FVCBankcorp, Inc. - Annual Report: 2018 (Form 10-K)

Use these links to rapidly review the document
TABLE OF CONTENTS
Item 8. Financial Statements and Supplementary Data

Table of Contents

UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549

FORM 10-K

Commission file number: 001-38647

FVCBankcorp, Inc.
(Exact name of registrant as specified in its charter)

Registrant's telephone number, including area code: (703) 436-3800

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

         Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes o    No ý

         Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes o    No ý

         Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ý    No o

         Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ý    No o

         Indicate by check mark if disclosure of delinquent filers pursuant to Item 405 of Regulation S-K (§ 229.405 of this chapter) is not contained herein, and will not be contained, to the best of registrant's knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K. o

         Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of "large accelerated filer," "accelerated filer," "smaller reporting company," and "emerging growth company" in Rule 12b-2 of the Exchange Act.

         If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ý

         Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes o    No ý

         State the aggregate market value of the voting and non-voting common equity held by non-affiliates computed by reference to the price at which the common equity was last sold as of June 30, 2018: $146,170,932.

         The number of shares outstanding of Common Stock, as of March 22, 2019, was 13,755,249.

DOCUMENTS INCORPORATED BY REFERENCE

         Portions of the registrant's definitive Proxy Statement for the 2019 Annual Meeting of Shareholders are incorporated by reference into Part III of the Form 10-K. With the exception of the portions of the Proxy Statement specifically incorporated herein by reference, the Proxy Statement is not deemed to be filed as part of this Form 10-K.

Table of Contents

TABLE OF CONTENTS

Table of Contents

PART I

Item 1.    Business

Overview

        FVCBankcorp, Inc. (the "Company") is a registered bank holding company headquartered in Fairfax, Virginia. We operate primarily through our sole subsidiary, FVCbank, (the "Bank"), a community oriented, locally-owned and managed commercial bank organized under the laws of the Commonwealth of Virginia. We serve the banking needs of commercial businesses, nonprofit organizations, professional service entities, and their respective owners and employees located in the greater Washington, D.C. and Baltimore metropolitan areas. The Company was established as the holding company for the Bank in 2015.

        Since the Bank began operations in November 2007, on the cusp of the most significant economic downturn since the Great Depression, it has grown largely organically, through de novo branch expansion and banker and customer acquisition, and two whole-bank acquisitions. In 2012, we completed the acquisition of 1st Commonwealth Bank of Virginia, a $58.9 million asset savings and loan association in Arlington, Virginia.

        On October 12, 2018, we completed of our acquisition of Colombo Bank ("Colombo"), pursuant to a previously announced definitive merger agreement. Colombo, which was headquartered in Rockville, Maryland, merged into FVCbank effective October 12, 2018 adding five banking locations in Washington, D.C., and Montgomery County and the City of Baltimore in Maryland. Pursuant to the terms of the merger agreement, based on the average closing price of the Company's common stock during the five trading day period ended on October 10, 2018, the second trading day prior to closing, of $19.614 (the Average Closing Price") holders of shares of Colombo common stock received 0.002217 shares of the Company's common stock and $0.053157 in cash for each share of Colombo common stock held immediately prior to the effective date of the Merger, plus cash in lieu of fractional shares at a rate equal to the Average Closing Price, and subject to the right of holders of Colombo common stock who owned fewer than 45,086 shares of Colombo common stock after aggregation of all shares held in the same name, and who made a timely election, to receive only cash in an amount equal to $0.096649 per share of Colombo common stock. As a result of the merger, 763,051 shares of the Company's common stock were issued in exchange for outstanding shares of Colombo common stock.

        Our acquisition of Colombo supports our current business and allowed us to expand our presence in adjacent markets where we lend, but in which we had no physical presence. Colombo's branch locations strengthen our strategy as they enable us to add lenders and banking services in areas where we currently lend. We expect that our strong infrastructure and wide range of products and services will allow us to develop deeper relationships with Colombo's current customers, as well as enhance our platform for generating new relationships.

Market Area

        We operate in one of the most economically dynamic and wealthy regions of the Washington and Baltimore Metropolitan Statistical Areas ("MSA"), focusing primarily on the Virginia counties of Arlington, Fairfax, Loudoun and Prince William and the independent cities located within those counties, as well as Washington, D.C. its Maryland suburbs and Baltimore, Maryland and its surrounding suburbs. As of June 30, 2018, the Washington MSA had total deposits of $212.8 billion, based on FDIC data. The Baltimore MSA had total deposits of $72.5 billion as of June 30, 2018 based on FDIC data.

        In addition to the presence of the federal government, the Washington MSA is defined by attractive market demographics, including strong household incomes, dense populations and the presence of a diverse group of large and small businesses. As of December 31, 2017, the

1

Table of Contents

Washington MSA had a median household income of $95,843, which ranks as fourth among all metropolitan statistical areas nationally, and a population of 6.2 million. The Virginia and Maryland localities within the Washington MSA in which we primarily operate have higher median household incomes than the Washington MSA as a whole. The significant presence of national and international businesses make the Washington MSA one of the most economically vibrant and diverse markets in the country. The Washington MSA is currently home to 15 Fortune 500 companies, including 9 based in Fairfax County.

Growth Strategy

        Our approach features competitive customized financial services offered to customers and prospects in a personal relationship context by seasoned professionals. We provide a full range of banking services that become integral to our customers' business operations, which helps to enhance our ability to retain our relationships. We offer a better value proposition to our customers by providing high-touch service with few added fees. Our capabilities and reputation enable us to be selective in loan and customer selection, which contributes to our strong asset quality, and our ability to provide multiple services to customers.

        We intend to continue expanding our market position through organic growth through expansion of our relationships with our existing customers, acquisition of new customers and acquisition of seasoned bankers with strong customer relationships, through selective branching, and potentially opportunistic acquisitions, such as our acquisition of Colombo, while increasing profitability, maintaining strong asset quality and a high level of customer service.

        Our success has been driven by our mission to help our clients, communities and employees prosper. We strive to exceed our clients' expectations by delivering superior, personalized client service supported with high quality bank products and services. We invest in the growth of our employees and we give back to the communities in which we do business to foster a brighter future for everyone who lives there. Much of our early growth was the result of the active promotion by our organizing shareholders, our board of directors, our advisory board and our shareholders generally. Many of our shareholders are customers. We receive referrals from existing customers and all employees are encouraged to promote the Company. We believe having such a large group of individuals actively promote us has and will continue to augment our ability to generate both deposits and loans through staff and management led marketing and calling campaigns. As we have grown, we have increased our reliance on management originated customer relationships, but believe that our strong network of personal, customer and shareholder relationships and referrals will continue to be a significant factor in our business development strategy.

        Our vision is to be known as the number one community bank in experience and service in our community. Our passion is to provide the utmost banking experience for each of our clients, to create a positive and empowering work environment for our employees, to fulfill our obligation of corporate citizenship in the communities in which we operate and to ensure that our Bank increases profitability and grows prudently, ensuring its strength and continuity, and increasing shareholder value.

Our Products and Services

        We emphasize providing commercial banking services to small and medium-sized businesses, professionals, non-profit organizations and associations, and investors living and working in and near our service area. We offer retail banking services to accommodate the individual needs of both corporate customers as well as the communities we serve. We also offer online banking, mobile banking and a remote deposit service, which allows clients to facilitate and expedite deposit transactions through the use of electronic devices. A sophisticated suite of treasury management products is a key feature of our client focused, relationship driven marketing. We have partnered with experienced

2

Table of Contents

service providers in both insurance and merchant services to further augment the products available to our customers.

Lending Products

        We provide a variety of lending products to small and medium-sized businesses, including (i) commercial real estate loans; (ii) commercial construction loans; (iii) commercial loans for a variety of business purposes such as for working capital, equipment purchases, lines of credit, and government contract financing; (iv) SBA lending; (v) asset based lending and accounts receivable financing; (vi) home equity loans, or HELOCs; and (vii) consumer loans for constructive purposes. Although we do not generally actively originate them, we have acquired pools of other types of loans, and we have purchased whole residential loans in our market area, student loans and other consumer loans, in order to diversify the loan portfolio, put capital to work before organic loan production requires it, and to increase margin. We may also purchase participations from other banks in our market. Any acquired loans must meet our standard underwriting requirements.

        Commercial Real Estate Loans.    Commercial real estate loans, which comprise the largest portion of the loan portfolio, are secured by both owner occupied and investor owned commercial properties, including multi-family residential real estate. Commercial real estate loans are structured using both variable and fixed rates and renegotiable rates which adjust in three to five years, with maturities of generally five to ten years. At December 31, 2018, owner occupied commercial real estate loans represented 13.8% of the loan portfolio. At December 31, 2018, non-owner occupied commercial real estate loans represented approximately 33.6% of the loan portfolio and multi-family residential real estate comprised 6.2% of the portfolio. We seek to mitigate lending risks typical of this type of loan such as declines in real estate values, changes in borrower cash flow and general economic conditions. We typically require a maximum loan to value of 80% and minimum cash flow and debt service coverages, of at least 1.20 to 1.0. Personal guarantees are generally required, but may be limited. We generally require that interest rates adjust not less frequently than five years. For purposes of geographic diversification, we will also make commercial real estate loans outside of our primary and secondary markets, in an area extending south to Richmond, Virginia, and north to Baltimore, Maryland, and between Winchester, Virginia and the Eastern Shore of Maryland.

        Construction Loans.    Commercial construction loans for the acquisition, development and construction of commercial real estate also comprise a significant and growing portion of the portfolio. At December 31, 2018, such loans represented 13.5% of the loan portfolio. Our typical commercial construction loan involves property that will ultimately be leased to a non-owner occupant. We will finance construction projects of a speculative nature, which are well-conceived and structured with appropriate interest reserves and analyzed fully. In underwriting commercial construction loans, we consider the expected costs of the transaction, the loan to value ratio, the credit history, cash flows and liquidity of the borrower, the project and the guarantors, the debt service coverage ratios (which are stressed prior to approval), take out sources for the permanent loan or repayment of the construction loan, the reputation, experience and qualifications of the borrower, the general contractor and others involved with the project and other factors. Commercial construction loans are generally made on a variable rate basis, typically based on the Wall Street Journal Prime Rate and subject to rate floors, for terms of 12 - 24 months. Generally, we do not make commercial construction loans outside of our primary or secondary market areas.

        Commercial Loans, Government Contracting.    Commercial loans for a variety of business purposes, including working capital, equipment purchases, lines of credit, and government contract financing and asset based lending and accounts receivable financing, comprise approximately 12.1% of our loan portfolio at December 31, 2018. We will make commercial loans on a secured or unsecured basis. We will generally require the owners, managing members, general partners and principals of the borrowing entity or that control more than 20% of the borrower to guaranty the loan, unless a combination of low

3

Table of Contents

leverage, significant income and debt service coverage ratios, and substantial experience in operating the business, strong management and internal controls and/or other factors are demonstrated. Commercial loans are typically made with variable or adjustable rates. The cash flow of the borrower/borrower's operating business is often the principal source of debt service, with a secondary emphasis on other collateral.

        We have developed a special expertise in government contract financing. We will lend to government contractors or subcontractors headquartered in the Washington, D.C. metropolitan area. This area of lending encompasses lines of credit for working capital, financing of government leases, and, less frequently term, loans, to operating companies that recognize over 50% of their total revenues from services provided to federal government agencies or rated state and municipal governments. Our borrowers are typically engaged in technology or service businesses, but may also include construction and equipment providers, or entities working on "black" projects. A government contractor borrower must have an acceptable level of eligible accounts receivable, provide appropriate security instruments perfecting our rights in the accounts receivable or other collateral, and are subject to periodic review and monitoring of their receivables, contract backlog and contract compliance. The contractor is typically required to have its primary deposit relationship with us. Advance rates will be up to 90% of prime eligible government receivables, and lower percentages depending on the nature of the receivables. At December 31, 2018, outstanding loans to government contractors represented 33.0% of our commercial and industrial segment. Total commitments to government contractors totaled $127.3 million at December 31, 2018. Government contact loans are typically made with variable or adjustable rates. Lines of credit typically have a one year term. As with other commercial loans, guarantees are typically required.

        Consumer Residential.    We actively originate HELOCs in the communities we serve in the Washington and Baltimore MSAs. Our HELOCs generally have a maximum loan to value of up to 85%, however, due to the favorable economic conditions and strong residential real estate market in these markets, actual loan to values are typically lower than the maximum. We provide HELOCs as a service to our customers and when we receive referrals from various mortgage brokers within our market area. As of December 31, 2018, HELOCs comprise 7.0% of total loans. While we do not originate residential first mortgages, we will occasionally originate a mortgage loan meeting our investment preferences presented by a mortgage broker. We have also purchased portfolios of 1-4 family residential first mortgage loans on properties located in our market area for yield and diversification. At December 31, 2018, 1-4 family residential mortgage loans represented 4.5% of the loan portfolio.

        Other Loans.    We occasionally originate consumer loans both on an unsecured basis and secured by non-real estate collateral. We have also purchased pools of unsecured consumer loans and student loans from a third party for yield and diversification.

        The lending activities in which we engage carry the risk that the borrowers will be unable to perform on their obligations. As such, interest rate policies of the Federal Reserve and general economic conditions, nationally and in our market areas, could have a significant impact on our results of operations. To the extent that economic conditions deteriorate, business and individual borrowers may be less able to meet their obligations to us in full, in a timely manner, resulting in decreased earnings or losses. Economic conditions may also adversely affect the value and liquidity of property pledged as security for loans.

        Our goal is to mitigate risks in the event of unforeseen threats to the loan portfolio as a result of economic downturn or other negative influences. Plans for mitigating inherent risks in managing loan assets include: carefully enforcing loan policies and procedures, evaluating each borrower's business plan during the underwriting process and throughout the loan term, identifying and monitoring primary and alternative sources for loan repayment, and obtaining collateral to mitigate economic loss in the

4

Table of Contents

event of liquidation. Specific loan reserves are established based upon credit and/or collateral risks on an individual loan basis. A risk rating system is employed to proactively estimate loss exposure and provide a measuring system for setting general and specific reserve allocations.

        Our lending activities are subject to a variety of lending limits imposed by state and federal law. These limits will increase or decrease in response to increases or decreases in our level of capital. At December 31, 2018, the Bank had a legal lending limit of $25.9 million. At December 31, 2018, our average funded loan size outstanding for commercial real estate (including commercial construction) and commercial loans was $1.5 million and $639 thousand, respectively. In accordance with internal lending policies, we may sell participations in its loans to other banks, which allows us to manage risk involved in these loans and to meet the lending needs of our clients.

        Concentrations of Credit Risk.    Most of our lending is conducted with businesses and individuals in the suburbs of Washington, D.C. Our loan portfolio consists primarily of commercial real estate loans, including construction and land loans, which totaled $836.9 million and constituted 73.5% of total loans as of December 31, 2018, and commercial loans, including loans to government contractors, which totaled $137.3 million and constituted 12.1% of total loans as of December 31, 2018. The geographic concentration of our loans subjects our business to the general economic conditions within our market area. The risks created by such concentrations have been considered by management in the determination of the adequacy of the allowance for loan losses. Management believes the allowance for loan losses is adequate to cover probable incurred losses in our loan portfolio as of December 31, 2018.

        Comprehensive risk management practices and appropriate capital levels are essential elements of a sound commercial real estate lending program. A concentration in commercial real estate adds a dimension of risk that compounds the risk inherent in individual loans. The federal banking agencies have issued guidance governing financial institutions with concentrations in commercial real estate lending. The guidance provides that institutions that have (i) total reported loans for construction, land development, and other land which represent 100% or more of an institution's total risk-based capital; or (ii) total reported commercial real estate loans, excluding loans secured by owner-occupied commercial real estate, representing 300% or more of the institution's total risk-based capital and the institution's commercial real estate loan portfolio has increased 50% or more during the prior 36 months, are identified as having potential commercial real estate concentration risk. Institutions which are deemed to have concentrations in commercial real estate lending are expected to employ heightened levels of risk management with respect to their commercial real estate portfolios, and may be required to hold higher levels of capital. We have a concentration in commercial real estate loans, and we have experienced significant growth in our commercial real estate portfolio in recent years. As of December 31, 2018, commercial real estate loans as defined for regulatory purposes represented 353.0% of our total risk-based capital. Of those loans, commercial construction, development and land loans represented 88.6% of our total risk based capital. Owner-occupied commercial real estate loans represented an additional 91.0% of our total risk based capital. Management has extensive experience in commercial real estate lending, and has implemented and continues to maintain heightened portfolio monitoring and reporting, and strong underwriting criteria with respect to our commercial real estate portfolio.

Deposit Products

        We offer a wide array of deposit products for individuals, professionals, government contractors and other businesses, including interest and noninterest-bearing transaction accounts, certificates of deposit and money market accounts. We are a relationship based bank, and maintenance of significant deposit relationships is a factor in our decision to make loans and the pricing of our products.

        Our sophisticated treasury management and online banking platform allows a commercial customer to view balances, initiate payments, pay bills (including positive pay), issue stop payments, reconcile accounts and set up custom alerts. Online wires, ACH (including positive authorization), remote

5

Table of Contents

capture, cash disbursement and cash concentration are additional payment options available to businesses. We provide customers with a sophisticated escrow management product which facilitates and simplifies management of multiple escrow balances. We also provide secure credit card processing and merchant services, with reporting tailored to customer needs. We also offer online and mobile banking products to our consumer depositors, to complement our branch network.

Other Services

        Through third party networks, we offer our customers access to a full range of business insurance products and business and consumer credit card products.

Competition

        We are one of the few remaining locally owned and managed independent community banks headquartered in Northern Virginia. We believe that this is an advantageous position and valuable quality which positively differentiates us from our competitors and positions us for future growth from individuals and small and mid-sized business customers who value the attention and customized services which a locally owned and managed community bank can provide.

        As of June 30, 2018, there were approximately $212.8 billion dollars in total deposits shared between banking institutions located in Washington MSA, according to SNL Financial, and our deposit market share is approximately 0.55%. Our strategic goal is to increase our market share through selective new branch additions, opportunistic acquisitions, and acquisitions of customers from larger competitors. BB&T Corporation, PNC Financial Services Group Inc., M&T Bank Corporation and Bank of America Corporation hold the primary market shares. However, we believe these large banks generally cannot provide the same level of attention and customization of services to small businesses that we seek to provide. Through correspondents, referrals to third parties with whom we have partnered, and our own capabilities, we are a full service financial provider, able to compete in substantially all areas of banking, except trust services. Additionally, we believe we provide competitively priced products, superior customer service, flexibility and responsiveness when compared to our larger competitors.

        The banking business is highly competitive. We compete as a financial intermediary with other commercial banks, savings banks, credit unions, mortgage banking firms, consumer finance companies, securities brokerage firms, insurance companies, money market mutual funds and other financial institutions operating in the Washington and Baltimore MSAs and elsewhere.

