilled categories. Additionally, inflationary pressures have increased our compensation costs and are likely to continue to do so in the future.
Previous report
We have implemented and are continuing to implement significant changes, including organizational restructurings, efficiency initiatives, and the replacement or upgrading of technology systems to improve our operating efficiency and control environment. The ultimate success and completion of these changes, and their effects on us, may vary significantly from intended results, which could materially adversely affect us.
Previous report
In July 2024, we successfully completed the final phase of our multi-year project to replace our core loan and deposit banking systems. We continue to invest in a variety of strategic projects designed to enhance our products and services and simplify our business operations. These initiatives and other significant changes are ongoing and at various stages of completion. By their nature, projections regarding duration, cost, expected savings, expected efficiencies, and related items are subject to change and significant variability. There is no certainty that we will achieve the expected benefits or other intended results associated with these projects.
Previous report
Our ability to remain competitive increasingly depends on maintaining critical technological capabilities, and identifying and developing new, value-added products for existing and future customers. These technological competitive pressures arise from both traditional banking and nontraditional sources. Larger banks may have greater resources and economies of scale for maintaining existing capabilities and developing or adopting digital and other technologies. Fintechs and other technology platform companies continue to emerge and compete with traditional financial institutions across a wide variety of products and services. Experimentation with, and adoption of, artificial intelligence, quantum computing, the expansion of blockchain technologies and digital currencies, including the potential creation and adoption of central bank digital currencies, as well as the increasing use and mainstream acceptance of such digital currencies, may fundamentally change the business of banking and present similar risks.
Previous report
Our failure to remain technologically competitive could impede our market position and reduce customer satisfaction, product accessibility, and relevance.
Previous report
We may encounter significant operational disruptions arising from our numerous projects and initiatives. These disruptions may include significant time delays, cost overruns, loss of key personnel, technological issues, and processing failures. Additionally, we may experience operational disruptions due to capacity constraints, service level failures, inadequate performance, and certain replacement costs. Any or all of these issues could disrupt our systems, processes, control environment, procedures, employees, and customers. The ultimate effect of any significant disruption to our business could subject us to additional regulatory scrutiny or expose us to civil litigation and possible financial liability, any of which could materially impact us, including our control environment, operating efficiency, and results of operations.
Previous report
Attempts to commit fraud, both internally and externally, are becoming increasingly sophisticated and may rise in an adverse economic environment. We have experienced losses in the past due to these attempts and schemes and may not be able to identify, prevent, or mitigate all instances of fraud in the future that could result in material losses. These attempts may go undetected by the systems and procedures we have in place to monitor our operations.
Previous report
We utilize models in the management of the Bank. There is a risk that these models are inaccurate in various ways, potentially leading to suboptimal decisions.
Previous report
We rely on various suppliers to perform operational activities essential to our business. While these relationships offer benefits, they also present risks. These risks vary based on several factors, such as the type and amount of data our suppliers may access or process, the concentration of services they provide to us, and the national and international locations from which they operate. Our operational controls and third-party management programs may not always provide adequate oversight and control. Inadequate performance by third parties can adversely affect our ability to deliver products and services to our customers and conduct our business. Replacing or finding alternatives for underperforming suppliers can be difficult and costly, potentially adversely impacting our customers and other operations, especially when circumstances require us to make changes under tight time constraints. Many of our suppliers have experienced adverse effects on their operations, supply chains, personnel, and businesses due to inflationary pressures, wars and geopolitical conflicts, cyber vulnerabilities, natural disasters, and other events, all of which can impact our operations as well.
Previous report
Moreover, developments in our and third parties’ use of generative artificial intelligence, as well as the use of mobile and cloud technologies, could heighten these and other operational risks, as certain aspects of the security of such technologies may be complex, unpredictable, or beyond our control. The types of attacks these threat actors use include, but are not limited to, exploiting customer or system vulnerabilities or misconfigurations, denial-of-service, ransomware, compromising business emails, deceiving employees through email phishing or social engineering, and compromising any of our suppliers. Such threats may be difficult to detect over extended periods and could be further exacerbated through threat actors' use of artificial intelligence.
Previous report
Third parties, including our suppliers and their subcontractors, also present operational and information security risks to us, including security incidents or failures of their own systems and downstream systems. In incidents involving third parties, we may not be informed promptly of any effect on our services or our data, nor be able to participate in any related investigation, notification, or remediation. The possibility of third-party or employee error, failure to follow security procedures, or malfeasance also presents these risks.
