Company: OSBC
Filing Date: 2025-05-06
Form Type: S-4/A
Source: 0001104659-25-045103
Chunk: 273

Company: OLD SECOND BANCORP INC
Filing Date: 2025-05-06
Form: S-4/A
Chunk 273
---
 its Subsidiaries is in default in any material respect under or in violation of any term or provision of (i) its certificate of formation, certificate of incorporation, articles of organization, articles of incorporation, bylaws, operating agreement, limited liability company agreement, or other similar organizational document (collectively, “ Charter Documents ”), or (ii) any material Permit which it holds.

(e) Company has implemented one or more policies addressing each of ethics, conflicts of interest policies, customer privacy policies, anti-money laundering policies, fair lending policies, vendor risk management policies and other material policies as may be required by any applicable Law for itself and its Subsidiaries, and a complete and correct copy of each such policy has been made available to Buyer. Such policies comply in all material respects with the requirements of any Laws applicable thereto.

(f) Company Bank has received an Institution Community Reinvestment Act rating of “satisfactory” or better in its most recently completed Community Reinvestment Act examination, and Company has no knowledge of the existence of any fact or circumstance or set of facts or circumstances which could reasonably be expected to result in Company Bank having its current rating lowered such that it is no longer “satisfactory” or better. Company Bank has operated, or will operate, its Community Reinvestment Act activities in compliance with its current or future FDIC approved Community Reinvestment Act Strategic Plan in all material respects.

(g) Company maintains a written information privacy and security program that maintains reasonable measures to protect the privacy, confidentiality and security of all Personal Data and any

<div align='center'>A-19</div>

TABLE OF CONTENTS

other material confidential information against any (i) loss or misuse, (ii) unauthorized or unlawful operations performed thereon, or (iii) other act or omission that compromises the security or confidentiality thereof (clauses (i) through (iii), a “ Security Breach ”). To the knowledge of Company, Company has not experienced any Security Breach that would, individually or in the aggregate, reasonably be expected to have a Material Adverse Effect on Company. To the knowledge of Company, there are no data security or other technological vulnerabilities with respect to its information technology systems or networks that, individually or in the aggregate, would reasonably be expected to have a Material Adverse Effect on Company.

(h) Without limitation, none of Company or any of its Subsidiaries, or to the knowledge of Company, any director, officer, employee, agent or other person acting on behalf of Company or any of