        Our market area is a highly competitive, highly branched, banking market. Competition in our market area for loans to small and middle-market businesses and professionals, our target market, is intense and pricing is important. Several of our competitors have substantially greater resources and lending limits than we have, and offer certain services, such as extensive and established branch networks and trust services that we do not currently provide or currently expect to provide in the near future. Moreover, larger institutions operating in the Washington, D.C. metropolitan market have access to borrowed funds at lower cost than may be available to us. Additionally, deposit competition among institutions in the market area is strong. As a result, it is possible that we may pay above market rates to attract deposits.

Risk Management

        We believe that effective risk management is of primary importance. Risk management refers to the activities by which we identify, measure, monitor, evaluate and manage the risks we face in the course of our banking activities. These include liquidity, interest rate, credit, operational, compliance, regulatory, strategic, financial and reputational risk exposures. Our board of directors and management team have created a risk-conscious culture that is focused on quality growth, which starts with capable

6

Table of Contents

and experienced risk management teams and infrastructure capable of addressing the evolving risks we face, as well as the changing regulatory and compliance landscape. Our risk management approach employs comprehensive policies and processes to establish robust governance. We believe a disciplined and conservative underwriting approach has been the key to our strong asset quality.

        Our board of directors sets the tone at the top of our organization, adopting and overseeing the implementation of our risk management, establishing our overall risk appetite and risk management strategy. The board of directors approves our various operating policies, which include risk policies, procedures, limits, targets and reporting structured to guide decisions regarding the appropriate balance between risk and return considerations in our business. Our board of directors receives periodic reporting on the risks and control environment effectiveness and monitors risk levels in relation to the approved risk appetite. The Audit Committee of our board of directors provides primary oversight of our enterprise risk management function.

        Credit risk is the risk that borrowers or counterparties will be unable or unwilling to repay their obligations in accordance with the underlying contractual terms and the risk that credit assets will suffer significant deterioration in market value. We manage and control credit risk in our loan portfolio by adhering to well-defined underwriting criteria and account administration standards established by management, and approved by the board of directors. Our written loan policies document underwriting standards, approval levels, exposure limits and other limits or standards deemed necessary and prudent. Portfolio diversification at the obligor, product and geographic levels is actively managed to mitigate concentration risk. In addition, credit risk management includes an independent credit review process that assesses compliance with policies, risk rating standards and other critical credit information. In addition to implementing risk management practices that are based upon established and sound lending practices, we adhere to sound credit principles. We evaluate our customers' borrowing needs and capacity to repay, in conjunction with their character and history. Our management and board of directors place significant focus on maintaining a healthy risk profile and ensuring sustainable growth. Our risk appetite seeks to balance the risks necessary to achieve our strategic goals while ensuring that our risks are appropriately managed and remain within our defined limits.

        Our management of interest rate and liquidity risk is overseen by our Asset and Liability Committee, based on a risk management infrastructure approved by our board of directors that outlines reporting and measurement requirements. In particular, this infrastructure reviews financial performance, trends, and significant variances to budget; reviews and recommends for board approval risk limits and tolerances; reviews ongoing monitoring and reporting regarding our performance with respect to these areas of risk, including compliance with board-approved risk limits and stress-testing; ensures annual back-testing and independent validation of models at a frequency commensurate with risk level; reviews all hedging strategies and recommends changes as appropriate; reviews and recommends our contingency funding plan; establishes wholesale borrowing limits to be submitted to the board of directors or its designated committee; and acts as a second line of defense in reviewing information and reports submitted to the council for the purpose of identifying, investigating, and assuring remediation, to its satisfaction, of errors or irregularities, if any.

Investment Portfolio

        Our investment securities portfolio is primarily maintained as an on-balance sheet contingent source of liquidity to fund loans and meet the demands of depositors. It provides additional interest income and we seek to have limited interest rate risk and credit risk. We currently classify substantially all of our investment securities as available-for-sale. Our investment policy authorizes investment primarily in securities of the U.S. government and its agencies; mortgage back securities and collateralized mortgage obligations issued and fully backed by U.S. government agencies, securities of municipalities and to a lesser extent corporate bonds and other obligations, in each case meeting identified credit standards, and certificates of deposit. The securities portfolio, along with certain loans,

7

Table of Contents

may also be used to collateralize public deposits, FHLB borrowings, and Federal Reserve Bank borrowings. We manage our investment portfolio according to written investment policies approved by our board of directors. Our investment strategy aims to maximize earnings while maintaining liquidity in securities with minimal credit risk and interest rate risk which is reflective in the yields obtained on those securities.

Employees

        As of December 31, 2018, we had 128 full-time equivalent employees. None of our employees are covered by a collective bargaining agreement. We consider our relationship with our employees to be good and have not experienced interruptions of operations due to labor disagreements.

SUPERVISION AND REGULATION

        Our business and operations are subject to extensive federal and state governmental regulation and supervision. The following is a brief summary of certain statutes and rules and regulations that affect or will affect us. This summary is not intended to be an exhaustive description of the statutes or regulations applicable to our business. Supervision, regulation, and examination by the regulatory agencies are intended primarily for the protection of depositors and the Deposit Insurance Fund, rather than our shareholders.

        The Company.    We are a bank holding company registered under the Bank Holding Company Act of 1956, as amended, or the Act, and subject to regulation and supervision by the Board of Governors of the Federal Reserve System, or Federal Reserve. The Act and other federal laws subject bank holding companies to restrictions on the types of activities in which they may engage, and to a range of supervisory requirements and activities, including regulatory enforcement actions for violations of laws and regulations and unsafe and unsound banking practices. As a bank holding company, we are required to file with the Federal Reserve an annual report and such other additional information as the Federal Reserve may require pursuant to the Act. The Federal Reserve may also examine us and our subsidiary. We are subject to risk-based capital requirements adopted by the Federal Reserve, which are substantially identical to those applicable to the Bank, and which are described below. Under the Dodd-Frank Act, the Federal Reserve is required to apply consolidated capital requirements to depository institution holding companies that are no less stringent than those currently applied to depository institutions. The Dodd-Frank Act additionally requires capital requirements to be countercyclical so that the required amount of capital increases in times of economic expansion and decreases in times of economic contraction, consistent with safety and soundness.

        The Federal Reserve has adopted a policy statement, the Small Bank Holding Company Policy Statement, or the policy statement, that exempts certain bank holding companies with assets of less than $3 billion, from the consolidated capital requirements and certain other provisions where the bank holding company (i) is not engaged in significant nonbanking activities; (ii) does not conduct significant off balance sheet activities; and (iii) does not have a material amount of debt or equity securities registered with the Securities and Exchange Commission, or SEC. We understand that the Federal Reserve has not historically deemed a bank holding company ineligible for application of the policy statement solely because its common stock is registered under the Securities Exchange Act of 1934, or the Exchange Act. There can be no assurance that the Federal Reserve will continue this practice.

        The Act requires approval of the Federal Reserve for, among other things, a bank holding company's direct or indirect acquisition of control of more than 5% of the voting shares, or substantially all the assets, of any bank or the merger or consolidation by a bank holding company with another bank holding company. The Act generally permits the acquisition by a bank holding company of control or substantially all the assets of any bank located in a state other than the home state of the bank holding company, except where the bank has not been in existence for the minimum period of

8

Table of Contents

time required by state law; but if the bank is at least five years old, the Federal Reserve may approve the acquisition.

        With limited exceptions, a bank holding company is prohibited from acquiring control of any voting shares of any company which is not a bank or bank holding company and from engaging directly or indirectly in any activity other than banking or managing or controlling banks or furnishing services to or performing service for its authorized subsidiaries. A bank holding company may, however, engage in or acquire an interest in, a company that engages in activities which the Federal Reserve has determined by order or regulation to be so closely related to banking or managing or controlling banks as to be properly incident thereto. In making such a determination, the Federal Reserve is required to consider whether the performance of such activities can reasonably be expected to produce benefits to the public, such as convenience, increased competition or gains in efficiency, which outweigh possible adverse effects, such as undue concentration of resources, decreased or unfair competition, conflicts of interest or unsound banking practices. The Federal Reserve is also empowered to differentiate between activities commenced de novo and activities commenced by the acquisition, in whole or in part, of a going concern. Some of the activities that the Federal Reserve has determined by regulation to be closely related to banking include making or servicing loans, performing certain data processing services, acting as a fiduciary or investment or financial advisor, and making investments in corporations or projects designed primarily to promote community welfare.

        The Federal Reserve may order a bank holding company or its subsidiaries to terminate any of these activities or to terminate its ownership or control of any subsidiary when it has reasonable cause to believe that the bank holding company's continued ownership, activity or control constitutes a serious risk to the financial safety, soundness, or stability of it or any of its bank subsidiaries.

        Subsidiary banks of a bank holding company are subject to restrictions imposed by the Federal Reserve Act of 1913, as amended, on any extensions of credit to a bank holding company or any of its subsidiaries, or investments in the stock or other securities thereof, and on the taking of such stock or securities as collateral for loans to any borrower. Further, a bank holding company and any subsidiary bank are prohibited from engaging in tie-in arrangements in connection with the extension of credit. A subsidiary bank may not extend credit, lease or sell property, or furnish any services, or fix or vary the consideration for any of the foregoing on the condition that: (i) the customer obtain or provide some additional credit, property or services from or to such bank other than a loan, discount, deposit or trust service; (ii) the customer obtain or provide some additional credit, property or service from or to the holding company or any of its subsidiaries; or (iii) the customer not obtain some other credit, property or service from competitors, except for reasonable requirements to assure the soundness of credit extended.

        The Gramm-Leach-Bliley Act, or GLB Act allows a bank holding company or other company to elect to become a financial holding company, which would allow such company to engage in activities that are financial in nature, that are incidental to such activities, or are complementary to such activities. The GLB Act enumerates certain activities that are deemed financial in nature, such as underwriting insurance or acting as an insurance principal, agent or broker, underwriting, dealing in or making markets in securities, and engaging in merchant banking under certain restrictions. It also authorizes the Federal Reserve to determine by regulation what other activities are financial in nature, or incidental or complementary thereto. We have not elected financial holding company status.

        The Federal Deposit Insurance Act, or FDIA, and Federal Reserve policy require a bank holding company to serve as a source of financial and managerial strength to its bank subsidiaries. In addition, where a bank holding company has more than one FDIC-insured bank or thrift subsidiary, each of the bank holding company's subsidiary FDIC-insured depository institutions is responsible for any losses to the FDIC as a result of an affiliated depository institution's failure. As a result of a bank holding company's source of strength obligation, a bank holding company may be required to provide funds to a bank subsidiary in the form of subordinate capital or other instruments which qualify as capital under

9

Table of Contents

bank regulatory rules. Any loans from the holding company to such subsidiary banks likely would be unsecured and subordinated to such bank's depositors and perhaps to other creditors of the Bank.

        A bank holding company (other than a bank holding company subject to the policy statement) is generally required to give the Federal Reserve prior written notice of any purchase or redemption of its own then outstanding equity securities if the gross consideration for the purchase or redemption, when combined with the net consideration paid for all such purchases or redemptions during the preceding 12 months, is equal to 10% or more of the company's consolidated net worth. The Federal Reserve may disapprove such a purchase or redemption if it determines that the proposal would constitute an unsafe and unsound practice, or would violate any law, regulation, Federal Reserve order or directive, or any condition imposed by, or written agreement with, the Federal Reserve. The Federal Reserve has adopted an exception to this approval requirement for well capitalized bank holding companies that meet certain conditions.

        As a Virginia corporation, we are subject to limitations and restrictions on our activities. For example, state law restrictions in Virginia include limitations and restrictions relating to indemnification of directors, distributions to shareholders, transactions involving directors, officers or interested shareholders, maintenance of books, records, minutes, borrowing and the observance of corporate formalities.

        The Bank.    The Bank is a Virginia chartered commercial bank which is a member of the Federal Reserve System, or a state member bank, whose accounts are insured by the Deposit Insurance Fund of the FDIC up to the maximum legal limits. The Bank is subject to regulation, supervision and regular examination by the Virginia Bureau of Financial Institutions, or VBFI, and the Federal Reserve. The regulations of these various agencies govern most aspects of the Bank's business, including required reserves against deposits, loans, investments, mergers and acquisitions, borrowing, dividends and establishment of branch offices.

        The laws and regulations governing the Bank generally have been promulgated to protect depositors and the Deposit Insurance Fund, and not for the purpose of protecting shareholders.

        Competition among commercial banks, savings and loan associations, and credit unions has increased following enactment of legislation, which greatly expanded the ability of banks and bank holding companies to engage in interstate banking or acquisition activities.

        Banking is a business, which depends on interest rate differentials. In general, the differences between the interest paid by a bank on its deposits and its other borrowings and the interest received by a bank on loans extended to its customers and securities held in its investment portfolio constitute the major portion of the Bank's earnings. Thus, the earnings and growth of the Bank will be subject to the influence of economic conditions generally, both domestic and foreign, and also to the monetary and fiscal policies of the United States and its agencies, particularly the Federal Reserve, which regulates the supply of money through various means including open market dealings in United States government securities. The nature and timing of changes in such policies and their impact on the Bank cannot be predicted.

        Branching and Interstate Banking.    The federal banking agencies are authorized to approve interstate bank merger transactions without regard to whether such transaction is prohibited by the law of any state, unless the home state of one of the Banks has opted out of the interstate bank merger provisions of the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994, or the Riegle-Neal Act, by adopting a law after the date of enactment of the Riegle-Neal Act and prior to June 1, 1997 which applies equally to all out-of-state banks, expressly prohibits merger transactions involving out-of-state banks. Interstate acquisitions of branches are permitted only if the law of the state in which the branch is located permits such acquisitions. Such interstate bank mergers and branch acquisitions are also subject to the nationwide and statewide insured deposit concentration limitations

10

Table of Contents

described in the Riegle-Neal Act. The Dodd-Frank Act authorizes national and state banks to establish de novo branches in other states to the same extent as a bank chartered by that state would be permitted to branch.

        Virginia Law.    Virginia law governs the licensing and regulation of Virginia chartered banks like the Bank, including organizational and capital requirements, fiduciary powers, investment authority, banking offices and electronic terminals, declaration of dividends, changes of control and mergers, out of state activities, interstate branching and banking, borrowing limits, limits on loans to one borrower and liquidation, among other matters. The VBFI is charged with our supervision and regulation. The VBFI may take possession of a bank if certain conditions exist such as insufficient shareholders' equity, unsafe or unauthorized operations, or violations of law.

        Under Virginia law, we may engage in the general business of banking, including but not limited to, accepting deposits, making secured and unsecured loans, purchasing and holding real property for our own use, and issuing, advising and confirming letters of credit. With limited exceptions, loans to one person may not exceed 15% of the sum of a bank's shareholders' equity, allowance for loan losses and capital notes and debentures.

        USA Patriot Act.    Under the Uniting and Strengthening America by Providing Appropriate Tools to Intercept and Obstruct Terrorism Act of 2001, or USA Patriot Act or Patriot Act, financial institutions are subject to prohibitions against specified financial transactions and account relationships, as well as enhanced due diligence standards intended to detect, and prevent, the use of the United States financial system for money laundering and terrorist financing activities. The Patriot Act requires financial institutions, including banks, to establish anti-money laundering programs, including employee training and independent audit requirements, meet minimum standards specified by the act, follow minimum standards for customer identification and maintenance of customer identification records, and regularly compare customer lists against lists of suspected terrorists, terrorist organizations and money launderers. The costs or other effects of the compliance burdens imposed by the Patriot Act or future anti-terrorist, homeland security or anti-money laundering legislation or regulation cannot be predicted with certainty.

        Bank Secrecy Act.    The Bank Secrecy Act, or BSA, which is intended to require financial institutions to develop policies, procedures and practices to prevent and deter money laundering, mandates that every bank have a written, board-approved program that is reasonably designed to assure and monitor compliance with the BSA. The program must, at a minimum: (i) provide for a system of internal controls to assure ongoing compliance; (ii) provide for independent testing for compliance; (iii) designate an individual responsible for coordinating and monitoring day-to-day compliance; and (iv) provide training for appropriate personnel. In addition, banks are required to adopt a customer identification program as part of its BSA compliance program. Financial institutions are generally required to report cash transactions involving more than $10,000 to the U.S. Treasury Department. In addition, financial institutions are required to file suspicious activity reports for transactions that involve more than $5,000 and which the financial institution knows, suspects or has reason to suspect involves illegal funds, is designed to evade the requirements of the BSA or has no lawful purpose. The regulations implementing the BSA explicitly include risk-based procedures for conducting ongoing customer due diligence, to include understanding the nature and purpose of customer relationships for the purpose of developing a customer risk profile. In addition, banks must identify and verify the identity of the beneficial owners of all legal entity customers (other than those that are excluded) at the time a new account is opened (other than accounts that are exempted).

11

Table of Contents

        Office of Foreign Assets Control.    The United States has imposed economic sanctions that affect transactions with designated foreign countries, foreign nationals and others, which are administered by the U.S. Treasury Department's OFAC. The OFAC-administered sanctions targeting countries take many different forms. Generally, however, they contain one or more of the following elements: (i) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on a "U.S. person" engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (ii) a blocking of assets in which the government or specially designated nationals of a sanctioned country have an interest by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (e.g. property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. Failure to comply with these sanctions could have serious legal and reputational consequences.

        Capital Adequacy.    The Federal Reserve adopted risk-based and leverage capital adequacy requirements, pursuant to which they assess the adequacy of capital in examining and supervising banks and bank holding companies and in analyzing bank regulatory applications. Risk-based capital requirements determine the adequacy of capital based on the risk inherent in various classes of assets and off-balance sheet items. The Dodd-Frank Act additionally requires capital requirements to be countercyclical so that the required amount of capital increases in times of economic expansion and decreases in times of economic contraction, consistent with safety and soundness.

        The federal banking agencies have adopted rules, referred to as the "Basel III Rules," to implement the framework for strengthening international capital and liquidity regulation adopted by the Basel Committee on Banking Supervision, or Basel III. The Basel III framework, among other things, (i) introduced CET1, (ii) specified that Tier 1 capital consists of CET1 and "Additional Tier 1 capital" instruments meeting specified requirements, (iii) defined CET1 narrowly by requiring that most adjustments to regulatory capital measures be made to CET1 and not to the other components of capital and (iv) expanded the scope of the adjustments as compared to existing regulations.

