Company: ONBPP
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000707179-25-000005
Chunk: 132

Company: OLD NATIONAL BANCORP /IN/
Filing Date: 2025-02-19
Form: 10-K
Item: Item 7
Chunk 132
---
 approval is required if dividends to be declared in any year would exceed net earnings of the current year plus retained net profits for the preceding two years. Prior regulatory approval to pay dividends was not required in 2023 or 2024 and is not currently required. At December 31, 2024, Old National Bank could pay dividends of $889.2 million without 

66

prior regulatory approval and while maintaining capital levels above regulatory minimum and well-capitalized guidelines.

Operational Risk

Operational risk is the risk that inadequate information systems, operational issues, breaches in internal controls, information security breaches, fraud, or unforeseen catastrophes will result in unexpected losses and other adverse impacts to Old National, such as reputational harm. We maintain frameworks, programs, and internal controls to prevent or minimize financial loss from failure of systems, people, or processes. This includes specific programs and frameworks intended to prevent or limit the effects of cybersecurity risk including, but not limited to, cyber-attacks or other information security breaches that might allow unauthorized transactions or unauthorized access to client, team member, or company sensitive information. Metrics and measurements are used by our management team in the management of day-to-day operations to ensure effective client service, minimization of service disruptions, and oversight of cybersecurity risk. We continually monitor and internally report on weaknesses in the internal control environment; third party risks; privacy and data governance; cyber-attacks; information security or data breaches; damage to physical assets; employee and workplace safety; execution, delivery, and process management; external and internal fraud; model risk management; and other risks.

Compliance and Regulatory Risk

Compliance and regulatory risk is the risk that the Company violated or was not in compliance with applicable laws, rules, regulations, regulatory guidance and policies, industry standards, or ethical standards. Compliance with applicable regulatory requirements, internal policies and procedures, and ethical standards is not only the right thing to do, but it is embedded within our culture and mission to assist our clients in achieving financial success. Adherence to this belief is the responsibility of every employee, every day, in everything we do. It is Old National’s policy to comply with the letter and intent of all applicable regulatory requirements. Management, the first line of defense, is responsible for ensuring this expectation is met, with oversight from the second and third lines of defense, the risk and internal audit functions, respectively. Recognizing that inadvertent violations may occur, risk management activities are established to promptly identify, analyze, and, if necessary