Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - TCBI
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
Item 1A. Risk Factors, and elsewhere in this report and also as described from time to time in reports subsequently filed with the U.S. Securities and Exchange Commission (“SEC”). You should read such information in conjunction with the Company’s consolidated financial statements and related notes and Part II, Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations. The factors discussed herein are not intended to be a complete summary of all risks and uncertainties that may affect the Company’s businesses. There also may be other factors that the Company cannot anticipate or that are not described herein, generally because the Company does not currently perceive them to be material. Such factors could cause results to differ materially from the Company’s expectations. Forward-looking statements included herein speak only as of the date hereof and should not be relied upon as representing the Company’s expectations or beliefs as of any date subsequent to the date of this report. Except as required by law, the Company undertakes no obligation to revise any forward-looking statements contained in this report, whether as a result of new information, future events or otherwise. You are advised, however, to review any further disclosures the Company make on related subjects in filings with the SEC and in other public statements.
While cybersecurity risks have the potential to materially affect the Company's business, financial condition, and results of operations, the Company does not believe that risks from cybersecurity threats or attacks, including as a result of any previous cybersecurity incidents, have materially affected the Company, including its business strategy, results of operations or financial condition. However, the sophistication of cyber threats continues to increase, and the Company’s cybersecurity risk management and strategy may be insufficient or may not be successful in protecting against all cyber incidents. Accordingly, no matter how well designed or implemented the Company’s controls are, it will not be able to anticipate all cyber security breaches, and it may not be able to implement effective preventive measures against such security breaches in a timely manner. For more information on how cybersecurity risk may materially affect the Company’s business strategy, results of operations or financial condition, please refer to Item 1A. Risk Factors.The Company’s board of directors is charged with overseeing the establishment and execution of the Company’s risk management framework and monitoring adherence to related policies required by applicable statutes, regulations and principles of safety and soundness. Consistent with this responsibility, the board of directors has delegated primary oversight responsibility (i) of the Company’s general risk management framework to the Risk Committee of the board of directors and (ii) of the Company’s information technology, cybersecurity risk and cybersecurity risk management to the Technology Committee of the board of directors, which was formed in the first quarter of 2025. At least one member of the Risk Committee also serves as a member of the Technology Committee. The Risk Committee previously has received, and the Technology Committee will receive on an ongoing basis, regular updates on the Company’s cybersecurity risks and incidents and the cybersecurity program through direct interaction with the Chief Information Security Officer (“CISO”) and the Chief Security Risk Officer (“CSRO”). The Risk Committee previously has provided, and the Technology Committee will provide on an ongoing basis, updates regarding cybersecurity risks and the cybersecurity program to the full board of directors. Additionally, awareness and training on cybersecurity topics is provided to the board of directors on an annual basis. The Information Security department is responsible for implementing and maintaining the Company’s cybersecurity risk management program. The Information Security department consists of cybersecurity and information risk professionals who assess, identify, and manage cybersecurity risks. Information Security is led by the CISO, who reports directly to the Chief Information Officer and the board of directors with dotted-line reporting to the Chief Risk Officer. The Company’s CISO has over 25 years of experience in cybersecurity across the financial services industry as well as experience working in a leading managed security services provider. Prior to joining the Company, the Company’s CISO served as leader of the Global Threat Management Center for a major global financial institution. The Information Risk department is led by the CSRO, who reports directly to the Chief Risk Officer. The CSRO is responsible for ensuring the protection of electronic and physical information through the identification and management of risk activities. As a governance and oversight function, the Information Risk department measures and reports on the quality of information and cyber risk management across all functions of the firm. Information security risk is reported by both the Information Security and Information Risk departments through monthly management metric reporting working groups and multiple layers of quarterly risk committees to achieve an appropriate flow of information risk reporting to the board of directors. The risk committees include the Operational and Information Technology Risk Management Committee, the Executive Risk Management Committee and the Risk Committee and Technology Committee of the board of directors. These committees establish and oversee policies, programs, and other guidance to provide specific expectations for managing cybersecurity risk.
3
ITEM 1. BUSINESS
Background
Texas Capital Bancshares, Inc. (“TCBI” or the “Company”) is a registered bank holding company and a full-service financial services firm that delivers customized solutions to businesses, entrepreneurs and individual customers. TCBI is headquartered in Dallas, with primary banking offices in Austin, Dallas, Fort Worth, Houston and San Antonio, and has built a network of clients across the country.
The Company’s business activities are conducted primarily through its wholly-owned bank subsidiary Texas Capital Bank (the “Bank”) and its wholly-owned non-bank subsidiary, TCBI Securities Inc., doing business as Texas Capital Securities. The Bank is a Texas state-chartered bank. Texas Capital Securities is a registered broker-dealer with the SEC and a member of the Financial Industry Regulatory Authority (“FINRA”) and Municipal Securities Rulemaking Board (“MSRB”). TCBI Securities is a registered broker-dealer with the US Securities and Exchange Commission (“SEC”) and a member of the Financial Industry Regulatory Authority (“FINRA”) and Municipal Securities Rulemaking Board (“MSRB”).
The Company was incorporated as a Delaware corporation in 1996 and commenced banking operations in 1998.
Effective September 19, 2025, the Bank became a member of the Federal Reserve System. As a result, the Board of Governors of the Federal Reserve System assumed the role as the Bank’s primary federal regulator, succeeding the Federal Deposit Insurance Corporation. The Texas Department of Banking continues to serve as the Bank’s primary state regulator.
Business Strategy and Markets
The Company was founded with an entrepreneurial culture and a mission to build a commercial banking presence across Texas. Drawing on the banking experience and business and community ties of management, the Company’s strategy has evolved to become the leading Texas-based full-service financial services firm that can seamlessly serve the best clients in its markets through the entirety of their life cycles. Drawing on the banking experience and business and community ties of management, the Company’s strategy has evolved to become a Texas-based full-service financial services firm that can seamlessly serve the best clients in its markets through the entirety of their life cycles. A core tenet of this strategy is the maintenance of financial resiliency through market and rate cycles enabling the Company to serve its clients, access markets, and support its communities through changing market conditions. The Company is well positioned with a wide range of relevant products and services and seeks to maintain best-in-class levels of liquidity, credit reserves and capital.
Competition
The Company’s business is concentrated in Texas which is a highly competitive market for banking and other financial services. TCBI primarily competes with global, national, regional, and local bank holding companies and commercial banks. TCBI competes with national, regional, and local bank holding companies and commercial banks. The largest banking organizations operating in Texas are headquartered outside of the state and are controlled by out-of-state organizations. TCBI also competes with other providers of financial services, such as non-bank financial institutions, commercial finance and leasing companies, consumer finance companies, financial technology companies, securities firms, insurance companies, full-service brokerage firms and discount brokerage firms, credit unions and savings and loan associations. As a tenet of TCBI’s strategic plan, the Company believes that commercial businesses, entrepreneurs and professionals are interested in banking with a company both headquartered and with decision-making authority based in Texas.
The Company’s banking centers in its target markets are served by experienced bankers with expertise in the specific industries found in their market areas and established community ties. The Company believes it is positioned to offer clients more responsive, comprehensive and personalized service and advice than its competitors. By providing effective service to these customers, the Company strives to establish and maintain “first call” relationships, and provide services and solutions responsive to the banking needs of its customers, thereby strengthening its market presence and financial returns. By providing effective service to these customers, the Company believes it will be able to establish “first call” relationships, and provide services responsive to the banking needs of its customers, thereby enhancing its relevance and financial returns.
While the Texas market continues to be central to its growth and success, the Company has built several lines of business that offer specialized solutions, products and services to businesses and individuals regionally and nationwide, including mortgage finance, homebuilder finance, corporate and investment banking and Bask Bank.While the Texas market continues to be central to its growth and success, the Company has built several lines of business that offer specialized products and services to businesses and individuals regionally and nationwide, including mortgage finance, homebuilder finance, corporate and investment banking and Bask Bank. Bask Bank is an online division of the Bank that offers depositors American Airlines AAdvantage® miles in lieu of cash interest as well as traditional interest bearing deposit products, such as checking accounts, savings accounts and certificates of deposit. The Company believes these business lines offer profitable opportunities outside of Texas. The Company believes these business lines help to mitigate its geographic concentration risk in Texas.
Products and Services
The Company offers a variety of loan, deposit account and other financial products and services to its customers.
Business Customers. The Company offers an extensive range of products and services oriented to the needs of its business customers, including commercial loans; real estate term and construction loans; mortgage warehouse lending and mortgage finance services; treasury management services and solutions, including online banking, foreign exchange and debit and credit card services; investment banking and advisory services; and letters of credit.
Individual Customers. The Company also provides comprehensive banking services for its individual customers including personal wealth management and trust services; certificates of deposit; interest bearing and non-interest bearing checking
4
accounts; traditional money market and savings accounts; loans, both secured and unsecured; online and mobile banking; investment banking and advisory services; and Bask Bank.
Lending Activities
The Bank targets its lending to commercial businesses, entrepreneurs and professionals who meet certain desired client characteristics and credit standards. The credit standards are set by a Credit Policy Committee under the leadership of the Chief Credit Officer, who is charged with ensuring that all loans in the portfolio meet the Bank’s credit standards. The credit standards are set by a standing Credit Policy Committee with the assistance of the Chief Credit Officer, who is charged with ensuring that all loans in the portfolio meet the credit standards. The Credit Policy Committee is comprised of senior Bank officers, including the Chief Risk Officer, the Chief Credit Officer and other Bank officers as deemed appropriate, and is subject to oversight by the Risk Committee of the Company's board of directors. The Company believes it maintains an appropriately diversified loan portfolio. Credit policies and underwriting guidelines are tailored to address the unique risks associated with each industry represented in the portfolio. Of note, the Company’s mortgage finance business encounters seasonal demands for credit, surges and declines in consumer demand driven by changes in interest rates and month-end upticks of residential mortgage closings.
The credit standards for commercial borrowers are based on numerous criteria with respect to the borrower, including historical and projected financial information, strength of management, acceptable collateral and associated advance rates, and market conditions and trends in the borrower’s industry. In addition, prospective loans are analyzed based on current industry concentrations in the loan portfolio to identify and manage the risks presented by concentration of loans in any particular industry. The Company believes its credit standards are consistent with achieving its business objectives in the markets it serves and are an important part of the Company’s risk mitigation strategy. The Company believes that it is differentiated from its competitors by its client selection, focus on and targeted marketing to its core customers and by its ability to tailor its products to the individual needs of its customers.
The Company generally extends variable rate loans in which the interest rate fluctuates with a specified reference rate and may provide for a minimum floor rate. The use of variable rate loans is designed to protect the Company from risks associated with interest rate fluctuations since the rates of interest earned will automatically reflect such fluctuations.
Treasury Solutions and Deposit Products
The Bank offers treasury solutions and deposit products to meet its customers’ evolving needs. For commercial business customers, the Bank offers a full suite of deposit solutions including checking, money market savings, and sweep accounts with competitive industry rates. Treasury products offered include payment and receivables solutions ranging from instant payments, wire, ACH, commercial card, merchant, and lockbox solutions underpinned by a digital platform that supports a broad range of payment capabilities, information reporting and liquidity management solutions.
Personal banking deposit products offered by the Bank include checking accounts, savings accounts, money market accounts and certificates of deposit. Personal banking deposit customers have online and mobile access to fully manage their accounts leveraging features that include funds transfers, peer-to-peer payments, bill pay, wire transfer requests, remote check deposit and more.
Private Banking
The Bank offers a comprehensive suite of private banking services, including investment management, lending solutions, depository products, financial planning, insurance services and trust and estate planning services. Private Banking Advisors work with clients to define financial objectives, develop long-term strategies and coordinate services. Investment Advisors work alongside clients to develop an individually tailored investment program that aligns with each client’s unique financial goals, aspirations and risk tolerance. Investment managers work alongside the client to choose an individually tailored program that matches their financial goals and aspirations while complying with their risk tolerance. These services are supported by ongoing financial planning services, enabling clients to monitor progress towards achieving long-term financial objectives.
Investment Banking
The Company offers a full suite of investment banking products and services to clients. Investment banking professionals provide financial advisory, securities underwriting, sales and trading, research and other services by leveraging their knowledge of industry dynamics, transaction structures and market conditions complemented by a network of investors, buyers, lenders and other capital sources, to assist clients in completing a variety of transactions. Investment banking professionals provide financial advisory, securities underwriting, sales and trading, research and other services by leveraging their knowledge of industry dynamics, transaction structure and market conditions complemented by a network of investors, buyers, lenders and other capital sources, to assist clients in completing a variety of transactions. Additionally, the Company offers services to manage interest rate and foreign exchange risks, and enable market access by offering sales, trading and other institutional services. Additionally, the Company offers services to manage interest rate, foreign exchange, and commodity risks, and enable market access by offering sales, trading and other institutional services.
Human Capital
The Company desires to attract, develop, engage and retain the best talent in its markets, based on qualifications, skills and experience, and to plan for succession of key talent and executives to achieve its strategic objectives. The Company regularly evaluates the resources available to employees to address professional, financial and health-related matters, by seeking employee input through surveys. The Company regularly evaluates the resources available to employees to address professional, financial and health-related matters, by seeking employee input through surveys, as the health, safety and well-being of employees is of paramount importance. The Compensation and Human Capital Committee of the Company’s board of directors
5
provides oversight of human capital management, including talent management, executive succession planning, and company culture and engagement.
The Company culture is performance-driven where decisions regarding hiring, promotions, compensation, and other opportunities are made with an emphasis on merit and individual contributions. Equally important, creating and maintaining a respectful workplace is a priority where the Company strives to foster a culture where all individuals feel safe and appreciated for who they are and the value they bring to the organization. This means treating everyone – colleagues, clients, and partners – with professionalism and courtesy, regardless of differences in personal background, perspectives, or experiences. Communication and collaboration is promoted across all levels of the organization, encouraging employees to share their ideas and insights. The Company believes that a respectful culture is one where every individual feels respected and where healthy dialogue helps drive innovation, creativity, and quality results. To reinforce this culture, all employees are expected to act with integrity, exhibit professionalism, and respect their coworkers.
The Company offers a comprehensive benefits program to its employees and designs compensation programs to attract, retain and motivate employees that align with Company performance. The Company’s performance management process is designed to foster succession planning deeper into the organization. The Company utilizes feedback from exit interviews to drive improvements where possible.
The Company has training and development programs, which include job profiles for roles across the Company with skills, knowledge, and abilities to empower employees to focus on targeted skill development and career ownership. Further, the Company uses leadership models that identify the critical skills and behaviors necessary to be successful at the Company, and success profiles that describe the critical knowledge, skills and abilities needed for each role.
To help employees be successful in their roles, the Company utilizes a human capital management system, which among other things, facilitates streamlined Human Resources (“HR”) processes, creating a more favorable employee experience and engagement in HR-related activities.To help employees be successful in their roles, the Company utilizes a Human Capital Management System, which among other things, facilitates streamlined Human Resources (“HR”) processes, creating a more favorable employee experience and engagement in HR-related activities.
At December 31, 2025, the Company had 1,785 employees, nearly all of whom are full time. Due to the Company’s significant Texas-based operations, the majority of its employees are based in Texas. Due to the Company’s significant Texas-based operations and branch-lite network, the majority of its employees are based in Texas.
None of the Company’s employees are represented by a collective bargaining agreement, and management considers relations with employees to be good, with good engagement.