        When fully phased in on January 1, 2019, Basel III requires banks to maintain: (i) a minimum ratio of CET1 to risk-weighted assets of at least 4.5%, plus a "capital conservation buffer" of 2.5%, or 7.0%; (ii) a minimum ratio of Tier 1 capital to risk-weighted assets of at least 6.0%, plus the capital conservation buffer, or 8.5%; (iii) a minimum ratio of Total (Tier 1 plus Tier 2) capital to risk-weighted assets of at least 8.0% plus the capital conservation buffer, or 10.5%; and (iv) a minimum leverage ratio of 3%, calculated as the ratio of Tier 1 capital to balance sheet exposures plus certain off-balance sheet exposures (computed as the average for each quarter of the month-end ratios for the quarter).

        Basel III also provides for a "countercyclical capital buffer," generally to be imposed when federal banking agencies determine that excess aggregate credit growth becomes associated with a buildup of systemic risk that would be a CET1 add-on to the capital conservation buffer of 2.5%. The capital conservation buffer is designed to absorb losses during periods of economic stress.

        Banking institutions with a ratio of CET1 to risk-weighted assets above the minimum but below the conservation buffer (or below the combined capital conservation buffer and countercyclical capital buffer, when the latter is applied) may face constraints on its ability to pay dividends, effect equity repurchases and pay discretionary bonuses to executive officers, which constraints vary based on the amount of the shortfall.

        Under the Basel III Rules, mortgage-servicing assets and deferred tax assets are subject to stricter limitations than those previously applicable under capital rules. More specifically, certain deferred tax assets arising from temporary differences, mortgage-servicing assets, and significant investments in the capital of unconsolidated financial institutions in the form of common stock are each subject to an individual limit of 10% of common equity Tier 1 capital elements and are subject to an aggregate limit

12

Table of Contents

of 15% of common equity Tier 1 capital elements. The amount of these items in excess of the 10% and 15% thresholds are to be deducted from common equity Tier 1 capital. Amounts of mortgage servicing assets, deferred tax assets, and significant investments in unconsolidated financial institutions that are not deducted due to the aforementioned 10% and 15% thresholds must be assigned a 250% risk weight. Finally, the rule increases the risk weights for past-due loans, certain commercial real estate loans, and some equity exposures, and makes selected other changes in risk weights and credit conversion factors. A recent rule proposal would revise the treatment of deferred tax assets and mortgage servicing rights to increase the amounts of such assets includable in capital.

        The Basel III Rules also include, as part of the definition of CET1 capital, a requirement that banking institutions include the amount of additional other comprehensive income, or AOCI, which primarily consists of unrealized gains and losses on available for sale securities, which are not required to be treated as other-than-temporary impairment, net of tax in calculating regulatory capital, unless the institution makes a one-time opt-out election from this provision in connection with the filing of its first regulatory reports after applicability of the Basel III Rules to that institution. The Company opted-out of this requirement and, as such, does not include AOCI in its regulatory capital calculation. The Basel III Rules also require a 4% minimum leverage ratio, and a 5% leverage ratio to be considered well capitalized.

        The Basel III Rules also make changes to the manner of calculating risk weighted assets. New methodologies for determining risk weighted assets in the general capital rules are included, including revisions to recognition of credit risk mitigation, including a greater recognition of financial collateral and a wider range of eligible guarantors. They also include risk weighting of equity exposures and past due loans; and higher (greater than 100%) risk weighting for certain commercial real estate exposures that have higher credit risk profiles, including higher loan to value and equity components. In particular, loans categorized as "high-volatility commercial real estate," or HVCRE, loans are required to be assigned a 150% risk weighting, and require additional capital support. HVCRE loans are defined to include any credit facility that finances or has financed the acquisition, development or construction of real property, unless it finances: 1-4 family residential properties; certain community development investments; agricultural land used or usable for, and whose value is based on, agricultural use; or commercial real estate projects in which: (i) the loan-to-value ratio is less than the applicable maximum supervisory loan-to-value ratio established by the bank regulatory agencies; (ii) the borrower has contributed cash or unencumbered readily marketable assets, or has paid development expenses out of pocket, equal to at least 15% of the appraised "as completed" value; (iii) the borrower contributes its 15% before the bank advances any funds; and (iv) the capital contributed by the borrower, and any funds internally generated by the project, is contractually required to remain in the project until the facility is converted to permanent financing, sold or paid in full. The Economic Growth, Regulatory Relief and Consumer Protection Act of 2018, or the 2018 Act, expanded the exclusion from HVCRE loans to include credit facilities financing the acquisition or refinance of, or improvements to, existing income producing property, secured by the property, if the cash flow being generated by the property is sufficient to support the debt service and expenses of the property in accordance with the institution's loan criteria for permanent financing. The 2018 Act also provides that the value of contributed property will be its appraised value, rather than its cost. The 2018 Act permits an institution to reclassify an HVCRE loan as a non-HVCRE loan upon substantial completion of the project, where the cash flow from the property is sufficient to support debt service and expenses, in accordance with the institution's underwriting criteria for permanent financing.

        The Basel III Rules became applicable to the Bank on January 1, 2015. As the Company is subject to the policy statement, the consolidated capital requirements do not apply to it. The capital conservation buffer requirement is fully implemented at 2.5%. The Company and Bank elected to exclude AOCI in calculating regulatory capital as permitted under the Basel III Rule.

13

Table of Contents

        The capital ratios described above are the minimum levels that the federal banking agencies expect. Our state and federal regulators have the discretion to require us to maintain higher capital levels based upon our concentrations of loans, the risk of our lending or other activities, the performance of our loan and investment portfolios and other factors. Failure to maintain such higher capital expectations could result in a lower composite regulatory rating, which would impact our deposit insurance premiums and could affect our ability to borrow and costs of borrowing, and could result in additional or more severe enforcement actions. In respect of institutions with high concentrations of loans in areas deemed to be higher risk, or during periods of significant economic stress, regulators may require an institution to maintain a higher level of capital, and/or to maintain more stringent risk management measures, than those required by these regulations.

        In December 2017, the Basel Committee on Banking Supervision published the last version of the Basel III accord, generally referred to as "Basel IV." The Basel Committee stated that a key objective of the revisions incorporated into the framework is to reduce excessive variability of risk-weighted assets, or RWA, which will be accomplished by enhancing the robustness and risk sensitivity of the standardized approaches for credit risk and operational risk, which will facilitate the comparability of banks' capital ratios; constraining the use of internally modeled approaches; and complementing the risk-weighted capital ratio with a finalized leverage ratio and a revised and robust capital floor. Leadership of the federal banking agencies who are tasked with implementing Basel IV supported the revisions. Although it is uncertain at this time, we anticipate some, if not all, of the Basel IV accord may be incorporated into the capital requirements framework applicable to us.

        The 2018 Act also directs the federal bank regulatory agencies to develop a "Community Bank Leverage Ratio," calculated by dividing tangible equity capital by average consolidated total assets, of not less than 8% and not more than 10%. If a "qualified community bank," generally a depository institution or depository institution holding company with consolidated assets of less than $10 billion, has a leverage ratio which exceeds the Community Bank Leverage Ratio, then such bank will be considered to have met all generally applicable leverage and risk based capital requirements; the capital ratio requirements for "well capitalized" status under Section 38 of the FDIA, and any other leverage or capital requirements to which it is subject. A bank or holding company may be excluded from qualifying community bank status base on its risk profile, including consideration of its off-balance sheet exposures; trading assets and liabilities; total notional derivatives exposures and such other facts as the appropriate federal banking agencies determine to be appropriate. The federal banking agencies have proposed a Community Bank Leverage Ratio of 9%. Even if the Bank qualifies to use the Community Bank Leverage Ratio, there can be no assurance that the compliance with that ratio will provide the Bank with an adequate level of capital to avoid adverse impacts in the event of economic stress, adverse asset quality, or if it incurs losses.

        Prompt Corrective Action.    Under Section 38 of the FDIA, each federal banking agency is required to implement a system of prompt corrective action for institutions that it regulates. The federal banking agencies have promulgated substantially similar regulations to implement the system of prompt corrective action established by Section 38 of the FDIA. Since January 1, 2015, the following capital requirements applied to the Company for purposes of Section 38.

14

Table of Contents

        An institution generally must file a written capital restoration plan which meets specified requirements with an appropriate federal banking agency within 45 days of the date the institution receives notice or is deemed to have notice that it is undercapitalized, significantly undercapitalized or critically undercapitalized. A federal banking agency must provide the institution with written notice of approval or disapproval within 60 days after receiving a capital restoration plan, subject to extensions by the applicable agency.

        An institution which is required to submit a capital restoration plan must concurrently submit a performance guaranty by each company that controls the institution. Such guaranty shall be limited to the lesser of (i) an amount equal to 5.0% of the institution's total assets at the time the institution was notified or deemed to have notice that it was undercapitalized or (ii) the amount necessary at such time to restore the relevant capital measures of the institution to the levels required for the institution to be classified as adequately capitalized. Such a guaranty shall expire after the federal banking agency notifies the institution that it has remained adequately capitalized for each of four consecutive calendar quarters. An institution which fails to submit a written capital restoration plan within the requisite period, including any required performance guaranty, or fails in any material respect to implement a capital restoration plan, shall be subject to the restrictions in Section 38 of the FDIA which are applicable to significantly undercapitalized institutions.

        A "critically undercapitalized institution" is to be placed in conservatorship or receivership within 90 days unless the FDIC or other appropriate federal banking agency formally determines that forbearance from such action would better protect the Deposit Insurance Fund. Unless the FDIC or other appropriate federal banking agency makes specific further findings and certifies that the institution is viable and is not expected to fail, an institution that remains critically undercapitalized on average during the fourth calendar quarter after the date it becomes critically undercapitalized must be placed in receivership. The general rule is that the FDIC will be appointed as receiver within 90 days after a bank becomes critically undercapitalized unless extremely good cause is shown and an extension is agreed to by the federal regulators. In general, good cause is defined as capital, which has been raised and is imminently available for infusion into the Bank except for certain technical requirements, which may delay the infusion for a period of time beyond the 90 day time period.

        Immediately upon becoming undercapitalized, an institution shall become subject to the provisions of Section 38 of the FDIA, which (i) restrict payment of capital distributions and management fees; (ii) require that the appropriate federal banking agency monitor the condition of the institution and its efforts to restore its capital; (iii) require submission of a capital restoration plan; (iv) restrict the growth of the institution's assets; and (v) require prior approval of certain expansion proposals. The appropriate federal banking agency for an undercapitalized institution also may take any number of discretionary supervisory actions if the agency determines that any of these actions is necessary to resolve the problems of the institution at the least possible long-term cost to the deposit insurance fund, subject in certain cases to specified procedures. These discretionary supervisory actions include: (i) requiring the institution to raise additional capital; (ii) restricting transactions with affiliates; (iii) requiring divestiture of the institution or the sale of the institution to a willing purchaser; and (iv) any other supervisory action that the agency deems appropriate. These and additional mandatory and permissive supervisory actions may be taken with respect to significantly undercapitalized and critically undercapitalized institutions.

        Additionally, under Section 11(c)(5) of the FDIA, a conservator or receiver may be appointed for an institution where: (i) an institution's obligations exceed its assets; (ii) there is substantial dissipation of the institution's assets or earnings as a result of any violation of law or any unsafe or unsound practice; (iii) the institution is in an unsafe or unsound condition; (iv) there is a willful violation of a cease-and-desist order; (v) the institution is unable to pay its obligations in the ordinary course of business; (vi) losses or threatened losses deplete all or substantially all of an institution's capital, and there is no reasonable prospect of becoming "adequately capitalized" without assistance; (vii) there is

15

Table of Contents

any violation of law or unsafe or unsound practice or condition that is likely to cause insolvency or substantial dissipation of assets or earnings, weaken the institution's condition, or otherwise seriously prejudice the interests of depositors or the insurance fund; (viii) an institution ceases to be insured; (ix) the institution is undercapitalized and has no reasonable prospect that it will become adequately capitalized, fails to become adequately capitalized when required to do so, or fails to submit or materially implement a capital restoration plan; or (x) the institution is critically undercapitalized or otherwise has substantially insufficient capital.

        Regulatory Enforcement Authority.    Federal banking law grants substantial enforcement powers to federal banking agencies. This enforcement authority includes, among other things, the ability to assess civil money penalties, to issue cease-and-desist or removal orders and to initiate injunctive actions against banking organizations and institution-affiliated parties. In general, these enforcement actions may be initiated for violations of laws and regulations and unsafe or unsound practices. Other actions or inactions may provide the basis for enforcement action, including misleading or untimely reports filed with regulatory authorities. In addition, the FDIC could terminate the institution's deposit insurance if it determines that the institution's financial condition is unsafe or unsound or that the institution engaged in unsafe or unsound practices that violated an applicable rule, regulation, order or condition enacted or imposed by the institution's regulators.

        As a result of the volatility and instability in the financial system in recent years, Congress, the bank regulatory authorities and other government agencies have called for or proposed additional regulation and restrictions on the activities, practices and operations of banks and their holding companies. Congress and the federal banking agencies have broad authority to require all banks and holding companies to adhere to more rigorous or costly operating procedures, corporate governance procedures, or to engage in activities or practices which they would not otherwise elect. Any such requirement could adversely affect our business and results of operations.

        The Dodd-Frank Act.    The Dodd-Frank Act made significant changes to the current bank regulatory structure, which affects the lending, deposit, investment, trading and operating activities of financial institutions and their holding companies. The Dodd-Frank Act requires a number of federal agencies to adopt a broad range of new rules and regulations, and to prepare various studies and reports for Congress. Although it is not possible to determine the ultimate impact of this statute until the extensive rulemaking is complete and becomes effective, the following provisions are considered to be of greatest significance to us:

•

Expands the authority of the Federal Reserve to examine bank holding companies and their subsidiaries, including insured depository institutions.



•

Requires a bank holding company to be well capitalized and well managed to receive approval of an interstate bank acquisition.



•

Provides mortgage reform provisions regarding a customer's ability to pay and making more loans subject to provisions for higher-cost loans and new disclosures.



•

Creates the Consumer Financial Protection Bureau, or CFPB, which has rulemaking authority for a wide range of consumer protection laws that apply to all banks, and has broad powers to supervise and enforce consumer protection laws.



•

Creates the Financial Stability Oversight Council with authority to identify institutions and practices that might pose a systemic risk.



•

Introduces additional corporate governance and executive compensation requirements on companies subject to the Exchange Act, as amended.



•

Permits FDIC-insured banks to pay interest on business demand deposits.

16

Table of Contents

•

Codifies the requirement that holding companies and other companies that directly or indirectly control an insured depository institution to serve as a source of financial strength.



•

Makes permanent the $250 thousand limit for federal deposit insurance.



•

Permits national and state banks to establish interstate branches to the same extent as the branch host state allows establishment of in-state branches.

        The 2018 Act includes provisions revising Dodd-Frank Act provisions, including provisions that, among other things: (i) exempt banks with less than $10 billion in assets from the ability-to-repay requirements for certain qualified residential mortgage loans; (ii) exempt certain transactions valued at less than $400,000 in rural areas from appraisal requirements; (iii) exempt banks and credit unions that originate fewer than 500 open-end and 500 closed-end mortgages from the expanded data disclosures required under the Home Mortgage Disclosure Act, or HMDA (the provision would not apply to nonbanks and would not exempt institutions from HMDA reporting altogether); (iv) amend the SAFE Mortgage Licensing Act by providing registered mortgage loan originators in good standing with 120 days of transitional authority to originate loans when moving from a federal depository institution to a non-depository institution or across state lines; (v) require the CFPB to clarify how TILA-RESPA Integrated Disclosure applies to mortgage assumption transactions and construction-to-permanent home loans as well as outline certain liabilities related to model disclosure use; (vi) revise treatment of HVCRE exposures; and (vii) create the simplified Community Bank Leverage Capital Ratio. The 2018 Act also exempts community banks from Section 13 of the Bank Holding Company Act, commonly referred to as the Volcker Rule, if they have less than $10 billion in total consolidated assets; and exempts banks with less than $10 billion in assets, and total trading assets and liabilities not exceeding more than five percent of their total assets from the Volcker Rule restrictions on trading with their own capital. The 2018 Act also adds certain protections for consumers, including veterans and active duty military personnel, expanded credit freezes and creation of an identity theft protection database.

        In addition, other new proposals for legislation continue to be introduced in the U.S. Congress that could further substantially increase regulation of the bank and non-bank financial services industries and impose restrictions on the operations and general ability of firms within the industry to conduct business consistent with historical practices. Federal and state regulatory agencies also frequently adopt changes to their regulations or change the manner in which existing regulations are applied. Certain aspects of current or proposed regulatory or legislative changes to laws applicable to the financial industry, if enacted or adopted, may impact the profitability of our business activities, require more oversight or change certain of our business practices, including the ability to offer new products, obtain financing, attract deposits, make loans and achieve satisfactory interest spreads and could expose us to additional costs, including increased compliance costs. These changes also may require us to invest significant management attention and resources to make any necessary changes to operations to comply and could have an adverse effect on our business, financial condition and results of operations.

        Consumer Financial Protection Bureau.    The Dodd-Frank Act created the CFPB, a new, independent federal agency within the Federal Reserve having broad rulemaking, supervisory and enforcement powers under various federal consumer financial protection laws, including the Equal Credit Opportunity Act, Truth in Lending Act, Real Estate Settlement Procedures Act, Fair Credit Reporting Act, Fair Debt Collection Practices Act, the consumer financial privacy provisions of the GLB Act and certain other statutes. The CFPB has examination and primary enforcement authority with respect to depository institutions with $10 billion or more in assets. Smaller institutions, including the Bank, are subject to rules promulgated by the CFPB but continue to be examined and supervised by federal banking agencies for compliance with federal consumer protection laws and regulations. The CFPB also has authority to prevent unfair, deceptive or abusive practices in connection with the offering of consumer financial products. The Dodd-Frank Act permits states to adopt consumer

17

Table of Contents

protection laws and standards that are more stringent than those adopted at the federal level and, in certain circumstances, permits state attorneys general to enforce compliance with both the state and federal laws and regulations.

        The CFPB has proposed or issued a number of important rules affecting a wide range of consumer financial products. These rules may impact the profitability of our business activities, limit our ability to make, or the desirability of making, certain types of loans, including non-qualified mortgage loans, require us to change our business practices, impose upon us more stringent capital, liquidity and leverage ratio requirements or otherwise adversely affect our business or profitability. The changes may also require us to dedicate significant management attention and resources to evaluate and make necessary changes to comply with the new statutory and regulatory requirements.

        The CFPB has concentrated much of its rulemaking efforts on reforms related to residential mortgage transactions. The CFPB has issued rules related to a borrower's ability to repay and qualified mortgage standards, mortgage servicing standards, loan originator compensation standards, requirements for high-cost mortgages, appraisal and escrow standards and requirements for higher-priced mortgages. The CFPB has also issued rules establishing integrated disclosure requirements for lenders and settlement agents in connection with most closed end, real estate secured consumer loans. The Bank fully complies with these rules and expanding the scope of information lenders must report in connection with mortgage and other housing-related loan applications under HMDA. These rules, which become effective on a rolling basis through January 1, 2019, include significant regulatory and compliance changes and are expected to have a broad impact on the financial services industry.

        The rule implementing the Dodd-Frank Act requirement that lenders determine whether a consumer has the ability to repay a mortgage loan, established certain minimum requirements for creditors when making ability to pay determinations, and established certain protections from liability for mortgages meeting the definition of "qualified mortgages." Generally, the rule applies to all consumer-purpose, closed-end loans secured by a dwelling including home-purchase loans, refinances and home equity loans—whether first or subordinate lien. The rule does not cover, among other things, home equity lines of credit or other open-end credit; temporary or "bridge" loans with a term of 12 months or less, such as a loan to finance the initial construction of a dwelling; a construction phase of 12 months or less of a construction-to-permanent loan; and business-purpose loans, even if secured by a dwelling. The rule afforded greater legal protections for lenders making qualified mortgages that are not "higher priced." Qualified mortgages must generally satisfy detailed requirements related to product features, underwriting standards, and a points and fees requirement whereby the total points and fees on a mortgage loan cannot exceed specified amounts or percentages of the total loan amount. Mandatory features of a qualified mortgage include: (i) a loan term not exceeding 30 years; and (ii) regular periodic payments that do not result in negative amortization, deferral of principal repayment, or a balloon payment. Further, the rule clarified that qualified mortgages do not include "no-doc" loans and loans with negative amortization, interest-only payments, or balloon payments. The rule created special categories of qualified mortgages originated by certain smaller creditors. To the extent that we seek to make qualified mortgages, we are required to comply with these rules, subject to available exclusions. Our business strategy, product offerings, and profitability may change as the rule is interpreted by the regulators and courts.

        Financial Privacy.    Under the Federal Right to Privacy Act of 1978, which imposes a duty to maintain confidentiality of consumer financial records and prescribes procedures for complying with administrative subpoenas of financial records, financial institutions are required to disclose their policies for collecting and protecting confidential information. Consumers generally may prevent financial institutions from sharing personal financial information with nonaffiliated third parties except for third parties that market the institutions' own products and services. Additionally, financial institutions generally may not disclose consumer account numbers to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to consumers.

18

Table of Contents

        Community Reinvestment Act.    The Community Reinvestment Act, or CRA, requires that, in connection with examinations of financial institutions within their respective jurisdictions, the federal banking agencies will evaluate the record of each financial institution in meeting the needs of its local community, including low- and moderate-income neighborhoods. Our Bank's record of performance under the CRA is publicly available. A bank's CRA performance is also considered in evaluating applications seeking approval for mergers, acquisitions, and new offices or facilities. Failure to adequately meet these criteria could result in additional requirements and limitations being imposed on the Bank. Additionally, we must publicly disclose the terms of certain CRA-related agreements.

        Fair and Responsible Banking.    Banks and other financial institutions are subject to numerous laws and regulations intended to promote fair and responsible banking and prohibit unlawful discrimination and unfair, deceptive or abusive practices in banking. These laws include, among others, the Dodd-Frank Act, Section 5 of the Federal Trade Commission Act, the Equal Credit Opportunity Act, and the Fair Housing Act.

        Many states and local jurisdictions have consumer protection laws analogous, and in addition, to those listed above. These federal, state and local laws regulate the manner in which financial institutions deal with customers taking deposits, making loans or conducting other types of transactions. Failure to comply with these laws and regulations could give rise to regulatory sanctions, and actions by the U.S. Department of Justice and state attorneys general.

        FDIC Insurance Premiums.    FDIC-insured banks, such as the Bank, are required to pay deposit insurance assessments to the FDIC. For banks with less than $10 billion in total consolidated assets, the assessment rate is calculated using a financial ratios method based on a statistical model estimating the bank's probability of failure over three years utilizing seven financial ratios (leverage ratio; net income before taxes/total assets; nonperforming loans and leases/gross assets; other real estate owned/gross assets; brokered deposit ratio; one year asset growth; and loan mix index) and a weighted average of supervisory ratings components. The final rule also eliminates the brokered deposit downward adjustment factor for such banks' assessment rates, providing a new brokered deposit ratio applicable to all small banks, whereby brokered deposits in excess of 10% of total consolidated assets (inclusive of reciprocal deposits if a bank is not well capitalized or has a composite supervisory rating other than a 1 or 2) as a result of which assessment rates may be increased for banks which experience rapid growth; lowers the range of assessment rates authorized to 1.5 basis points for an institution posing the least risk, to 40 basis points for an institution posing the most risk; and will further lower the range of assessment rates if the reserve ratio of the Deposit Insurance Fund increases to 2% or more. Banks with over $10 billion in total consolidated assets are required to pay a surcharge of 4.5 basis points on their assessment basis, subject to certain adjustments. The FDIC may also impose special assessments from time to time. Under the Tax Cuts and Jobs Act of 2017, or the 2017 Tax Act, FDIC insured institutions with assets in excess of $10 billion will be subject to a phase out of the deductibility of deposit insurance premiums. The FDIC may also impose special assessments from time to time.

        The Dodd-Frank Act permanently increased the maximum deposit insurance amount for banks, savings institutions and credit unions to $250 thousand per depositor. The Dodd-Frank Act also broadened the base for FDIC insurance assessments. Assessments are now based on a financial institution's average consolidated total assets less tangible equity capital. The Dodd-Frank Act requires the FDIC to increase the reserve ratio of the Deposit Insurance Fund from 1.15% to 1.35% of insured deposits by 2020 and eliminates the requirement that the FDIC pay dividends to insured depository institutions when the reserve ratio exceeds certain thresholds.

        Concentration and Risk Guidance.    The federal banking regulatory agencies issued joint interagency guidance regarding material direct and indirect asset and funding concentrations. The guidance defines a concentration as any of the following: (i) asset concentrations of 25% or more of total capital (loan related) or Tier 1 capital (non-loan related) by individual borrower, small

19

Table of Contents

interrelated group of individuals, single repayment source or individual project; (ii) asset concentrations of 100% or more of total capital (loan related) or Tier 1 capital (non-loan related) by industry, product line, type of collateral, or short-term obligations of one financial institution or affiliated group; (iii) funding concentrations from a single source representing 10% or more of total assets; or (iv) potentially volatile funding sources that when combined represent 25% or more of total assets (these sources may include brokered, large, high-rate, uninsured, internet-listing-service deposits, Federal funds purchased or other potentially volatile deposits or borrowings). If a concentration is present, management must employ heightened risk management practices including board and management oversight and strategic planning, development of underwriting standards, risk assessment and monitoring through market analysis and stress testing, third party review and increasing capital requirements.

        Additionally, the federal bank regulatory agencies have issued guidance governing financial institutions with concentrations in commercial real estate lending. The guidance provides that institutions that have (i) total reported loans for construction, land development, and other land which represent 100% or more of an institution's total risk-based capital; or (ii) total reported commercial real estate loans, excluding loans secured by owner-occupied commercial real estate, representing 300% or more of the institution's total risk-based capital and the institution's commercial real estate loan portfolio has increased 50% or more during the prior 36 months, are identified as having potential commercial real estate concentration risk. Institutions, like the Bank, which are deemed to have concentrations in commercial real estate lending are expected to employ heightened levels of risk management with respect to their commercial real estate portfolios, and may be required to hold higher levels of capital.

        Increased Focus on Lending to Members of the Military.    The federal banking agencies and the DOJ have recently increased their focus on financial institution compliance with the Servicemembers Civil Relief Act, or SCRA. The SCRA requires a bank to cap the interest rate at 6% for any loan to a member of the military who goes on active duty after taking out the loan. It also limits the actions the Bank can take when a servicemember is in foreclosure.

        Limitations on Incentive Compensation.    In April 2016, the Federal Reserve and other federal financial agencies re-proposed restrictions on incentive-based compensation pursuant to Section 956 of the Dodd-Frank Act for financial institutions with $1 billion or more in total consolidated assets. For institutions with at least $1 billion but less than $50 billion in total consolidated assets, the proposal would impose principles-based restrictions that are broadly consistent with existing interagency guidance on incentive-based compensation. Such institutions would be prohibited from entering into incentive compensation arrangements that encourage inappropriate risks by the institution (i) by providing an executive officer, employee, director, principal shareholder or individuals who are "significant risk takers" with excessive compensation, fees, or benefits, or (ii) that could lead to material financial loss to the institution. The proposal would also impose certain governance and recordkeeping requirements on institutions of our size. The Federal Reserve would reserve the authority to impose more stringent requirements on institutions of our size. We are evaluating the expected impact of the proposal on our business.

        Cybersecurity.    In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institution. The other statement indicates that a financial institution's management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution's operations after a cyber-attack involving destructive malware. A financial institution is also

20

Table of Contents

expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties. To date, we have not experienced a significant compromise, significant data loss or any material financial losses related to cybersecurity attacks, but our systems and those of our customers and third-party service providers are under constant threat and it is possible that we could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking and other technology-based products and services by us and our customers.

Item 1A.    RISK FACTORS

        The material risks and uncertainties that management believes affect us are described below. Any of these risks, if they are realized, could materially adversely affect our business, financial condition and results of operations, and consequently, the market value of our common stock. Additional risks and uncertainties not currently known to us or that we currently believe to be immaterial may also materially and adversely affect us. This Form 10-K also contains forward-looking statements that involve risks and uncertainties. If any of the matters included in the following information about risk factors were to occur, our business, financial condition, results of operations, cash flows or prospects could be materially and adversely affected.

Risks Related to Our Business

Our business and operations may be materially adversely affected by weak economic conditions.

        Our business and operations, which primarily consist of banking activities, including lending money to customers and borrowing money from customers in the form of deposits, are sensitive to general business and economic conditions in the U.S. generally, and in the Washington, D.C. metropolitan area in particular. The economic conditions in our local markets may be different from the economic conditions in the U.S. as a whole. If economic conditions in the U.S. or any of our markets weaken, our growth and profitability from our operations could be constrained. In addition, foreign economic and political conditions could affect the stability of global financial markets, which could hinder economic growth. The current economic environment is characterized by interest rates gradually increasing from near historically low levels, which could impact our ability to attract deposits and to generate attractive earnings through our loan and investment portfolios. All these factors can individually or in the aggregate be detrimental to our business, and the interplay between these factors can be complex and unpredictable. Unfavorable market conditions can result in a deterioration in the credit quality of our borrowers and the demand for our products and services, an increase in the number of loan delinquencies, defaults and charge-offs, additional provisions for loan losses, a decline in the value of our collateral, and an overall material adverse effect on the quality of our loan portfolio.

        Our business is also significantly affected by monetary and related policies of the U.S. federal government and its agencies. Uncertainty about the federal fiscal policymaking process, the medium and long-term fiscal outlook of the federal government, and future tax rates are concerns for businesses, consumers and investors in the U.S. Changes in any of these policies are influenced by macroeconomic conditions and other factors that are beyond our control. Adverse economic conditions and government policy responses to such conditions could have a material adverse effect on our business, financial conditions and results of operations.

21

Table of Contents

We are subject to interest rate risk, which could adversely affect our profitability.

        Our profitability, like that of most financial institutions, depends to a large extent on our net interest income, which is the difference between our interest income on interest-earning assets, such as loans and investment securities, and our interest expense on interest-bearing liabilities, such as deposits and borrowings.

        Interest rates are highly sensitive to many factors that are beyond our control, including general economic conditions and policies of various governmental and regulatory agencies and, in particular, the Federal Reserve. Changes in monetary policy, including changes in interest rates, could influence not only the interest we receive on loans and securities and the interest we pay on deposits and borrowings, but such changes could affect our ability to originate loans and obtain deposits, the fair value of our financial assets and liabilities, and the average duration of our assets. If the interest rates paid on deposits and other borrowings increase at a faster rate than the interest rates received on loans and other investments, our net interest income, and therefore earnings, could be adversely affected. Earnings could also be adversely affected if the interest rates received on loans and other investments fall more quickly than the interest rates paid on deposits and other borrowings. Any substantial, unexpected or prolonged change in market interest rates could have a material adverse impact on our business, financial condition and results of operations.

        Our interest sensitivity profile was modestly asset sensitive as of December 31, 2018. As a result, we would expect small increases in net interest income if interest rates rise, and small declines in the event rates fall. However, such expectations are based on our assumptions as to deposit customer behavior in an increasing rate scenario. When short-term interest rates rise, the rate of interest we pay on our interest-bearing liabilities may rise more quickly than the rate of interest that we receive on our interest-earning assets, which may cause our net interest income to decrease. Additionally, a shrinking yield premium between short-term and long-term market interest rates, a pattern usually indicative of investors' waning expectations of future growth and inflation, commonly referred to as a flattening of the yield curve, typically reduces our profit margin as we borrow at shorter terms than the terms at which we lend and invest.

        In addition, an increase in interest rates could also have a negative impact on our results of operations by reducing the ability of borrowers to repay their current loan obligations. These circumstances could not only result in increased loan defaults, foreclosures and charge-offs, but also reduce collateral values and necessitate further increases to the allowance for loan losses, which could have a material adverse effect on our business, financial condition and results of operations.

We are subject to credit risk, which could adversely affect our profitability.

        Our business depends on our ability to successfully measure and manage credit risk. As a lender, we are exposed to the risk that the principal of, or interest on, a loan will not be paid timely or at all or that the value of any collateral supporting a loan will be insufficient to cover our outstanding exposure. In addition, we are exposed to risks with respect to the period of time over which the loan may be repaid, risks relating to loan underwriting, risks resulting from changes in economic and industry conditions, and risks inherent in dealing with individual loans and borrowers. The creditworthiness of a borrower is affected by many factors including local market conditions and general economic conditions. If the overall economic climate in the U.S. generally, or in our market areas specifically, experiences material disruption, our borrowers may experience difficulties in repaying their loans, the collateral we hold may decrease in value or become illiquid, and our level of nonperforming loans, charge-offs and delinquencies could rise and require significant additional provisions for loan losses.

        Our risk management practices, such as monitoring the concentrations of our loans and our credit approval, review and administrative practices, may not adequately reduce credit risk, and our credit

22

Table of Contents

administration personnel, policies and procedures may not adequately adapt to changes in economic or any other conditions affecting related customers and the quality of the loan portfolio. Many of our loans are made to small businesses that are less able to withstand competitive, economic and financial pressures than larger borrowers. Consequently, we may have significant exposure if any of these borrowers becomes unable to pay their loan obligations as a result of economic or market conditions, or personal circumstances, such as divorce, unemployment or death. A failure to effectively measure and limit the credit risk associated with our loan portfolio may result in loan defaults, foreclosures and additional charge-offs, and may necessitate that we significantly increase our allowance for loan losses, each of which could adversely affect our net income. As a result, our inability to successfully manage credit risk could have a material adverse effect on our business, financial condition and results of operations.

Losses related to any single loan could have a significant impact on our financial condition and results of operations.

        While our average funded loan size is relatively small compared to our legal lending limit, averaging $1.6 million for commercial real estate loans and approximately $639 thousand for commercial and industrial loans, at December 31, 2018, our legal lending limit has increased, and we have originated larger loans in recent years. As a result of our commercial real estate lending, the loan portfolio contains approximately 8 loans which have balances in excess of 5% of our shareholder's equity, and our largest single exposure is $11.2 million, while our largest exposure to one borrower is $19.2 million. Additionally, commercial and industrial loans not primarily secured by real estate are typically made based on the ability of the borrower to make payment on the loan from the cash flow of the business, and are collateralized primarily by business assets such as equipment, inventory and accounts receivable. These assets are often subject to depreciation over time, may be more difficult than real estate collateral to evaluate, and may be more difficult to realize the value of upon foreclosure. As a result, the availability of funds for repayment of such loans is often contingent on the success of the business itself. Although we seek to structure and monitor our loans and the financial condition of our borrowers in an effort to avoid or minimize losses, unexpected reversals in the business of an individual borrower can occur, and the resulting decline in the quality of loans to such borrowers, and related provisions for credit losses, could have a material adverse effect on our earnings, financial condition and shareholder returns.

A substantial portion of our loans are and will continue to be real estate related loans in the Washington, D.C. metropolitan area. Adverse changes in the real estate market or economy in this area could lead to higher levels of problem loans and charge-offs, adversely affecting our earnings and financial condition.

        We make loans primarily to borrowers in the Washington, D.C. and Baltimore metropolitan areas, focusing on the Virginia counties of Arlington, Fairfax, Loudoun and Prince William and the independent cities located within those counties, Washington D.C., and its Maryland suburbs, and have a substantial portion of our loans secured by real estate. These concentrations expose us to the risk that adverse developments in the real estate market, or in the general economic conditions in such areas, or the continuation of such adverse developments, could increase the levels of nonperforming loans and charge-offs, and reduce loan demand and deposit growth. In that event, we would likely experience lower earnings or losses. Additionally, if economic conditions in the area deteriorate, or there is significant volatility or weakness in the economy or any significant sector of the area's economy, our ability to develop our business relationships may be diminished, the quality and collectability of our loans may be adversely affected, our provision for loan losses may increase, the value of collateral may decline and loan demand may be reduced.

23

Table of Contents

Increases to our nonperforming assets or other problem assets will have an adverse effect on our earnings.

        As of December 31, 2018, we had nonaccrual loans and loans 90 days or more past due still accruing interest of $3.2 million, or 0.34% of total loans, net of fees, $4.2 million of other real estate owned, or OREO, and nonperforming assets of 0.57% of total assets. At that date, we also had $203 thousand of loans considered troubled debt restructurings, all of which are currently performing. If any of our loans which are troubled debt restructurings or 90 or more days past due and still accruing become nonaccrual loans, we will not record interest income on such loans, and may be required to reverse prior accruals, thereby adversely affecting our earnings. If the level of our nonperforming or other problem assets increases, we may be required to make additional provisions for loan losses, which will negatively impact our earnings. If we are required to foreclose on any collateral properties securing our loans, we will incur legal and other expenses in connection with the foreclosure and sale process and possible losses on the sale of OREO or other collateral. Additionally, the resolution of nonperforming assets, troubled debt restructurings and other problem assets requires the active involvement of management, which can distract management from its overall supervision of operations and other income producing activities.

Our concentrations of loans may create a greater risk of loan defaults and losses.

        A substantial portion of our loans are secured by various types of real estate in the Washington, D.C. metropolitan area and substantially all of our loans are to borrowers in that area. At December 31, 2018, 85.1% of our total loans were secured by real estate; commercial real estate loans, excluding construction and land development, comprised the largest portion of these loans at 60.1% of our portfolio. This concentration exposes us to the risk that adverse developments in the real estate market, or the general economic conditions in our market, could increase our nonperforming loans and charge-offs, reduce the value of our collateral and adversely impact our results of operations and financial condition. Management believes that the commercial real estate concentration risk is mitigated by diversification among the types and characteristics of real estate collateral properties, sound underwriting practices, rigorous portfolio monitoring and ongoing market analysis. Construction and land development loans comprised 13.5% of total loans at December 31, 2018. Commercial and industrial loans comprised 12.1%, of total loans at December 31, 2018. These categories of loans have historically carried a higher risk of default than other types of loans, such as single family residential mortgage loans. The repayment of these loans often depends on the successful operation of a business or the sale or development of the underlying property, and, as a result, are more likely to be adversely affected by adverse conditions in the real estate market or the economy in general. While we believe that our loan portfolio is well diversified in terms of borrowers and industries, these concentrations expose us to the risk that adverse developments in the real estate market, or in the general economic conditions in the Washington, D.C. metropolitan area, could increase the levels of nonperforming loans and charge-offs, and reduce loan demand. In that event, we would likely experience lower earnings or losses. Additionally, if, for any reason, economic conditions in our market area deteriorate, or there is significant volatility or weakness in the economy or any significant sector of the area's economy, our ability to develop our business relationships may be diminished, the quality and collectability of our loans may be adversely affected, our provision for loan losses may increase, the value of collateral may decline and loan demand may be reduced.

        Commercial real estate loans tend to have larger balances than single family mortgage loans and other consumer loans. Because the loan portfolio contains a significant number of commercial real estate loans with relatively large balances, the deterioration of one or a few of these loans may cause a significant increase in nonperforming assets. An increase in nonperforming loans could result in a loss of earnings from these loans, an increase in the provision for loan losses, or an increase in loan charge-offs, which could have an adverse impact on our results of operations and financial condition.

24

Table of Contents

We operate in a highly competitive market and face increasing competition from a variety of traditional and new financial services providers, which could adversely impact our profitability.

        The banking business is highly competitive. We compete as a financial intermediary with other commercial banks, savings banks, credit unions, mortgage banking firms, consumer finance companies, securities brokerage firms, insurance companies, money market mutual funds and other financial institutions operating in the Washington, D.C. metropolitan area and elsewhere, as well as nontraditional competitors such as fintech companies and internet-based lenders, depositories and payment systems. Our profitability depends upon our continued ability to successfully compete with traditional and new financial services providers, some of which maintain a physical presence in our market areas and others of which maintain only a virtual presence.

        Our primary market area is a highly competitive, highly branched, banking market. Competition in the market area for loans to small and middle-market businesses and professionals, our target market, is intense and pricing is important. Several of our competitors have substantially greater resources and lending limits than us, and offer certain services, such as extensive and established branch networks and trust services, that we do not currently provide or currently expect to provide in the near future. Moreover, larger institutions operating in the Washington, D.C. metropolitan area may have access to borrowed funds at lower cost than will be available to us. Additionally, deposit competition among institutions in the market area is strong. Increased competition could require us to increase the rates we pay on deposits or lower the rates that we offer on loans, which could reduce our profitability. Our failure to compete effectively in our market could restrain our growth or cause us to lose market share, which could have a material adverse effect on our business, financial condition and results of operations.

Our portfolio of loans to small and mid-sized community-based businesses may increase our credit risk.

        Many of our commercial business and commercial real estate loans are made to small business or middle market customers. These businesses generally have fewer financial resources in terms of capital or borrowing capacity than larger entities and have a heightened vulnerability to economic conditions. If general economic conditions in the market area in which we operate negatively impact this important customer sector, our results of operations and financial condition may be adversely affected. Moreover, a portion of these loans have been made by us in recent years and the borrowers may not have experienced a complete business or economic cycle. The deterioration of our borrowers' businesses may hinder their ability to repay their loans with us, which could have a material adverse effect on our financial condition and results of operations.

Our government contractor customers, and businesses in the Washington, D.C. metropolitan area in general, may be adversely impacted by the federal government and a budget impasse.

        At December 31, 2018, 12.1% of our total loans were outstanding to commercial and industrial customers. Of that, approximately 33.0% of outstanding commercial and industrial loans are to government contractors or their subcontractors specializing in the defense and homeland security and defense readiness sectors, and we have commitments of $127.3 million to such borrowers. We are actively seeking to expand our exposure to this business segment. While we believe that our loans to government contractor customers are unlikely to experience more than a delay in payment as a result of government shutdowns, the current emphasis on defense readiness presents an opportunity for many of our customers. In the event of a government shutdown, this could cause these customers to have their government contracts reduced or terminated for convenience, or have payments delayed, causing a loss of anticipated revenues or reduced cash flow, resulting in an increase in credit risk, and potentially defaults by such customers on their respective loans.

25

Table of Contents

        Our government contractor customers could also withdraw their deposit balances during a shutdown to fund current operations, resulting in additional liquidity risk. Additionally, temporary layoffs, salary reductions or furloughs of government employees or government contractors could have adverse impacts on other businesses in our market and the general economy of the Washington, D.C. metropolitan area, and may indirectly lead to a loss of revenues by our customers. As a result, a government shutdown could lead to an increase in the levels of past due loans, nonperforming loans, loan loss reserves and charge-offs, and a decline in liquidity.

We may not be able to retain or grow our core deposit base, which could adversely impact our funding costs.

        Like many financial institutions, we rely on customer deposits as our primary source of funding for our lending activities, and we continue to seek customer deposits to maintain this funding base. Our future growth will largely depend on our ability to retain and grow our deposit base. As of December 31, 2018, we had $1.16 billion in deposits. Our deposits are subject to potentially dramatic fluctuations in availability or price due to certain factors outside of our control, such as increasing competitive pressures for deposits, changes in interest rates and returns on other investment classes, customer perceptions of our financial health and general reputation, and a loss of confidence by customers in us or the banking sector generally, which could result in significant outflows of deposits within short periods of time or significant changes in pricing necessary to maintain current customer deposits or attract additional deposits. Any such loss of funds could result in lower loan originations, which could have a material adverse effect on our business, financial condition and results of operations.

Liquidity risk could impair our ability to fund operations and meet our obligations as they become due, and failure to maintain sufficient liquidity could materially adversely affect our growth, business, profitability and financial condition.

        Liquidity is essential to our business. Liquidity risk is the potential that we will be unable to meet our obligations as they become due because of an inability to liquidate assets or obtain adequate funding at a reasonable cost, in a timely manner and without adverse conditions or consequences. We require sufficient liquidity to fund asset growth, meet customer loan requests, customer deposit maturities and withdrawals, payments on our debt obligations as they come due and other cash commitments under both normal operating conditions and other unpredictable circumstances, including events causing industry or general financial market stress. Liquidity risk can increase due to a number of factors, including an over-reliance on a particular source of funding or market-wide phenomena such as market dislocation and major disasters. As discussed under "Management's Discussion and Analysis of Financial Condition and Results of Operations—Deposits and Other Borrowings," we have a deposit concentration related to municipalities. Factors that could detrimentally impact access to liquidity sources include, but are not limited to, a decrease in the level of our business activity as a result of a downturn in our market, adverse regulatory actions against us, or changes in the liquidity needs of our depositors. Market conditions or other events could also negatively affect the level or cost of funding, affecting our ongoing ability to accommodate liability maturities and deposit withdrawals, meet contractual obligations, and fund asset growth and new business transactions at a reasonable cost, in a timely manner, and without adverse consequences. Our inability to raise funds through deposits, borrowings, the sale of loans, and other sources could have a substantial negative effect on our business, and could result in the closure of the Bank. Our access to funding sources in amounts adequate to finance our activities or on acceptable terms could be impaired by factors that affect our organization specifically or the financial services industry or economy in general. Any substantial, unexpected, and/or prolonged change in the level or cost of liquidity could impair our ability to fund operations and meet our obligations as they become due and could have a material adverse effect on our business, financial condition and results of operations.

26

Table of Contents

        We rely on customer deposits, including brokered deposits, and to a lesser extent on advances from the Federal Home Loan Bank of Atlanta, or FHLB, to fund our operations. Although we have historically been able to replace maturing deposits and advances if desired, we may not be able to replace such funds in the future if our financial condition, the financial condition of the FHLB or market conditions were to change. FHLB borrowings and other current sources of liquidity may not be available or, if available, sufficient to provide adequate funding for operations.

Our reputation is critical to our business, and damage to it could have a material adverse effect on us.

        We believe that a key differentiating factor for our business is the strong reputation we have built in our market. Maintaining a positive reputation is critical to attracting and retaining customers and employees. Adverse perceptions of us could make it more difficult for us to execute on our strategy. Harm to our reputation can arise from many sources, including actual or perceived employee misconduct, errors or misconduct by our third party vendors or other counterparties, litigation or regulatory actions, our failure to meet our high customer service and quality standards, compliance failures and weakened financial condition. Negative publicity about us, whether or not accurate, may damage our reputation, which could have a material adverse effect on our business, financial condition and results of operations.

Our allowance for loan losses may be inadequate to absorb losses inherent in the loan portfolio, which could have a material adverse effect on our business, financial condition and results of operations.

        Experience in the banking industry indicates that a portion of our loans will become delinquent, and that some may only be partially repaid or may never be repaid at all. We may experience losses for reasons beyond our control, such as the impact of general economic conditions on customers and their businesses. In determining the size of our allowance for loan losses, we rely on an analysis of our loan portfolio considering historical loss experience, volume and types of loans, trends in classification, volume and trends in delinquencies and nonaccruals, economic conditions and other pertinent information. Although we endeavor to maintain our allowance for loan losses at a level adequate to absorb any inherent losses in the loan portfolio, the determination of the appropriate level of the allowance for loan losses is inherently highly subjective and requires us to make significant estimates of and assumptions regarding current credit risk and future trends, and the accuracy of our judgments depends on the outcome of future events. Further, despite our underwriting criteria and historical experience, we may be particularly susceptible to losses due to: (i) the geographic concentration of our loans, (ii) the concentration of higher risk loans, such as commercial real estate, and commercial and industrial loans, and (iii) the relative lack of seasoning of certain of our loans.

        Deterioration of economic conditions affecting borrowers, new information regarding existing loans, inaccurate management assumptions, identification of additional problem loans and other factors, both within and outside of our control, may result in our experiencing higher levels of nonperforming assets and charge-offs, and incurring loan losses in excess of our current allowance for loan losses, requiring us to make material additions to our allowance for loan losses, which could have a material adverse effect on our business, financial condition and results of operations.

        Our federal and state banking regulators, as an integral part of their supervisory function, periodically review the allowance for loan losses. These regulatory agencies may require us to increase our provision for loan losses or to recognize further loan charge-offs based upon their judgments, which may be different from ours. If we need to make significant and unanticipated increases in the loss allowance in the future, or to take additional charge-offs for which we have not established adequate reserves, our results of operations and financial condition could be materially adversely affected at that time.

27

Table of Contents

The success of our growth strategy depends, in part, on our ability to identify and retain individuals with experience and relationships in our market.

        Our success depends, in large part, on our management team and key employees. The loss of any of our management team or our key employees could materially adversely affect our ability to execute our business strategy, and we may not be able to find adequate replacements on a timely basis, or at all. We cannot ensure that we will be able to retain the services of any members of our management team or other key employees. Failure to attract and retain a qualified management team and qualified key employees could have a material adverse effect on our business, financial condition and results of operations.

        In order to continue to grow successfully, we must also identify and retain experienced loan officers with local expertise and relationships. We expect that competition for experienced loan officers will continue to be intense and that there will be a limited number of qualified loan officers with knowledge of, and experience in, the community banking industry in our market area. Even if we identify individuals that we believe could assist us in building our franchise, we may be unable to recruit these individuals away from their current banks. In addition, the process of identifying and recruiting loan officers with the combination of skills and attributes required to carry out our strategy is often lengthy. Our inability to identify, recruit and retain talented personnel could limit our growth and could adversely affect our business, financial condition and results of operations. The lack of acquisition opportunities in the future, or our inability to successfully bid for such opportunities as are available, could result in a slower pace of growth.

We may not be able to successfully manage continued growth.

        We have used the net proceeds of our recent offering to fund the cash portion of the merger consideration in the merger with Colombo, and to contribute to the Bank's capital to support further growth in the level of our assets and deposits. As our capital base grows, so does our legal lending limit. We cannot be certain as to our ability to manage increased levels of assets and liabilities, or to successfully make and supervise higher balance loans. Further, we may not be able to maintain the relatively low number and level of nonperforming loans and charge-offs that we have experienced. We may be required to make additional investments in equipment, software, physical facilities and personnel to accumulate and manage higher asset levels and loan balances, which may adversely impact earnings, shareholder returns, and our efficiency ratio. Increases in operating expenses or nonperforming assets may have an adverse impact on the value of our common stock.

        There can be no assurance that we will be able to continue to grow and to remain profitable in future periods, or, if profitable, that our overall earnings will remain consistent with our prior results of operations, or increase in the future. A downturn in economic conditions in our market, particularly in the real estate market, heightened competition from other financial services providers, an inability to retain or grow our core deposit base, regulatory and legislative considerations, a failure to maintain adequate internal controls and compliance processes, and failure to attract and retain high-performing talent, among other factors, could limit our ability to grow assets, or increase profitability, as rapidly as we have in the past. Sustainable growth requires that we manage our risks by following prudent loan underwriting standards, balancing loan and deposit growth without materially increasing interest rate risk or compressing our net interest margin, maintaining more than adequate capital at all times, hiring and retaining qualified employees and successfully implementing our strategic initiatives. Our failure to sustain our historical rate of growth or adequately manage the factors that have contributed to our growth could have a material adverse effect on our earnings and profitability and therefore on our business, financial condition and results of operations.

28

Table of Contents

Regulatory requirements affecting our loans secured by commercial real estate could limit our ability to leverage our capital and adversely affect our growth and profitability.

        The federal banking agencies have issued guidance governing financial institutions that have concentrations in commercial real estate lending. The guidance provides that institutions which have (i) total reported loans for construction, land development, and other land loans which represent 100% or more of an institution's total risk-based capital; or (ii) total reported commercial real estate loans, excluding loans secured by owner-occupied commercial real estate, representing 300% or more of the institution's total risk-based capital, where the institution's commercial real estate loan portfolio has increased 50% or more during the prior 36 months, are identified as having potential commercial real estate concentration risk. Institutions which are deemed to have concentrations in commercial real estate lending are expected to employ heightened levels of risk management with respect to their commercial real estate portfolios, and may be required to hold higher levels of capital. We have a concentration in commercial real estate loans, and we have experienced significant growth in our commercial real estate portfolio in recent years. As of December 31, 2018, commercial real estate loans, as defined for regulatory purposes, represented 353.0% of our total risk-based capital. Of those loans, commercial construction, development and land loans represented 88.6% of our total risk based capital. Owner-occupied commercial real estate loans represented an additional 91.0% of our total risk based capital. Management has extensive experience in commercial real estate lending, and has implemented and continues to maintain heightened portfolio monitoring and reporting, and strong underwriting criteria with respect to its commercial real estate portfolio. Nevertheless, we could be required to maintain higher levels of capital as a result of our commercial real estate concentration, which could limit our growth, require us to obtain additional capital, and have a material adverse effect on our business, financial condition and results of operations.

Lack of seasoning of our loan portfolio could increase risk of credit defaults in the future.

        As a result of our organic growth over the past several years, as of December 31, 2018, approximately $797.3 million, or 70.1%, of the loans in our loan portfolio were first originated during the past three years. The average age by loan type for loans originated in the past three years is: commercial real estate loans—1.94 years; commercial and industrial loans—1.75 years; commercial construction loans—1.00 years; consumer residential loans—2.44 years; and consumer nonresidential loans—1.18 years. In general, loans do not begin to show signs of credit deterioration or default until they have been outstanding for some period of time, a process referred to as "seasoning." As a result, a portfolio of older loans will usually behave more predictably than a newer portfolio. Therefore, the recent and current level of delinquencies and defaults may not represent the level that may prevail as the portfolio becomes more seasoned and may not serve as a reliable basis for predicting the health and nature of our loan portfolio, including net charge-offs and the ratio of nonperforming assets in the future. Our limited experience with these loans may not provide us with a significant history with which to judge future collectability or performance. However, we believe that our stringent credit underwriting process, our ongoing credit review processes, and our history of successful management of our loan portfolio, mitigate these risks. Nevertheless, if delinquencies and defaults increase, we may be required to increase our provision for loan losses, which could have a material adverse effect on our business, financial condition and results of operations.

Limits on our ability to use brokered deposits as part of our funding strategy may adversely affect our ability to grow.

        A "brokered deposit" is any deposit that is obtained from, or through the mediation or assistance of, a deposit broker. These deposit brokers attract deposits from individuals and companies throughout the country and internationally whose deposit decisions are based almost exclusively on obtaining the highest interest rates. Recently enacted legislation excludes reciprocal deposits of up to the lesser of

29

Table of Contents

$5 billion or 20% of an institution's deposits from the definition of brokered deposits, where the institution is well capitalized and has a composite supervisory rating of 1 or 2. We have used brokered deposits in the past, and we intend to continue to use brokered deposits as one of our funding sources to support future growth. We have established a brokered deposit to total deposit tolerance ratio of 15%. As of December 31, 2018, brokered deposits, excluding reciprocal deposits, represented approximately 7.3% of our total deposits. Reciprocal deposits represented an additional 7.6% of total deposits at December 31, 2018. Currently, our brokered deposits have a comparable deposit cost to our core deposits. There are risks associated with using brokered deposits. In order to continue to maintain our level of brokered deposits, we may be forced to pay higher interest rates than those contemplated by our asset-liability pricing strategy which could have an adverse effect on our net interest margin. In addition, banks that become less than "well capitalized" under applicable regulatory capital requirements may be restricted in their ability to accept or renew, or prohibited from accepting or renewing, brokered deposits. If this funding source becomes more difficult to access, we will have to seek alternative funding sources in order to continue to fund our growth. This may include increasing our reliance on FHLB borrowing, attempting to attract additional non-brokered deposits, and selling loans. There can be no assurance that brokered deposits will be available, or if available, sufficient to support our continued growth. The unavailability of a sufficient volume of brokered deposits could have a material adverse effect on our business, financial condition and results of operations.

We may face risks with respect to future expansion or acquisition activity.

        We selectively seek to expand our banking operations through limited de novo branching or opportunistic acquisition activities. We cannot be certain that any expansion activity, through de novo branching, acquisition of branches of another financial institution or a whole institution, or the establishment or acquisition of nonbanking financial service companies, will prove profitable or will increase shareholder value. The success of any acquisition will depend, in part, on our ability to realize the estimated cost savings and revenue enhancements from combining our business and that of the target company. Our ability to realize increases in revenue will depend, in part, on our ability to retain customers and employees, and to capitalize on existing relationships for the provision of additional products and services. If our estimates turn out to be incorrect or we are not able to successfully combine companies, the anticipated cost savings and increased revenues may not be realized fully or at all, or may take longer to realize than expected. It is possible that the integration process could result in the loss of key employees, the disruption of each company's ongoing business, diversion of management attention, or inconsistencies in standards, controls, procedures and policies that adversely affect our ability to maintain relationships with clients and employees or to achieve the anticipated benefits of the merger. As with any combination of banking institutions, there also may be disruptions that cause us to lose customers or cause customers to withdraw their deposits. Customers may not readily accept changes to their banking arrangements that we make as part of or following an acquisition. Additionally, the value of an acquisition to us is dependent on our ability to successfully identify and estimate the magnitude of any asset quality issues of acquired companies.

        We may not be successful in overcoming these risks or other problems encountered in connection with potential acquisitions or other expansion activity. Our inability to overcome these risks could have an adverse effect on our ability to implement our business strategy and enhance shareholder value, which, in turn, could have a material adverse effect on our business, financial condition or results of operations.

        Additionally, at December 31, 2018, we had $6.5 million of goodwill related to our October 2018 acquisition of Colombo. Goodwill and other intangible assets are required to be tested for impairment on an annual basis or when facts and circumstances indicate that impairment may have occurred. Our financial condition and results of operation may be adversely affected if that goodwill is determined to be impaired, which would require us to take an impairment charge.

30

Table of Contents

We have extended off-balance sheet commitments to borrowers which expose us to credit and interest rate risk.

        We enter into off-balance sheet arrangements in the normal course of business to meet the financing needs of our customers. These off-balance sheet arrangements include commitments to extend credit, standby letters of credit and guarantees which would impact our liquidity and capital resources to the extent customers accept or use these commitments. These instruments involve, to varying degrees, elements of credit and interest rate risk in excess of the amount recognized in the balance sheet. Our exposure to credit loss in the event of nonperformance by the other party to the financial instrument for commitments to extend credit and standby letters of credit and guarantees written is represent by the contractual or notional amount of those instruments. We use the same credit policies in making commitments and conditional obligations as we do for on-balance sheet instruments.

New lines of business, products, product enhancements or services may subject us to additional risk.

        From time to time, we may implement new lines of business or offer new products and product enhancements as well as new services within our existing lines of business. There are substantial risks and uncertainties associated with these efforts. In developing, implementing or marketing new lines of business, products, product enhancements or services, we may invest significant time and resources. We may underestimate the appropriate level of resources or expertise necessary to make new lines of business or products successful or to realize their expected benefits. We may not achieve the milestones set in initial timetables for the development and introduction of new lines of business, products, product enhancements or services, and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also impact the ultimate implementation of a new line of business or offerings of new products, product enhancements or services. Any new line of business, product, product enhancement or service could have a significant impact on the effectiveness of our system of internal controls. We may also decide to discontinue businesses or products, due to lack of customer acceptance or unprofitability. Failure to successfully manage these risks in the development and implementation of new lines of business or offerings of new products, product enhancements or services could have a material adverse effect on our business, financial condition and results of operations.

We depend on the accuracy and completeness of information provided by customers and counterparties.

        In deciding whether to extend credit or enter into other transactions with customers and counterparties, we may rely on information furnished by or on behalf of customers and counterparties, including financial information. We may also rely on representations of customers and counterparties as to the accuracy and completeness of that information. In deciding whether to extend credit, we may rely upon customers' representations that their financial statements conform to generally accepted accounting principles in the United States of America, or GAAP, and present fairly, in all material respects, the financial condition, results of operations and cash flows of the customer. We also may rely on customer representations and certifications, or audit or accountants' reports, with respect to the business and financial condition of our customers. Our financial condition, results of operations, financial reporting and reputation could be negatively affected if we rely on materially misleading, false, inaccurate or fraudulent information.

We depend on information technology and telecommunications systems of third parties, and any systems failures or interruptions could adversely affect our operations and financial condition.

        Our business depends on the successful and uninterrupted functioning of our information technology and telecommunications systems. We outsource many of our major systems, such as data processing, deposit processing, loan origination, email and anti-money laundering monitoring systems. Of particular significance is our long-term contract for core data processing services with Fidelity National Information Services, Inc. The failure of these systems, or the termination of a third party

31

Table of Contents

software license or service agreement on which any of these systems is based, could interrupt our operations, and we could experience difficulty in implementing replacement solutions. In many cases, our operations rely heavily on secured processing, storage and transmission of information and the monitoring of a large number of transactions on a minute-by-minute basis, and even a short interruption in service could have significant consequences. Because our information technology and telecommunications systems interface with and depend on third party systems, we could experience service denials if demand for such services exceeds capacity or such third party systems fail or experience interruptions. If significant, sustained or repeated, a system failure or service denial could compromise our ability to operate effectively, damage our reputation, result in a loss of customer business and subject us to additional regulatory scrutiny and possible financial liability, any of which could have a material adverse effect on our business, financial condition and results of operations. In addition, failure of third parties to comply with applicable laws and regulations, or fraud or misconduct on the part of employees of any of these third parties, could disrupt our operations or adversely affect our reputation.

We are subject to cybersecurity risks and security breaches and may incur increasing costs in an effort to minimize those risks and to respond to cyber incidents, and we may experience harm to our reputation and liability exposure from security breaches.

        Our business involves the storage and transmission of customers' proprietary information and security breaches could expose us to a risk of loss or misuse of this information, litigation and potential liability. While we have incurred no material cyber-attacks or security breaches to date, a number of other financial services and other companies have disclosed cyber-attacks and security breaches, some of which have involved intentional attacks. Attacks may be targeted at us, our customers or both. Although we devote significant resources to maintain, regularly update and backup our systems and processes that are designed to protect the security of our computer systems, software, networks and other technology assets and the confidentiality, integrity and availability of information belonging to us or our customers, our security measures may not be effective against all potential cyber-attacks or security breaches. Despite our efforts to ensure the integrity of our systems, it is possible that we may not be able to anticipate, or implement effective preventive measures against, all security breaches of these types, especially because the techniques used change frequently or are not recognized until launched, and because cyber-attacks can originate from a wide variety of sources, including persons who are involved with organized crime or associated with external service providers or who may be linked to terrorist organizations or hostile foreign governments. These risks may increase in the future as we continue to increase our internet-based product offerings and expand our internal usage of web-based products and applications. If an actual or perceived security breach occurs, customer perception of the effectiveness of our security measures could be harmed and could result in the loss of customers.

        A successful penetration or circumvention of the security of our systems, including those of third party providers or other financial institutions, or the failure to meet regulatory requirements for security of our systems, could cause serious negative consequences, including significant disruption of our operations, misappropriation of our confidential information or that of our customers, or damage to our computers or systems or those of our customers or counterparties, significant increases in compliance costs (such as repairing systems or adding new personnel or protection technologies), and could result in violations of applicable privacy and other laws, financial loss to us or to our customers, loss of confidence in our security measures, customer dissatisfaction, significant litigation and regulatory exposure, and harm to our reputation, all of which could have a material adverse effect on our business, financial condition and results of operations.

32

Table of Contents

Failure to keep up with the rapid technological changes in the financial services industry could have a material adverse effect on our competitive position and profitability.

        The financial services industry is undergoing rapid technological changes, with frequent introductions of new technology-driven products and services. The effective use of technology increases efficiency and enables financial institutions to better serve customers and reduce costs. Our future success will depend, in part, upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands for convenience, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements than we have. We may not be able to implement new technology-driven products and services effectively or be successful in marketing these products and services to our customers. Failure to successfully keep pace with technological change affecting the financial services industry could harm our ability to compete effectively and could have a material adverse effect on our business, financial condition or results of operations. As these technologies are improved in the future, we may be required to make significant capital expenditures in order to remain competitive, which may increase our overall expenses and have a material adverse effect on our business, financial condition and results of operations.

Our risk management framework may not be effective in mitigating risks and/or losses to us.

        Our risk management framework is comprised of various processes, systems and strategies, and is designed to manage the types of risk to which we are subject, including, among others, credit, market, liquidity, interest rate and compliance. Our framework also includes financial or other modeling methodologies that involve management assumptions and judgment. Our risk management framework may not be effective under all circumstances and may not adequately mitigate any risk or loss to us. If our risk management framework is not effective, we could suffer unexpected losses and our business, financial condition, results of operations or growth prospects could be materially and adversely affected. We may also be subject to potentially adverse regulatory consequences.

We may be adversely affected by the soundness of other financial institutions.

        Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services companies are interrelated as a result of trading, clearing, counterparty and other relationships. As a result, defaults by, or even rumors or questions about, one or more financial services companies, or the financial services industry generally, could lead to market-wide liquidity problems and losses or defaults by us or other institutions. These losses could have a material adverse effect on our business, financial condition and results of operations.

If we fail to design and maintain effective internal control over financial reporting, we may be unable to accurately report our financial results or prevent fraud, which could have a material adverse effect on us.

        Our internal control over financial reporting is designed to provide reasonable assurance regarding the reliability of the financial reporting and the preparation of financial statements for external purposes in accordance with GAAP. Effective internal control over financial reporting is necessary for us to provide reliable reports and prevent fraud.

        We believe that a control system, no matter how well designed and managed, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within a company have been detected. We may not be able to identify all significant deficiencies and/or material weaknesses in our internal control system in the future, and our failure to maintain effective internal control over financial reporting in accordance

33

Table of Contents

with Section 404 of the Sarbanes-Oxley Act and FDIC regulations could have a material adverse effect on our business, financial condition and results of operations.

We are dependent on the use of data and modeling in both our management's decision-making generally and in meeting regulatory expectations in particular.

        The use of statistical and quantitative models and other quantitatively-based analyses is endemic to bank decision-making and regulatory compliance processes, and the employment of such analyses is becoming increasingly widespread in our operations. Liquidity stress testing, interest rate sensitivity analysis, allowance for loan loss measurement, portfolio stress testing and the identification of possible violations of anti-money laundering regulations are examples of areas in which we are dependent on models and the data that underlies them. We anticipate that model-derived insights will be used more widely in our decision-making in the future. While these quantitative techniques and approaches improve our decision-making, they also create the possibility that faulty data or flawed quantitative approaches could yield adverse outcomes or regulatory scrutiny. Secondarily, because of the complexity inherent in these approaches, misunderstanding or misuse of their outputs could similarly result in suboptimal decision making, which could have a material adverse effect on our business, financial condition and results of operations.

We may need to raise additional capital in the future, and we may not be able to do so.

        Access to sufficient capital is critical in order to enable us to implement our business plan, support our business, expand our operations and meet applicable capital requirements. The inability to have sufficient capital, whether internally generated through earnings or raised in the capital markets, could adversely impact our ability to support and to grow our operations. If we grow our operations faster than we generate capital internally, we will need to access the capital markets. We may not be able to raise additional capital in the form of additional debt or equity on acceptable terms, or at all. Our ability to raise additional capital, if needed, will depend on, among other things, conditions in the capital markets at that time, our financial condition and our results of operations. Economic conditions and a loss of confidence in financial institutions may increase our cost of capital and limit access to some sources of capital. Further, if we need to raise capital in the future, we may have to do so when many other financial institutions are also seeking to raise capital and would then have to compete with those institutions for investors. An inability to raise additional capital on acceptable terms when needed could have a material adverse impact on our business, financial condition and results of operations.

We could be subject to environmental risks and associated costs on our foreclosed real estate assets.

        A substantial portion of our loan portfolio is secured by real property. During the ordinary course of business, we may foreclose on and take title to properties securing loans. There is a risk that hazardous or toxic substances could be found on these properties and that we could be liable for remediation costs, as well as personal injury and property damage. Environmental laws may require us to incur substantial expenses and may materially reduce the affected property's value or limit our ability to sell the affected property. The remediation costs and any other financial liabilities associated with an environmental hazard could have a material adverse effect on our business, financial condition and results of operations.

Litigation and regulatory actions, including possible enforcement actions, could subject us to significant fines, penalties, judgments or other requirements resulting in increased expenses or restrictions on our business activities.

        In the normal course of business, from time to time, we may be named as a defendant in various legal actions, arising in connection with our current and/or prior business activities. Legal actions could include claims for substantial compensatory or punitive damages or claims for indeterminate amounts

34

Table of Contents

of damages. Further, we may in the future be subject to consent orders or other formal or informal enforcement agreements with our regulators. We may also, from time to time, be the subject of subpoenas, requests for information, reviews, investigations and proceedings (both formal and informal) by governmental agencies regarding our current and/or prior business activities. Any such legal or regulatory actions may subject us to substantial compensatory or punitive damages, significant fines, penalties, obligations to change our business practices or other requirements resulting in increased expenses, diminished income and damage to our reputation. Our involvement in any such matters, whether tangential or otherwise, and even if the matters are ultimately determined in our favor, could also cause significant harm to our reputation and divert management attention from the operation of our business. Further, any settlement, consent order, other enforcement agreement or adverse judgment in connection with any formal or informal proceeding or investigation by government agencies may result in litigation, investigations or proceedings as other litigants and government agencies begin independent reviews of the same activities. As a result, the outcome of legal and regulatory actions could have a material adverse effect on our business, financial condition and results of operations.

The appraisals and other valuation techniques we use in evaluating and monitoring loans secured by real property and other real estate owned may not accurately reflect the net value of the asset.

        In considering whether to make a loan secured by real property, we generally require an appraisal of the property. However, an appraisal is only an estimate of the value of the property at the time the appraisal is made, and, as real estate values may change significantly in value in relatively short periods of time (especially in periods of heightened economic uncertainty), this estimate may not accurately reflect the net value of the collateral after the loan is made. As a result, we may not be able to realize the full amount of any remaining indebtedness when we foreclose on and sell the relevant property. In addition, we rely on appraisals and other valuation techniques to establish the value of OREO, that we acquire through foreclosure proceedings and to determine loan impairments. If any of these valuations are inaccurate, our financial statements may not reflect the correct value of our OREO, if any, and our allowance for loan losses may not reflect accurate loan impairments. Inaccurate valuation of OREO or inaccurate provisioning for loan losses could have a material adverse effect on our business, financial condition and results of operations.

We are subject to an extensive body of accounting rules and best practices. Periodic changes to such rules may change the treatment and recognition of critical financial line items and affect our profitability.

        The nature of our business makes us sensitive to the large body of accounting rules in the U.S. From time to time, the governing bodies that oversee changes to accounting rules and reporting requirements may release new guidance for the preparation of our financial statements. These changes can materially impact how we record and report our financial condition and results of operations. In some instances, we could be required to apply a new or revised standard retroactively, resulting in the restatement of prior period financial statements. Changes which have been approved for future implementation, or which are currently proposed or expected to be proposed or adopted include requirements that we: (i) calculate the allowance for loan losses on the basis of the current expected credit losses over the lifetime of our loans, referred to as the CECL model, which is expected to be applicable to us beginning in 2020; and (ii) record the value of and liabilities relating to operating leases on our balance sheet, which is applicable beginning in 2019 and resulted in the Company recording a right of use asset of approximately $12.5 million and base liability of approximately $12.8 million. These changes could adversely affect our capital, regulatory capital ratios, ability to make larger loans, earnings and performance metrics. Any such changes could have a material adverse effect on our business, financial condition and results of operations.

        Under the CECL model, banks will be required to present certain financial assets carried at amortized cost, such as loans held for investment and held-to-maturity debt securities, at the net

35

Table of Contents

amount expected to be collected. The measurement of expected credit losses is to be based on information about past events, including historical experience, current conditions, and reasonable and supportable forecasts that affect the collectability of the reported amount. This measurement will take place at the time the financial asset is first added to the balance sheet and periodically thereafter. This differs significantly from the "incurred loss" model required under current GAAP, which delays recognition until it is probable a loss has been incurred. Accordingly, we expect that the adoption of the CECL model will materially affect how we determine our allowance for loan losses, and could require us to significantly increase our allowance. Moreover, the CECL model may create more volatility in the level of the allowance for loan losses. If we are required to materially increase the level of the allowance for loan losses for any reason, such increase could adversely affect our business, financial condition and results of operations. We are evaluating the impact the CECL accounting model will have on our accounting, but expect to recognize a one-time cumulative-effect adjustment to the allowance for loan losses as of the beginning of the first reporting period in which the new standard is effective. We cannot yet determine the magnitude of any such one-time cumulative adjustment or of the overall impact of the new standard on our financial condition or results of operations.

The fair value of our investment securities can fluctuate due to factors outside of our control.

        As of December 31, 2018, the fair value of our investment securities portfolio was approximately $125.3 million. Factors beyond our control can significantly influence the fair value of securities in our portfolio and can cause potential adverse changes to the fair value of these securities. These factors include, but are not limited to, rating agency actions in respect of the securities, defaults by the issuer or with respect to the underlying securities, and changes in market interest rates and instability in the capital markets. Any of these factors, among others, could cause other-than-temporary impairments, or OTTI, and realized and/or unrealized losses in future periods and declines in other comprehensive income, which could materially and adversely affect our business, financial condition or results of operations. The process for determining whether impairment of a security is OTTI usually requires complex, subjective judgments about the future financial performance and liquidity of the issuer, any collateral underlying the security and our intent and ability to hold the security for a sufficient period of time to allow for any anticipated recovery in fair value, in order to assess the probability of receiving all contractual principal and interest payments on the security. Our failure to correctly and timely assess any impairments or losses with respect to our securities could have a material adverse effect on our business, financial condition or results of operations.

We have no current plans to pay cash dividends.

        Holders of our common stock are entitled to receive only such dividends as our board of directors may declare out of funds legally available for such payments. The Bank is our primary operating business and the source of substantially all of our earnings, and our ability to pay dividends will be subject to the earnings, capital levels, capital needs and limitations relating to the payment of dividends by the Bank to us. The amount of dividends that a bank may pay is limited by state and federal laws and regulations. While we have sufficient retained earnings and expect our future earnings to be sufficient to pay cash dividends, our board of directors currently intends to retain earnings for the purpose of financing growth. In addition, we are a bank holding company, and our ability to declare and pay dividends to our shareholders is dependent on federal regulatory considerations, including the guidelines of the Federal Reserve regarding capital adequacy and dividends. It is the policy of the Federal Reserve that bank holding companies should generally pay dividends on common stock only out of earnings, and only if prospective earnings retention is consistent with the organization's expected future needs, asset quality and financial condition.

36

Table of Contents

Risks Related to Our Industry

Our industry is highly regulated, and the regulatory framework, together with any future legislative or regulatory changes, may have a materially adverse effect on our operations.

