NATIONAL BANKSHARES INC

The Company’s management evaluated, with the participation of the Company’s principal executive officer and principal financial officer, the effectiveness of the Company’s disclosure controls and procedures (as defined in Rule 13a-15(e)) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”) as of the end of the period covered by this report. In conducting the evaluation of the effectiveness of its disclosure controls and procedures as of June 30, 2024, the Company has excluded the operations of FCB as permitted by the guidance issued by the Office of the Chief Accountant of the Securities and Exchange Commission (not to extend more than one year beyond the date of the acquisition or for more than one annual reporting period). The merger was completed on June 1, 2024. See "Note 2. Business Combinations" for further discussion of the merger and its impact on the Company’s consolidated financial statements.

Based on that evaluation, the Company’s principal executive officer and principal financial officer concluded that the Company’s disclosure controls and procedures are effective as of June 30, 2024 to ensure that information required to be disclosed in the reports that the Company files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified by the Company's management, including the Company's principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosure.

There were no changes in the Company’s internal control over financial reporting (as defined in Rule 13a-15(f) of the Exchange Act) that occurred during the three months ended June 30, 2024, that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.

Because of the inherent limitations in all control systems, the Company believes that no system of controls, no matter how well designed and operated, can provide absolute assurance that all control issues have been detected.