Regulation and Supervision
General. The Company is subject to extensive federal and state laws and regulations that impose specific requirements and provide regulatory oversight of virtually all aspects of its operations. These laws and regulations generally are intended for the protection of depositors, the Deposit Insurance Fund (“DIF”) of the Federal Deposit Insurance Corporation (“FDIC”) and the stability of the U.S. banking system as a whole, rather than for the protection of stockholders and creditors.
The following discussion summarizes certain laws, regulations and policies to which the Company is subject. It does not address all applicable laws, regulations and policies that affect the Company currently or might affect it in the future. This discussion is qualified in its entirety by reference to the full texts of the laws, regulations and policies described.
TCBI’s activities are governed by the Bank Holding Company Act of 1956, as amended (the “BHCA”). It is subject to primary regulation, supervision and examination by the Board of Governors of the Federal Reserve System (the “Federal Reserve”) pursuant to the BHCA. The Company files quarterly reports and other information with the Federal Reserve. As a public company, the Company also files reports with the SEC and is subject to its regulatory authority, including the disclosure and regulatory requirements of the Securities Act of 1933, as amended (the “Securities Act”), and the Securities Exchange Act of 1934, as amended (the “Exchange Act”), with respect to the Company’s securities, financial reporting and certain governance matters. As a public company, the Company also files reports with the SEC and is subject to its regulatory authority, including the disclosure and regulatory requirements of the Securities Act of 1933, as amended, and the Securities Exchange Act of 1934, as amended, with respect to the Company’s securities, financial reporting and certain governance matters. Because TCBI’s securities are listed on the Nasdaq Global Select Market (“Nasdaq”), the Company is subject to Nasdaq's rules for listed companies, including rules relating to corporate governance.
The Bank is organized as a Texas state-chartered member bank, and is subject to primary regulation, supervision and examination by the Texas Department of Banking and the Federal Reserve.The Bank is organized as a Texas state-chartered bank, and is subject to primary regulation, supervision and examination by the Texas Department of Banking and the FDIC. The Bank’s activities are also subject to regulation by the FDIC, which provides insurance for certain of the Bank’s deposits as permitted by law, the Consumer Financial Protection Bureau (the “CFPB”) and by certain other federal and state agencies.
Texas Capital Securities is subject to the jurisdiction of several regulatory bodies, including the SEC, FINRA, MSRB and state securities regulators. TCBI Securities is also subject to the jurisdiction of several regulatory bodies, including the SEC, FINRA, MSRB and state securities regulators. The SEC and FINRA have active enforcement functions that oversee broker-dealers and investment advisers and can bring actions that result in fines, restitution, limitation on permitted activities, disqualification to continue to conduct certain activities and an inability to rely on certain favorable exemptions. In addition, certain changes in the activities of a broker-dealer require approval from FINRA, and FINRA considers a variety of factors in acting upon applications for such approval, including internal controls, capital levels, management experience and quality, prior enforcement and disciplinary history, and supervisory concerns.
6
Bank Holding Company Regulation. The BHCA limits the Company’s business to banking, managing or controlling banks and other activities that the Federal Reserve has determined to be closely related to banking or managing or controlling banks as to be a proper incident thereto. The BHCA limits the Company’s business to banking, managing or controlling banks and other activities that the Federal Reserve has determined to be closely related to banking. The Gramm-Leach-Bliley Act of 1999, as amended (the “GLB”), allows bank holding companies meeting certain management, capital and Community Reinvestment Act standards to elect to be treated as a financial holding company that may offer customers a more comprehensive array of financial products and services. The Gramm-Leach-Bliley Act of 1999, as amended (the “GLB Act”), allows bank holding companies meeting certain management, capital and Community Reinvestment Act standards to elect to be treated as a financial holding company that may offer customers a more comprehensive array of financial products and services. The Company qualifies for and has elected to register with the Federal Reserve as a financial holding company. The Company has elected to register with the Federal Reserve as a financial holding company. This authorizes it to engage in any activity that is either (i) financial in nature or incidental to such financial activity, as determined by the Federal Reserve, or (ii) complementary to a financial activity, so long as the activity does not pose a substantial risk to the safety and soundness of the Bank or the financial system generally, as determined by the Federal Reserve. Examples of non-banking activities that are financial in nature include securities underwriting and dealing, insurance underwriting, providing investment and financial advice, leasing personal property and making merchant banking investments.
As a financial holding company, the Company is permitted to conduct permissible new financial activities or acquire permissible non-bank financial companies with after-the-fact notice to the Federal Reserve. In order for the Company to undertake certain new activities permitted by the BHCA and the GLB, the Company must be considered “well capitalized” (as defined below) and well managed, the Bank must have received a rating of at least “satisfactory” in its most recent examination under the Community Reinvestment Act, and must notify the Federal Reserve within 30 days of engaging in the new activity.In order for the Company to undertake certain new activities permitted by the BHCA and the GLB Act, the Company must be considered “well capitalized” (as defined below) and well managed, the Bank must have received a rating of at least “satisfactory” in its most recent examination under the Community Reinvestment Act, and must notify the Federal Reserve within 30 days of engaging in the new activity.
Under the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), TCBI is expected to act as a source of financial strength to the Bank and to commit resources to its support. Such support may be required even at times when a holding company may not be in a financial position, or otherwise inclined, to provide such resources or when doing so is not in the interest of the bank holding company or its shareholders or creditors. Such support may be required even at times when a holding company may not be in a financial position, or otherwise inclined, to provide such resources. Additionally, regulators may require a bank holding company to make capital injections into a troubled subsidiary bank and may charge the bank holding company with engaging in unsafe and unsound practices if the bank holding company fails to commit resources to such a subsidiary bank or if it undertakes actions that the Federal Reserve believes might jeopardize the bank holding company’s ability to commit resources to such subsidiary bank. TCBI could in certain circumstances be required to guarantee the capital restoration plan of the Bank if it became undercapitalized. Additionally, TCBI could in certain circumstances be required to guarantee the capital restoration plan of the Bank if it became undercapitalized. Capital loans by the Company to the Bank would be subordinate in right of payment to deposits and certain other debts of the Bank. In the event of the Company’s bankruptcy, any commitment by the Company to a federal bank regulatory agency to maintain the capital of the Bank would be assumed by the bankruptcy trustee and entitled to a priority of payment.
It is the policy of the Federal Reserve that bank holding companies may maintain their existing rate of cash dividends on common stock only out of net income available over the past year and only if the prospective rate of earnings retention is consistent with the organization’s expected future capital needs, asset quality and financial condition. As a general matter, the Federal Reserve expects a bank holding company’s board of directors to inform it and to eliminate, defer or significantly reduce the bank holding company’s dividends if (i) the bank holding company’s net income available to stockholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends, (ii) the bank holding company’s prospective rate of earnings retention is not consistent with the company’s capital needs and overall current and prospective financial condition or (iii) the bank holding company will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. The policy provides that bank holding companies may not pay cash dividends in an amount that would undermine the holding company’s ability to serve as a source of strength to its banking subsidiary.
With certain limited exceptions, the BHCA and the Change in Bank Control Act of 1978, as amended (the “CIBC Act”), together with regulations promulgated thereunder, prohibit a person or company or a group of persons deemed to be an association or “acting in concert” from, directly or indirectly, acquiring 10% or more (5% or more if the acquirer is a bank holding company) of any class of the Company’s voting stock or obtaining the ability to control in any manner the election of a majority of the Company’s directors or otherwise direct the management or policies of the Company without prior notice or application to and the approval of the Federal Reserve.
If, in the opinion of the applicable federal bank regulatory authorities, a depository institution or holding company is engaged in or is about to engage in an unsafe or unsound practice (which could include the payment of dividends or repurchase or redemptions of securities), such authority may require, generally after notice and hearing, that such institution or holding company cease and desist such practice. The federal banking agencies have indicated that paying dividends that deplete a depository institution’s or holding company’s capital base to an inadequate level would be such an unsafe or unsound banking practice. Declaring or paying dividends that exceed its earnings for the relevant period could result in supervisory findings by the Federal Reserve. Federal Reserve regulations require that the Company, under certain circumstances, provide prior notice or obtain prior approval for redemptions or repurchases of its equity securities. Under such regulations, the Federal Reserve may disapprove such actions if the Federal Reserve finds that they would constitute an unsafe or unsound practice or violate any law or Federal Reserve order.
Regulation of the Bank by the Texas Department of Banking and the Federal Reserve.Regulation of the Bank by the Texas Department of Banking and the FDIC. Pursuant to applicable Texas and federal law, Texas state-chartered banks are permitted to engage in any activity permissible for national banks, including non-
7
banking activities that are permissible for national banks. In addition, Texas state-chartered banks may engage in financial activities or activities incidental or complementary to a financial activity with prior approval.
The Bank is subject to continuous regulation, supervision and examination by the Texas Department of Banking and the Federal Reserve. The regulators monitor all areas of the Bank’s operations, including security devices and procedures, adequacy of capitalization and loss reserves, accounting treatment and impact on capital determinations, loans, investments, borrowings, deposits, liquidity, mergers, issuances of securities, payment of dividends, interest rate risk management, establishment of branches, corporate reorganizations, maintenance of books and records, and adequacy of staff training to carry on safe and sound lending and deposit gathering practices. Among other things, the Bank is required by its regulators to maintain specified capital ratios, file quarterly reports of its financial condition and results of operations and to obtain an annual audit of its financial statements.
Regulation of the Bank by the CFPB. The CFPB has regulation, supervision and examination authority over the Bank with respect to substantially all federal statutes and regulations protecting the interests of consumers of financial services, including but not limited to the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Truth in Savings Act, the Right to Financial Privacy Act and the Electronic Funds Transfer Act and their respective related regulations. Penalties for violating these laws and regulations could subject the Bank to lawsuits and administrative penalties, including civil monetary penalties, payments to affected consumers and orders to halt or materially change the Bank’s consumer banking activities. Notwithstanding ongoing, legal, budgetary and structural challenges affecting the CFPB, the CFPB remains an active federal regulatory agency with continuing supervisory and enforcement authority and retains its broad authority to pursue enforcement actions, including investigations, civil actions and cease and desist proceedings. The CFPB may also refer civil and criminal findings to the Department of Justice for prosecution. The Bank is also subject to other federal and state consumer protection laws and regulations that, among other things, prohibit unfair, deceptive and abusive, corrupt or fraudulent business practices, untrue or misleading advertising and unfair competition.
Capital Adequacy Requirements. The Company and the Bank are required under federal law implementing the Basel III Capital Rules to maintain certain minimum capital levels based on ratios of capital to total assets and capital to risk-weighted assets. The required capital ratios are minimums, and the Federal Reserve may determine that a banking organization based on its size, complexity, or risk profile must maintain a higher level of capital in order to operate in a safe and sound manner. Risks such as concentration of credit risks and the risk arising from nontraditional activities, as well as the institution’s exposure to a decline in the economic value of its capital due to changes in interest rates, and an institution’s ability to manage those risks, are important factors that are to be taken into account in assessing an institution’s overall capital adequacy. The following is a brief description of the relevant provisions of these capital rules and their potential impact on our capital levels.
The Company and the Bank are subject to the following risk-based capital ratios: a CET1 risk-based capital ratio, a Tier 1 risk-based capital ratio, which includes CET1 and additional Tier 1 capital, and a total risk-based capital ratio, which includes Tier 1 and Tier 2 capital. CET1 is primarily comprised of the sum of common stock instruments and related surplus net of treasury stock plus retained earnings less certain adjustments and deductions, including with respect to goodwill, intangible assets, mortgage servicing assets, and deferred tax assets subject to temporary timing differences. Additional Tier 1 capital is primarily comprised of non-cumulative perpetual preferred stock. Tier 2 capital consists of instruments disqualified from Tier 1 capital, including qualifying subordinated debt and a limited amount of loan loss reserves up to a maximum of 1.25% of risk-weighted assets, subject to certain eligibility criteria. The capital rules also define the risk-weights assigned to assets and off-balance sheet items to determine the risk-weighted asset components of the risk-based capital rules, including, for example, certain “high volatility” commercial real estate, past due assets, structured securities, and equity holdings.
The leverage capital ratio, which serves as a minimum capital standard, is the ratio of Tier 1 capital to quarterly average total consolidated assets net of goodwill, certain other intangible assets, and certain required deduction items. The required minimum leverage ratio for all banks and bank holding companies is 4%.
In addition, effective January 1, 2019, the capital rules required a capital conservation buffer of 2.5% above each of the minimum risk-based capital ratio requirements (CET1, Tier 1, and total capital), which is designed to absorb losses during periods of economic stress. These buffer requirements must be met for a bank or bank holding company to be able to pay dividends, engage in share buybacks, or make discretionary bonus payments to executive management without restriction.
The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”), among other things, requires the federal bank regulatory agencies to take “prompt corrective action” regarding depository institutions that do not meet minimum capital requirements.The Federal Deposit Insurance Corporation Improvement Act of 1991 (the “FDICIA”) established a system of prompt corrective action regulations and policies to resolve the problems of undercapitalized insured depository institutions. FDICIA establishes five regulatory capital tiers: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” A depository institution’s capital tier will depend upon how its capital levels compare to various relevant capital measures and certain other factors, as established by regulation. FDICIA generally prohibits a depository institution from making any capital distribution (including payment of a dividend) or paying any management fee to its holding company if the depository institution would thereafter be undercapitalized. The FDICIA imposes progressively more restrictive restraints on operations, management, and capital distributions depending on the
8
category in which an institution is classified. Undercapitalized depository institutions are subject to restrictions on borrowing from the Federal Reserve System. In addition, undercapitalized depository institutions may not accept brokered deposits absent a waiver from the FDIC, are subject to growth limitations, and are required to submit capital restoration plans for regulatory approval. A depository institution's holding company must guarantee any required capital restoration plan up to an amount equal to the lesser of 5% of the depository institution's assets at the time it becomes undercapitalized or the amount of the capital deficiency when the institution fails to comply with the plan. Federal banking agencies may not accept a capital plan without determining, among other things, that the plan is based on realistic assumptions and is likely to succeed in restoring the depository institution's capital. If a depository institution fails to submit an acceptable plan, it is treated as if it is significantly undercapitalized.
To be well-capitalized, the Bank must maintain at least the following capital ratios:
•6.5% CET1 to risk-weighted assets;
•8.0% Tier 1 capital to risk-weighted assets;
•10.0% Total capital to risk-weighted assets; and
•5.0% leverage ratio.
The Federal Reserve has not yet revised the well-capitalized standard for bank holding companies to reflect the higher capital requirements imposed under the current capital rules applicable to banks. For purposes of the Federal Reserve’s Regulation Y, including determining whether a bank holding company meets the requirements to be a financial holding company, bank holding companies, such as the Company, must maintain a Tier 1 risk-based capital ratio of 6.0% or greater and a total risk-based capital ratio of 10.0% or greater to be well-capitalized. The Federal Reserve may require bank holding companies, including the Company, to maintain capital ratios substantially in excess of mandated minimum levels depending upon general economic conditions and a bank holding company’s particular condition, risk profile, and growth plans. If the Federal Reserve were to apply the same or a similar well-capitalized standard to bank holding companies as are applicable to the Bank, the Company’s capital ratios as of December 31, 2025 would exceed such revised well-capitalized standard.
Failure to be well-capitalized or to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have a material adverse effect on our operations or financial condition. Failure of a financial institution to maintain and implement adequate programs to combat money laundering and terrorist financing, or to comply with relevant laws or regulations, could have serious legal, reputational and financial consequences for the institution. Failure to meet minimum capital requirements could also result in restrictions on the Company’s or the Bank’s ability to pay dividends or otherwise distribute capital or to receive regulatory approval of applications or other restrictions on its growth.
