Company: NWFL
Filing Date: 2025-07-07
Form Type: 425
Source: 0001193125-25-156258
Chunk: 75

Company: NORWOOD FINANCIAL CORP
Filing Date: 2025-07-07
Form: 425
Chunk 75
---
wood or any of the Norwood Subsidiaries. A copy of all internally or
externally prepared reports or audits that describe or evaluate the information security procedures of Norwood or the Norwood Subsidiaries, all material policies related thereto and any failures to comply therewith have been provided to Bankshares.
Except as set forth on Schedule 4.13(a), to the Knowledge of Norwood, there has been no unauthorized access gained by any Person to Personal Information held or collected by Norwood or any Norwood Subsidiary, their employees, or third party
contractors in the course of conducting Norwood’s and the Norwood Subsidiaries’ business.

(b) Norwood and each of the Norwood
Subsidiaries is subject to a written information privacy and security program that maintains commercially reasonable measures to protect the privacy, confidentiality and security of all Personal Information against any Security Breach. Except as set
forth in Schedule 4.13(b), since December 31, 2024, neither Norwood nor any Norwood Subsidiary has, to its Knowledge, experienced any Security Breach and there are no data security or other technological vulnerabilities with respect to
Norwood’s or the Norwood Subsidiaries’ information technology systems or networks.

Section 4.14

(a) Norwood has in place “disclosure controls and procedures” as defined in Rules 13a-15(e) and 15d-15(e) of the Exchange Act to allow Norwood’s management to make timely decisions regarding required disclosures and to make the certifications of the
Chief Executive Officer and Chief Financial Officer of Norwood required under the Exchange Act.

(b) Norwood has designed and maintains a
system of internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) sufficient to provide reasonable assurance
concerning the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP as consistently applied by Norwood, including reasonable assurance (i) that transactions are executed in
accordance with management’s general or specific authorizations and recorded as necessary to permit preparation of financial statements in conformity with GAAP as consistently applied by Norwood and to maintain asset accountability,
(ii) access to assets is permitted only in accordance with management’s general or specific authorizations, and (iii) the recorded accountability for assets is compared with existing assets at reasonable intervals and appropriate
action is