GREENE COUNTY BANCORP INC

Controls and Procedures

Our management, under the supervision and with the participation of the Chief Executive Officer (who is our principal executive officer) and Chief Financial Officer (who is our principal financial and accounting officer), evaluated the effectiveness of the design and operation of its disclosure controls and procedures, as defined in Rule 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), at the end of the period covered by this report. Based upon that evaluation, the Chief Executive Officer and Chief Financial Officer concluded that, as of the end of the period covered by this report, the Company’s disclosure controls and procedures were effective to ensure that information required to be disclosed in the reports, that the Company files or submits under the Exchange Act, is recorded, processed, summarized and reported, within the time periods specified in the Securities and Exchange Commission’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the issuer’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

There were no changes in the Company’s internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the quarter ended March 31, 2026, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Because of its inherent limitations, management does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent or detect all error and fraud. Any control system is based upon assumptions and can provide only reasonable, not absolute, assurance that its objective will be met. Projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. No evaluation of control can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud, if any, with the Company have been detected.

Part II.