Previous report
System enhancements and updates may also create risks associated with implementing new systems and integrating them with existing ones. Due to the complexity and interconnectedness of information technology systems, the process of enhancing our defenses itself can create a risk of systems disruptions and security issues. We may face additional risks to the extent our hardware and software providers are unable to deliver patches and updates to mitigate vulnerabilities or we are unable to implement patches in a timely manner, particularly when a vulnerability is being actively exploited by threat actors. We have devoted and will continue to devote significant resources to the security of our computer systems, but they may still be vulnerable to these threats and our efforts may subsequently be deemed to have been inadequate by regulators or courts. The occurrence of any failure, interruption or security incident to our information systems or those of our third-party suppliers could interfere with or disrupt our operations and services, damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny, expose us to civil litigation and financial liability, or otherwise result in material adverse consequences on us.
Previous report
Regulators, the U.S. Congress, state legislatures, and other governing or consultative bodies continue to enact rules, laws, and policies to regulate the financial services industry and public companies, including laws that are designed to promote, protect, or penalize certain activities or industries and their access to financial services. We are, and may in the future become, subject to these laws by offering our products and services to certain industries or in certain locations. The nature of these laws and regulations and their effect on our future business and performance cannot be predicted.
Previous report
There can be no assurance that any or all of these regulatory changes or actions will ultimately be enacted. However, if enacted, some of these proposals could adversely affect us by, among other things: impacting after-tax returns earned by financial services firms in general; limiting our ability to grow; increasing FDIC insurance assessments, taxes or fees on our funding or activities; limiting the range of products and services that we could offer; and requiring us to raise capital at inopportune times.
Previous report
Political developments, such as those recently announced or enacted by the new administration, may result in sudden changes in laws, policies, and government operations. For example, the administration has taken steps or indicated plans to (1) change leadership of, and potentially combine or eliminate, various regulatory agencies; (2)
Previous report
alter the purpose, funding, or enforcement powers of certain agencies; (3) significantly reduce the size of the federal government and workforce; and (4) modify, reinterpret, replace, or repeal various laws, regulations and regulatory guidance.
Previous report
These actions may create uncertainties and volatility in U.S. and global markets, potentially affecting the government's ability to provide services at historical levels. They may also impact our ability to obtain guidance and support from the government in addressing existing and emerging risks, such as climate change, cyber attacks, financial privacy, artificial intelligence, and public safety. Many of these actions are being legally challenged or require further legislative action before implementation. The extent and timing of these changes are uncertain, as are their potential impacts, whether beneficial or adverse, on our business, financial performance, and customers.
Previous report
We are subject to the income tax laws of the U.S., its states, and other jurisdictions where we conduct business. These laws are complex and subject to different interpretations by the taxpayer and the various taxing authorities. In determining the provision for income taxes, management makes judgments and estimates about the application of these inherently complex laws, related regulations, and case law. In the process of preparing our tax returns, management attempts to make reasonable interpretations of the tax laws. These interpretations are subject to challenge by the tax authorities upon audit or to reinterpretation based on management’s ongoing assessment of facts and evolving case law. Changes in tax laws, regulations, or case law may result in an adverse impact to our effective tax rate, tax obligations, and financial results. Additionally, challenges made by tax authorities during an audit may result in adjustments to our tax return filings, resulting in similar adverse impacts to our financial position.
Previous report
We are subject to risks associated with legal claims, litigation, and regulatory and other government proceedings. Our exposure to these proceedings may increase as a result of stresses on customers, counterparties, and others arising from the past or current economic environments, more frequent claims and actions resulting from fraud schemes perpetrated by or involving our customers, new regulations promulgated under recently enacted statutes, the creation of new examination and enforcement bodies, changes in administration and other political developments, and enforcement and legal actions against banking organizations. Any such matters may result in material adverse consequences to our results of operations, financial condition, or ability to conduct our business, including adverse judgments, settlements, fines, penalties (e.g., civil money penalties under applicable banking laws), injunctions, restrictions on our business activities, or other relief. We maintain insurance coverage to mitigate the financial risk of defense costs, settlements, and awards, but the coverage is subject to deductibles and limits of coverage. Our involvement in any such matters, even if the matters are ultimately determined in our favor, could also cause significant harm to our reputation and divert management attention from the operation of our business. In general, the amounts paid by financial institutions in settlement of proceedings or investigations have been increasing dramatically. This has affected and will continue to adversely affect (1) our ability to obtain insurance coverage for certain claims, (2) our deductible levels, and (3) the cost of premiums associated with our coverage. Consequently, our financial results are subject to greater risk of adverse outcomes from legal claims.
Previous report
Due to the difficulty in predicting the timing of, and damages or penalties associated with, the resolution of legal claims, it is possible that adverse financial impacts from litigation could occur sporadically and could be significant. In addition, any enforcement matters could impact our supervisory and CRA ratings, which may restrict or limit our activities.