The Company and the Bank have met the capital adequacy requirements under the Basel III Capital Rules on a fully phased-in basis since it commenced filing of the applicable reports with its federal banking regulators, and as of December 31, 2025 the Bank's CET1 risk-based capital ratio, Tier 1 risk-based capital ratio, total risk-based capital ratio, and leverage ratio were in excess of the amounts required for the Bank to be classified as “well capitalized” for purposes of the FDIC’s prompt corrective action regulations. The Company has met the capital adequacy requirements under the Basel III Capital Rules on a fully phased-in basis since it commenced filing of the applicable reports with its federal banking regulators, and as of December 31, 2024 the Bank's CET1 risk-based capital ratio, Tier 1 risk-based capital ratio, total risk-based capital ratio, and leverage ratio were in excess of the amounts required for the Bank to be classified as “well capitalized” for purposes of the FDIC’s prompt corrective action regulations, which are discussed in more detail below.
Because the Company had less than $15 billion in total consolidated assets as of December 31, 2009, it is allowed to continue to classify its trust preferred securities, all of which were issued prior to May 19, 2010, as Tier 1 capital up to 25% of that measure. However, the treatment of existing trust preferred securities as capital may be subject to further regulatory change prior to their maturity, which could require the Company to seek additional capital. As a non-advanced approaches banking organization, the Company has elected to exclude the effects of certain accumulated other comprehensive income (“AOCI”) items included in stockholders’ equity for the determination of regulatory capital and capital ratios under the Basel III Capital Rules.
In August 2020, the U.S. federal banking agencies adopted a final rule altering the definition of eligible retained income in their respective capital rules. Under this rule, eligible retained income is the greater of a firm’s (i) net income for the four preceding calendar quarters, net of any distributions and associated tax effects not already reflected in net income, and (ii) average net income over the preceding four quarters. An institution’s eligible retained income, when considered in conjunction with capital ratios and the capital conservation buffer, provides limitations on capital distributions (including dividends and share repurchases) and certain executive compensation arrangements for the quarter following the calculation. As of December 31, 2025, the Company was permitted to use 100% of its eligible retained income for these purposes in the first quarter of 2026.
Regulators may change capital and liquidity requirements, including previous interpretations of practices related to risk weights, which could require an increase to the allocation of capital to assets held by the Bank. Regulators could also require the Company to make retroactive adjustments to financial statements to reflect such changes. A regulatory capital ratio or category may not constitute an accurate representation of a financial institution’s overall financial condition or prospects. The Company’s regulatory capital status is addressed in more detail under the heading “Liquidity and Capital Resources” within Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations and in Note 10 - Regulatory Ratios and Capital in the accompanying notes to the consolidated financial statements included elsewhere in this report.
9
Federal bank regulators may set capital requirements for a particular banking organization that are higher than the minimum ratios when circumstances warrant. Federal banking guidelines provide that banking organizations experiencing significant growth or making acquisitions will be expected to maintain strong capital positions substantially above the minimum supervisory levels, without significant reliance on intangible assets. Concentration of credit risks, interest rate risk (imbalances in rates, maturities or sensitivities) and risks arising from non-traditional activities, as well as an institution’s ability to manage these risks, are important factors taken into account by regulatory agencies in assessing an organization’s overall capital adequacy.
The risk-based and leverage capital ratios established by federal banking regulators are minimum supervisory ratios generally applicable to banking organizations that meet specified criteria, assuming that they otherwise have received the highest regulatory ratings in their most recent examinations. Banking organizations not meeting these criteria are expected to operate with capital positions in excess of the minimum ratios. Regulators can, from time to time, change their policies or interpretations of banking practices to require changes in risk weights assigned to the Bank's assets or changes in the factors considered in order to evaluate capital adequacy, which may require the Bank to obtain additional capital to support existing asset levels or future growth or reduce asset balances in order to meet minimum acceptable capital ratios.
Liquidity Requirements. U.S. capital rules implementing the standards under the Basel III Capital Rules also include two quantitative liquidity tests for certain large banking organizations. One of the liquidity tests, referred to as the liquidity coverage ratio (“LCR”), is designed to ensure that a banking entity maintains an adequate level of unencumbered high-quality liquid assets equal to the entity’s expected net cash outflow for a 30-day time horizon (or, if greater, 25% of its expected total cash outflow) under an acute liquidity stress scenario.
The other test, referred to as the net stable funding ratio (“NSFR”), is designed to promote more medium- and long-term funding of the assets and activities of banking entities over a one-year time horizon. These requirements encourage the covered banking entities to increase their holdings of U.S. Treasury securities and other sovereign debt as a component of assets and to increase the use of long-term debt as a funding source.
While the LCR and NSFR tests are not currently applicable to the Company or the Bank, other relevant measures of liquidity are monitored by management and are reported to the board of directors. Regulators may change capital and liquidity requirements, including previous interpretations of practices related to risk weights, which could require an increase in liquid assets or in the necessary capital to support the assets held by the Bank. Regulators could also require the Company to make retroactive adjustments to financial statements and reported capital ratios to reflect such changes.
Stress Testing. Pursuant to the Dodd-Frank Act and regulations published by the federal bank regulatory agencies, the Company was required to conduct an annual “stress test” of capital and consolidated earnings and losses under a base case and two severely adverse stress scenarios provided by federal bank regulatory agencies from the years 2016 to 2018. In response to this requirement, the Company developed dedicated staffing, economic models, policies and procedures to implement stress testing on an annual basis, the results of which were furnished to regulators. The Economic Growth, Regulatory Relief and Consumer Protection Act, enacted in 2018 (the “Regulatory Relief Act”) terminated TCBI’s stress testing requirements, however, the Company created its own stress testing framework and continues to perform certain stress tests as a matter of good governance and risk management and has incorporated the economic models and information developed through the stress testing program into the Company’s risk management and business, capital and liquidity planning activities, which are subject to continuing regulatory oversight.
Privacy and Data Security. The financial privacy provisions of the GLB (and state law equivalents) generally prohibit financial institutions, including the Bank, from disclosing non-public personal financial information about customers to non-affiliated third parties unless customers have the opportunity to “opt out” of the disclosure and have not elected to do so. The financial privacy provisions of the GLB Act generally prohibit financial institutions, including the Bank, from disclosing non-public personal financial information about customers to non-affiliated third parties unless customers have the opportunity to “opt out” of the disclosure and have not elected to do so. The Bank is required to comply with state laws regarding consumer privacy if they are more protective than the GLB.
The federal banking agencies have adopted guidelines for safeguarding confidential, personal customer information. The guidelines require each financial institution, under the supervision and ongoing oversight of its board of directors or an appropriate committee thereof, to create, implement and maintain a comprehensive written information security program designed to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazards to the security or integrity of such information and protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. In addition, various U.S. regulators have increased their focus on cyber security through guidance, examinations and regulations. Banking organizations are required to notify their primary federal regulator within 36 hours of becoming aware of a “computer-security incident” that rises to the level of a “notification incident.”
In February 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.
10
In July 2023, the SEC issued a final rule to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies that are subject to the reporting requirements of the Exchange Act. Specifically, the final rule requires current reporting about material cybersecurity incidents, periodic disclosures about a registrant’s policies and procedures to identify and manage cybersecurity risk, management’s role in implementing cybersecurity policies and procedures, and the board of directors’ cybersecurity expertise, if any, and its oversight of cybersecurity risk. See Item 1C. Cybersecurity for a discussion of the Company’s cybersecurity risk management, strategy and governance.
Privacy and data security areas, including cybersecurity, are expected to receive increased attention at the federal and state level and an increasing number of state laws and regulations have been enacted in recent years to implement privacy and cybersecurity standards and regulations, including data breach notification and data privacy requirements. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs that meet specified requirements. In addition, other jurisdictions in which customers do business, such as the European Union, have adopted similar requirements. This trend of activity is expected to continue to expand, requiring continual monitoring of developments in the states and nations in which the Company’s customers are located and ongoing investments in its information systems and compliance capabilities.
Community Reinvestment Act. The Community Reinvestment Act of 1977 (the “CRA”) requires depository institutions to assist in meeting the credit needs of their market areas consistent with safe and sound banking practice. Under the CRA, each depository institution is required to help meet the credit needs of its market areas by, among other things, providing credit, making investments and providing community development services to low- and moderate-income individuals and communities. Depository institutions are periodically examined for compliance with the CRA and are assigned one of four ratings. As with other regulatory matters, for purposes of the CRA the Bank is subject to examination by the Federal Reserve. In order for a financial holding company to commence new activity permitted by the BHCA, each insured depository institution subsidiary of the financial holding company must have received a rating of at least “satisfactory” in its most recent examination under the CRA. The Bank's strategic focus on serving commercial customers in regional and national markets from a limited number of branches makes it more challenging for it to satisfy CRA requirements as compared to banks of comparable size that focus on providing retail banking services in markets where they maintain a network of full-service branches.
On October 24, 2023, the Office of the Comptroller of the Currency (“OCC”), Federal Reserve, and FDIC issued a final rule to modernize their respective CRA regulations. The revised rules would have substantially altered the methodology for assessing compliance with the CRA, and likely would have made it more challenging and/or costly for the Bank to receive a rating of at least “satisfactory” on its CRA exam. Following its finalization on March 29, 2024, the 2023 modernization rule became subject to an ongoing injunction. On July 16, 2025, the OCC, Federal Reserve and the FDIC issued a joint proposal to rescind the 2023 modernization rule. The agencies continue to apply the CRA rules as they existed before the 2023 modernization, considering the injunction and pending finalization of the rescission of the modernization rule.
The USA PATRIOT Act, the International Money Laundering Abatement and Financial Anti-Terrorism Act and the Bank Secrecy Act.The USA Patriot Act, the International Money Laundering Abatement and Financial Anti-Terrorism Act and the Bank Secrecy Act. A major focus of U.S. government policy regarding financial institutions in recent years has been combating money laundering, terrorist financing and other illegal payments. The USA PATRIOT Act of 2001 (the “USA PATRIOT Act”) and Title III of the USA PATRIOT Act, known as the International Money Laundering Abatement and Financial Anti-Terrorism Act of 2001 substantially broadened the scope of U.S. anti-money laundering laws and penalties, specifically related to the Bank Secrecy Act of 1970 (“BSA”), and expanded the extra-territorial jurisdiction of the U.S. government in this area. Regulations issued under these laws impose obligations on financial institutions to maintain appropriate policies, procedures and controls to detect, prevent and report money laundering and terrorist financing and other suspicious activity and to verify the identity of their customers and apply additional scrutiny to customers considered to present greater than normal risk. Failure of a financial institution to maintain and implement adequate programs to combat money laundering and terrorist financing, or to comply with relevant laws or regulations, could have serious legal, reputational and financial consequences for the institution, and can include criminal pleas. Because of the significance of regulatory emphasis on these requirements, the Company has expended, and expects to continue to expend, significant staffing, technology and financial resources to maintain programs designed to ensure compliance with applicable laws and regulations and an effective audit function for testing BSA compliance on an ongoing basis.
The Anti-Money Laundering Act of 2020 (“AMLA”), which amends the BSA, was enacted in January 2021. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws. Among other things, it codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards for evaluating technology and internal processes for BSA compliance; and expands enforcement- and investigation-related authority, including increasing available sanctions for certain BSA violations and instituting BSA whistleblower incentives and protections.
11
In addition to the possible legal, reputational and financial consequences associated with an institution’s failure to comply with these laws, regulators evaluate the effectiveness of an applicant in combating money laundering when determining whether to approve a proposed bank merger, acquisition, restructuring or other expansionary activity.
Office of Foreign Assets Control. The U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) is responsible for administering and enforcing economic and trade sanctions against specified foreign parties, including countries and regimes, foreign individuals and other foreign organizations and entities. OFAC publishes lists of prohibited parties that are regularly consulted by the Bank in the conduct of its business in order to ensure compliance. The Company is responsible for, among other things, blocking accounts of, and transactions with, prohibited parties identified by OFAC, avoiding unlicensed trade and financial transactions with such parties and reporting blocked transactions after their occurrence. Failure to comply with OFAC requirements could have serious legal, financial and reputational consequences for the Company.
Safe and Sound Banking Practices; Enforcement. Banks and bank holding companies are prohibited from engaging in unsafe and unsound banking practices. Bank regulators have broad authority to prohibit and penalize activities of bank holding companies and their subsidiaries which represent unsafe and unsound banking practices or which constitute violations of laws, regulations or written directives of or agreements with regulators. Regulators have considerable discretion in identifying what they deem to be unsafe and unsound practices and in pursuing enforcement actions in response to them.
The Federal Deposit Insurance Act (“FDIA”) requires federal bank regulatory agencies to prescribe, by regulation or guideline, operational and managerial standards for all insured depository institutions that relate to, among other things: (i) internal controls, information systems and audit systems; (ii) loan documentation; (iii) credit underwriting; (iv) interest rate exposure; (v) asset growth and quality; and (vi) compensation and benefits.The FDIA requires federal bank regulatory agencies to prescribe, by regulation or guideline, operational and managerial standards for all insured depository institutions that relate to, among other things: (i) internal controls, information systems and audit systems; (ii) loan documentation; (iii) credit underwriting; (iv) interest rate exposure; (v) asset growth and quality; and (vi) compensation and benefits. Federal banking agencies have adopted regulations and Interagency Guidelines Prescribing Standards for Safety and Soundness to implement these requirements, which regulators use to identify and address problems at insured depository institutions before capital becomes impaired. If a regulator determines that a bank fails to meet any standards prescribed by the guidelines, the bank may be required to submit an acceptable plan to achieve compliance and agree to specific deadlines for the submission to and review by the regulator of reports confirming progress in implementing the safety and soundness compliance plan. Failure to implement such a plan may result in an enforcement action against the bank.
Enforcement actions against the Company, the Bank and their respective officers and directors may include the issuance of a written directive, the issuance of a cease-and-desist order that can be judicially enforced, the imposition of civil money penalties, the issuance of directives to increase capital, the issuance of formal and informal agreements, the issuance of removal and prohibition orders against officers or other institution-affiliated parties, the imposition of restrictions and sanctions under prompt corrective action regulations, the termination of deposit insurance (in the case of the Bank) and the appointment of a conservator or receiver for the Bank. Civil money penalties can be over $2 million for each day a violation continues.
Transactions with Affiliates and Insiders. The Bank is subject to Section 23A of the Federal Reserve Act, as amended (the “FRA”), which places limits on, among other covered transactions, the amount of loans or extensions of credit to affiliates that may be made by the Bank. Extensions of credit to affiliates must be adequately collateralized by specified amounts and types of collateral. Section 23A also limits the amount of loans or advances made by the Bank to third party borrowers that are collateralized by securities or obligations of the Bank’s affiliates. The Bank is also subject to Section 23B of the FRA, which, among other things, prohibits an institution from engaging in transactions with affiliates unless the transactions are on terms substantially the same, or at least as favorable to such institution or its subsidiaries, as those prevailing at the time for comparable transactions with non-affiliates. Generally, covered transactions with any affiliate are limited to 10% of the Bank’s capital stock and surplus and covered transactions with all affiliates are limited to 20% of the Bank’s capital stock and surplus.
