UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 2024

OR

Commission File Number 000-21714

CSB BANCORP, INC.

(Exact name of Registrant as specified in its Charter)

Registrant’s telephone number, including area code: (330) 674-9015

Securities registered pursuant to Section 12(g) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the Registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the Registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the Registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the Registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the Registrant, based on the closing price of the shares of common stock as of June 30, 2024 of $39.00 per share on the OTC Stock Market, was $97.1 million.

The number of shares of Registrant’s Common Stock outstanding as of March 10, 2025 was 2,641,847.

DOCUMENTS INCORPORATED BY REFERENCE

PART I

ITEM 1. BUSINESS.

General

CSB Bancorp, Inc. (“CSB”), is a registered financial holding company under the Bank Holding Company Act of 1956, as amended, and was incorporated under the laws of the State of Ohio in 1991. The Commercial and Savings Bank of Millersburg, Ohio (the “Bank”), an Ohio bank chartered in 1879, is a wholly owned subsidiary of CSB. The Bank is a member of the Federal Reserve System, and its deposits are insured up to the maximum amount provided by law by the Federal Deposit Insurance Corporation (“FDIC”). The primary regulators of the Bank are the Federal Reserve Board and the Ohio Division of Financial Institutions. CSB Investment Services, LLC, an Ohio limited liability company (“CSB Investment”), is a wholly owned subsidiary of CSB that is licensed to engage in the business of insurance in the State of Ohio. In this Annual Report on Form 10-K, CSB and its subsidiaries are sometimes collectively referred to as the “Company.”

Cautionary Statement Regarding Forward-Looking Information

Certain statements contained in this Annual Report on Form 10-K, which are not statements of historical fact, constitute forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. Words such as “anticipate”, “estimates”, “may”, “feels”, “expects”, “believes”, “plans”, “will”, “would”, “should”, “could” and similar expressions are intended to identify these forward-looking statements but are not the exclusive means of identifying such statements. Examples of forward-looking statements include: (i) projections of income or expense, earnings per share, the payment or non-payment of dividends, capital structure, and other financial items; (ii) statements of plans and objectives of the Company and of its management or Board of Directors, including those relating to products or services; (iii) statements of future economic performance; and (iv) statements of assumptions underlying such statements. Forward-looking statements are subject to risks and uncertainties that may cause actual results to differ materially.

Other factors not currently anticipated may also materially and adversely affect the Company’s business, financial condition, results of operations, or cash flows. There can be no assurance that future results will meet expectations. While the Company believes that the forward-looking statements in this Annual Report on Form 10-K are reasonable, the reader should not place undue reliance on any forward-looking statement. In addition, these statements speak only as of the date made. The Company does not undertake, and expressly disclaims, any obligation to update or alter any statements whether as a result of new information, future events, or otherwise, except as may be required by applicable law.

The Private Securities Litigation Reform Act of 1995 provides a “safe harbor” for forward-looking statements to encourage companies to provide prospective information so long as those statements are identified as forward-looking and are accompanied by meaningful cautionary statements identifying important factors that could cause actual results to differ materially from those discussed in the forward-looking statements. The Company desires to take advantage of the “safe harbor” provisions of the Private Securities Litigation Reform Act of 1995.

Business Overview and Lending Activities

CSB operates primarily through the Bank and CSB Investment Services, LLC, providing a wide range of banking, trust, financial, and brokerage services to corporate, institutional, and individual customers throughout northeast Ohio. The Bank provides retail and commercial banking services to its customers, including checking and savings accounts, time deposits, IRAs, safe deposit facilities, personal loans, commercial loans, real estate mortgage loans, installment loans, night depository facilities, brokerage, and trust services.

The Bank provides residential real estate, commercial real estate, commercial, and consumer loans to customers located primarily in Holmes, Stark, Tuscarawas, Wayne, and portions of surrounding counties in Ohio. The Bank’s market area has historically exhibited relatively stable economic conditions. Economic activity grew modestly in the fourth quarter of 2024. Demand for goods and services improved as steady sales were recorded during the fourth quarter 2024. Supply chain challenges improved during the year, creating less constrained inventories, and cost increases appear to be leveling off. Consumer spending has increased slightly. Reported unemployment levels in December 2024 ranged from 2.9% to 4.6% in the four primary counties served by the Company. These levels increased from the December 2023 unemployment range of 2.1% to 3.3%. Labor demand remained solid as competition for workers has put upward pressure on labor costs. The local housing market shows continued strength with low inventory levels. Residential mortgage activity, including home equity and construction loans have increased steadily with stable interest rates and resolution of uncertainty after the election as the main factors increasing demand. Nonresidential construction activity has also improved since the prior year. Core deposits decreased slightly, as customers continue to move funds into higher yielding interest-bearing accounts. Commercial loan demand, including commercial real estate, increased slightly during 2024, while other consumer loan demand softened.

