Oak Valley Bancorp

Communications and information systems are essential to the conduct of our business, as we use such systems to manage our customer relationships, our general ledger and virtually all other aspects of our business. Our operations rely on the secure collection, processing, storage, and transmission of confidential, personal, and other information using our computer systems and networks and as part of our internet banking activities, as well as the computer systems and networks of third party service providers that support our operations, but which we do not control. Although we take protective measures and endeavor to enhance them as circumstances warrant, the security of our computer systems, software, and networks, as well as those of our computer systems and networks of third party service providers that support our operations, may be vulnerable to security breaches, unauthorized access, misuse, computer viruses, or other malicious code and cyber-attacks whose objectives include obtaining unauthorized access confidential and personal information, manipulation or destruction of data, disruption or our services, or theft of money. The rapid evolution and increased adoption of artificial intelligence technologies have also given rise to additional vulnerabilities and potential entry points for cyber threats. If one or more of these events occur, this could jeopardize our or our customers' confidential, personal, and other information collected and processed by, stored in, and transmitted through our computer systems and networks and our third party service providers, or otherwise cause interruptions or malfunctions in our operations or adversely impact our customers or counterparties. These adverse consequences could include causing certain customers to cease doing business with us, impair our ability to attract new customers or expand relationships with existing customers and third parties, making it difficult to service customers and comply with regulatory obligations (including privacy and banking laws), or impair our brand and reputation. We may be required to expend significant additional resources to enhance our protective measures, to investigate any such event, notify individuals, third parties, or regulators, and remediate vulnerabilities or other exposures, and we may be subject to litigation and financial losses that are either not insured against or not fully covered through any insurance maintained by us. We could also suffer significant reputational damage.

Communications and information systems are essential to the conduct of our business, as we use such systems to manage our customer relationships, our general ledger and virtually all other aspects of our business. Our operations rely on the secure collection, processing, storage, and transmission of confidential, personal, and other information using our computer systems and networks and as part of our internet banking activities, as well as the computer systems and networks of third party service providers that support our operations, but which we do not control. Although we take protective measures and endeavor to enhance them as circumstances warrant, the security of our computer systems, software, and networks, as well as those of our computer systems and networks of third party service providers that support our operations, may be vulnerable to security breaches, unauthorized access, misuse, computer viruses, or other malicious code and cyber-attacks whose objectives include obtaining unauthorized access confidential and personal information, manipulation or destruction of data, disruption or our services, or theft of money. The rapid evolution and increased adoption of artificial intelligence technologies have also given rise to additional vulnerabilities and potential entry points for cyber threats. If one or more of these events occur, this could jeopardize our or our customers' confidential, personal, and other information collected and processed by, stored in, and transmitted through our computer systems and networks and our third party service providers, or otherwise cause interruptions or malfunctions in our operations or adversely impact our customers or counterparties. These adverse consequences could include causing certain customers to cease doing business with us, impair our ability to attract new customers or expand relationships with existing customers and third parties, making it difficult to service customers and comply with regulatory obligations (including privacy and banking laws), or impair our brand and reputation. We may be required to expend significant additional resources to enhance our protective measures, to investigate any such event, notify individuals, third parties, or regulators, and remediate vulnerabilities or other exposures, and we may be subject to litigation and financial losses that are either not insured against or not fully covered through any insurance maintained by us. We could also suffer significant reputational damage.

Communications and information systems are essential to the conduct of our business, as we use such systems to manage our customer relationships, our general ledger and virtually all other aspects of our business. Our operations rely on the secure collection, processing, storage, and transmission of confidential, personal, and other information using our computer systems and networks and as part of our internet banking activities, as well as the computer systems and networks of third party service providers that support our operations, but which we do not control. Although we take protective measures and endeavor to enhance them as circumstances warrant, the security of our computer systems, software, and networks, as well as those of our computer systems and networks of third party service providers that support our operations, may be vulnerable to security breaches, unauthorized access, misuse, computer viruses, or other malicious code and cyber-attacks whose objectives include obtaining unauthorized access confidential and personal information, manipulation or destruction of data, disruption or our services, or theft of money. The rapid evolution and increased adoption of artificial intelligence technologies have also given rise to additional vulnerabilities and potential entry points for cyber threats. If one or more of these events occur, this could jeopardize our or our customers' confidential, personal, and other information collected and processed by, stored in, and transmitted through our computer systems and networks and our third party service providers, or otherwise cause interruptions or malfunctions in our operations or adversely impact our customers or counterparties. These adverse consequences could include causing certain customers to cease doing business with us, impair our ability to attract new customers or expand relationships with existing customers and third parties, making it difficult to service customers and comply with regulatory obligations (including privacy and banking laws), or impair our brand and reputation. We may be required to expend significant additional resources to enhance our protective measures, to investigate any such event, notify individuals, third parties, or regulators, and remediate vulnerabilities or other exposures, and we may be subject to litigation and financial losses that are either not insured against or not fully covered through any insurance maintained by us. We could also suffer significant reputational damage.