The Company is subject to restrictions on extensions of credit to insiders (namely executive officers, directors, and 10% stockholders) and their related interests. These restrictions are contained in the FRA and Federal Reserve Regulation O and apply to all insured depository institutions as well as their subsidiaries and holding companies. These restrictions include limits on loans to any individual insider and such insider's related interests and certain conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests, which cannot exceed the institution’s total unimpaired capital and surplus, unless the FDIC determines that a lesser amount is appropriate. Insiders are subject to enforcement actions for knowingly accepting loans in violation of applicable restrictions.
Restrictions on Payment of Dividends by the Bank. TCBI is a legal entity separate and distinct from its subsidiaries and depends in part upon dividends received from its direct and indirect subsidiaries, including the Bank, to fund its activities. The sole source of funding of TCBI’s financial obligations has consisted of proceeds of capital markets transactions and cash payments from the Bank. The sole source of funding of TCBI’s financial obligations has consisted of proceeds of capital markets transactions and cash payments from the Bank. The Bank is subject to federal banking law requirements concerning the payment of dividends, including, under the FDICIA, the Bank may not pay any dividend if it is undercapitalized or if payment would cause it to become undercapitalized. Certain contractual restrictions also may limit the ability of the Bank to pay dividends to the Company. No assurances can be given that the Bank will, in any circumstances, pay dividends to the Company.
12
Limits on Compensation. The Federal Reserve, OCC and FDIC in 2010 issued comprehensive final guidance on incentive compensation policies for executive management of banks and bank holding companies. This guidance was intended to ensure that the incentive compensation policies of banking organizations do not undermine their safety and soundness by encouraging excessive risk-taking. The objective of the guidance is to ensure that incentive compensation arrangements (i) provide incentives that do not encourage excessive risk-taking, (ii) are compatible with effective internal controls and risk management and (iii) are supported by strong corporate governance, including oversight by the board of directors. In 2016, as required by the Dodd-Frank Act, the Federal Reserve, the FDIC and the SEC proposed rules that would, depending upon the assets of the institution, directly regulate incentive compensation arrangements and would require enhanced oversight and recordkeeping. As of December 31, 2025, these rules have not been implemented. In 2024, the FDIC, OCC, Federal Housing Finance Agency (“FHFA”) and National Credit Union Administration issued a proposed rule designed to implement Section 956 of the Dodd-Frank Act; however, this proposed rule was rescinded by the applicable agencies on March 3, 2025.
Deposit Insurance. The Bank’s deposits are insured through the DIF, which is administered by the FDIC, up to limits established by applicable law, currently $250,000 per depositor, per account ownership category, per bank. The FDIC determines quarterly deposit insurance assessments consisting of a percentage of an assessment base equal to the Bank’s average consolidated total assets less average tangible equity capital and the assignment of one of four risk categories based on supervisory evaluations, regulatory capital levels and certain other factors. The FDIC has the discretion to adjust an institution’s risk rating and may terminate its insurance of deposits upon a finding that the institution engaged or is engaging in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or violated any applicable law, regulation, rule, order or condition imposed by the FDIC or written agreement entered into with the FDIC. The FDIC may also prohibit any FDIC-insured institution from engaging in any activity it determines to pose a serious risk to the DIF.
The FDIC assigns assessment rates based on a scorecard considering CAMELS component ratings, financial measures used to measure a bank's ability to withstand asset-related and funding-related stress, and a measure of loss severity that estimates the relative magnitude of potential losses to the FDIC in the event of the bank's failure, all subject to certain adjustments.For 2023, the FDIC assigned assessment rates based on a scorecard considering CAMELS component ratings, financial measures used to measure a bank's ability to withstand asset-related and funding-related stress, and a measure of loss severity that estimates the relative magnitude of potential losses to the FDIC in the event of the bank's failure, all subject to certain adjustments. As of June 30, 2020, the DIF reserve ratio fell to 1.30%, below the statutory minimum of 1.35%. The FDIC, as required under the FDIA, established a plan on September 15, 2020 to restore the DIF reserve ratio to meet or exceed the statutory minimum of 1.35% within eight years. The FDIC, as required under the Federal Deposit Insurance Act, established a plan on September 15, 2020 to restore the DIF reserve ratio to meet or exceed the statutory minimum of 1.35% within eight years. On October 18, 2022, the FDIC adopted an amended restoration plan to increase the likelihood that the reserve ratio would be restored to at least 1.35% by September 30, 2028. The FDIC’s amended restoration plan increases the initial base deposit insurance assessment rate schedules uniformly by 2 basis points, which began the first quarterly assessment period of 2023.
In November 2023, the FDIC approved a final rule to implement a special assessment to recover the loss to the DIF associated with several bank failures that occurred during early 2023. The assessment base for the special assessment was equal to estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion, to be collected at an annual rate of approximately 13.4 basis points for an anticipated total of eight quarterly assessment periods, which began with the first quarterly assessment period of 2024. The FDIC could further increase the deposit insurance assessments for certain insured depository institutions, including the Bank, if the DIF reserve ratio was not restored as projected. Notwithstanding the FDIC’s ability to increase the special assessment, on December 16, 2025, the FDIC approved an interim final rule to amend the collection of the special assessment to recover the loss to the DIF arising from the 2023 bank failures. Through the first six quarterly collections of the special assessment, the FDIC collected $12.7 billion and anticipates collecting another $2.1 billion for the seventh quarter of the initial collection period. The interim final rule reduces the special assessment rate for the eighth collection quarter from 3.36 basis points to 2.97 basis points and is designed to allow for a full recovery to the FDIC and DIF while minimizing any amounts collected in excess of the estimated losses.
The Volcker Rule. The Dodd-Frank Act amended the BHCA to require the federal financial regulatory agencies to adopt rules that prohibit banks and their affiliates from engaging in proprietary trading in designated types of financial instruments and from investing in and sponsoring certain hedge funds and private equity funds. The Volcker Rule has not had a material effect on the Company’s operations. Unanticipated effects of the Volcker Rule’s provisions or future interpretations may have an adverse effect on business or services provided to the Bank by other financial institutions.
Debit Card Interchange Fees. Dodd-Frank includes a set of rules requiring that interchange transaction fees for electronic debit transactions be reasonable and proportional to certain costs associated with processing the transactions. Pursuant to the rules implemented by the Federal Reserve, interchange fees for electronic debit transactions are limited to 21 cents plus 0.05% of the transaction, plus an additional one cent per transaction fraud adjustment. These rules impose requirements regarding routing and exclusivity of electronic debit transactions, and generally require that debit cards be usable in at least two unaffiliated networks. On October 25, 2023, the Federal Reserve proposed to lower the maximum interchange fee that a large debit card issuer can receive for a debit card transaction. On October 25, 2023, the FRB proposed to lower the maximum interchange fee that a large debit card issuer can receive for a debit card transaction. The proposal would also establish a regular process for updating the maximum amount every other year going forward. The Company continues to monitor the development of these proposed rule revisions. We continue to monitor the development of these proposed rule revisions.
13
Broker-Dealer and Investment Advisor Regulation. TCBI’s broker-dealer and investment adviser subsidiary, Texas Capital Securities, is subject to regulation by the SEC and FINRA, who is the primary self-regulatory organization for Texas Capital Securities. The SEC and FINRA have active enforcement functions that oversee broker-dealers and investment advisers and can bring actions that result in fines, restitution, limitation on permitted activities, disqualification to continue to conduct certain activities and an inability to rely on certain favorable exemptions. In addition, certain changes in the activities of a broker-dealer require approval from FINRA for which FINRA considers a variety of factors in acting upon applications for such approval, including internal controls, capital levels, management experience and quality, prior enforcement and disciplinary history and supervisory concerns. In addition, certain changes in the activities of a broker-dealer require approval from FINRA, and FINRA considers a variety of factors in acting upon applications for such approval, including internal controls, capital levels, management experience and quality, prior enforcement and disciplinary history, and supervisory concerns.
Future Legislation and Regulation. Laws, regulations and policies are continually under review by Congress, state legislatures and federal and state regulatory agencies. In addition to the specific legislation and regulations described above, future legislation and regulations or changes to existing statutes, regulations or regulatory policies applicable to the Company and its subsidiaries may affect the business, financial condition and results of operations in adverse and unpredictable ways and increase reporting requirements and compliance costs. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted.
Available Information
Under the Exchange Act, the Company is required to file annual, quarterly and current reports, proxy statements and other information with the SEC. The SEC maintains a website at www.sec.gov that contains reports, proxy and information statements and other information that we file electronically with the SEC.
The primary address for the Company’s website is www.texascapital.texascapitalbank. com. The Company makes available, free of charge, on the Investor Relations section of its website, reports on Forms 10-K, 10-Q and 8-K, and amendments to those reports, as soon as reasonably practicable after such reports are filed with or furnished to the SEC.14The Company makes available, free of charge through its website, reports on Forms 10-K, 10-Q and 8-K, and amendments to those reports, as soon as reasonably practicable after such reports are filed with or furnished to the SEC. The information posted on the Company’s website is not incorporated by reference into this Annual Report on Form 10-K.
ITEM 1A. RISK FACTORS
The Company is subject to risk. The following discussion, along with management’s discussion and analysis and the financial statements and footnotes, sets forth the most significant risks and uncertainties that management believes could adversely affect the business, financial condition or results of operations. Additional risks and uncertainties that management is not aware of or that management currently deems immaterial may also have a material adverse effect on the business, financial condition or results of operations. There is no assurance that this discussion covers all potential risks that the Company faces. The occurrence of the described risks could cause results to differ materially from those described in its forward-looking statements included elsewhere in this report or in other filings with the SEC, and could have a material adverse impact on the business, financial condition or results of operations.
Summary of Risk Factors
The following is a summary of the most significant risks and uncertainties that management believes could adversely affect the business, financial condition or results of operations. In addition to the following summary, you should consider the other information set forth in this “Risk Factors” section and the other information contained in this report before investing in the Company’s securities.
Strategic Risks
•The Company competes with many banks and other traditional, non-traditional, brick and mortar and online financial service providers.
•The Company must effectively execute its business strategy in order to continue asset and earnings growth.
•The Company must be effective in developing and executing new lines of business and new products and services while managing associated risks, including the ability to use technology to provide products and services that will satisfy customer demands.
•The Company may pursue bank and non-bank acquisition opportunities as they arise. However, even if the Company identifies attractive acquisition opportunities, it may not be able to consummate such acquisitions on favorable terms, if at all, or realize the anticipated benefits from such acquisitions. However, even if the Company identifies attractive acquisition opportunities, it may not be able to complete such acquisitions on favorable terms or realize the anticipated benefits from such acquisitions. However, even if the Company identifies attractive acquisition opportunities, it may not be able to complete such acquisitions on favorable terms or realize the anticipated benefits from such acquisitions.
•If the Company does not respond to intense competition and rapid changes in the financial services industry or otherwise adapt to changing customer preferences, its financial performance may suffer.
•Industry adoption of real-time payments networks could negatively impact financial performance through reductions in product profitability, increased liquidity reserves and the potential for increased fraud losses, among other risks.
Credit Risks
•The Company must effectively manage its credit risks.
14
•A significant portion of the Company’s assets consists of commercial loans, which may involve a higher degree of credit risk.
•The Company is subject to risks arising from conditions in the real estate market, as a significant portion of its loans are secured by commercial and residential real estate.
•Future profitability depends, to a significant extent, upon commercial business customers.
•The Company’s business is concentrated in Texas and exposure to the Texas economy, including the energy industry, could adversely affect its performance.
•The Company must maintain an appropriate allowance for credit losses.
•The Company must effectively manage its counterparty risk.
Liquidity Risks
•The Company must effectively manage its liquidity risk.
•The Company’s growth plans are dependent on the availability of capital and funding.
•The Company is dependent on funds obtained from borrowing or capital transactions or from the Bank and its other subsidiaries to fund its obligations.The Company is dependent on funds obtained from borrowing or capital transactions or from the Bank to fund its obligations.
Market Risks
•The Company must effectively manage its interest rate risk.
•Changes in interest rates affect the value of the Company’s securities portfolio, and the Company may realize losses if it were to sell such securities at a time when interest rates are higher than the yield on the Company’s securities portfolio.
•The Company must effectively manage market risk associated primarily with sales and trading activities.
Operational Risks
•The Company must continue to attract, retain and develop key personnel.
•The Company and its vendors and customers must effectively manage information systems and cyber risk and threats which may result in disruptions, failures or breaches in security, including a cyber-attack, which could cause significant harm to the Company and its clients and customers.
•The Company’s operations rely extensively on a broad range of external vendors.
•The development and use of AI presents risks and challenges that may adversely impact the Company’s business.
•The Company’s accounting estimates and risk management processes rely on management judgment, which may prove inadequate, wrong or be adversely impacted by inaccurate or mistakes in assumptions or models.
•The risk management strategies and processes may not be effective and the Company’s controls and procedures, including disclosure controls and procedures and internal control over financial reporting, may fail or be circumvented.
•The business is susceptible to fraud and conduct risk.
Legal, Regulatory and Compliance Risks
•The Company is subject to extensive government regulation and supervision and interpretations thereof.
•The Company must maintain adequate regulatory capital to support its business objectives and strategy.
•The Company is subject to claims and litigation in the ordinary course of its business, including claims that may not be covered by insurance.
•The Company could face serious negative consequences if its third-party service providers, business partners, customers or investments fail to comply with applicable laws, rules or regulations.
•Deposit insurance premiums levied against the Bank could increase.
Other Risks Affecting the Business
•The business faces unpredictable economic and business conditions.
•The soundness of other financial institutions could adversely affect the business.
•Negative developments affecting the banking industry, “contagion effects,” and resulting media coverage, have eroded customer confidence in the banking system.Negative developments affecting the banking industry, and resulting media coverage, have eroded customer confidence in the banking system.
•The Company is subject to environmental liability risk associated with lending activities.
•Severe weather, earthquakes, other natural disasters, climate change, pandemics, acts of war or terrorism and other external and geopolitical events could significantly impact the business.
•Negative public opinion could damage the Company’s reputation and adversely affect its earnings.
Risk Factors Associated with the Business
Strategic Risks
The Company competes with many banks and other traditional, non-traditional, brick and mortar and online financial service providers. Competition among providers of financial services in regional and national markets, and especially in Texas, is
15
intense. The Company competes with other financial and bank holding companies, state, regional and national commercial banks, savings and loan associations, consumer finance companies, credit unions, securities brokerages, insurance companies, mortgage banking companies, money market mutual funds, asset-based non-bank lenders, government sponsored or subsidized lenders, financial technology companies and other financial services providers. The Company competes with other financial and bank holding companies, state and national commercial banks, savings and loan associations, consumer finance companies, credit unions, securities brokerages, insurance companies, mortgage banking companies, money market mutual funds, asset-based non-bank lenders, government sponsored or subsidized lenders, financial technology companies and other financial services providers. Many of these competitors have greater financial resources, lending limits and technological resources and larger branch networks than the Company does and are able to offer a broader range of products and services than the Company can. Many of these competitors have substantially greater financial resources, lending limits and technological resources and larger branch networks than the Company does and are able to offer a broader range of products and services than the Company can. Many competitors offer lower interest rates and more liberal loan terms that appeal to borrowers but adversely affect net interest margin and assurance of repayment. The Company is increasingly faced with competition in many of its products and services by non-bank providers who may have competitive advantages of size, access to potential customers and fewer regulatory requirements. Failure to compete effectively for deposit, loan and other banking customers in any of the lines of business could cause the Company to lose market share, slow or reverse growth rate or suffer adverse effects on financial condition, results of operations or profitability.