        The banking industry is highly regulated and supervised under both federal and state laws and regulations that are intended primarily for the protection of depositors, customers, the public, the banking system as a whole or the FDIC Deposit Insurance Fund, not for the protection of our shareholders and creditors. We are subject to regulation and supervision by the Federal Reserve, and our Bank is subject to regulation and supervision by the Federal Reserve and the VBFI. Compliance with these laws and regulations can be difficult and costly, and changes to laws and regulations can impose additional compliance costs. The Dodd-Frank Wall Street Reform and Consumer Protection Act, or Dodd-Frank Act, which imposes significant regulatory and compliance changes on financial institutions, is an example of this type of federal regulation. The laws and regulations applicable to us govern a variety of matters, including permissible types, amounts and terms of loans and investments we may make, the maximum interest rate that may be charged, the amount of reserves we must hold against deposits we take, the types of deposits we may accept and the rates we may pay on such deposits, maintenance of adequate capital and liquidity, changes in control of us and our Bank, transactions between us and our Bank, handling of nonpublic information, restrictions on dividends and establishment of new offices. We must obtain approval from our regulators before engaging in certain activities, and there is risk that such approvals may not be granted, either in a timely manner or at all. These requirements may constrain our operations, and the adoption of new laws and changes to or repeal of existing laws may have a further impact on our business, financial condition and results of operations. Also, the burden imposed by those federal and state regulations may place banks in general, including our Bank in particular, at a competitive disadvantage compared to their non-bank competitors. Our failure to comply with any applicable laws or regulations, or regulatory policies and interpretations of such laws and regulations, could result in sanctions by regulatory agencies, civil money penalties or damage to our reputation, all of which could have a material adverse effect on our business, financial condition and results of operations.

        Bank holding companies and financial institutions are extensively regulated and currently face an uncertain regulatory environment. Applicable laws, regulations, interpretations, enforcement policies and accounting principles have been subject to significant changes in recent years, and may be subject to significant future changes. Future changes may have a material adverse effect on our business, financial condition and results of operations.

        Federal and state regulatory agencies may adopt changes to their regulations or change the manner in which existing regulations are applied. We cannot predict the substance or effect of pending or future legislation or regulation or the application of laws and regulations to us. Compliance with current and potential regulation, as well as regulatory scrutiny, may significantly increase our costs, impede the efficiency of our internal business processes, require us to increase our regulatory capital, and limit our ability to pursue business opportunities in an efficient manner by requiring us to expend significant time, effort and resources to ensure compliance and respond to any regulatory inquiries or investigations.

        In addition, regulators may elect to alter standards or the interpretation of the standards used to measure regulatory compliance or to determine the adequacy of liquidity, risk management or other operational practices for financial service companies in a manner that impacts our ability to implement our strategy and could affect us in substantial and unpredictable ways, and could have a material adverse effect on our business, financial condition and results of operations. Furthermore, the regulatory agencies have extremely broad discretion in their interpretation of laws and regulations and their assessment of the quality of our loan portfolio, securities portfolio and other assets. If any regulatory agency's assessment of the quality of our assets, operations, lending practices, investment

37

Table of Contents

practices, capital structure or other aspects of our business differs from our assessment, we may be required to take additional charges or undertake, or refrain from taking, actions that could have a material adverse effect on our business, financial condition and results of operations.

Federal and state regulators periodically examine our business and may require us to remediate adverse examination findings or may take enforcement action against us.

        The Federal Reserve and the VBFI periodically examine our business, including our compliance with laws and regulations. If, as a result of an examination, the Federal Reserve or the VBFI were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, they may take a number of different remedial actions as they deem appropriate. These actions include the power to require us to remediate any such adverse examination findings.

        In addition, these agencies have the power to take enforcement action against us to enjoin "unsafe or unsound" practices, to require affirmative action to correct any conditions resulting from any violation of law or regulation or unsafe or unsound practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to direct the sale of subsidiaries or other assets, to limit dividends and distributions, to restrict our growth, to assess civil money penalties against us or our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is imminent risk of loss to depositors, to terminate our deposit insurance and place our Bank into receivership or conservatorship. Any regulatory enforcement action against us could have a material adverse effect on our business, financial condition and results of operations.

We may be required to act as a source of financial and managerial strength for our Bank in times of stress.

        Under federal law and long-standing Federal Reserve policy, we, as a bank holding company, are required to act as a source of financial and managerial strength to our Bank and to commit resources to support our Bank if necessary. We may be required to commit additional resources to our Bank at times when we may not be in a financial position to provide such resources or when it may not be in our, or our shareholders' or creditors', best interests to do so. A requirement to provide such support is more likely during times of financial stress for us and our Bank, which may make any capital we are required to raise to provide such support more expensive than it might otherwise be. In addition, any capital loans we make to our Bank are subordinate in right of repayment to deposit liabilities of our Bank.

Regulatory initiatives regarding bank capital requirements may require heightened capital.

        Regulatory capital rules, which implement the Basel III regulatory capital reforms from the Basel Committee on Banking Supervision, include a common equity Tier 1 capital requirement and establish criteria that instruments must meet to be considered common equity Tier 1 capital, additional Tier 1 capital or Tier 2 capital. These enhancements were intended to both improve the quality and increase the quantity of capital required to be held by banking organizations, and to better equip the U.S. banking system to deal with adverse economic conditions. The capital rules require bank holding companies and banks to maintain a common equity Tier 1 capital ratio of 4.5%, a minimum total Tier 1 risk based capital ratio of 6%, a minimum total risk based capital ratio of 8%, and a minimum leverage ratio of 4%. Bank holding companies and banks are also required to hold a capital conservation buffer of common equity Tier 1 capital of 2.5% (when fully phased in) to avoid limitations on capital distributions and discretionary executive compensation payments. At December 31, 2018, the capital conservation buffer was 1.825%. The revised capital rules also require banks to maintain a common equity Tier 1 capital ratio of 6.5% or greater, a Tier 1 capital ratio of 8% or greater, a total

38

Table of Contents

capital ratio of 10% or greater and a leverage ratio of 5% or greater to be deemed "well capitalized" for purposes of certain rules and prompt corrective action requirements.

        The Federal Reserve may also set higher capital requirements for holding companies whose circumstances warrant it. For example, holding companies experiencing significant internal growth or making acquisitions are expected to maintain strong capital positions substantially above the minimum supervisory levels, without significant reliance on intangible assets. Our regulatory capital ratios currently are in excess of the levels established for "well capitalized" institutions. Future regulatory change could impose higher capital standards.

        Recently enacted legislation directs the federal bank regulatory agencies to develop a "Community Bank Leverage Ratio," calculated by dividing tangible equity capital by average consolidated total assets, of not less than 8% and not more than 10%. If a "qualified community bank," generally a depository institution or depository institution holding company with consolidated assets of less than $10 billion, has a leverage ratio which exceeds the Community Bank Leverage Ratio, then such bank will be considered to have met all generally applicable leverage and risk based capital requirements; the capital ratio requirements for "well capitalized" status under Section 38 of the FDIA, and any other leverage or capital requirements to which it is subject. If we qualify for this simplified capital regime, there can be no assurance that satisfaction of the Community Bank Leverage Ratio will provide adequate capital for our operations and growth, or an adequate cushion against increase levels of nonperforming assets or weakened economic conditions.

        Any new or revised standards adopted in the future may require us to maintain materially more capital, with common equity as a more predominant component, or manage the configuration of our assets and liabilities to comply with formulaic liquidity requirements. We may not be able to raise additional capital at all, or on terms acceptable to us. Failure to maintain capital to meet current or future regulatory requirements could have a significant material adverse effect on our business, financial condition and results of operations.

We face a risk of noncompliance and enforcement action with the Bank Secrecy Act and other anti-money laundering statutes and regulations.

        The Bank Secrecy Act of 1970, the USA Patriot Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and to file reports such as suspicious activity reports and currency transaction reports. We are required to comply with these and other anti-money laundering requirements. Our federal and state banking regulators, the Financial Crimes Enforcement Network, or FinCEN, and other government agencies are authorized to impose significant civil money penalties for violations of anti-money laundering requirements. We are also subject to increased scrutiny of compliance with the regulations issued and enforced by the Office of Foreign Assets Control, or OFAC. If our program is deemed deficient, we could be subject to liability, including fines, civil money penalties and other regulatory actions, which may include restrictions on our business operations and our ability to pay dividends, restrictions on mergers and acquisitions activity, restrictions on expansion, and restrictions on entering new business lines. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have significant reputational consequences for us. Any of these circumstances could have a material adverse effect on our business, financial condition or results of operations.

We are subject to numerous "fair and responsible banking" laws designed to protect consumers, and failure to comply with these laws could lead to a wide variety of sanctions.

        The Community Reinvestment Act, the Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations, including state laws and regulations, prohibit discriminatory

39

Table of Contents

lending practices by financial institutions. The Federal Trade Commission Act and the Dodd-Frank Act prohibit unfair, deceptive, or abusive acts or practices by financial institutions. The U.S. Department of Justice, or DOJ, federal banking agencies, and other federal and state agencies are responsible for enforcing these fair and responsible banking laws and regulations. A challenge to an institution's compliance with fair and responsible banking laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions activity, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution's performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our reputation, business, financial condition and results of operations.

We are subject to laws regarding the privacy, information security and protection of personal information and any violation of these laws or another incident involving personal, confidential or proprietary information of individuals could damage our reputation and otherwise adversely affect our business.

        Our business requires the collection and retention of large volumes of customer data, including personally identifiable information, or PII, in various information systems that we maintain and in those maintained by third party service providers. We also maintain important internal company data such as PII about our employees and information relating to our operations. We are subject to complex and evolving laws and regulations governing the privacy and protection of PII of individuals (including customers, employees and other third parties). For example, our business is subject to the GLB Act, which, among other things: (i) imposes certain limitations on our ability to share nonpublic PII about our customers with nonaffiliated third parties; (ii) requires that we provide certain disclosures to customers about our information collection, sharing and security practices and afford customers the right to "opt out" of any information sharing by us with nonaffiliated third parties (with certain exceptions); and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing appropriate safeguards based on our size and complexity, the nature and scope of our activities, and the sensitivity of customer information we process, as well as plans for responding to data security breaches. Various federal and state banking regulators and states have also enacted data breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in the event of a security breach. Ensuring that our collection, use, transfer and storage of PII complies with all applicable laws and regulations can increase our costs. Furthermore, we may not be able to ensure that customers and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused (in situations where, for example, such information was erroneously provided to parties who are not permitted to have the information, or where such information was intercepted or otherwise compromised by third parties), we could be exposed to litigation or regulatory sanctions under privacy and data protection laws and regulations. Concerns regarding the effectiveness of our measures to safeguard PII, or even the perception that such measures are inadequate, could cause us to lose customers or potential customers and thereby reduce our revenues. Accordingly, any failure, or perceived failure, to comply with applicable privacy or data protection laws and regulations may subject us to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in significant liabilities, fines or penalties, and could damage our reputation and otherwise adversely affect our operations, financial condition and results of operations.

Our use of third party vendors and our other ongoing third party business relationships are subject to increasing regulatory requirements and attention.

        We regularly use third party vendors in our business and we rely on some of these vendors for critical functions including, but not limited to, our core processing function. Third party relationships

40

Table of Contents

are subject to increasingly demanding regulatory requirements and attention by bank regulators. We expect our regulators to hold us responsible for deficiencies in our oversight or control of our third party vendor relationships and in the performance of the parties with which we have these relationships. As a result, if our regulators conclude that we have not exercised adequate oversight and control over our third party vendors or that such vendors have not performed adequately, we could be subject to administrative penalties or fines as well as requirements for consumer remediation, any of which could have a material adverse effect on our business, financial condition and results of operations.

Rulemaking changes implemented by the Consumer Financial Protection Bureau will result in higher regulatory and compliance costs that may adversely affect our business.

        The Dodd-Frank Act created a new, independent federal agency, the CFPB, which was granted broad rulemaking, supervisory and enforcement powers under various federal consumer financial protection laws. The consumer protection provisions of the Dodd-Frank Act and the examination, supervision and enforcement of those laws and implementing regulations issued by the CFPB have created a more intense and complex environment for consumer finance regulation. The ultimate impact of this heightened scrutiny is uncertain but could result in changes to pricing, practices, products and procedures. It could also result in increased costs related to regulatory oversight, supervision and examination. These changes could have a material adverse effect on our business, financial condition and results of operations.

Potential limitations on incentive compensation contained in proposed federal agency rulemaking may adversely affect our ability to attract and retain our highest performing employees.

        The Federal Reserve, other federal banking agencies and the SEC have jointly published proposed rules designed to implement provisions of the Dodd-Frank Act prohibiting incentive compensation arrangements that would encourage inappropriate risk taking at covered financial institutions, which includes a bank or bank holding company with $1 billion or more in consolidated assets. It cannot be determined at this time whether or when a final rule will be adopted and whether compliance with such a final rule will substantially affect the manner in which we structure compensation for our executives and other employees. Depending on the nature and application of the final rules, we may not be able to successfully compete with financial institutions and other companies that are not subject to some or all of the rules to retain and attract executives and other high performing employees.

Our Bank's FDIC deposit insurance premiums and assessments may increase.

        Our Bank's deposits are insured by the FDIC up to legal limits and, accordingly, our Bank is subject to insurance assessments based on our Bank's average consolidated total assets less its average tangible equity. Our Bank's regular assessments are determined by its risk classification, which is based on its regulatory capital levels and the level of supervisory concern that it poses. Numerous bank failures during the financial crisis and increases in the statutory deposit insurance limits increased resolution costs to the FDIC and put significant pressure on the Deposit Insurance Fund. In order to maintain a strong funding position and the reserve ratios of the Deposit Insurance Fund required by statute and FDIC estimates of projected requirements, the FDIC has the power to increase deposit insurance assessment rates and impose special assessments on all FDIC-insured financial institutions. Any future increases or special assessments could reduce our profitability and could have a material adverse effect on our business, financial condition and results of operations.

Item 1B.    Unresolved Staff Comments

        None.

41

Table of Contents

Item 2.    Properties

        Our executive offices and the main office of the Bank are located at 11325 Random Hills Road, Fairfax, Virginia, 22030. In addition to our main office, we also maintain 11 additional branch offices in Arlington, Virginia; Ashburn, Loudoun County, Virginia; the independent city of Manassas, Virginia; Reston, Fairfax County, Virginia; and Springfield, Fairfax County, Virginia; Montgomery County and Baltimore, Maryland. We also maintain an operations center in Manassas. We lease all but one of our office properties. We own our branch located in Baltimore, Maryland. We also lease a loan production office in Lutherville, Maryland.

        We are committed to being highly selective in our branching decisions, and we intend to continue to explore opportunities for establishing additional strategically located branches in the Washington and Baltimore MSAs based primarily on commercial deposit and loan potential and demographic support. We typically establish branches as necessary to provide support for established business development people and lenders with substantial books of business and customer relationships.

Item 3.    Legal Proceedings

        In the ordinary course of our operations, we become party to various legal proceedings. Currently, we are not party to any material legal proceedings, and no such proceedings are, to management's knowledge, threatened against us.

Item 4.    Mine Safety Disclosures

        None.

42

Table of Contents

PART II

Item 5.    Market for Registrant's Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

        Market Price for Common Stock and Dividends.    Our common stock is currently quoted on the Nasdaq Capital Market under the symbol "FVCB." As of March 22, 2019, there were 564 holders of record of our common stock.

Dividends

        To date, we have not paid, and we do not currently pay, a cash dividend on our common stock. Holders of our common stock are only entitled to receive dividends when, as and if declared by our board of directors out of funds legally available for dividends. As we are a bank holding company and do not engage directly in business activities of a material nature, our ability to pay dividends on our common stock depends, in large part, upon our receipt of dividends from our Bank. Any future determination relating to our dividend policy will be made by our board of directors and will depend on a number of factors, including general and economic conditions, industry standards, our financial condition and operating results, our available cash and current and anticipated cash needs, capital requirements, our ability to service debt obligations senior to our common stock, banking regulations, contractual, legal, tax and regulatory restrictions, and limitations on the payment of dividends by us to our shareholders or by the Bank to us, and such other factors as our board of directors may deem relevant.

        Regulations of the Federal Reserve and Virginia law place limits on the amount of dividends the Bank may pay to the Company without prior approval. Prior regulatory approval is required to pay dividends which exceed the Bank's net profits for the current year plus its retained net profits for the preceding two calendar years, less required transfers to surplus. Under Virginia law, dividends may only be paid out of retained earnings. State and federal bank regulatory agencies also have authority to prohibit a bank from paying dividends if such payment is deemed to be an unsafe or unsound practice, and the Federal Reserve has the same authority over bank holding companies. Under Virginia law, the Company generally may not pay dividends or distributions to holders of common stock if it would be unable to pay its debts as they become due in the ordinary course of business or if its total assets would be less than the sum of its total liabilities plus the amount of the liquidation preference of any class of shares with superior rights than the common stock.

        The Federal Reserve has established requirements with respect to the maintenance of appropriate levels of capital by registered bank holding companies. Compliance with such standards, as presently in effect, or as they may be amended from time to time, could possibly limit the amount of dividends that the Company may pay in the future. The Federal Reserve has issued guidance on the payment of cash dividends by bank holding companies. In the statement, the Federal Reserve expressed its view that a holding company experiencing earnings weaknesses should not pay cash dividends exceeding its net income, or which could only be funded in ways that weaken the holding company's financial health, such as by borrowing. Under Federal Reserve guidance, as a general matter, the board of directors of a holding company should inform the Federal Reserve and should eliminate, defer, or significantly reduce the dividends if: (i) the holding company's net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends; (ii) the holding company's prospective rate of earnings retention is not consistent with the capital needs and overall current and prospective financial condition; or (iii) the holding company will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. As a depository institution, the deposits of which are insured by the FDIC, the Bank may not pay dividends or distribute any of its capital assets while it remains in default on any assessment due the FDIC. The Bank currently is not in default under any of its obligations to the FDIC.

43

Table of Contents

Item 6.    Selected Financial Data

Selected Financial Data
(Dollars and shares in thousands, except per share data)

44

Table of Contents

Item 7.    Management's Discussion and Analysis of Financial Condition and Results of Operations

        The following presents management's discussion and analysis of our consolidated financial condition at December 31, 2018 and 2017 and the results of our operations for the years ended December 31, 2018 and 2017. This discussion should be read in conjunction with our consolidated financial statements and the notes thereto appearing elsewhere in this report.

        In addition to historical information, this discussion contains forward-looking statements that involve risks, uncertainties and assumptions that could cause results to differ materially from management's expectations. In this discussion, all references to per share data of FVCB for periods ending on or before December 31, 2017 have been adjusted to reflect a 5 for 4 stock split in the form of a 25% stock dividend paid on September 25, 2017.