Previous report
State corporate codes, including that of Utah, are widely recognized, updated by legislative action from time-to-time, and may be based on and influenced by model statutes. The federal securities law regime established by the Securities Act and the Exchange Act and the SEC’s extensive and well-developed framework thereunder are widely used by public companies. The OCC’s statutory and regulatory frameworks have been used by publicly traded banking organizations relatively rarely and are not as well developed as the corporate and securities law frameworks applicable to other public corporations. While certain specific risks associated with operating under these frameworks are described below, unless and until these frameworks are further developed and established over time, the uncertainty of how these frameworks might apply to any given corporate or securities matters may prevent us from effecting transactions in an efficient and optimal manner or perhaps at all.
Previous report
These differences could adversely affect the ability of the Bank and other banks registered under the National Bank Act to efficiently consummate acquisition transactions. In addition, such differences could make us less competitive as a potential acquirer in certain circumstances given that our acquisition proposal may be conditioned on shareholder approval while our competitors’ proposals will not have such a condition.
Previous report
Any of the risks described in this section may give rise to adverse publicity and other expressions of negative public opinion, increased regulatory scrutiny, and damaged relationships among other reputational risks.
Previous report
Wars, international trade policies and disputes, and other geopolitical conflicts in recent years, have created increasing risks for global markets, trade, economic conditions, cybersecurity, and similar concerns. For example, these conflicts have affected and could continue to affect the availability and price of commodities and products, adversely affecting supply chains and increasing inflationary pressures; the value of currencies, interest rates, and other components of financial markets; and lead to increased risks of events such as cyberattacks that could result in severe costs and disruptions to governmental entities and companies and their operations. The impact of these conflicts and retaliatory measures is continually evolving and cannot be predicted with certainty. It is likely that these conflicts will continue to affect the global political order and global and domestic markets for a substantial period of time.
Previous report
Stakeholder views and developments related to environmental and social issues could lead or require us to restrict or modify certain business activities and negatively affect our business and reputation.
Previous report
There has been an increased focus by politicians, investors, and other stakeholders regarding practices related to environmental and social issues. For example, the new administration has issued executive orders designed to prohibit or limit certain activities often referred to as “diversity, equity, and inclusion” by government agencies, federal contractors, and others. Due to the varying perspectives among stakeholders on these issues, we face an increased risk that any action or inaction on our part may be perceived negatively by some stakeholders, potentially adversely impacting our business and reputation.
Previous report
Investor and regulatory expectations could eventually lead us to restrict or modify certain business practices. Additionally, our operations could be adversely impacted by federal, state, and local laws and regulations addressing environmental and social issues. For example, some states have recently enacted or considered laws prohibiting financial institutions from limiting services to specific types of businesses if they also engage with governmental entities in those states. Depending on the wording and implementation of these laws, our risk management capabilities could be adversely impacted. These environmental and social regulations may conflict with other state and federal laws, potentially increasing our costs or limiting our ability to operate in certain jurisdictions.
Previous report
The U.S. government is currently operating under a continuing resolution that provides short-term appropriations. Efforts to pass spending bills for long-term government funding have proven challenging, increasing the risk of a government shutdown. Concurrently, the national debt continues to grow as Congress struggles to formulate a plan for greater fiscal responsibility. These circumstances may result in downgrades in the U.S. credit rating or defaults, introducing additional volatility into the U.S. economy. This could impact capital and credit markets, the banking industry, financial markets, and interest rates, among other unforeseen consequences. In such an event, the Bank’s liquidity, operating margins, financial condition, and results of operations could be materially and adversely affected.
Reworded paragraphs (62)
Previous wording
We generate revenue and grow our businesses by taking prudent and well-managed risks. These risks are outlined in our Risk Management Framework. The Board has established an Audit Committee, a Compensation Committee, a Risk Oversight Committee (“ROC”), and appointed an Enterprise Risk Management Committee (“ERMC”) to oversee and implement the Risk Management Framework. The ERMC is comprised of senior management and is chaired by the Chief Risk Officer. These committees monitor various risk areas, such as credit, interest rate and market, liquidity, strategic and business, operational, technology, cybersecurity, capital/financial reporting, legal/compliance (including regulatory), and reputational risks, as outlined in our risk taxonomy.
Current wording
To promote effective governance, the Board has established several specialized committees: the Audit Committee, the Compensation Committee, and the Risk Oversight Committee (“ROC”). Additionally, the Enterprise Risk Management Committee (“ERMC”), chaired by the Chief Risk Officer and comprised of senior management, is responsible for implementing and maintaining the Risk Management Framework. These committees collectively oversee various risk categories, as defined in our risk taxonomy. These include credit risk, interest rate and market risk, liquidity risk, strategic and business risk, operational risk, technology risk, cybersecurity risk, capital/financial reporting risk, legal/compliance risk (including regulatory risk), and reputational risk.
Previous wording
Credit quality has adversely affected us in the past and may adversely affect us in the future.