Certain risks are involved in providing loans, including, but not limited to, the borrowers’ ability and willingness to repay the debt. Before the Bank extends a new loan or renews an existing loan to a customer, these risks are assessed through a review of the borrower’s past and current credit history, the collateral being used to secure the transaction, if any, and other factors. For all commercial loan relationships greater than $500,000, the Bank’s internal credit department performs an annual risk rating review. In addition to this review, an independent, outside loan review firm is engaged to review a sample of watch list and adversely classified credits over $500,000 and a sample of commercial loan relationships greater than $1,000,000. The outside loan review also assesses management’s current credit grades and provides commentary with regard to assigned ratings, as well as assesses management’s specific loan loss reserves for loans included in their sample that are considered to be impaired. In addition, any loan over $100,000 identified as a problem credit by management and/or the external loan review consultants is assigned to the Bank’s “loan watch list,” has a written action plan created specifically for the loan relationship and is subject to ongoing review at least quarterly by the Bank’s credit department and the assigned loan officer to ensure appropriate action is taken if deterioration continues. These "watch list action plans" are reviewed with the Executive Committee of the Board quarterly.

Commercial loan rates are variable and fixed and include operating lines of credit and term loans made to businesses, primarily based on their ability to repay the loan from the cash flow of the business. Business assets such as equipment, accounts receivable, and inventory typically secure such loans. When the borrower is not an individual, the Bank generally obtains the personal guarantee of the business owner. These loans typically involve larger loan balances, are generally dependent on the cash flow of the business, and thus may be subject to a greater extent to adverse conditions in the general economy or in a specific industry. Management reviews the borrower’s cash flows when deciding whether to grant the credit in order to evaluate whether estimated future cash flows will be adequate to service principal and interest of the new obligation in addition to existing obligations.

Commercial real estate loans are primarily secured by borrower-occupied business real estate and are dependent on the ability of the related business to generate adequate cash flow to service the debt. Commercial real estate loans are generally originated with a loan-to-value ratio of 80% of the lower of cost or appraised value. Commercial construction loans are secured by commercial real estate and in most cases the Bank also provides the permanent financing. The Bank monitors advances and the maximum loan to value ratio is typically limited to the lesser of 80% of cost or appraised value. Management performs much of the same analysis when deciding whether to grant a commercial real estate loan as when deciding whether to grant a commercial loan.

Residential real estate loans carry both fixed and variable rates and are secured by the borrower’s residence. Such loans are made based on the borrower’s ability to make repayment from employment and other income. Management assesses the borrower’s ability and willingness to repay the debt through review of credit history and ratings, verification of employment and other income, review of debt-to-income ratios, and other measures of repayment ability. The Bank generally makes these loans in amounts of 80% or less of the value of the collateral or up to 95% of collateral value with private mortgage insurance. An appraisal from a qualified real estate appraiser or an evaluation based on comparable market values is obtained for substantially all loans secured by real estate. Residential construction loans are secured by residential real estate that generally will be occupied by the borrower upon completion. The Bank usually makes the permanent loan at the end of the construction phase. Generally, construction loans are made in amounts of 80% or less of the value of the as-completed collateral.

Home equity lines of credit are made to individuals and are secured by second or first mortgages on the borrower’s residence. Loans are based on similar credit and appraisal criteria used for residential real estate loans; however, loans up to 90% of the value of the property may be approved for borrowers with excellent credit histories. These loans typically bear interest at variable rates and require minimum monthly payments of the accrued interest.

