NORTHRIM BANCORP INC

Conclusion Regarding the Effectiveness of Disclosure Controls and Procedures

As of the end of the period covered by this report, we evaluated the effectiveness of the design and operation of our disclosure controls and procedures (as such term is defined in Rules 13a-15(e) under the Securities Exchange Act of 1934). Our principal executive and financial officers supervised and participated in this evaluation. Based on this evaluation, our principal executive and financial officers each concluded that our disclosure controls and procedures were effective in timely alerting them to material information required to be included in our periodic reports to the SEC. The design of any system of controls is based in part upon various assumptions about the likelihood of future events, and there can be no assurance that any of our plans, products, services or procedures will succeed in achieving their intended goals under future conditions.

Changes in Internal Control

There were no changes in the Company’s internal controls over financial reporting (as defined in Rule 13a-15f and 15d-15(f) of the Securities Exchange Act of 1934) that occurred during the period covered by this report that have materially affected, or are likely to materially affect, the Company’s internal control over financial reporting.

Management’s Report on Internal Control Over Financial Reporting

Management of the Company is responsible for establishing and maintaining internal control over financial reporting as defined in Rules 13a-15(f) and 15(d)-15(f) of the Securities Exchange Act of 1934. The Company’s internal control over financial reporting is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. Internal control over financial reporting includes maintaining records that in reasonable detail accurately and fairly reflect our transactions; providing reasonable assurance that transactions are recorded as necessary for preparation of our financial statements; providing reasonable assurance that receipts and expenditures are made in accordance with management authorization; and providing reasonable assurance that unauthorized acquisition, use or disposition of Company assets that could have a material effect on our financial statements would be prevented or detected on a timely basis.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements and can provide only reasonable assurance with respect to financial statement preparation and presentation. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with policies or procedures may deteriorate.

Management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2024. In making this assessment management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control – Integrated Framework.

Based on our assessment and the criteria discussed above, management believes that, as of December 31, 2024, the Company maintained effective internal control over financial reporting.

The Company’s independent registered public accounting firm has issued an attestation report on the Company’s effectiveness of internal control over financial reporting. This report appears under Part II. Item 8 of this report.