Current wording
Credit quality has negatively impacted our performance in the past and may continue to do so in the future.
Previous wording
Credit risk is one of our most significant risks. Rising interest rates, increased market volatility, or a weakening U.S. economy, both nationally and in the local markets where we operate, could result in, among other things, deterioration in credit quality and reduced demand for credit. This, in turn, may adversely impact the income generated from our loan and investment portfolios, result in higher charge-offs, and necessitate an increase in the allowance for credit losses.
Current wording
Credit risk is one of our most significant risks. Adverse macroeconomic conditions—such as rising or persistently elevated interest rates, heightened market volatility, or a weakening U.S. economy at both the national and local markets in which we operate—could result in, among other things, deterioration in credit quality and reduced credit demand. These developments may adversely impact income generated from our loan and investment portfolios, lead to increased charge-offs, and require higher provisions for credit losses. For example, we recently incurred significant credit losses in connection with revolving lines of credit extended to two related commercial borrowers to finance the origination and purchase of commercial and residential mortgages.
Previous wording
We have a concentration of risk from counterparties, which may have unique risk characteristics that may adversely affect our results.
Current wording
We have a concentration of risk associated with certain counterparties, which may present unique risk characteristics that could adversely impact our financial results.
Previous wording
Concentrations of risk from counterparties could adversely affect us. Similar exposures across our loan and investment securities portfolios could pose additional credit risk. Additionally, concentrations with counterparties in derivative or securities financing transactions could further elevate this risk.
Current wording
Exposure to concentrations of risk among counterparties may have an adverse effect on our financial performance. Similar risk profiles across our loan and investment securities portfolios could pose additional credit risk. Additionally, concentrations involving counterparties in derivative or securities financing transactions may heighten this exposure, increasing our vulnerability to adverse developments affecting those entities.
Previous wording
We have a concentration of risk in our loan portfolio, including, but not limited to, loans secured by real estate, oil and gas-related lending, and leveraged and enterprise value lending. These loans may have unique risk characteristics that may adversely affect our results.
Current wording
We have a concentration of risk within our loan portfolio, including, but not limited to, loans secured by real estate, oil and gas-related lending, and leveraged and enterprise value lending. These loan types carry unique risk characteristics that could adversely impact our financial results.
Previous wording
We engage in commercial real estate (“CRE”) term and construction lending, primarily within our Western states footprint. Certain CRE collateral types, particularly multifamily, industrial, and office properties, continue to experience increased vacancy rates, declining property values, rent concessions, elevated costs, and pressures from higher interest rates. These factors could lead to increased delinquencies and defaults.
Current wording
We engage in CRE term and construction lending, primarily within our Western U.S. footprint. Certain CRE collateral types—particularly multifamily, industrial, and office properties—currently face elevated vacancy rates, declining property valuations, rent concessions, and increased operating costs. These market dynamics could lead to higher levels of loan delinquencies and defaults.
Previous wording
Additionally, we engage in oil and gas-related lending, and provide leveraged and enterprise value loans across our entire footprint. These loans may be subject to specific risks, including governmental and social responses to environmental issues and climate change, volatility, and potential significant and prolonged declines in collateral-values and activity levels. Any decline in these portfolios could result in increased credit losses and reduced loan demand, adversely affecting our business and that of our customers. There may also be other unidentified risks within our loan portfolio.
Current wording
Additionally, our portfolio includes oil and gas-related lending, as well as leveraged and enterprise value loans across our geographic footprint. These exposures carry distinct risks, including regulatory and societal responses to environmental and climate-related concerns, commodity price volatility, and the potential for significant and sustained declines in collateral values and sector activity. Adverse developments in these portfolios could result in increased credit losses and reduced loan demand, negatively impacting both our financial performance and that of our customers.
Previous wording
Our business is highly correlated with local economic conditions in a specific geographic region of the U.S.
Current wording
Our business performance is highly correlated with local economic conditions in specific geographic regions of the U.S.
Previous wording
Due to this geographic concentration, our financial performance is largely influenced by economic conditions in these markets. Consequently, any deterioration in economic conditions, including those triggered by climate change or natural disasters, could disproportionately impact these states, leading to higher credit losses and significantly affecting our overall operations and financial results.
Current wording
This geographic concentration results in our financial performance being closely tied to economic conditions within these key markets. Accordingly, any adverse developments—such as economic downturns, climate-related disruptions, or natural disasters—could disproportionately affect these states, leading to higher credit losses and materially impacting our overall business operations and financial results.
Previous wording
For information about our lending exposure to various industries and how we manage credit risk, see “Credit Risk Management” in MD&A on page 56.
Current wording
For further details regarding our industry-specific lending exposures and credit risk management practices, see “Credit Risk Management” in MD&A on page 56.
