Company: FMFG
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001437749-25-007333
Chunk: 19

Company: Farmers & Merchants Bancshares, Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1
Chunk 19
---
 is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures.

The federal banking regulators have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a financial institution’s board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal banking regulators expect financial institutions to establish lines of defense and to ensure that their risk management processes address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyberattack. If we fail to meet the expectations set forth in this regulatory guidance, then we could be subject to various regulatory actions and we may be required to devote significant resources to any required remediation efforts.

11

Laws Related to the Insurance Subsidiary

The Insurance Subsidiary is treated as a separate legal entity for state law purposes and is licensed and supervised by the Tennessee Department of Commerce and Insurance as a series protected cell of a protected cell captive insurance company. Tennessee insurance law requires a protected cell to possess and maintain unimpaired paid-in capital and surplus of at least $25,000, and the Tennessee Department of Commerce and Insurance has the authority to prescribe additional requirements based on the type, volume and nature of insurance business to be conducted. No captive insurance company may pay a dividend out of, or other distribution with respect to, capital or surplus without the prior approval of the Tennessee Department of Commerce and Insurance.

The Insurance Subsidiary was formed with the intention that it be treated as a “captive insurance company” by the Internal Revenue Service (the “ IRS”) so that, among other things, some or all of the premiums that we pay to the Insurance Subsidiary will be deductible as trade or business expenses. Because of the significant tax benefits that can be realized through the operation of a captive insurance company, the IRS has recently focused significant attention on these arrangements to ensure that they are not simply a disguise for self-insurance. Amounts paid to the Insurance Subsidiary are deductible only if they constitute “insurance premiums” under the IRC. The federal courts and the IRS have concluded that amounts paid to an insurance company will be deemed insurance premiums only if the arrangement under which those amounts were paid evidences an appropriate level of both “risk shifting” and “risk distribution.”

Moreover,