SECURITY NATIONAL FINANCIAL CORP

Evaluation of Disclosure Controls and Procedures

As of September 30, 2026, the Company carried out an evaluation under the supervision and with the participation of its Chief Executive Officer (CEO) and Chief Financial Officer (CFO), of the effectiveness of the Company’s disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”). The Company has designed these controls and procedures to ensure that information the Company is required to disclose in reports filed under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms, and is accumulated and communicated to Company management, including the Company’s CEO and CFO, as appropriate, to allow timely decisions regarding required disclosure.

The CEO and CFO have concluded that the Company’s disclosure controls and procedures were not effective as of September 30, 2026, because of the material weakness in the Company’s internal control over financial reporting described below. This material weakness was also identified during the fourth quarter of 2025 and is disclosed in the Company’s Annual Report on Form 10-K along with the report of the Company’s registered public accounting firm.

The Company identified a material weakness related to information technology general controls (“ITGCs”) because the Company did not design and maintain effective ITGCs for information systems that are relevant to the preparation of the financial statements. Specifically, deficiencies were identified related to user access controls and program change management controls for financial systems. These deficiencies resulted in related control deficiencies with respect to information generated from the impacted systems and used in the performance of controls relevant to the preparation of the financial statements. The material weakness related to the ITGCs did not result in adjustments to the financial statements for the quarter ended September 30, 2026.

Changes in Internal Control over Financial Reporting

The Company is taking actions to remediate the material weakness relating to its internal control over financial reporting. Other than the changes to the Company’s internal control over financial reporting described in “Remediation Plan and Status” below, there were no changes to the Company’s internal control over financial reporting as defined by Rule 13a-15(f) under the Exchange Act during the quarter ended September 30, 2026 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.

Remediation Plan and Status

The Company is committed to remediating its material weakness as promptly as possible. Management is in the process of implementing its remediation plan, which includes enhancing user access controls and strengthening program change management controls for the Company’s financial systems. Management will test the ongoing operating effectiveness of the new and existing controls in future periods. The material weakness cannot be considered completely remediated until the applicable controls have operated for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively.