Company: FCNCB
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000798941-25-000010
Chunk: 259

Company: FIRST CITIZENS BANCSHARES INC /DE/
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 259
---
 infrastructure. Operational risk can arise in numerous ways, including, but not limited to, employee fraud, customer fraud, control lapses in bank operations and information technology, and pace of change brought about by organizational growth. Our dependence on our employees and internal and third-party automated systems and vendors to record and process transactions may further increase the risk that technical failures or system-tampering will result in losses that are difficult to detect. Our internal controls that are intended to safeguard and maintain our operational and organizational infrastructure and information, as well as oversee and monitor control effectiveness, have inherent limitations and may not be successful. We have been, and may in the future be, subject to disruptions of our operating systems arising from events that are wholly or partially beyond our control. In addition, our railcars are used to transport a variety of products including, but not limited to, cement, energy products, chemicals and coal. An accidental derailment of these railcars could result in personal injury and property damage, which could be significant, as well as potential environmental remediation and restoration obligations and penalties. Failure to maintain appropriate operational infrastructure and oversight or to safely operate our business can lead to loss of service to customers, reputational harm, legal actions and noncompliance with various laws and regulations, all of which could have a material adverse impact on our business, financial condition and results of operations. 

A cyberattack, information or security breach, or a technology outage of ours or of a third-party could adversely affect our ability to conduct our business, manage our exposure to risk, result in the disclosure or misuse of confidential customer or employee data or proprietary information, and increase our costs to maintain and update our operational and security systems and infrastructure. Such an event could adversely impact our results of operations, liquidity and financial condition, as well as cause us legal or reputational harm. 

Our businesses are highly dependent on the security and efficacy of our infrastructure, computer and data management systems, as well as those of third parties with whom we interact or on whom we rely. Our businesses rely on the secure processing, transmission, storage and retrieval of confidential, proprietary and other information in our computer and data management systems and networks, and in the computer and data management systems and networks of third parties. In addition, to access our network, products and services, our customers and other third parties may use personal mobile devices or computing devices that are outside of our network environment and are subject to their own cybersecurity risks, which may provide a point of entry for adverse effects on our own network environment.