Installment loans to individuals include unsecured loans and loans secured by recreational vehicles (“RVs”), automobiles, and other consumer assets. Consumer loans for the purchase of new RV’s and new automobiles generally do not exceed 125% of Dealer Invoice on RV’s or 110% of the Manufacturer’s Suggested Retail Price (MSRP) of an automobile. Loans for used RV’s and automobiles do not exceed 120% of the “clean trade-in value” as reported in the current “J.D. Power” used guides. Overdraft protection loans are unsecured personal lines of credit to individuals who have demonstrated good credit character with reasonably assured sources of income and satisfactory credit histories. Consumer loans generally involve more risk than residential mortgage loans because of the type and nature of collateral and, in certain types of consumer loans, absence of collateral. Since these loans are generally repaid from ordinary income of the individual or family unit, repayment may be adversely affected by job loss, divorce, ill health, or by a general decline in economic conditions. The Bank assesses the borrower’s ability and willingness to repay through a review of credit history, credit ratings, debt-to-income ratios, and other measures of repayment ability.

While CSB’s chief decision-makers monitor the revenue streams of the various financial products and services, operations are managed, and financial performance is evaluated, on a Company-wide basis. Accordingly, all of the Company’s banking operations are considered by management to be aggregated in one reportable operating segment. For a discussion of the Company’s financial performance for the fiscal year ended December 31, 2024, see the Consolidated Financial Statements and Notes to the Consolidated Financial Statements found in Item 8 of this Annual Report on Form 10-K.

Employees

On December 31, 2024, the Company had 181 employees, 156 of which were employed on a full-time basis. CSB has no separate employees not also employed by the Bank. No employees are covered by collective bargaining agreements. Employees are provided benefit programs, some of which are contributory. Management considers its employee relations to be good.

Competition

The financial services industry is highly competitive. In its primary market area of Holmes, Stark, Tuscarawas, Wayne and surrounding Ohio counties, the Bank competes for new deposit dollars and loans with other commercial banks, including both large regional banks and smaller community banks, as well as savings and loan associations, credit unions, finance companies, insurance companies, brokerage firms, investment companies, private lenders, and technology-based providers of financial services (sometimes referred to as “fintech” companies).

Competition within the financial service industry continues to increase as a result of mergers between, and expansion of, financial service providers within and outside of the Company’s primary market areas. In addition, securities firms and insurance companies that have elected to become financial holding companies may acquire commercial banks and other financial institutions, which can create additional competitive pressure.

Management believes the primary factors in competing for loans and deposits are interest rates, availability of services, quality of customer service, convenience, and name recognition. Some of the Company’s competitors may have greater resources and as such, higher lending limits, or fewer regulatory constraints and lower cost structures, all of which may adversely affect the Company’s ability to compete.

Investor Relations

The Company’s website address is www.csb1.com. The Company makes available its Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to those reports, free of charge on its website as soon as reasonably practicable after such material is electronically filed with the Securities and Exchange Commission (the “SEC”). The Company also makes available through its website, other reports filed with the SEC under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), including its proxy statements and reports filed by officers and directors under Section 16(a) of the Exchange Act, as well as the Company’s Code of Ethics. References to our website in this Annual Report on Form 10-K are provided as a convenience and do not constitute, and should not be deemed, an incorporation by reference of the information contained on, or available through, the website, and such information should not be considered part of this Annual Report on Form 10-K.

In addition, the Company’s filings are available on the SEC’s website at www.sec.gov free of charge as soon as reasonably practicable after the Company has filed the above referenced reports.

Supervision and Regulation of CSB and the Bank

CSB and the Bank are subject to extensive regulation by federal and state regulatory agencies. The regulation of financial holding companies and their subsidiaries by bank regulatory agencies is intended primarily for the protection of consumers, depositors, borrowers, the deposit insurance fund of the FDIC (the “DIF”), and the banking system as a whole and not for the protection of shareholders.

CSB is a bank holding company that has registered with the Federal Reserve Board (“FRB”) as a financial holding company under the Bank Holding Company Act of 1956, as amended (the “BHC Act”). Pursuant to the Gramm-Leach-Bliley Act of 1999 (“GLBA”), a qualifying bank holding company may elect to become a financial holding company and thereby affiliate with securities firms and insurance companies and engage in other activities that are financial in nature and not otherwise permissible for a bank holding company, if: (i) the holding company is "well managed" and "well capitalized" and (ii) each of its subsidiary banks (a) is well capitalized under the Federal Deposit Insurance Corporation Act of 1991 prompt corrective action provisions, (b) is well managed, and (c) has at least a "satisfactory" rating under the Community Reinvestment Act (the “CRA”). CSB has been a financial holding company since 2005. No regulatory approval is required for a financial holding company to acquire a company, other than a bank or savings association, engaged in activities that are financial in nature or incidental to activities that are financial in nature, as determined by the FRB. The financial holding company and its subsidiaries must continue to meet the above-described requirements in order to continue to engage in activities that are financial in nature without being subjected to regulatory action or restriction, which could include divestiture of the subsidiary or subsidiaries.

