WILSON BANK HOLDING CO

Evaluation of Disclosure Controls and Procedures

The Company maintains disclosure controls and procedures, as defined in Rule 13a-15(e) promulgated under the Exchange Act, that are designed to ensure that information required to be disclosed by it in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms and that such information is accumulated and communicated to the Company’s management, including its Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure. The Company carried out an evaluation, under the supervision and with the participation of its management, including its Chief Executive Officer and Chief Financial Officer, of the effectiveness of the design and operation of its disclosure controls and procedures as of the end of the period covered by this report. Based on the evaluation of these disclosure controls and procedures, the Chief Executive Officer and Chief Financial Officer concluded that the Company’s disclosure controls and procedures were effective.

Management Report on Internal Control Over Financial Reporting

Management of the Company is responsible for establishing and maintaining adequate internal control over financial reporting. The Company’s internal control system was designed to provide reasonable assurance to the Company’s management and board of directors regarding the preparation and fair presentation of published financial statements. All internal control systems, no matter how well designed, have inherent limitations. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation.

The Company’s management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2023. In making this assessment, it used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control-Integrated Framework (2013).

Based on that assessment, management concluded that, as of December 31, 2023, the Company’s internal control over financial reporting was effective based on those criteria.

The Company’s independent registered public accounting firm has issued an attestation report on the Company’s internal control over financial reporting, which report is contained in the financial information included with the Company’s 2023 Annual Report and is incorporated herein by reference.

Changes in Internal Controls

No changes were made to the Company’s internal control over financial reporting during the quarter ended December 31, 2023 that have materially affected, or that are reasonably likely to materially affect, the Company’s internal control over financial reporting.