Origin Bancorp Inc

Evaluation of disclosure controls and procedures — As of the end of the period covered by this report, we carried out an evaluation, under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, of the effectiveness of our design and operation of our disclosure controls and procedures. In designing and evaluating the disclosure controls and procedures, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives, and management was required to apply judgment in evaluating its controls and procedures. Based on this evaluation, our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) were effective as of the end of the period covered by this report.

Changes in internal control over financial reporting. Our management, including the Chief Executive Officer and Chief Financial Officer, identified no change in our internal control over financial reporting that occurred during the three month period ended September 30, 2024, that has materially affected, or is reasonably likely to materially affect, our internal controls over financial reporting. However, we continually evaluate and seek to enhance our internal controls over financial reporting, and, in this regard, we have recently made certain enhancements designed to identify and mitigate events like the questioned activity by the former banker in East Texas previously discussed in this report.

The effectiveness of our disclosure controls and procedures and our internal control over financial reporting is subject to various inherent limitations, including cost limitations, judgments used in decision making, assumptions about the likelihood of future events, the soundness of our systems, the possibility of human error, and the risk of fraud. Moreover, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions and the risk that the degree of compliance with policies or procedures may deteriorate over time. Because of these limitations, any system of disclosure controls and procedures or internal control over financial reporting may not be successful in preventing all errors or fraud or in making all material information known in a timely manner to the appropriate levels of management.