The Company must effectively execute its business strategy in order to continue asset and earnings growth. The Company’s core strategy is to become the leading full-service financial services firm in Texas by offering a differentiated banking experience to companies in high-value business segments. The Company’s core strategy is to develop its business principally through organic growth by offering a differentiated banking experience to companies in high-value business segments. Its prospects for continued growth must be considered in light of the risks, expenses and difficulties frequently encountered by growing companies. In order to execute the Company’s business strategy successfully, the Company must, among other things:
•continue to identify and expand into suitable markets and lines of business, in Texas, regionally and nationally;
•develop new products and services and execute the full range of products and services more efficiently and effectively;
•attract and retain qualified front-line personnel in each of the targeted market segments to build and maintain and a strong customer base;
•respond to market opportunities promptly and nimbly while balancing the demands of risk management and compliance with regulatory requirements;
•expand loan portfolio in an intensely competitive environment while maintaining credit quality;
•attract sufficient deposits and capital to fund expected and anticipated loan growth and satisfy regulatory requirements;
•compete effectively for investment banking and broker-dealer customers;
•control expenses; and
•acquire and maintain sufficient qualified staffing and information technology and operational resources to support growth and compliance with regulatory requirements.
Failure to effectively execute the business strategy could have a material adverse effect on the business, future prospects, financial condition, results of operations or profitability.
The Company must be effective in developing and executing new lines of business and new products and services while managing associated risks, including the ability to use technology to provide products and services that will satisfy customer demands. The Company’s business strategy involves developing and growing new lines of business and offering new products and services, including through the introduction of new technologies, within existing lines of business to grow its client base, retain existing clients and realize strategic priorities for revenue growth. Substantial costs, risks and uncertainties are associated with these efforts, particularly in instances where the markets are not fully developed. Developing and marketing new activities requires that the Company invest significant time and resources before new sources of revenues, funding and profits can be realized. Developing and marketing new activities requires that the Company invests significant time and resources before new sources of revenues, funding and profits can be realized. Timetables for the development and launch of new activities may not be achieved and price and profitability targets may not prove feasible, or their realization may be delayed. External factors, such as compliance with regulations, receipt of necessary licenses or permits, competitive alternatives and shifting market preferences, may also adversely impact the successful execution of new activities. New activities necessarily entail additional risks and may present additional risks to the effectiveness of the Company’s system of internal controls and risk management strategies. All service offerings, including current offerings and new activities, may become more risky due to changes in economic, competitive and market conditions beyond the Company’s control. Regulators could determine that the Company’s, the Bank’s or Texas Capital Securities’ risk management practices are not adequate or the Company’s, the Bank’s or Texas Capital Securities’ capital levels are not sufficiently in excess of well capitalized or adequately capitalized levels and take action to restrain growth. Regulators could determine that the Company’s, the Bank’s or TCBI Securities’ risk management practices are not adequate or the Company’s, the Bank’s or TCBI Securities’ capital levels are not sufficiently in excess of well capitalized levels and take action to restrain growth. Failure to successfully manage these risks, generally and to the satisfaction of regulators, in the development and implementation of new lines of business or new products or services could have a material adverse effect on the business, results of operations and financial condition. Additionally, many of the Company’s larger competitors invest substantially greater resources in technological capabilities than the Company does. Many of the Company’s larger competitors invest substantially greater resources in technological capabilities than the Company does. The Company may not be able to effectively protect, develop and manage mission critical systems and IT infrastructure to support strategic business initiatives, which could impair its ability to achieve financial, operational, compliance and strategic objectives and negatively affect the business, results of operations, financial condition or profitability.
The Company may pursue bank and non-bank acquisition opportunities as they arise. However, even if the Company identifies attractive acquisition opportunities, it may not be able to consummate such acquisitions on favorable terms, if at all, or realize the anticipated benefits from such acquisitions. However, even if the Company identifies attractive acquisition opportunities, it may not be able to complete such acquisitions on favorable terms or realize the anticipated benefits from such acquisitions. However, even if the Company identifies attractive acquisition opportunities, it may not be able to complete such acquisitions on favorable terms or realize the anticipated benefits from such acquisitions. While the Company continues to grow organically, it may pursue attractive bank or non-bank acquisition and consolidation opportunities that arise in the Company’s core markets and beyond. In the event
16
that attractive acquisition opportunities arise, the Company would likely face competition for such acquisitions from other banking and financial companies, many of which have significantly greater resources and may offer more attractive valuations. This competition could either prevent the Company from being able to consummate attractive acquisition opportunities or increase the cost of potential acquisitions, which could reduce the Company’s potential returns and reduce the attractiveness of these opportunities. This competition could either prevent the Company from being able to complete attractive acquisition opportunities or increase prices for potential acquisitions which could reduce the Company’s potential returns and reduce the attractiveness of these opportunities. Furthermore, even if the Company is able to identify and complete acquisitions, the terms of such acquisitions may not be favorable to the Company or it may fail to realize the anticipated benefits from such acquisitions.
Acquisitions involve numerous risks and uncertainties, including inaccurate financial and operational assumptions. While the Company seeks to mitigate risks and liabilities in transactions through due diligence, there may be risks and liabilities that its due diligence efforts fail to discover, that are not accurately or completely disclosed to the Company or that are inadequately assessed. In addition, the Company may not be able to fully integrate the operations of any future acquired businesses within its own operations in an efficient and cost-effective manner or without significant disruption to the Company or the acquired companies’ existing operations. Moreover, acquisitions involve other significant risks and uncertainties, including difficulties integrating acquired personnel and corporate cultures into the Company’s business, the potential loss of key employees, changes in relationships with customers and other counterparties, difficulties in integrating information technology and accounting systems, the diversion of management attention and resources from existing operations and the possibility of litigation or other disputes.
The Company must satisfy a number of meaningful federal and state regulatory approvals before completing an acquisition of another bank, and if the Company were unable, or there was a perception that the Company would be unable, to obtain such approvals for any reason, including due to any actual or perceived capital, liquidity, profitability or regulatory compliance issues, it would prevent the Company’s ability to complete the acquisition and to consummate acquisitions in the future. Furthermore, an inability to satisfy other conditions necessary to consummate an acquisition transaction, such as third-party litigation, a judicial order blocking the transaction, or lack of shareholder approval, could also prevent the Company from completing an announced acquisition. Any acquisition could also be dilutive to the Company’s earnings and shareholders’ equity per share of the Company’s common stock.
If the Company does not respond to intense competition and rapid changes in the financial services industry or otherwise adapt to changing customer preferences, its financial performance may suffer. The Company’s ability to deliver strong financial performance and returns on investment to shareholders will depend in part on its ability to expand the scope of available financial services to meet the needs and demands of its customers. In addition to the challenge of competing against other banks in attracting and retaining customers for traditional banking services, the Company’s competitors also include securities dealers, brokers, investment advisors and specialty finance, telecommunications, technology and insurance companies as well as large retailers who seek to offer one-stop financial services in addition to other products and services desired by consumers that may include services that banks have not been able or allowed to offer to their customers in the past or may not be currently able or allowed to offer. Many of these other firms may be significantly larger than the Company and may have access to customers and financial resources that are beyond the Company’s capability. The Company competes with these firms with respect to capital, access to capital, revenue generation, products, services, transaction execution, innovation, reputation, talent and price. Further, as a result of the GENIUS Act, passed in 2025 to provide a regulatory framework for stablecoins in the U.S., increased competition may emerge from issuers of stablecoins and providers of related technology.
Industry adoption of real-time payments networks could negatively impact financial performance through reductions in product profitability, increased liquidity reserves and the potential for increased fraud losses, among other risks. With the launch of real-time payments networks, such as RTP® from The Clearing House and FedNow® from the Federal Reserve, instantaneous cash settlement capabilities are available 24 hours a day and 7 days a week. The implications of the new settlement capabilities are far reaching and have not yet significantly affected the banking industry. As market adoption increases, the Company may be required to hold more liquidity reserves in cash to facilitate cash settlement activity outside of traditional business hours. Additionally, instantaneous settlement will likely reduce float benefits associated with providing deposit and banking services, as well as pose incremental fraud risk due to a reduced ability to reverse fraudulent transactions due to the speed of money movement.
Credit Risks
The Company must effectively manage its credit risks. The risk of non-payment of loans is inherent in commercial banking, which may result from many factors, including:
•Adverse changes in local, U.S. and global economic and industry conditions, and other geopolitical events;
•Declines in the value of collateral, including asset values that are directly or indirectly related to external factors such as commodity prices, real estate values, interest rates or geopolitical risks;
•Concentrations of credit associated with specific loan categories, industries or collateral types; and
•Exposures to individual borrowers and to groups of entities that may be affiliated on some basis that individually and/or collectively represent a larger percentage of the Company’s total loans or capital than might be considered common at other banks of similar size.
17
Although the Company attempts to manage its credit risk by carefully monitoring the concentration of its loans within specific loan categories and industries and through prudent loan approval and monitoring practices in all categories of lending, the Company cannot assure that its approval and monitoring procedures will reduce these lending risks. The Company’s significant number of large credit relationships (above $20 million) could exacerbate credit problems precipitated by a regional or national economic downturn. Competitive pressures could erode underwriting standards, leading to a decline in general credit quality and increases in credit defaults and non-performing asset levels. If the Company’s credit portfolio management routines, policies and procedures are not able to adequately adapt to changes in economic, competitive or other conditions that affect customers and the quality of the loan portfolio, the Company may incur increased losses that could adversely affect its financial results and lead to increased regulatory scrutiny, restrictions on its lending activity or financial penalties. Furthermore, the Company relies heavily on information provided by third parties when originating and monitoring loans.The Company relies heavily on information provided by third parties when originating and monitoring loans. If this information is intentionally or negligently misrepresented and the Company does not detect such misrepresentations, the credit risk associated with the transaction may be increased.
A significant portion of the Company’s assets consists of commercial loans, which may involve a higher degree of credit risk. The Company generally invests a greater proportion of its assets in commercial loans to business customers than other banking institutions of its size, and its business plan calls for continued efforts to increase its assets invested in these loans. Commercial loans may involve a higher degree of credit risk than other types of loans due, in part, to their larger average size, the effects of changing economic conditions on the businesses of the Company’s commercial loan customers, the dependence of borrowers and counterparties on operating cash flow to service debt and the Company’s reliance upon collateral which may not be readily marketable. Due to the greater proportion of these commercial loans in its portfolio and because the balances of these loans are, on average, larger than other categories of loans, losses incurred on a relatively small number of commercial loans could have a materially adverse impact on results of operations and financial condition.
The Company is subject to risks arising from conditions in the real estate market, as a significant portion of its loans are secured by commercial and residential real estate. The Company’s real estate lending activities and its exposure to fluctuations in real estate collateral values are significant and may increase as its assets increase. The market value of real estate can fluctuate significantly in a relatively short period of time as a result of market conditions in the geographic area in which the real estate is located, in response to factors such as economic downturns, changes in the economic health of industries heavily concentrated in a particular area and in response to changes in market interest rates, which influence capitalization rates used to value revenue-generating commercial real estate. If the value of real estate serving as collateral for loans declines materially, a significant part of the loan portfolio could become under-collateralized and losses incurred upon borrower defaults would increase. Conditions in certain segments of the real estate industry, including homebuilding, lot development and mortgage lending, may have an effect on the values of real estate pledged as collateral for loans. The inability of purchasers of real estate, including residential real estate, to obtain financing may weaken the financial condition of borrowers who are dependent on the sale or refinancing of property to repay their loans. Changes in the economic health of certain industries can have a significant impact on other sectors or industries which are directly or indirectly associated with those industries and may impact the value of real estate in areas where such industries are concentrated.
Future profitability depends, to a significant extent, upon commercial business customers. The Company’s future profitability depends, to a significant extent, upon revenue it receives from commercial business customers, and their ability to continue to meet their loan obligations. Adverse economic conditions or other factors affecting this market segment, and the Company’s failure to timely identify and react to unexpected economic downturns, may have a greater adverse effect than other financial institutions that have a more diversified customer base. Additionally, the Company’s inability to grow its commercial business customer base in a highly competitive market could affect its future growth and profitability.
The Company’s business is concentrated in Texas and exposure to the Texas economy, including the energy industry, could adversely affect its performance. Although more than 50% of the Company’s loan exposure is outside of Texas and more than 50% of its deposits are sourced outside of Texas, the Texas concentration remains significant compared to peer banks. A majority of the loans held for investment, excluding mortgage finance loans and other national lines of business, are to businesses with headquarters or operations in Texas. As a result, the Company’s financial condition and results of operations may be strongly affected by any prolonged period of economic recession or other adverse business, economic or regulatory conditions affecting Texas businesses and financial institutions. Furthermore, while the Texas economy is increasingly more diversified, the energy sector and related industries continue to play an important role in the overall Texas economy and represent a significant part of the economies in some of the primary markets in which the Company operates. The Company’s portfolio of energy loans consists primarily of producing reserve-based loans to exploration and production companies, with a smaller portion of loan balances attributable to royalty owners, midstream operators, saltwater disposal and other service companies whose businesses primarily relate to production, not exploration and development, of oil and gas. These businesses are significantly affected by volatility in oil and natural gas prices, reserve depletion curves, material declines in the level of drilling and production activity in Texas and in other areas of the United States and material fluctuations in investor interest in oil and gas exploration and production investments. There is no assurance that the Company will not be materially adversely
18
impacted by the direct and indirect effects of current and future economic conditions in the energy sector and in Texas, generally.
The Company must maintain an appropriate allowance for credit losses. Management’s experience in the banking industry indicates that some portion of the Company’s loans will become delinquent, and some may only be partially repaid or may never be repaid at all. The Company maintains an allowance for credit losses on loans, which is a reserve established through a provision for credit losses charged to expense each quarter, that is consistent with management’s assessment of the collectability of the loan portfolio in light of the amount of loans committed and outstanding and current and future economic conditions and market trends. When specific loan losses are identified, the amount of the expected loss is removed, or charged off, from the allowance. Management’s methodology for establishing the appropriateness of the allowance for credit losses on loans depends on subjective application of risk grades as indicators of each borrower’s ability to repay specific loans, together with an assessment of how actual or projected changes in competitor underwriting practices, competition for borrowers and depositors and other conditions in markets are likely to impact improvement or deterioration in the collectability of loans as compared to historical experience.
The Company has a substantially larger percentage of commercial, real estate and other categories of business loans relative to total assets than most other banks in the market and individual loans are generally larger as a percentage of the Company’s total earning assets than other banks. As a result, the Company’s business model may make it more vulnerable to changes in the underlying business credit quality than other entities with which the Company competes. The failure to maintain above-peer credit quality metrics could have a material adverse impact on growth and profitability.
If management’s assessment of inherent risk and losses in the loan portfolio is inaccurate, or geopolitical, economic and market conditions or borrowers' financial performance experience material unanticipated changes, the allowance may become inadequate, requiring larger provisions for loan losses that can materially decrease the Company’s earnings or profitability. Federal regulators periodically review the Company’s allowance for credit losses and based on their judgments or interpretations, which may be different than management’s, may require the Company to change classifications or grades of loans, increase the allowance for credit losses or recognize further loan charge-offs. Any increase in the allowance for credit losses or in the amount of loan charge-offs required by the Company’s methodology or regulatory agencies could have a negative effect on results of operations and financial condition.
