Columbia Financial, Inc./MD/

Item 4. CONTROLS AND PROCEDURES

An evaluation was performed under the supervision and with the participation of the Company’s management, including the Chief Executive Officer and the Principal Financial Officer, of the effectiveness of the design and operation of the Company’s disclosure controls and procedures (as defined in Rule 13a-15(e) promulgated under the Securities and Exchange Act of 1934, as amended) as of September 30, 2026. In designing and evaluating the Company’s disclosure controls and procedures, the Company and its management recognize that any controls and procedures, no matter how well-designed and operated, can provide only a reasonable assurance of achieving the desired control objectives, and management necessarily was required to apply its judgment in evaluating and implementing possible controls and procedures. Based on that evaluation, the Company’s management, including the Chief Executive Officer and the Principal Financial Officer, concluded that, as of the end of the period covered by this report, the Company’s disclosure controls and procedures were effective.

During the quarter ended September 30, 2026, there were no changes in the Company’s internal control over financial reporting that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.