Company: FSBC
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001275168-25-000038
Chunk: 91

Company: FIVE STAR BANCORP
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 91
---
 experience financial losses or reputational harm as a result of fraud.

Negative publicity about us, whether accurate or not, may also damage our reputation, which could have an adverse effect on our business, financial condition, and results of operations.

Our operations could be interrupted if our third-party service providers experience difficulty, terminate their services, or fail to comply with banking regulations.

We outsource some of our operational activities and, accordingly, depend on relationships with third-party providers for services such as core systems support, informational website hosting, internet services, online account opening, and other processing services. Our business depends on the successful and uninterrupted functioning of our information technology and telecommunications systems, many of which also depend on third-party providers. The failure of these systems, a cybersecurity breach involving any of our third-party service providers, or the termination or change in terms of a third-party software license or service agreement on which any of these systems is based could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity, or such third-party systems fail or experience interruptions. Replacing vendors or addressing other issues with our third-party service providers could entail significant delay, expense, and disruption of service.

As a result, if these third-party service providers experience difficulties, are subject to cybersecurity breaches, or terminate their services, and we are unable to replace them with other service providers, particularly on a timely basis, our operations could be interrupted. If an interruption were to continue for a significant period of time, our business, financial condition, and results of operations could be adversely affected. Even if we are able to replace third-party service providers, it may be at a higher cost to us, which could adversely affect our business, financial condition, and results of operations.

36

Furthermore, third-party service providers, and banking organizations’ relationships with those providers, are subject to demanding regulatory requirements and attention by bank regulators. These regulatory expectations may change, and potentially become more rigorous in certain ways, due to an interagency effort to replace existing guidance on the risk management of third-party relationships with new guidance. Our regulators may hold us responsible for any deficiencies in our oversight or control of our third-party service providers and in the performance of the parties with which we have these relationships. As a result, if our regulators assess that we have not exercised adequate oversight and control over our third-party service providers or that such providers have not performed adequately, we could be subject to administrative penalties, fines, or