The Company must effectively manage its counterparty risk. Financial services institutions are interrelated as a result of trading, clearing, counterparty and other relationships. The Company has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial services industry, including commercial banks, brokers and dealers, investment banks, and other financial market participants. Many of these transactions expose the Company to credit risk in the event a counterparty is unable to satisfy a margin demand or following a default by a counterparty or client. Many of these transactions expose the Company to credit risk in the event of default of a counterparty or client. In addition, the Company’s credit risk may be increased when the collateral securing its loans cannot be realized upon or is liquidated at prices not sufficient to recover the full amount of its credit or derivative exposure. Any such losses could have a material adverse effect on the business, financial condition, results of operations or profitability.
Liquidity Risks
The Company must effectively manage its liquidity risk. The Company requires liquidity in the form of available funds to meet deposit, debt and other obligations as they come due, borrower requests to draw on committed credit facilities including unexpected demands for cash payments. While neither the Company nor the Bank is subject to Basel III liquidity regulations, the adequacy of its liquidity is a matter of regulatory interest given the significant portion of the balance sheet represented by loans as opposed to securities and other more marketable investments. The Company’s principal source of funding consists of customer deposits, supplemented by its short-term and long-term borrowings, including federal funds purchased and Federal Home Loan Bank (“FHLB”) borrowings. Recently proposed changes to the FHLB system could adversely impact the Company’s access to FHLB borrowings or increase the cost of such borrowings. The Company also relies on the availability of the mortgage secondary market provided by Ginnie Mae and the government sponsored entities (“GSEs”) to support the liquidity of its residential mortgage assets. A substantial majority of the Company’s liabilities consist of demand, savings, checking and money market deposits, which are payable on demand or upon relatively short notice. By comparison, a substantial portion of the assets are loans, most of which, excluding mortgage finance loans, cannot be collected or sold in so short a time frame, creating the potential for an imbalance in the availability of liquid assets to satisfy depositors and loan funding requirements.
An inability to raise funds through deposits, borrowings, the sale of securities and loans and other sources, or an inability to access the capital markets, could have a substantial negative effect on the Company’s liquidity. Furthermore, such funding sources, even if available could become more expensive, which could negatively impact the Company’s profitability and net interest margin. The Company actively manages its available sources of funds to meet expected or anticipated needs under normal and financially stressed conditions, but there is no assurance that the Company will be able to make new loans, meet ongoing funding commitments to borrowers, or replace maturing deposits and advances as necessary under all possible circumstances. The Company’s ability to obtain funding, including on attractive terms, could be impaired by factors beyond its
19
control, such as disruptions in financial markets, negative expectations regarding the financial services industry generally or in the markets or negative perceptions of the Company, including credit ratings.
The Company sources a significant volume of its non-interest bearing deposits from its commercial clients, creating concentrations of deposits that may carry a greater risk of unexpected material withdrawals. These customers are more likely to actively monitor the Company’s financial condition and results of operations and could withdraw their deposits quickly upon the occurrence of a material adverse development affecting the Company or its businesses or based on market rumors regarding the Company or other regional banks. In response to this and other risks, the Company continuously assesses its liquidity and monitors changes in liquidity and capital, but there is no assurance that the Company will maintain or have access to sufficient funding and capital to fully mitigate its liquidity risk. In response to this risk, the Company has increased its liquidity and developed techniques for monitoring and planning for changes in liquidity and capital, but there is no assurance that the Company will maintain or have access to sufficient funding and capital to fully mitigate its liquidity risk.
One potential source of liquidity for the Company is brokered deposits arranged by brokers acting as intermediaries, typically larger money-center financial institutions.One potential source of liquidity for the Company are brokered deposits arranged by brokers acting as intermediaries, typically larger money-center financial institutions. The Company receives these deposits from certain of its customers in connection with its delivery of other financial services to them or their customers. The deposits are subject to regulatory classification as brokered deposits, which are generally considered to be more sensitive to interest rates, with a higher risk of withdrawal than other deposits if the rates offered are not competitive with rates offered by the Bank’s competitors. The deposits are subject to regulatory classification as brokered deposits, which are generally considered to be more sensitive to interest rates, with a higher withdrawal than other deposits if the rates offered are not competitive with rates offered by the Bank’s competitors. Furthermore, banks with higher levels of brokered deposits may be viewed as having higher liquidity risks, which may lead to further deposit outflow.
If the Bank does not maintain regulatory capital above the level required to be well capitalized the Bank would be required to obtain FDIC consent for it to continue to accept, renew or roll over most deposits classified as brokered deposits, and there can be no assurance that the FDIC would consent under any circumstances. The Bank could also be required to suspend or eliminate deposit gathering from any source classified as brokered deposits. The FDIC can change the definition of brokered deposits or extend the classification to deposits not currently classified as brokered deposits. The FDIC can change the definition of brokered deposits or extend the classification to deposits not currently classified as brokered deposits and the FDIC has proposed rules that would reclassify certain deposits as brokered deposits. These non-traditional deposits are subject to greater operational and reputational risk of unexpected withdrawal than traditional demand and time deposits, particularly those provided by consumers.
The Company’s growth plans are dependent on the availability of capital and funding. The Company’s historical ability to raise capital through the sale of capital stock and debt securities may be affected by economic and market conditions or regulatory changes that are beyond its control. Adverse changes in its operating performance or financial condition could make raising additional capital difficult or more expensive or limit access to customary sources of funding, including inter-bank borrowings, repurchase agreements and borrowings from the Federal Reserve Bank of Dallas (“Reserve Bank”) or the FHLB. Unexpected changes in requirements for capital resulting from regulatory actions could require the Company to raise capital at a time, and at a price, that might be unfavorable, or could require that the Company forego continuing growth or reduce its then current loan portfolio. The Company cannot offer assurance that capital and funding will be available to it in the future, in needed amounts, upon acceptable terms or at all. The Company’s efforts to raise capital could require the issuance of securities at times and with maturities, conditions and rates that are disadvantageous, and which could have a dilutive impact on its then or current stockholders. Factors that could adversely affect the Company’s ability to raise additional capital or necessary funding include conditions in the capital markets, its financial performance, its credit ratings, regulatory actions and general economic conditions. Increases in cost of capital, including dilution and increased interest or dividend requirements, could have a direct adverse impact on the Company’s operating performance and its ability to achieve its growth objectives.
The Company’s mortgage finance business has experienced, and will likely continue to experience, highly variable usage of the Company’s funding capacity resulting from seasonal demands for credit, changes in consumer demand driven by changes in interest rates, housing affordability and supply and month-end “spikes” of residential mortgage closings. These spikes could also result in the Company and the Bank having capital ratios that are below internally targeted levels or even levels that could cause the Bank to not be well capitalized and could affect liquidity levels. At the same time, managing this risk by declining to respond fully to the needs of customers could severely impact the business. The Company has historically responded to these variable funding demands by, among other things, increasing the extent of participations sold in its mortgage loan interests, as needed, and by maintaining a substantial borrowing relationship with the FHLB. Its mortgage finance customers have also provided significant deposit balances associated with the borrower escrow accounts created at the time certain mortgage loans are funded, which have benefited liquidity and net interest margin. In response to competitive pressures, the Company sometimes finds it necessary to pay interest on some of these accounts, as regulations allow or require and this trend may continue, which can affect its costs of funds. Individual escrow account balances also experience significant variability monthly as principal and interest payments, including ad valorem taxes and insurance premiums, are paid periodically. While the short average holding period of its mortgage interests of approximately 20 days will allow the Company, if necessitated by a funding shortfall, to rapidly decrease the size of the portfolio and its associated capital and funding requirements, any such action might significantly damage the business and important mortgage finance relationships.
The Company is dependent on funds obtained from borrowing or capital transactions or from the Bank and its other subsidiaries to fund its obligations.The Company is dependent on funds obtained from borrowing or capital transactions or from the Bank to fund its obligations. The Company is a financial holding company engaged in the business of managing, controlling and operating its subsidiaries. The Company conducts no material business or other activity at the parent company level other than activities incidental to holding equity and debt investments in its subsidiaries. As a result, the Company relies
20
on the proceeds of capital transactions, borrowings under its revolving line of credit, payments of interest and principal on loans made to its subsidiaries and dividends from the Bank and its other subsidiaries to pay its operating expenses, to satisfy its obligations to debt holders and to pay dividends on its preferred stock. The profitability of the Bank, the Company’s largest operating subsidiary, is subject to fluctuation based upon, among other things, the cost and availability of funds, changes in interest rates and economic conditions in general. The profitability of the Bank is subject to fluctuation based upon, among other things, the cost and availability of funds, changes in interest rates and economic conditions in general. The Bank’s ability to pay dividends to the Company is subject to regulatory limitations that can, under certain adverse circumstances, prohibit the payment of dividends to it. The Company’s right to participate in any distribution from the liquidation or sale of the Bank’s or its other subsidiaries’ assets is subject to the prior claims of the creditors of the Bank and the Company’s other subsidiaries. The Company’s right to participate in any distribution from the liquidation or sale of the Bank’s assets is subject to the prior claims of the Bank’s creditors.
If the Company is unable to access funds from capital transactions, borrowing under its revolving line of credit or dividends or interest on loan payments from the Bank, the Company may be unable to satisfy its obligations to creditors or debtholders or pay dividends on its preferred stock.
Market Risks
The Company must effectively manage its interest rate risk. The Company’s profitability is dependent to a large extent on its net interest income, which is the difference between the interest income paid on its loans and investments and the interest the Company pays to third parties such as its depositors, lenders and debtholders. Periods of volatile interest rates may have a material effect on the Company’s earnings. Changes in interest rates can impact profits and the fair values of certain assets and liabilities. Models that the Company uses to forecast and plan for the impact of rising and falling interest rates may be incorrect or fail to consider the impact of competition and other conditions affecting loans and deposits.
Interest rate risk can also result from mismatches between the dollar amounts of repricing or maturing assets and liabilities and from mismatches in the timing and rates at which the assets and liabilities reprice. An increase in interest rates on loans is generally associated with a lower volume of loan originations, which may reduce our earnings. Following an increase in the general level of interest rates, our ability to maintain a positive net interest margin is dependent on our ability to increase our loan offering rates, replace loan maturities with new originations, minimize increases on our deposit rates and maintain an acceptable level and mix of funding. The Company actively monitors and manages the balances of maturing and repricing assets and liabilities to reduce the adverse impact of changes in interest rates, but there can be no assurance that the Company will be able to avoid material adverse effects on net interest margin in all market conditions.
Rising interest rates in prior periods have increased interest expense, with a commensurate positive effect on net interest income; however, interest rates began to decrease in 2024 with three cuts to the Federal Funds rate by the Federal Reserve in 2024 followed by three cuts in 2025. Rapid and unexpected volatility in interest rates creates additional uncertainty and potential for adverse financial effects.Rising interest rates in prior periods have increased interest expense, with a commensurate positive effect on net interest income; however, interest rates have begun to decrease following three cuts to the Federal Funds rate by the Federal Reserve in 2024. Rapid and unexpected volatility in interest rates creates additional uncertainty and potential for adverse financial effects. There can be no assurance that the Company will not be materially adversely affected by future changes in interest rates.
Changes in interest rates affect the value of the Company’s securities portfolio, and the Company may realize losses if it were to sell such securities at a time when interest rates are higher than the yield on the Company’s securities portfolio. As a result of inflationary pressures and the resulting rapid increases in interest rates in prior periods, the trading value of previously issued government and other fixed income securities declined significantly. These securities make up a majority of the securities portfolio of most banks in the U.S., including the Company’s, resulting in unrealized losses embedded in U.S. banks’ securities portfolios. If the Company were to sell securities with embedded unrealized losses, it may incur losses, which could impair the Company’s capital, financial condition, and results of operations and require the Company to raise additional capital on unfavorable terms, thereby negatively impacting its profitability. If the Company were to sell securities with embedded unrealized losses, as the Company did in the third quarter of 2024, it may incur losses, which could impair the Company’s capital, financial condition, and results of operations and require the Company to raise additional capital on unfavorable terms, thereby negatively impacting its profitability. While the Company has taken actions to maximize its funding sources, there is no guarantee that such actions will be successful or sufficient in the event of sudden liquidity needs.
The Company must effectively manage market risk associated primarily with sales and trading activities. In addition to interest rate risk, the Company is exposed to market risk, principally related to trading activities conducted to support customer transactions or to provide customers with liquidity. The Company typically seeks to manage the market risks of its positions with offsetting positions that eliminate or reduce market risk to fall within acceptable tolerances.
The Company uses VaR as a primary risk measure to aggregate, monitor and limit risks at the portfolio level across all trading activities. VaR is calculated based on one-year historical moves in key market risk factors relevant to the financial asset and any associated portfolio and estimates potential loss on subject positions at 95th percentile confidence interval. VaR is calculated based on one year historical moves in key market risk factors relevant to the financial asset and any associated portfolio and estimates potential loss on subject positions at 95th percentile confidence interval.
Operational Risks
The Company must continue to attract, retain and develop key personnel. The Company’s success depends to a significant extent upon its ability to attract, develop and retain experienced personnel in each of its lines of business and markets including managers in operational areas, compliance and other support areas to build and maintain the infrastructure and controls required to support continuing growth. Competition for the best people in the industry can be intense, and there is no assurance that the Company will continue to attract or retain talent or develop personnel. Factors that affect its ability to attract, develop and retain key employees include compensation and benefits programs, profitability, ability to establish appropriate succession plans for
21
key talent, reputation for rewarding and promoting qualified employees and market competition for employees with certain skills, including information systems development and security. The cost of employee compensation is a significant portion of operating expenses and can materially impact results of operations or profitability, especially during periods of wage inflation. The unanticipated loss of the services of key personnel could have an adverse effect on the business.
The Company and its vendors and customers must effectively manage information systems and cyber risk and threats which may result in disruptions, failures or breaches in security, including a cyber-attack, which could cause significant harm to the Company and its clients and customers. The Company, its vendors and customers all rely heavily on communications and information systems to conduct their respective businesses, store sensitive data and work effectively together. The financial services industry is undergoing rapid technological changes with frequent introductions of new technology-driven products and services, which in turn create further dependencies on critical third-party service providers and vendors. The financial services industry is undergoing rapid technological changes with frequent introductions of new technology-driven products and services.
Communications and information systems and those of the Company’s vendors and customers remain vulnerable to unexpected disruptions, failures and cyber-attacks. Any disruptions, failures or breaches in security of these systems could result in significant disruption to the Company’s operations. Information security breaches and cyber-security-related incidents include, but are not limited to, attempts to access information, theft of information, credentials or other intellectual property, including customer and company information, malicious code, computer viruses and denial of service attacks that could result in unauthorized access, data breaches resulting in misuse, loss or destruction of data (including confidential customer and employee information), ransomware attacks, account takeovers, unavailability of service or other events. These types of threats may derive from human error, fraud or malice on the part of external or internal parties or may result from accidental technological failure. The risk, frequency and intensity of such attacks is escalating, including as a result of remote working arrangements, the use of the internet and telecommunications technologies to conduct financial transactions, and the increased sophistication of these threats. Material failures or interruptions of these systems could impair the Company’s ability to serve customers and to operate the business and could damage the Company’s reputation, result in a loss of business, subject the Company or the Bank to additional regulatory scrutiny or enforcement or exposure to civil litigation, criminal penalties or financial liability. While the Company has developed extensive recovery plans, the Company cannot assure that those plans will be effective to prevent adverse effects resulting from system failures.