Previous wording
Adverse economic conditions present significant risks to our business, impacting our loan and investment portfolios, capital levels, results of operations, and financial condition. A slowing economy, combined with inflationary pressures, changes in monetary and fiscal policies, rising interest rates, and declining values of our fixed-rate assets, as well as tariffs, sanctions, and other policies and actions impacting domestic and global trade, can increase these risks. These factors may lead to reduced loan demand, increased credit losses, and lower fee income, among other negative effects.
Current wording
Adverse economic conditions present significant risks to our business, potentially impacting our loan and investment portfolios, capital adequacy, operating results, and overall financial condition. A slowing economy—combined with inflationary pressures, changes in monetary and fiscal policy, fluctuating interest rates, and declining valuations of fixed-rate assets—can amplify these risks.
Previous wording
Failure to effectively manage our interest rate risk could adversely affect our results.
Current wording
Failure to adequately manage interest rate risk could have a material adverse impact on our financial results.
Previous wording
Net interest income is the largest component of our revenue. Factors beyond our control can significantly influence the interest rate environment and increase our risk. These factors include changes in the prevailing interest rate environment, competitive pricing pressures for our loans and deposits, adverse shifts in the mix of deposits and other funding sources, and volatile market interest rates resulting from general economic conditions and the policies of governmental and regulatory agencies, particularly the FRB.
Current wording
Net interest income represents the largest component of our total revenue, and its performance is subject to a variety of external factors that can significantly influence the interest rate environment. These factors include changes in prevailing market interest rates, competitive pricing pressures for loans and deposits, unfavorable shifts in the composition of deposits and other funding sources, and volatility in interest rates driven by broader economic conditions and policy decisions by governmental and regulatory agencies—particularly the FRB. The FRB’s reduction of the federal funds rate in 2025, for example, introduced additional uncertainty into market expectations and contributed to heightened volatility in asset pricing, funding costs, and customer behavior.
Previous wording
Most components of our balance sheet are sensitive to fluctuations in interest rates. Mismatches in rate sensitivity between assets and liabilities may result in unanticipated changes in their values, as well as related income and expense. Additionally, customer behavior can significantly impact asset and liability values, as customers may choose to withdraw certain deposits or prepay certain loans at any time, affecting our expected cash flows.
Current wording
A substantial portion of our balance sheet is sensitive to interest rate fluctuations. Disparities in rate sensitivity between assets and liabilities may result in unanticipated changes in their valuations, as well as related income and expense levels. Customer behavior can also significantly impact asset and liability outcomes; for instance, customers may choose to withdraw deposits or prepay loans, which can materially affect our expected cash flows. This risk has been heightened by technological advancements that enable deposits to be transferred electronically with greater ease and speed.
Previous wording
For information about how we manage interest rate risk and market risk, see “Interest Rate and Market Risk Management” in MD&A on page 70.
Current wording
For more information on our approach to managing interest rate risk and market risk, see “Interest Rate and Market Risk Management” in MD&A on page 72.
Previous wording
Our primary source of liquidity is deposits from our customers, which can be influenced by market-related forces such as increased competition and other factors. For example, we, like many other banks, experienced heightened volatility in deposit levels and funding costs following the notable bank closures in 2023. If we are unable to fund assets through customer deposits or access other funding sources on favorable terms, or if we face increased borrowing costs or FDIC insurance assessments, or fail to manage liquidity effectively, our liquidity, operating margins, financial condition, and results of operations could be materially and adversely affected.
Current wording
Our primary source of liquidity is customer deposits, which can be influenced by market-related forces such as increased competition, the adoption of emerging technologies—including stablecoins and tokenized deposits—and various other external factors. If we are unable to fund assets through customer deposits or access alternative funding sources on favorable terms—or if we encounter rising borrowing costs, increased FDIC insurance assessments, or are unable to manage liquidity effectively—our liquidity position, operating margins, financial condition, and overall financial performance could be materially and adversely affected.
Previous wording
The Federal Reserve’s tightened monetary policy has resulted in a decline in the value of our fixed-rate loans and investment securities pledged as collateral for short-term borrowings. Additionally, other economic conditions may continue to impact our liquidity and associated risk management efforts. The Federal Home Loan Bank (“FHLB”) system and Federal Reserve have been, and remain, significant sources of additional liquidity and funding. However, borrowing from the FHLB is subject to requirements and conditions, and may not always be available as a source of liquidity. Changes in FHLB or Federal Reserve funding programs could also adversely affect our liquidity and management of associated risks.
Current wording
The Federal Reserve’s monetary policy decisions, along with broader economic conditions, may continue to influence our liquidity position and related risk management strategies. The Federal Home Loan Bank (“FHLB”) system and Federal Reserve remain significant sources of supplementary liquidity and funding. However, access to FHLB advances is subject to specific eligibility requirements and conditions, and such funding may not always be available. Furthermore, changes to FHLB or Federal Reserve funding programs could adversely affect our liquidity and the effectiveness of our risk management efforts.
