Company: BOH
Filing Date: 2025-10-28
Form Type: 10-Q
Source: 0000046195-25-000037
Chunk: 208

Company: BANK OF HAWAII CORP
Filing Date: 2025-10-28
Form: 10-Q
Item: Part I, Item 8
Chunk 208
---
 on November 28, 2025.

Operational Risk

Operational risk represents the risk of loss resulting from our operations, including, but not limited to, the risk of fraud by employees or persons outside the Company, errors relating to transaction processing and technology, failure to adhere to 

65

compliance requirements, and the risk of cyber attacks. We are also exposed to operational risk through our outsourcing arrangements, and the effect that changes in circumstances or capabilities of our outsourcing vendors can have on our ability to continue to perform operational functions necessary to our business. The risk of loss also includes the potential legal actions that could arise as a result of an operational deficiency or as a result of noncompliance with applicable regulatory standards, adverse business decisions or their implementation, and customer attrition due to potential negative publicity. Operational risk is inherent in all business activities, and management of this risk is important to the achievement of Company goals and objectives.

Our Operational Risk and Compliance Committee (the “ORC”) provides oversight and assesses the most significant operational risks including cybersecurity risks facing the Company. We have developed a framework that provides for a centralized operating risk management function through the ORC, supplemented by business unit responsibility for managing operational risks specific to their business units. Our internal audit department also validates the system of internal controls through ongoing risk-based audit procedures and reports on the effectiveness of internal controls to executive management and the Audit Committee of the Board of Directors.

We continuously strive to strengthen our system of internal controls to improve the oversight of operational risk. While our internal controls have been designed to minimize operational risks, there is no assurance that business disruption or operational losses will not occur. On an ongoing basis, management reassesses operational risks, implements appropriate process changes, and invests in enhancements to our systems of internal controls.

Off-Balance Sheet Arrangements, Credit Commitments, and Contractual Obligations

Off-Balance Sheet Arrangements

We hold interests in several unconsolidated variable interest entities (“VIEs”). These unconsolidated VIEs are primarily low-income housing partnerships. Variable interests are defined as contractual ownership or other interests in an entity that change with fluctuations in an entity’s net asset value. The primary beneficiary consolidates the VIE. We have determined that the Company is not the primary beneficiary of these entities. As a result, we do not consolidate these VIEs.

Credit Commitments and Contractual Obligations

Our credit commitments and contractual obligations have not changed materially since previously reported in our Annual Report on Form 10