Company: NEWTP
Filing Date: 2025-08-15
Form Type: 424B2
Source: 0001587987-25-000152
Chunk: 104

Company: NewtekOne, Inc.
Filing Date: 2025-08-15
Form: 424B2
Chunk 104
---
 repay our borrowings. The Company will no longer qualify as a RIC beginning with the 2023 taxable year (e.g., beginning on January 1, 2023).

<div align='center'>20</div>

We could be adversely affected by information security breaches or cybersecurity attacks.

Our business operations and our subsidiaries’ business operations rely upon secure information technology systems for data processing, storage and reporting. Despite security and controls design, implementation and updating, such information technology systems could become subject to cyber-attacks. Network, system, application and data breaches could result in operational disruptions or information misappropriation, which could have a material adverse effect on our business, results of operations and financial condition.

In addition, our business operations involve the storage and transmission of Newtek, customer and employee proprietary information. Our businesses rely on our digital technologies, computer and email systems, software, and networks to conduct operations. Our technologies, systems and networks may become the target of criminal cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary and other information of us or third parties with whom we deal, or otherwise disrupt our or our customers’ or other third parties’ business operations.

Additionally, the increased use of mobile and cloud technologies due to the increased amount of remote work resulting from the COVID-19 pandemic could heighten these and other operational risks as certain aspects of the security of such technologies may be complex and unpredictable. It is critical to our business strategy that our facilities and infrastructure remain secure and are perceived by the marketplace to be secure.

We maintain a cybersecurity risk management program that is overseen by the Chief Information Security Officer (“CISO”) of NTS. The CISO is chiefly responsible for developing, maintaining, and enforcing cybersecurity and cyber risk-related policies; ensuring the Company and its subsidiaries satisfy requirements of relevant regulations, industry standards, and third-party risk assessment requirements; keeping abreast of developing security threats, and helping both the Board and the board of directors of Newtek Bank understand potential security problems that might arise from the changing threat landscape; and overseeing and implementing regular security awareness training of all employees on cybersecurity, and supporting effective communication with users to limit security vulnerabilities. The CISO regularly reports to the Board and the board of directors of Newtek Bank on the state of our cybersecurity risk management program and provides updates on cybersecurity matters.

Although we believe we and our IT providers employ appropriate security technologies (including data encryption processes, intrusion detection systems), and conduct comprehensive risk assessments and