Previous wording
We access capital markets to supplement our funding. This access is influenced by the ratings assigned to us by rating agencies. The rates we pay on our securities are also affected by, among other factors, the credit ratings assigned to us and our securities by recognized rating agencies. Ratings downgrades to us or our securities could increase our costs or otherwise negatively impact our liquidity position, financial condition, or the market prices of our securities.
Current wording
We access capital markets to supplement our funding sources, and our ability to do so is influenced by the credit ratings assigned to us by rating agencies. These ratings are based on various factors, including the Bank's financial strength and external conditions affecting the broader financial services industry. The interest rates applicable to our issued securities are also impacted by these credit ratings. Any downgrade of our ratings or those of our securities could result in higher funding costs and may negatively impact our liquidity position, financial condition, or the market valuation of our securities.
Previous wording
For information about how we manage liquidity risk, including rating agency actions, see “Liquidity Risk Management” in MD&A on page 73.
Current wording
For more information on our approach to managing liquidity risk, including considerations related to rating agency actions, see “Liquidity Risk Management” in MD&A on page 75.
Previous wording
The soundness and stability of many financial institutions may be closely interrelated due to credit, trading, clearing, or other relationships between these institutions. As a result, concerns about, or a default or threatened default by, one institution could lead to significant market-wide liquidity and credit problems, losses, or defaults by other institutions. This phenomenon, sometimes referred to as “systemic risk,” may adversely affect financial intermediaries, such as clearing agencies, clearing houses, banks, securities firms, and exchanges, with which we interact on a daily basis, and therefore, could adversely affect us.
Current wording
The soundness and stability of many financial institutions are often closely interconnected through various credit, trading, clearing, or other operational relationships. As a result, concerns regarding—or an actual or threatened default by—any single institution could lead to widespread liquidity and credit problems, losses, or defaults across the broader financial system. This phenomenon, commonly referred to as “systemic risk,” may adversely affect financial intermediaries such as clearing agencies, clearing houses, banks, securities firms, and exchanges with which we regularly engage, and may therefore negatively impact our operations.
Previous wording
Our ability to develop, adopt, implement, and deliver technological advancements could adversely affect us.
Current wording
Our ability to effectively develop, adopt, implement, and deliver technological innovations may significantly impact our financial performance and could adversely affect our business.
Previous wording
Our operations could be disrupted by the impact of new and ongoing projects and initiatives.
Current wording
Our operations may experience disruptions as a result of the implementation and impact of new and ongoing projects and initiatives.
Previous wording
Due to their inherent limitations, our internal controls may not prevent or detect operational failures or misstatements in our financial statements arising from inadequate or failed internal processes and systems, human errors or misconduct, or other adverse external events. A failure in our internal controls could significantly negatively impact our earnings, and the perception that customers, regulators, and investors may have of us, thereby adversely affecting our business and stock price.
Current wording
Despite their design and implementation, our internal controls are subject to inherent limitations and may not fully prevent or detect operational failures or misstatements in our financial statements. Such issues may arise from inadequate or failed internal processes and systems, human error or misconduct, or adverse external events. A failure in our internal controls could materially and negatively affect our financial performance and earnings. Moreover, any perceived weakness in our internal controls may undermine stakeholder confidence—including that of customers, regulators, and investors—potentially resulting in reputational harm and adverse impacts on our business operations and stock price.
Previous wording
Climate-related and other catastrophic events, including but not limited to, hurricanes, tornadoes, earthquakes, wildfires, floods, mudslides, prolonged drought, and pandemics may adversely affect us, our customers, the general economy, financial and capital markets, and specific industries.
Current wording
Climate-related and other catastrophic events may adversely impact our organization, our customers, the broader economy, financial and capital markets, and certain industries.
Previous wording
The occurrence of pandemics, natural disasters, and other climate-related or catastrophic events could materially and adversely affect our operations and financial results. We have significant operations and customers in Utah, Texas, California, and other regions where natural and other disasters have occurred, and are likely to continue to occur. These regions are known for being vulnerable to natural disasters and other risks, such as hurricanes, tornadoes, earthquakes, wildfires, floods, mudslides, prolonged droughts, and other weather-related events, some of which may be exacerbated by climate change and become more frequent and intense. These types of catastrophic events, including the recent wildfires in Southern California, have posed physical risks to our property and disrupted the local economy, our business, and customers, including decreased access to insurance and other services. Additionally, catastrophic events occurring in other regions of the world may have an impact on us and our customers.