The use of the Company’s cloud technologies is also critical to the operation of systems, and its reliance on cloud technologies is growing. Service disruptions in cloud technologies may lead to delays in accessing, or the loss of, data that is important to the businesses and may hinder clients’ access to products and services.
The Company collects and stores sensitive data, including personally identifiable information of its customers and employees and in the ordinary course of business must allow certain vendors access to that data. Breaches of the systems or vendors' or customers’ systems, thefts of data and other breaches and criminal activity result in significant costs to respond or remediate losses if the Company or its vendors are at fault, damage to the Company’s customer relationships, regulatory scrutiny and enforcement and loss of future business opportunities due to reputational damage. Breaches of the systems or vendors' or customers’ systems, thefts of data and other breaches and criminal activity may result in significant costs to respond or remediate losses if the Company or its vendors are at fault, damage to the Company’s customer relationships, regulatory scrutiny and enforcement and loss of future business opportunities due to reputational damage. Even the most well-protected information, networks, systems and facilities remain potentially vulnerable because attempted security breaches, particularly cyber-attacks and intrusions, or disruptions have occurred and will occur in the future, and because the techniques used in such attempts are rapidly and constantly evolving and may not be recognized until launched, can originate from a wide variety of sources, including the Company’s own employees, cyber-criminals, “hacktivists” (i. Even the most well-protected information, networks, systems and facilities remain potentially vulnerable because attempted security breaches, particularly cyber-attacks and intrusions, or disruptions will occur in the future, and because the techniques used in such attempts are rapidly and constantly evolving and generally are not recognized until launched against a target, and in some cases are designed not to be detected and, in fact, may not be detected for a period of time or at all. e., individuals or groups that use technology to promote a political agenda or social change), groups linked to terrorist organizations or hostile countries, or third parties whose objective is to disrupt the operations of financial institutions more generally, and in some cases are designed not to be detected and, in fact, may not be detected for a period of time or at all. The Company does not have control over the cybersecurity of the systems of the large number of clients, customers, counterparties and third-party service providers with which it does business, and it is possible that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems. Accordingly, the Company may be unable to anticipate or be prepared for these techniques or to implement adequate security barriers or other preventative measures, and thus it is impossible for the Company to entirely mitigate this risk.
Breaches are generally perpetrated by unknown third parties, but could also be facilitated by employees either inadvertently or by consciously attempting to create disruption or certain acts of fraud.Breaches can be perpetrated by unknown third parties, but could also be facilitated by employees either inadvertently or by consciously attempting to create disruption or certain acts of fraud. The Company’s customers and employees have been, and will continue to be, targeted by parties using fraudulent e-mails and other communications in attempts to misappropriate passwords, bank account information or other personal information or to introduce viruses or other malware through “Trojan horse” programs to the Company’s information systems, the information systems of merchants or third-party service providers and/or customers' computers. Although the Company, with the help of third-party service providers, will continue to implement information security technology solutions and establish operational procedures to address such attacks and breaches, and protect sensitive data, there can be no assurance that these measures will be effective. Although the Company, with the help of third-party service providers, will continue to implement information security technology solutions and establish operational procedures to protect sensitive data, there can be no assurance that these measures will be effective. The Company advises, or alerts and provides some guidance to customers and evaluates and imposes security requirements on vendors regarding protection of their respective information systems, but there is no assurance that these actions have had or will have the intended positive effects or will be effective to prevent losses or attacks. Successful cyber-attacks on the Company, vendors or customers may affect the
22
Company’s reputation, and failure to meet customer expectations could have a material impact on the Company’s ability to attract and retain deposits as a primary source of funding.
A security breach or other significant disruption of information systems or those related to customers, merchants and third-party vendors, including as a result of cyber-attacks, could (i) disrupt the proper functioning of networks and systems and therefore the operations and/or those of certain customers; (ii) result in the unauthorized access to, and destruction, loss, theft, misappropriation or release of confidential, sensitive or otherwise valuable information; (iii) result in a violation of applicable privacy, data breach and other laws, subjecting the Company to additional regulatory scrutiny and exposure to civil litigation, criminal penalties, governmental fines or financial liability; (iv) require significant management attention and resources to respond, remediate or remedy the damages that result; or (v) harm the reputation or cause a decrease in the number of customers that choose to do business with the Company.
The risk of a security breach due to a cyber-attack could increase in the future due to factors such as: the Company’s ongoing expansion of its mobile and digital banking and other internet-based product offerings and its internal use of internet-based products and applications and the increased use of remote access to facilitate remote arrangements for employees, vendors and other third parties. The risk of a security breach due to a cyber attack could increase in the future due to factors such as: the Company’s ongoing expansion of its mobile and digital banking and other internet-based product offerings and its internal use of internet-based products and applications and the increased use of remote access to facilitate remote arrangements for employees, vendors and other third parties. In addition, a third party could misappropriate confidential information obtained by intercepting signals or communications from mobile devices used by the Company’s employees. A successful penetration or circumvention of the security of the Company’s systems or the systems of a vendor, governmental body or another market participant could cause serious negative consequences, including: significant disruption of the Company’s operations and those of its clients, customers and counterparties, including losing access to operational systems, misappropriation of confidential information of the Company or that of its clients, customers, counterparties, employees or regulators, disruption of or damage to the Company’s systems and those of its clients, customers and counterparties, the inability, or extended delays in the ability, to fully recover and restore data that has been stolen, manipulated or destroyed, or the inability to prevent systems from processing fraudulent transactions, allegations or violations by the Company of applicable privacy and other laws, financial loss to the Company or to its clients, customers, counterparties or employees, loss of confidence in the Company’s cybersecurity and business resiliency measures, dissatisfaction among the Company’s clients, customers or counterparties, significant exposure to litigation and regulatory fines, penalties or other sanctions, and harm to the Company’s reputation.
The extent of a particular cyber-attack and the steps that the Company may need to take to investigate the attack may not be immediately clear, and it may take a significant amount of time before such an investigation or determination, judicial or otherwise, can be completed. The extent of a particular cyber attack and the steps that the Company may need to take to investigate the attack may not be immediately clear, and it may take a significant amount of time before such an investigation or determination, judicial or otherwise, can be completed. While such an investigation is ongoing, the Company may not necessarily know the full extent of the harm caused by the cyber-attack, and that damage may continue to spread. These factors may inhibit the Company’s ability to provide rapid, full and reliable information about the cyber-attack to its clients, customers, counterparties and regulators, and the public. Furthermore, it may not be clear how best to contain and remediate the harm caused by the cyber-attack, and certain errors or actions could be repeated or compounded before they are discovered and remediated. Furthermore, it may not be clear how best to contain and remediate the harm caused by the cyber attack, and certain errors or actions could be repeated or compounded before they are discovered and remediated. Any or all of these factors could further increase the costs and consequences of a cyber-attack. The occurrence of any of the foregoing could have a material adverse effect on the business, financial condition, results of operations or profitability.
The Company’s operations rely extensively on a broad range of external vendors. The Company relies on a large number of vendors to provide products and services necessary to maintain the day-to-day operations, particularly in the areas of operations, treasury management systems, information technology and security. This reliance exposes the Company to the risk that these vendors will not perform as required by agreements including risks resulting from disruptions in communications with vendors, cyber-attacks and security breaches at vendors, failure of a vendor to provide services for other reasons and poor performance of services. An external vendor’s failure to perform in any of these areas could be disruptive to the business and operations, which could have a material adverse impact on the business, financial condition, results of operations or profitability, including causing reputational damage. External vendors who must have access to the Company’s information systems in order to provide their services have been identified as significant sources of information technology security risk and are monitored. While the Company has implemented an active program of oversight to address this risk, there can be no assurance that the Company will not experience material security breaches associated with vendors or other third parties.
The development and use of AI presents risks and challenges that may adversely impact the Company’s business. The Company or its third-party (or fourth party) vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to the Company’s business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the Company’s implementation of AI technology and increase the Company’s compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce output or take action that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, that infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and
23
monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, the Company may rely on AI models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models, matters over which the Company may have limited visibility. Any of these risks could expose the Company to liability or adverse legal or regulatory consequences and harm the Company’s reputation and the public perception of its business or the effectiveness of its security measures.
The Company’s accounting estimates and risk management processes rely on management judgment, which may prove inadequate, wrong or be adversely impacted by inaccurate or mistakes in assumptions or models. The processes the Company’s uses to estimate expected credit losses for purposes of establishing the allowance for credit losses and to measure the fair value of financial instruments, certain liquidity and capital planning tools, including the processes the Company uses to estimate the effects of changing interest rates and other market measures on its financial condition and results of operations, all depend upon management’s judgment. Management’s judgment and the data relied upon by management may be based on assumptions that prove to be inaccurate, particularly in times of market stress or other unforeseen circumstances. Additionally, the current accounting standard related to the measurement of current expected credit losses (“CECL”) requires the application of greater management judgment that is supported by models and more data elements, including macroeconomic forecasts, than the previous allowance standard. The Company’s adoption of the CECL model has increased the complexity, and associated risk, of the analysis and processes relying on management judgment, which could negatively impact the financial condition, results of operations or profitability of the Company.
The risk management strategies and processes may not be effective and the Company’s controls and procedures, including disclosure controls and procedures and internal control over financial reporting, may fail or be circumvented. The Company continues to invest in the development of risk management techniques, strategies, assessment methods and related controls and monitoring approaches on an ongoing basis. However, these risk management strategies and processes may not be fully effective in mitigating the risk exposure in all economic market environments or against all types of risk. Any failures in risk management strategies and processes to accurately identify, quantify and monitor risk exposure could limit the ability to effectively manage risks. Management regularly reviews and updates internal controls over financial reporting, disclosure controls and procedures, and corporate governance policies and procedures. In particular, any failure to maintain or develop effective internal control over financial reporting and disclosure controls and procedures and/or any difficulties encountered in their implementation or improvement could cause the Company to fail to meet its reporting obligations and may result in a restatement of its financial statements for prior periods. In particular, any failure to maintain or develop effective internal control over financial reporting and disclosure controls and procedures and or any difficulties encountered in their implementation or improvement could cause the Company to fail to meet its reporting obligations and may result in a restatement of its financial statements for prior periods. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in the Company’s reported financial and other information, including if the Company were to report a material weakness, which would likely have a negative effect on the trading price of the Company’s common stock. If the Company has a material weakness in its internal control over financial reporting, the Company may not detect errors on a timely basis and its financial statements may be materially misstated. If the Company is unable to maintain effective internal controls over financial reporting and disclosure controls, the Company could become subject to investigations by Nasdaq, the SEC or other regulatory authorities or shareholder litigation, which could require additional management attention and which could adversely affect the Company’s business, financial condition and results of operations.
Any system of controls, however well designed and operated, is based in part on certain assumptions and management judgment and can provide only reasonable, not absolute, assurances that the objectives of the system are met. Any failure or circumvention of controls and procedures or failure to comply with regulations related to controls and procedures could have a material adverse effect on the business, financial condition, results of operations or profitability.
The business is susceptible to fraud and conduct risk. The Company’s business exposes it to fraud risk from loan and deposit customers, the parties they do business with, as well as from employees, contractors and vendors. The Company relies on financial and other data from new and existing customers which could turn out to be fraudulent when accepting such customers, executing their financial transactions and making and purchasing loans and other financial assets. In times of increased economic stress the Company is at increased risk of fraud losses. The Company believes it has underwriting and operational controls in place to prevent or detect such fraud, but cannot provide assurance that these controls will be effective in detecting fraud or that the Company will not experience fraud losses or incur costs or other damage related to such fraud, at levels that adversely affect financial results or reputation. The Company’s lending customers may also experience fraud in their businesses, which could adversely affect their ability to repay their loans or make use of services. The Company’s and its customers’ exposure to fraud may increase the Company’s financial risk and reputation risk as it may result in unexpected loan losses that exceed those that have been provided for in the allowance for credit losses. In addition, the Company is subject to risk from the conduct of its employees, including the negative impact that can result from employee misconduct or failure by employees to conduct themselves in accordance with the Company’s policies. All of which could damage the Company’s reputation and result in loss of customers or other financial loss or expose the Company to increased regulatory or other risk.
24
Legal, Regulatory and Compliance Risks
The Company is subject to extensive government regulation and supervision and interpretations thereof. The Company, as a bank holding company and financial holding company, and the Bank, as a Texas state-chartered member bank, are subject to extensive federal and state regulation and supervision and the potential for regulatory enforcement actions, which impact the business on a daily basis. The Company, as a bank holding company and financial holding company, and the Bank, as a Texas state-chartered bank, are subject to extensive federal and state regulation and supervision and the potential for regulatory enforcement actions, which impact the business on a daily basis. Texas Capital Securities is also subject to the jurisdiction of several regulatory bodies, including the SEC, FINRA, MSRB and state securities regulators. TCBI Securities is also subject to the jurisdiction of several regulatory bodies, including the SEC, FINRA, MSRB and state securities regulators. These regulations affect lending practices, permissible products and services and their terms and conditions, customer relationships, capital structure, investment practices, accounting, financial reporting, operations and ability to grow, among other things. These regulations also impose obligations to maintain appropriate policies, procedures and controls to detect, prevent and report money laundering and terrorist financing and to verify the identities of customers. See the discussion above at Business - Regulation and Supervision for additional discussion of the extensive regulation and supervision the Company, the Bank and Texas Capital Securities are subject to.
The level of regulatory scrutiny that the Company, the Bank and Texas Capital Securities are subject to may fluctuate over time, based on numerous factors.The level of regulatory scrutiny that the Company and the Bank are subject to may fluctuate over time, based on numerous factors. In addition, Congress, state legislatures, and federal and state regulatory agencies continually review banking laws, regulations and policies for possible changes. Changes to statutes, regulations or regulatory policies, including changes in interpretation or implementation of statutes, regulations or policies, could affect the Company, the Bank and Texas Capital Securities in substantial and unpredictable ways. Material changes in regulation and requirements imposed on financial institutions, such as the Dodd-Frank Act, Basel III Capital Rules, European Union's General Data Protection Regulations and California Consumer Privacy Act result in additional costs, impose more stringent capital, liquidity and leverage requirements, limit the types of financial services and products the Company may offer and increase the ability of non-bank financial services providers to offer competing financial services and products, among other things. Such changes could result in new regulatory obligations which could prove difficult, expensive or competitively impractical to comply with if not equally imposed upon non-bank financial services providers with whom the Company competes.
The Company is subject to a continuous program and routine of examinations by regulators concerning, among other things, lending practices, reserve methodology, compliance with changing regulations and interpretations, BSA/AMLA compliance, interest rate management, liquidity, capital and operational risk, enterprise risk management, regulatory and financial accounting practices and policies and related matters, which can divert management’s time and attention from focusing on the business. The Company devotes a significant amount of management time and expense to enhancing the infrastructure to support its compliance obligations, which can pose significant regulatory enforcement, financial and reputational risks if not appropriately addressed.
The Company expends substantial effort and incurs costs to maintain and improve its systems, controls, accounting, operations, information security, compliance, audit effectiveness, analytical capabilities, staffing and training in order to satisfy regulatory requirements or recommendations. The Company cannot offer assurance that these efforts will be accepted by regulators as satisfying the applicable legal and regulatory requirements. Failure to comply with relevant laws, regulations, recommendations or policies could result in sanctions by regulatory agencies, civil money penalties and/or reputation damage, which could have a material adverse effect on the business, financial condition and results of operations. While the Company has policies and procedures designed to prevent any such violations, there can be no assurance that such violations will not occur.
