Company: MGNO
Filing Date: 2025-03-28
Form Type: 10-K
Source: 0000927089-25-000061
Chunk: 59

Company: Magnolia Bancorp, Inc.
Filing Date: 2025-03-28
Form: 10-K
Item: Item 1C
Chunk 59
---
 We did not design and maintain effective controls regarding significant accounts, transaction cycles and disclosures to ensure policies and procedures designed to mitigate the risks to the achievement of objectives are carried out; and 

      ● 
      We did not design and maintain effective information technology general controls ("ITGC") which could result in misstatements potentially impacting all financial statement accounts and disclosures. Specifically, user access controls were not appropriately designed and maintained to adequately restrict user and privileged access to financial applications and data to the appropriate personnel, segregation of duties over preparation and review of journal entries, and access to critical spreadsheets and similar end-user data files is not restricted and is accessible by all personnel of Mutual Savings and Loan Association. 

We have taken steps to remediate these material weaknesses, including hiring a Director of Compliance and Internal Audit in May 2023 with over 25 years of experience as a compliance director and internal auditor in several financial institutions and with a bank consulting practice. The Compliance Director is responsible for evaluating policies and procedures, has direct access to the board of directors and does not have direct duties relating to financial accounting and reporting. We currently are assessing and improving our processes and control procedures to ensure they will operate at an acceptable level of assurance, including implementing a more formal risk assessment process and revising our monitoring programs relating to financial accounting and reporting, providing for additional documentation of internal controls, formalizing documentation of certain review and approval processes, and providing for additional written documentation. As part of our remedial measures to address these material weaknesses, we have (a) implemented a robust internal control environment that is appropriate for the size and operational complexity of Mutual Savings and Loan Association, (b) written or revised 90% of our policies, including compliance, bank secrecy, information security, liquidity, audit and loan policies, (c) performed an enterprise risk management assessment, including an assessment of cash, employee integrity, branch security, loan and deposit accounts, website, wires, information security and compliance management systems, (d) provided training to all employees in the areas of general banking, safety and soundness, loans, deposits, compliance and bank secrecy, as well as training to the board of directors on banking laws and regulations (including the bank secrecy act), overall banking and privacy, and (e) revised our monitoring programs to focus on areas of higher risk, with an increased emphasis in the areas relating to financial accounting and reporting. In addition, our Director of Compliance and Internal Audit has completed audits of compliance laws and operations while maintaining her independence, with her findings discussed