Current wording
The occurrence of pandemics, natural disasters, and other climate-related or catastrophic events could materially and adversely affect our operations and financial performance. We maintain substantial operations and serve a significant customer base in regions such as Utah, Texas, California, and other regions—areas which are historically susceptible to natural and other environmental disasters. These include hurricanes, tornadoes, earthquakes, wildfires, floods, mudslides, prolonged droughts, and other weather-related events, many of which may be exacerbated by the effects of climate change and occur with increasing frequency and severity. Events, such as the 2025 wildfires in Southern California, have presented physical risks to our facilities, disrupted local economic activity, and adversely affected our business and customers—particularly through reduced access to insurance and essential services. Additionally, similar events occurring in other parts of the world may also have indirect impact on our operations and customers.
Previous wording
We rely on models in the management of the Bank. For example, we use models to inform our estimate of the allowance for credit losses, manage interest rate and liquidity risk, project stress losses in various segments of our loan and investment portfolios, and forecast net revenue under stress. However, models cannot perfectly predict outcomes, and management decisions based on these models may therefore be suboptimal. For example, due to the prominent bank closures in 2023, customer deposit behavior deviated from modeled behaviors, prompting us to redevelop our deposit models, which are currently used by management. For more information about our deposit models, see “Interest Rate and Market Risk Management” in MD&A on page 70.
Current wording
We utilize various models in the management of the Bank, including those used to estimate the allowance for credit losses (“ACL”), manage interest rate and liquidity risk, project stress-related losses across segments of our loan and investment portfolios, and forecast net revenue under adverse conditions. However, models are inherently subject to limitations and cannot precisely predict future outcomes. Weaknesses in model design—such as inaccurate assumptions or reliance on historical data used to “train” or calibrate models that may not reflect current or expected conditions—could lead to inaccurate or misleading outputs. Consequently, decisions based on these models may occasionally be suboptimal. For more information about our deposit models, see “Interest Rate and Market Risk Management” in MD&A on page 72.
Previous wording
We outsource various operations to third-party suppliers, which could adversely impact our business and operational performance.
Current wording
We outsource certain operations to third-party providers, which may pose risks that could adversely affect our business and operational performance.
Previous wording
For information about how we manage operational risk, see “Operational, Technology, and Cybersecurity Risk Management” in MD&A on page 76.
Current wording
For additional information about how we manage operational risk, see “Operational, Technology, and Cybersecurity Risk Management” in MD&A on page 78.
Previous wording
Our operations and customer services could be adversely impacted by system vulnerabilities, failures, or outages.
Current wording
Our operations and customer-facing services may be adversely affected by system vulnerabilities, failures, or outages.
Previous wording
We rely on various information technology systems that support our internal operations and customer services. Vulnerabilities in, or a failure or outage of, one or more of these systems could impact our ability to perform internal operations and provide services to customers, such as online banking, mobile banking, remote deposit capture, treasury and payment services, and other services dependent on system processing. These risks increase as systems and software approach the end of their useful life or require more frequent updates and modifications. We have well-established business continuity, disaster recovery, and crisis management protocols that may not be sufficient to restore our operations in the event of system failure or other outages. We cannot guarantee that such occurrences will not have a significant operational or customer impact.
Current wording
We rely on various information technology systems to support both internal operations and customer-facing services. A vulnerability, failure, or outage affecting any of these systems could affect our ability to execute critical functions and deliver services to customers, such as online banking, mobile banking, remote deposit capture, treasury and payment services, and other services dependent on system processing. These risks are heightened as systems and software approach the end of their useful life or require increasingly frequent updates and modifications. Although we maintain well-established business continuity, disaster recovery, and crisis management protocols, these measures may not be sufficient to fully restore operations in the event of a significant system disruption. As such, we cannot ensure that such incidents will not result in significant operational or customer-facing impacts.
Previous wording
For information regarding risks associated with the replacement or upgrades of our technology systems, see “Strategic and Business Risk” in Risk Factors on page 16. For information about how we manage technology risk, see “Operational, Technology, and Cybersecurity Risk Management” in MD&A on page 76.
Current wording
For risks related to technology system enhancements, see “Strategic and Business Risk” in Risk Factors on page 17.
Previous wording
We are subject to various information system failures and cybersecurity risks that could adversely affect our business and financial performance.
Current wording
We are exposed to risks related to information system failures and cybersecurity threats, which could adversely impact our business operations and financial performance.
Previous wording
We rely heavily on communications and information systems to conduct our business. Our systems process and maintain information that is confidential, proprietary, personal, or otherwise sensitive, including financial and other confidential business information. We, our customers, and other financial institutions with which we interact, are subject to ongoing, continuous attempts by threat actors, such as organized cybercrime, hackers, and state-sponsored organizations, to penetrate key systems. Information security risks for us and other large financial institutions have increased significantly in recent years, partly due to the proliferation of new technologies, including artificial intelligence, the ubiquity of internet connections, and the increased sophistication and activities of threat actors.