The Company must maintain adequate regulatory capital to support its business objectives and strategy. Under regulatory capital adequacy guidelines and other regulatory requirements, the Company must satisfy capital requirements based upon quantitative measures of assets, liabilities and certain off-balance sheet items. Satisfaction of these requirements is subject to qualitative judgments by regulators that may differ materially from management’s and that are subject to being determined retroactively for prior periods. Additionally, regulators can make subjective assessments about the adequacy of capital levels, even if the Company’s and the Bank's reported capital exceeds the “well capitalized” requirements. The Company’s ability to maintain its status as a financial holding company and to continue to operate the Bank as it has in recent periods is dependent upon a number of factors, including the Bank qualifying as “well capitalized” and “well managed” under applicable prompt corrective action regulations and upon the Company qualifying on an ongoing basis as “well capitalized” and “well managed” under applicable Federal Reserve regulations.
Failure to meet regulatory capital standards could have a material adverse effect on the business, including damaging the confidence of customers, adversely impacting the Company’s and the Bank’s reputation and competitive position and retention of key personnel. Any of these developments could limit access to:
•brokered deposits;
•Federal Reserve discount window;
•advances from the FHLB;
•capital markets transactions; and
•development of new financial services.
25
Failure to meet regulatory capital standards may also result in higher FDIC assessments. If the Company or the Bank falls below guidelines for being deemed “adequately capitalized” the FDIC or Federal Reserve could impose restrictions on banking activities and a broad range of regulatory requirements in order to effect “prompt corrective action.” The capital requirements applicable to the Company and the Bank are in a process of continuous evaluation and revision by regulators.” The capital requirements applicable to the Company and the Bank are in a process of continuous evaluation and revision in connection with actions of the Basel Committee and regulators. The Company cannot predict the final form, or the effects, of these regulations on the business, but among the possible effects are requirements that the Company slow the rate of growth or obtain additional capital which could reduce earnings or dilute existing stockholders.
The Company is subject to claims and litigation in the ordinary course of its business, including claims that may not be covered by insurance. Customers and other parties the Company engage with may, on a regular basis, assert claims and take legal action against the Company and the Company regularly takes legal action to collect unpaid borrowers’ obligations, realize on collateral and assert rights in commercial and other contexts. These actions frequently result in counter claims against the Company. Litigation arises in a variety of contexts, including lending activities, employment practices, commercial agreements, fiduciary responsibility related to wealth management services, intellectual property rights and other general business and banking matters.
Claims and legal actions may result in significant legal costs to defend or assert rights and may result in reputational damage that adversely affects existing and future customer relationships. If claims and legal actions are not resolved in a favorable manner, the Company may suffer significant financial liability or adverse effects on its reputation, which could have a material adverse effect on the business, financial condition, results of operations or profitability. See Legal Proceedings below for additional disclosures regarding legal proceedings.
The Company purchases insurance coverage to mitigate a wide range of risks. There is no assurance that insurance will be adequate to protect the Company against material losses in excess of coverage limits or that insurers will perform their obligations under policies without attempting to limit or exclude coverage. The Company could be required to pursue legal actions against insurers to obtain payment of amounts owed, and there is no assurance that such actions, if pursued, would be successful.
The Company could face serious negative consequences if its third-party service providers, business partners, customers or investments fail to comply with applicable laws, rules or regulations. The Company is expected to oversee the legal and regulatory compliance of its business endeavors, including those performed by third-party service providers, business partners, customers, other vendors and certain companies in which the Company has invested. Legal authorities and regulators could hold the Company responsible for failures by these parties to comply with applicable laws, rules or regulations. These failures could expose the Company to significant litigation or regulatory action that could limit its activities or impose significant fines or other financial losses. Additionally, the Company could be subject to significant litigation from consumers or other parties harmed by these failures and could suffer significant losses of business and revenue, as well as reputational harm as a result of these failures.
Deposit insurance premiums levied against the Bank could increase. The DIF is funded by fees assessed on insured depository institutions including the Bank. Future deposit premiums paid by the Bank depend on FDIC rules, which are subject to change, the level of the DIF and the magnitude and cost of future bank failures. The FDIC may further increase the assessment rates or impose additional special assessments in the future, which may require the Bank to pay significantly higher FDIC premiums.
Other Risks Affecting the Business
The business faces unpredictable economic and business conditions. The business is directly impacted by general economic, business and political conditions in Texas, the United States and internationally. The credit quality of the loan portfolio necessarily reflects, among other things, the general economic conditions in the areas in which the Company and its customers conduct their respective businesses. The Company’s financial condition can be affected by other factors that are beyond its control, including:
•geopolitical, national, regional and local economic conditions;
•the value of the U.S. Dollar in relation to the currencies of other advanced and emerging market countries;
•the performance of both domestic and international equity and debt markets and valuation of securities traded on recognized domestic and international exchanges;
•general economic consequences of international conditions and the impact of those conditions on the U.S. and global economies;
•legislative and regulatory changes impacting the banking industry;
•the 2026 congressional and Texas gubernatorial elections and other political conditions;
•the financial health of customers and economic conditions affecting them and the value of collateral, including effects from the continued price volatility of oil and gas and other commodities;
•the incidence of fraud, illegal payments, security breaches and other illegal acts among or impacting the Company, its customers and third parties;
26
•structural changes in the markets for origination, sale and servicing of residential mortgages;
•changes in governmental economic and regulatory policies, including the extent and timing of intervention in credit markets by the Federal Reserve or withdrawal from that intervention, generally including changes attributable to presidential and congressional elections;
•trade policies, including tariffs or other customs;
•acts or threats of war;
•changes in the availability of liquidity at a systemic level; and
•material inflation or deflation.
Substantial deterioration in any of the foregoing conditions can have a material adverse effect on prospects and results of operations and financial condition. Declining or adverse economic conditions and adverse changes in investor, consumer and business sentiment generally result in reduced business activity, which may decrease the demand for products and services. Recently, inflation has been at a higher level than experienced in many decades, which has increased costs and impacted operations for the Company and many of its customers. The Company's customer base is primarily commercial in nature, and the Company does not have a significant retail branch network or retail consumer deposit base. In periods of economic downturn, business and commercial deposits may be more volatile than traditional retail consumer deposits. As a result, the financial condition and results of operations could be adversely affected to a greater degree by these uncertainties than competitors having a larger retail customer base. Additionally, the Company’s investment banking revenue is directly related to general economic conditions and corresponding financial market activity. When the outlook for such economic conditions is uncertain or negative, financial market activity generally tends to decrease, which can be expected to reduce the Company’s investment banking revenues and prospects for new business.
The soundness of other financial institutions could adversely affect the business. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. The Company has exposure to many different industries and counterparties, and the Company routinely executes transactions with counterparties in the financial services industry, including broker-dealers, commercial banks, investment banks and other institutional clients. Many of these transactions expose the Company to credit risk in the event of default of a counterparty or client. In addition, the Company’s credit risk may be exacerbated when the collateral held by the Company cannot be realized upon or is liquidated at prices not sufficient to recover the full amount of the loan or derivative exposure due. There can be no assurance that any such losses would not materially and adversely affect results of operations or profitability.
Negative developments affecting the banking industry, “contagion effects,” and resulting media coverage, have eroded customer confidence in the banking system.Negative developments affecting the banking industry, and resulting media coverage, have eroded customer confidence in the banking system. Any future bank failures or similar events adversely affecting the banking industry may negatively impact customer confidence in the safety and soundness of regional banks and may generate market volatility among publicly traded bank holding companies and, in particular, regional banks like the Company. As a result, customers may choose to maintain deposits with larger financial institutions or invest in higher yielding short-term fixed income securities, all of which could materially adversely impact the Company’s liquidity, loan funding capacity, net interest margin, capital and results of operations. While the Department of the Treasury, the Federal Reserve, and the FDIC historically have taken action to ensure that depositors of failed banks had access to their deposits, including uninsured deposit accounts, there is no guarantee that regional bank failures or bank runs will not occur in the future and, if they were to occur, they may have a material and adverse impact on customer and investor confidence in regional banks negatively impacting the Company’s liquidity, capital, results of operations and stock price.
The Company is subject to environmental liability risk associated with lending activities. A significant portion of the loan portfolio is secured by real property. During the ordinary course of business, the Company may foreclose on and take title to properties securing certain loans. There is a risk that hazardous or toxic substances could be found on these properties, and that the Company may be liable for remediation costs, including personal injury and property damage. Environmental laws may require incurring substantial expenses and may materially reduce the affected property's value by limiting the ability to use or sell it. Although the Company has policies and procedures requiring environmental review before initiating any foreclosure action on real property, these reviews may not be sufficient to detect all potential environmental hazards. The remediation costs and any other financial liabilities associated with an environmental hazard could have a material adverse effect on financial condition, results of operations and profitability. Future laws or regulations or more stringent interpretations or enforcement policies with respect to existing laws and regulations may increase the Company’s exposure to environmental liability.
Severe weather, earthquakes, other natural disasters, climate change, pandemics, acts of war or terrorism and other external and geopolitical events could significantly impact the business. Severe weather, earthquakes, other natural disasters, pandemics, climate change, acts of war or terrorism and other adverse external events could have a significant impact on the Company’s ability to conduct business. Such events could affect the stability of its deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue, cause us to incur additional expenses or disrupt the Company’s operations. In recent years, hurricanes have caused extensive flooding and destruction along the coastal areas of Texas and in other areas in the U.S., including communities where
27
the Company conducts business. Climate change has the potential to increase the frequency and severity of these severe weather events in the future. Climate change has the potential to increase to frequency and severity of these severe weather events in the future. Although management has established disaster recovery policies and procedures, the occurrence of any such events could have a material adverse effect on the business, financial condition, results of operations or profitability.
Furthermore, legislative and regulatory initiatives related to climate change have the potential to disrupt the business and result in operational changes and expenditures that could significantly impact the business and the operations and creditworthiness of the Company’s clients and also increase the compliance burden on the Company.
Negative public opinion could damage the Company’s reputation and adversely affect its earnings. Reputational risk, or the risk to earnings and capital from negative public opinion, is inherent in the business. Negative public opinion can result from the actual or perceived manner in which the Company conducts its business activities; management of actual or potential conflicts of interest and ethical issues; protection of confidential client information; and public scrutiny related to environmental, social and governance issues. The Company’s brand and reputation may also be harmed by actions taken by third parties that it contracts with to provide services to the extent such parties fail to meet their contractual, legal and regulatory obligations or act in a manner that is harmful to clients. If the Company fails to supervise these relationships effectively, it could also be subject to regulatory enforcement, including fines and penalties. Negative public opinion can adversely affect the Company’s ability to keep and attract clients and can expose it to litigation and regulatory action. The Company takes steps to minimize reputation risk, but its efforts may not be sufficient.
ITEM 1B. UNRESOLVED STAFF COMMENTS
None.
ITEM 1C. CYBERSECURITY
Cybersecurity Risk Management and Strategy
Cybersecurity risks are constantly evolving and becoming increasingly pervasive across all industries. To mitigate these risks and protect sensitive customer data, financial transactions and the Company’s information systems, the Company has implemented a comprehensive cybersecurity risk management program , which is a component of its overarching enterprise risk management program. Key components of the cybersecurity risk management program include:
•A risk assessment process that identifies and prioritizes material cybersecurity risks; defines and evaluates the effectiveness of controls to mitigate the risks; and reports results to executive management and the board of directors.
•A third-party Managed Detection and Response (“MDR”) service, which monitors the security of the Company’s information systems around-the-clock, including intrusion detection and alerting.
•A dedicated cybersecurity team covering all critical cyber defense functions such as engineering, data protection, identity and access management, insider risk management, security operations, threat emulation and threat intelligence.
•A training program that educates employees about cybersecurity risks, how to protect themselves from cyberattacks and identify and report insider threats.
•An awareness program that keeps employees informed about cybersecurity threats and how to stay safe online.
•An incident response plan that outlines the steps the Company will take to respond to a cybersecurity incident, which is tested on a periodic basis.
The Company engages reputable third-party assessors to conduct various independent risk assessments on a regular basis, including but not limited to maturity assessments and various testing. Following a defense-in-depth strategy, the Company leverages both in-house resources and third-party service providers to implement and maintain processes and controls to manage the identified risks.
The Company’s Third-Party Risk Management program is designed to ensure that its vendors meet its cybersecurity requirements. This includes conducting periodic risk assessments of vendors, requiring vendors to implement appropriate cybersecurity controls and monitoring vendor compliance with the Company’s cybersecurity requirements.
The Company’s cybersecurity risk management program and strategy are designed to ensure the Company's information and information systems are appropriately protected from a variety of threats, both natural and man-made. Periodic risk assessments are performed to validate control requirements and ensure that the Company’s information is protected at a level commensurate with its sensitivity, value, and criticality. Preventative and detective security controls are employed on all media where information is stored, the systems that process it, and infrastructure components that facilitate its transmission to ensure the confidentiality, integrity, and availability of Company information. These controls include, but are not limited to access control, data encryption, data loss prevention, incident response, security monitoring, third party risk management, and vulnerability management.
28
The Company's cybersecurity risk management program and strategy are regularly reviewed and updated to ensure that they are aligned with the Company's business objectives and are designed to address evolving cybersecurity threats and satisfy regulatory requirements and industry standards.
Material Effects of Cybersecurity Threats
Governance
Board of Directors Oversight
Management's Role
Recently Filed
Click on a ticker to see risk factors
| Ticker * | File Date |
|---|---|
| DIOD | 2 hours ago |
| LEGT | 2 hours ago |
| NTST | 2 hours ago |
| AOS | 2 hours ago |
| EXEL | 3 hours ago |
| HCA | 3 hours ago |
| PEGA | 3 hours ago |
| MOH | 3 hours ago |
| GPRE | 3 hours ago |
| PTEN | 3 hours ago |
| PECO | 3 hours ago |
| ARI | 3 hours ago |
| HIW | 3 hours ago |
| SLAB | 3 hours ago |
| KVYO | 3 hours ago |
| UPST | 3 hours ago |
| TCBI | 3 hours ago |
| ADC | 3 hours ago |
| MEDP | 3 hours ago |
| INCY | 3 hours ago |
| CMI | 4 hours ago |
| CNX | 5 hours ago |
| MAR | 5 hours ago |
| GT | 8 hours ago |
| CMS | 8 hours ago |
| L | 11 hours ago |
| CNA | 11 hours ago |
| MAS | 12 hours ago |
| CURB | 12 hours ago |
| CVS | 12 hours ago |
| ACRE | 22 hours ago |
| T | 1 day, 2 hours ago |
| BE | 1 day, 2 hours ago |
| SIGI | 1 day, 2 hours ago |
| UTL | 1 day, 2 hours ago |
| RXO | 1 day, 2 hours ago |
| APAD | 1 day, 2 hours ago |
| ITT | 1 day, 2 hours ago |
| CLF | 1 day, 3 hours ago |
| VNO | 1 day, 3 hours ago |
| ON | 1 day, 3 hours ago |
| PI | 1 day, 3 hours ago |
| BSAA | 1 day, 3 hours ago |
| ZWS | 1 day, 3 hours ago |
| BRX | 1 day, 3 hours ago |
| KN | 1 day, 3 hours ago |
| MRSH | 1 day, 3 hours ago |
| FCFS | 1 day, 3 hours ago |
| WM | 1 day, 3 hours ago |
| NSC | 1 day, 7 hours ago |