Cautionary Note About Forward-Looking Statements

        We make certain forward-looking statements in this Form 10-K that are subject to risks and uncertainties. These forward-looking statements represent plans, estimates, objectives, goals, guidelines, expectations, intentions, projections and statements of our beliefs concerning future events, business plans, objectives, expected operating results and the assumptions upon which those statements are based. Forward-looking statements include without limitation, any statement that may predict, forecast, indicate or imply future results, performance or achievements, and are typically identified with words such as "may," "could," "should," "will," "would," "believe," "anticipate," "estimate," "expect," "aim," "intend," "plan," or words or phases of similar meaning. We caution that the forward-looking statements are based largely on our expectations and are subject to a number of known and unknown risks and uncertainties that are subject to change based on factors which are, in many instances, beyond our control. Actual results, performance or achievements could differ materially from those contemplated, expressed or implied by the forward-looking statements.

        The following factors, among others, could cause our financial performance to differ materially from that expressed in such forward-looking statements:

•

the strength of the United States economy in general and the strength of the local economies in which we conduct operations;



•

geopolitical conditions, including acts or threats of terrorism, or actions taken by the United States or other governments in response to acts or threats of terrorism and/or military conflicts, which could impact business and economic conditions in the United States and abroad;



•

the occurrence of significant natural disasters;



•

our management of risks inherent in our real estate loan portfolio, and the risk of a prolonged downturn in the real estate market, which could impair the value of our collateral and our ability to sell collateral upon any foreclosure;



•

changes in consumer spending and savings habits;



•

technological and social media changes;



•

the effects of, and changes in, trade, monetary and fiscal policies and laws, including interest rate policies of the Federal Reserve, inflation, interest rate, market and monetary fluctuations;



•

changing bank regulatory conditions, policies or programs, whether arising as new legislation or regulatory initiatives, that could lead to restrictions on activities of banks generally, or our subsidiary bank in particular, more restrictive regulatory capital requirements, increased costs, including deposit insurance premiums, regulation or prohibition of certain income producing activities or changes in the secondary market for loans and other products;

45

Table of Contents

•

the impact of changes in financial services policies, laws and regulations, including laws, regulations and policies concerning taxes, banking, securities and insurance, and the application thereof by regulatory bodies;



•

the impact of changes in laws, regulations and policies affecting the real estate industry;



•

the effect of changes in accounting policies and practices, as may be adopted from time to time by bank regulatory agencies, the SEC, the Public Company Accounting Oversight Board, or PCAOB, the Financial Accounting Standards Board or other accounting standards setting bodies;



•

the timely development of competitive new products and services and the acceptance of these products and services by new and existing customers;



•

the willingness of users to substitute competitors' products and services for our products and services;



•

the effect of acquisitions we may make, including, without limitation, the failure to achieve the expected revenue growth and/or expense savings from such acquisitions;



•

changes in the level of our nonperforming assets and charge-offs;



•

our involvement, from time to time, in legal proceedings and examination and remedial actions by regulators;



•

potential exposure to fraud, negligence, computer theft and cyber-crime;



•

the expected growth opportunities or cost savings from the merger may not be fully realized or may take longer to realize than expected;



•

deposit attrition, operating costs, customer losses, and business disruption following the merger, including adverse effects on relationships with employees, may be greater than expected.

        The foregoing factors should not be considered exhaustive and should be read together with other cautionary statements that are included in this Form 10-K, including those discussed in the section entitled "Risk Factors" in Item 1A above. If one or more of the factors affecting our forward-looking information and statements proves incorrect, then our actual results, performance or achievements could differ materially from those expressed in, or implied by, forward-looking information and statements contained in this Form 10-K. Therefore, we caution you not to place undue reliance on our forward-looking information and statements. We will not update the forward-looking statements to reflect actual results or changes in the factors affecting the forward-looking statements. New risks and uncertainties may emerge from time to time, and it is not possible for us to predict their occurrence or how they will affect us.

Overview

        We are a bank holding company headquartered in Fairfax County, Virginia. Our sole subsidiary, FVCbank, was formed in November 2007 as a community-oriented, locally-owned and managed commercial bank under the laws of the Commonwealth of Virginia. The Bank offers a wide range of traditional bank loan and deposit products and services to both our commercial and retail customers. Our commercial relationship officers focus on attracting small and medium sized businesses, commercial real estate developers and builders, including government contractors, non-profit organizations, and professionals. Our approach to our market features competitive customized financial services offered to customers and prospects in a personal relationship context by seasoned professionals.

46

Table of Contents

        On October 12, 2018, we completed our acquisition of Colombo Bank ("Colombo"), pursuant to a previously announced definitive merger agreement. Colombo, which was headquartered in Rockville, Maryland, merged into FVCbank effective October 12, 2018 adding five banking locations in Washington, D.C., and Montgomery County and the City of Baltimore in Maryland. Pursuant to the terms of the merger agreement, based on the average closing price of the Company's common stock during the five trading day period ended on October 10, 2018, the second trading day prior to closing, of $19.614 (the Average Closing Price") holders of shares of Colombo common stock received 0.002217 shares of the Company's common stock and $0.053157 in cash for each share of Colombo common stock held immediately prior to the effective date of the Merger, plus cash in lieu of fractional shares at a rate equal to the Average Closing Price, and subject to the right of holders of Colombo common stock who owned fewer than 45,086 shares of Colombo common stock after aggregation of all shares held in the same name, and who made a timely election, to receive only cash in an amount equal to $0.096649 per share of Colombo common stock. As a result of the merger, 763,051 shares of the Company's common stock were issued in exchange for outstanding shares of Colombo common stock.

        Net interest income is our primary source of revenue. We define revenue as net interest income plus noninterest income. As discussed further in "Quantitative and Qualitative Disclosures About Market Risk" below, we manage our balance sheet and interest rate risk exposure to maximize, and concurrently stabilize, net interest income. We do this by monitoring our liquidity position and the spread between the interest rates earned on interest-earning assets and the interest rates paid on interest-bearing liabilities. We attempt to minimize our exposure to interest rate risk, but are unable to eliminate it entirely. In addition to managing interest rate risk, we also analyze our loan portfolio for exposure to credit risk. Loan defaults and foreclosures are inherent risks in the banking industry, and we attempt to limit our exposure to these risks by carefully underwriting and then monitoring our extensions of credit. In addition to net interest income, noninterest income is a complementary source of revenue for us and includes, among other things, service charges on deposits and loans, merchant services fee income, insurance commission income, income from bank owned life insurance, or BOLI, and gains and losses on sales of investment securities available-for-sale.

Critical Accounting Policies

General

        The accounting principles we apply under GAAP are complex and require management to apply significant judgment to various accounting, reporting and disclosure matters. Management must use assumptions, judgments and estimates when applying these principles where precise measurements are not possible or practical. These policies are critical because they are highly dependent upon subjective or complex judgments, assumptions and estimates. Changes in such judgments, assumptions and estimates may have a significant impact on the consolidated financial statements. Actual results, in fact, could differ from initial estimates.

        The accounting policies we view as critical are those relating to judgments, assumptions and estimates regarding the determination of the allowance for loan losses, accounting for purchase credit-impaired loans, fair value measurements, and the valuation of other real estate owned.

Allowance for Loan Losses

        We maintain the allowance for loan losses at a level that represents management's best estimate of known and inherent losses in our loan portfolio. Both the amount of the provision expense and the level of the allowance for loan losses are impacted by many factors, including general and industry-specific economic conditions, actual and expected credit losses, historical trends and specific conditions of individual borrowers. Unusual and infrequently occurring events, such as weather-related disasters, may impact our assessment of possible credit losses. As a part of our analysis, we use comparative peer

47

Table of Contents

group data and qualitative factors such as levels of and trends in delinquencies, nonaccrual loans, charged-off loans, changes in volume and terms of loans, effects of changes in lending policy, experience and ability and depth of management, national and local economic trends and conditions and concentrations of credit, competition, and loan review results to support estimates.

        The allowance for loan losses is based first on a segmentation of the loan portfolio by general loan type, or portfolio segments. For originated loans, certain portfolio segments are further disaggregated and evaluated collectively for impairment based on loan segments, which are largely based on the type of collateral underlying each loan. For purposes of this analysis, we categorize loans into one of five categories: commercial and industrial, commercial real estate, commercial construction, consumer residential, and consumer nonresidential loans. Typically, financial institutions use their historical loss experience and trends in losses for each loan category which are then adjusted for portfolio trends and economic and environmental factors in determining their allowance for loan losses. Since the Bank's inception in 2007, we have experienced minimal loss history within our loan portfolio. Because of this, our allowance model uses the average loss rates of similar institutions (our custom peer group) as a baseline which is then adjusted based on our particular qualitative loan portfolio characteristics and environmental factors. The indicated loss factors resulting from this analysis are applied for each of the five categories of loans.

        Our peer group is defined by selecting commercial banking institutions of similar size within Virginia, Maryland and the District of Columbia. This is known as our custom peer group. The commercial banking institutions comprising the custom peer group can change based on certain factors including but not limited to the characteristics, size, and geographic footprint of the institution. We have identified 28 banks for our custom peer group which are within $200 million to $3 billion in total assets, the majority of whom are geographically concentrated in the Washington, D.C. metropolitan area in which we operate, as this area has experienced more stable economic conditions than many other areas of the country. These baseline peer group loss rates are then adjusted based on an analysis of our loan portfolio characteristics, trends, economic considerations and other conditions that should be considered in assessing our credit risk. Our peer loss rates are updated on a quarterly basis.

        The allowance for loan losses consists of specific and general components. The specific component relates to loans that are determined to be impaired and, therefore, individually evaluated for impairment. We individually assign loss factors to all loans that have been identified as having loss attributes, as indicated by deterioration in the financial condition of the borrower or a decline in underlying collateral value if the loan is collateral dependent. We evaluate the impairment of certain loans on a loan by loan basis for those loans that are adversely risk rated. Measurement of impairment is based on the expected future cash flows of an impaired loan, which are discounted at the loan's effective interest rate, or measured on an observable market value, if one exists, or the fair value of the collateral underlying the loan, discounted to consider estimated costs to sell the collateral for collateral-dependent loans. If the net collateral value is less than the loan balance (including accrued interest and any unamortized premium or discount associated with the loan) we recognize an impairment and establish a specific reserve for the impaired loan.

        Credit losses are an inherent part of our business and, although we believe the methodologies for determining the allowance for loan losses and the current level of the allowance are appropriate, it is possible that there may be unidentified losses in the portfolio at any particular time that may become evident at a future date pursuant to additional internal analysis or regulatory comment. Additional provisions for such losses, if necessary, would be recorded, and would negatively impact earnings.

48

Table of Contents

Allowance for Loan Losses—Acquired Loans

Acquired loans accounted for under ASC 310-30

        For our acquired loans, to the extent that we experience a deterioration in borrower credit quality resulting in a decrease in our expected cash flows subsequent to the acquisition of the loans, an allowance for loan losses would be established based on our estimate of future credit losses over the remaining life of the loans.

Acquired loans accounted for under ASC 310-20

        Subsequent to the acquisition date, we establish our allowance for loan losses through a provision for loan losses based upon an evaluation process that is similar to our evaluation process used for originated loans. This evaluation, which includes a review of loans on which full collectability may not be reasonably assured, considers, among other factors, the estimated fair value of the underlying collateral, economic conditions, historical net loan loss experience, carrying value of the loans, which includes the remaining net purchase discount or premium, and other factors that warrant recognition in determining our allowance for loan losses.

Purchased Credit-Impaired Loans

        Purchased credit-impaired (PCI) loans, which are the loans acquired in our acquisition of Colombo, are loans acquired at a discount (that is due, in part, to credit quality). These loans are initially recorded at fair value (as determined by the present value of expected future cash flows) with no allowance for loan losses. We account for interest income on all loans acquired at a discount (that is due, in part, to credit quality) based on the acquired loans' expected cash flows. The acquired loans may be aggregated and accounted for as a pool of loans if the loans being aggregated have common risk characteristics. A pool is accounted for as a single asset with a single composite interest rate and an aggregate expectation of cash flow. The difference between the cash flows expected at acquisition and the investment in the loans, or the "accretable yield," is recognized as interest income utilizing the level-yield method over the life of each pool. Increases in expected cash flows subsequent to the acquisition are recognized prospectively through adjustment of the yield on the pool over its remaining life, while decreases in expected cash flows are recognized as impairment through a loss provision and an increase in the allowance for loan losses. Therefore, the allowance for loan losses on these impaired pools reflect only losses incurred after the acquisition (representing the present value of all cash flows that were expected at acquisition but currently are not expected to be received). At December 31, 2018, there was no reserve for impairment of PCI loans within our allowance for loan losses.

        We periodically evaluate the remaining contractual required payments due and estimates of cash flows expected to be collected. These evaluations, performed quarterly, require the continued use of key assumptions and estimates, similar to the initial estimate of fair value. Changes in the contractual required payments due and estimated cash flows expected to be collected may result in changes in the accretable yield and non-accretable difference or reclassifications between accretable yield and the non-accretable difference. On an aggregate basis, if the acquired pools of PCI loans perform better than originally expected, we would expect to receive more future cash flows than originally modeled at the acquisition date. For the pools with better than expected cash flows, the forecasted increase would be recorded as an additional accretable yield that is recognized as a prospective increase to our interest income on loans.

Fair Value Measurements

        We determine the fair values of financial instruments based on the fair value hierarchy, which requires an entity to maximize the use of observable inputs and minimize the use of unobservable inputs when measuring fair value. The standard describes three levels of inputs that may be used to

49

Table of Contents

measure fair value. Our investment securities available-for-sale are recorded at fair value using reliable and unbiased evaluations by an industry-wide valuation service. This service uses evaluated pricing models that vary based on asset class and include available trade, bid, and other market information. Generally, the methodology includes broker quotes, proprietary models, vast descriptive terms and conditions databases, as well as extensive quality control programs. Depending on the availability of observable inputs and prices, different valuation models could produce materially different fair value estimates. The values presented may not represent future fair values and may not be realizable.

Other Real Estate Owned

        Real estate acquired through, or in lieu of, foreclosure is held for sale and is stated at fair value of the property, less estimated disposal costs, if any. Any excess of cost over the fair value less costs to sell at the time of acquisition is charged to the allowance for loan losses. The fair value is reviewed periodically by management and any writedowns are charged against current earnings. Accounting policy and treatment is consistent with accounting for impaired loans described above.

Financial Overview

        For the years ended December 31, 2018 and 2017, we experienced record growth as we continue to expand our market area through organic growth and acquisition, capitalizing on market disruption as a result of recent merger activity.

•

Total assets increased to $1.35 billion compared to $1.05 billion as of December 31, 2018 and 2017, respectively, an increase of $298.4 million, or 28.3%.



•

Total loans, net of deferred fees, increased $248.1 million, or 27.9%, from December 31, 2017 to December 31, 2018. Asset quality remains strong with nonaccrual loans and loans past due 90 days or more still accruing interest as a percentage of total assets being 0.24% at December 31, 2018, compared to 0.07% at December 31, 2017.



•

Total deposits increased $234.3 million, or 25.2%, from December 31, 2017 to December 31, 2018.



•

Tangible book value per share at December 31, 2018 was $10.93, an increase from $9.03 at December 31, 2017.



•

Net income was $10.9 million for the year ended December 31, 2018 compared to $7.7 million for the same period of 2017. Our 2018 results were impacted by additional expenses related to our acquisition of Colombo totaling $2.6 million, net of tax, in 2018. Excluding these merger-related expenses, we would have recorded income of $13.4 million for the year ended December 31, 2018 or $1.05 per diluted common share. Our 2017 results were impacted by the revaluation of our net deferred tax assets as a result of the enactment of the 2017 Tax Act. As a result of the revaluation of our net deferred tax assets, we recorded an additional $2.0 million in provision for income tax expense for 2017. Excluding this additional provision for income taxes, we would have recorded net income of $9.7 million, or $0.84 per diluted common share, for the year ended December 31, 2017. For a reconciliation of this non-GAAP information which excludes the effect of merger-related expenses and the revaluation of our net deferred tax assets, please refer to the table below.

50

Table of Contents

Reconciliation of Net Income (GAAP) to Operating Earnings (Non-GAAP)
Years Ended December 31, 2018 and 2017
(Dollars in thousands, except per share data)

51

Table of Contents

Results of Operations—Year Ended December 31, 2018 and December 31, 2017

Overview

        We recorded net income of $10.9 million, or $0.85 per diluted common share, for the year ended December 31, 2018, compared to net income of $7.7 million, or $0.67 per diluted common share for the year ended December 31, 2017. Our 2018 results were impacted by additional expenses related to our acquisition of Colombo totaling $2.6 million, net of tax, in 2018. Excluding these merger-related expenses, we would have recorded income of $13.4 million, or $1.05 per diluted common share, for the year ended December 31, 2018. Our 2017 results were impacted by the revaluation of our net deferred tax assets as a result of the enactment of the 2017 Tax Act. As a result of the revaluation of our net deferred tax assets, we recorded an additional $2.0 million in provision for income tax expense for 2017. Excluding this additional provision for income taxes, we would have recorded net income of $9.7 million, or $0.84 per diluted common share for the year ended December 31, 2017.

        Net interest income increased $7.7 million to $39.8 million for the year ended December 31, 2018, compared to $32.1 million for the year ended December 31, 2017, primarily as a result of an increase in interest-earning assets. Provision for loan losses was $1.9 million for the year ended December 31, 2018, compared to $1.2 million for the same period of 2017. Noninterest income decreased $1.3 million to $1.7 million for the year ended December 31, 2018 as compared to $3.0 million for 2017 due primarily to a gain recorded on the foreclosure of other real estate owned of $1.1 million and a claim on BOLI policies of $443 thousand during 2017. Noninterest expense was $26.4 million for the year ended December 31, 2018 compared to $19.3 million for the same period of 2017. Noninterest expense increased $3.3 million during 2018 as a result of expenses recorded associated with our acquisition of Colombo in addition to an increase in salaries and benefits expense for strategic additions to business development and back office staffing over the past year to support our growth plans.

        The return on average assets for the years ended December 31, 2018 and 2017 was 0.94% and 0.80%, respectively. The return on average equity for the years ended December 31, 2018 and 2017 was 9.29% and 8.63%, respectively. Excluding merger related expenses and associated taxes recorded during 2018, return on average assets and return on average equity for the year ended December 31, 2018 would have been 1.16% and 11.47%, respectively. Excluding the additional provision for income taxes as a result of the 2017 Tax Act, return on average assets and return on average equity for the year ended December 31, 2017 would have been 1.01% and 10.88%, respectively.

Net Interest Income/Margin

        The following table presents average balance sheet information, interest income, interest expense and the corresponding average yield earned and rates paid for the years ended December 31, 2018, 2017, and 2016.

52

Table of Contents

Average Balance Sheets and Interest Rates on Interest-Earning Assets and Interest-Bearing Liabilities
Years Ended December 31, 2018, 2017 and 2016
(Dollars in thousands)