Current wording
We rely extensively on communications and information systems to support our business operations. These systems process and store confidential, proprietary, personal, or otherwise sensitive data, including financial and other confidential business information. Like other financial institutions, we and our customers are subject to persistent and increasingly sophisticated cyber threats from a range of threat actors, including organized cybercriminals, hackers, and state-sponsored organizations. The proliferation of advanced technologies—such as AI—alongside widespread internet connectivity and increased sophistication of the activities of threat actors has significantly heightened information security risks across the financial services industry.
Previous wording
As cybersecurity threats continue to evolve, we allocate necessary resources to modify or enhance our defenses and investigate or remediate any information security vulnerabilities. While we and our third-party suppliers have experienced cybersecurity incidents in the past that have not materially impacted our data, customers, or operations, there can be no assurance that future failures, interruptions, or significant security breaches will not occur or that they will be adequately addressed. It is impossible to determine the severity or potential effects of these incidents with any certainty.
Current wording
As cybersecurity threats continue to evolve, we remain committed to allocating the necessary resources in an effort to strengthen our defenses and address any information security vulnerabilities. While past cybersecurity incidents involving our systems and those of our third-party providers have not resulted in material impacts to our data, customers, or operations, we cannot guarantee that future incidents will not occur or that they will be effectively mitigated. The potential severity and consequences of such events are inherently uncertain.
Previous wording
For information about how we manage cybersecurity risk, see Part I, Item 1C. Cybersecurity on page 24.
Current wording
For information about our cybersecurity risk management practices, see Part I, Item 1C. Cybersecurity on page 26.
Previous wording
Internal stress testing and capital management, along with provisions of the National Bank Act and OCC regulations, may limit our ability to increase dividends, repurchase shares of our stock, and access capital markets.
Current wording
Internal stress testing and capital management requirements, together with provisions of the National Bank Act and OCC regulations, may limit our ability to increase dividends, repurchase shares of our stock, or access capital markets.
Previous wording
We utilize stress testing as an important mechanism to inform our decisions on the appropriate level of capital, based on hypothetically stressed economic conditions. Stress testing and other applicable regulatory requirements may, among other things, require us to increase our capital levels, limit our dividends or other capital distributions to shareholders, modify our business strategies, or decrease our exposure to various asset classes. Under the National Bank Act and OCC regulations, certain capital transactions, including share repurchases, are subject to the approval of the OCC. These requirements may limit our ability to respond to and take advantage of market developments.
Current wording
We utilize stress testing as an important tool for informing decisions regarding the appropriate level of capital to maintain under adverse economic conditions. These tests are based on hypothetical scenarios that reflect a severity comparable to those published by the FRB. Compliance with stress testing and other applicable regulatory requirements may require actions such as increasing capital levels, limiting dividend payments or other capital distributions to shareholders, modifying business strategies, or reducing exposure to specific asset classes. Under the National Bank Act and OCC regulations, certain capital-related transactions, including share repurchases, require prior approval from the OCC. These regulatory constraints may limit our ability to respond to and take advantage of evolving market opportunities.
Previous wording
Regulatory requirements, economic conditions, and other factors may require us to raise capital at times or in amounts that are unfavorable to us.
Current wording
Regulatory requirements, prevailing economic conditions, and other factors may require us to raise capital under circumstances or in amounts that are unfavorable to us.
Previous wording
We maintain certain risk-based and leverage capital ratios, as required by our federal banking regulators, which can change depending upon general economic conditions, as well as the particular conditions, risk profiles, and our growth plans. Compliance with capital requirements may limit our ability to expand and has required, and may require, us to raise additional capital or retain earnings that could otherwise be distributed to shareholders. These uncertainties and risks, including those created by legislative and regulatory change and uncertainties, such as recent regulatory proposals that would significantly revise the capital requirements and expand long-term debt requirements applicable to large banking organizations, may increase our cost of capital and other financing costs. For more information about these regulatory proposals, see “Regulatory Developments” in Supervision and Regulation on page 9.
Current wording
We are subject to risk-based and leverage capital ratio requirements established by our federal banking regulators. These ratios may fluctuate based on broader economic conditions, our specific risk profiles, and strategic growth plans. Compliance with these capital requirements may limit our ability to pursue expansion and has, at times, required the retention of earnings or the issuance of additional capital that might otherwise have been distributed to shareholders. Moreover, legislative and regulatory frameworks introduce additional uncertainty and risks. Recent regulatory proposals—such as those aimed at significantly revising capital standards and expanding long-term debt requirements for large banking organizations—may increase our cost of capital and other financing expenses. For more information about these regulatory proposals, see “Regulatory Developments” in Supervision and Regulation on page 9.
Showing the first 40 of 62 pairs. Open the source sections for the rest.