GLBA defines “financial in nature” to include securities underwriting, dealing, and market making; sponsoring mutual funds and investment companies; insurance underwriting and agency; merchant banking; and activities that the FRB has determined to be closely related to banking. CSB is also subject to the disclosure and regulatory requirements of the Securities Act of 1933, as amended, the Exchange Act, and the regulations rules and regulations promulgated thereunder, as administered by the SEC.

The Bank, as an Ohio state-chartered bank and member of the Federal Reserve System, is subject to regulation, supervision, and examination by the Ohio Division of Financial Institutions and the FRB. Because the FDIC insures its deposits, the Bank is also subject to certain FDIC regulations. The FDIC is an independent federal agency which insures the deposits, up to prescribed statutory limits, of federally insured banks and savings associations, and safeguards the safety and soundness of the financial institution industry. The Bank’s deposits are insured up to applicable limits by the DIF, and the Bank is subject to deposit insurance assessments to maintain the DIF. In addition, the Bank is subject to regulations promulgated by the Consumer Financial Protection Bureau (the “CFPB”), which was established by the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, as amended (the “Dodd-Frank Act”).

The earnings, dividends, and other aspects of the operations and activities of CSB and the Bank are affected by state and federal laws and regulations, and by policies of various regulatory authorities. These policies include, for example, statutory maximum lending rates, requirements on maintenance of reserves against deposits, domestic monetary policies of the FRB, United States fiscal and economic policies, international currency regulations and monetary policies, certain restrictions on relationships with many phases of the securities business, and capital adequacy and liquidity restraints.

The following information describes selected federal and state statutory and regulatory provisions that have, or could have, a material impact on the Company’s business. This discussion is qualified in its entirety by reference to the full text of the particular statutory or regulatory provisions contained or referenced herein.

Regulation of Bank Holding Companies

As a financial holding company, CSB’s activities are subject to regulation by the FRB. CSB is subject to regular examinations by the FRB and is required to file reports and such additional information as the FRB may require. The FRB has extensive enforcement authority over bank holding companies, including the ability to assess civil money penalties, issue cease and desist orders, and require that a bank holding company divest subsidiaries (including subsidiary banks). The FRB may initiate enforcement actions for violations of laws and regulations, and for unsafe and unsound practices. Under FRB policies, a bank holding company is expected to act as a “source of strength” to its subsidiary banks and to commit resources to support those subsidiary banks. Under this policy, the FRB may require a bank holding company to contribute additional capital to an undercapitalized subsidiary bank.

The BHC Act requires the prior approval of the FRB in cases where a bank holding company proposes to acquire direct or indirect ownership or control of more than 5% of the voting shares of any bank that is not already majority-owned by it, acquire all or substantially all of the assets of another bank or another financial or bank holding company, or merge or consolidate with any other financial or bank holding company.

Economic Growth, Regulatory Relief and Consumer Protection Act

On May 25, 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the “Regulatory Relief Act”) was signed into law. The Regulatory Relief Act repealed or modified certain provisions of the Dodd-Frank Act and eased regulations on all but the largest banks (those with consolidated assets in excess of $250 billion). Bank holding companies with consolidated assets of less than $100 billion, including CSB, are no longer subject to enhanced prudential standards. The Regulatory Relief Act also relieves bank holding companies and banks with consolidated assets of less than $100 billion, including CSB, from certain record-keeping, reporting and disclosure requirements. Certain other regulatory requirements applied only to banks with assets in excess of $50 billion and so did not apply to CSB even before the enactment of the Regulatory Relief Act.

Current Expected Credit Loss Model

In December 2019, the federal banking agencies issued a final rule to address regulatory treatment of credit loss allowances under the current expected credit loss ("CECL”) models. The rule revised the federal banking agencies’ regulatory capital rules to identify which credit loss allowances under the CECL model are eligible for inclusion in regulatory capital and to provide banking organizations the option to phase in over three years the day-one adverse effects on regulatory capital that may result from the adoption of the CECL model. Concurrent with the enactment of the Coronavirus Aid, Relief, and Economic Security Act of 2020, as amended, federal banking agencies issued an interim final rule that delayed the estimated impact on regulatory capital resulting from the adoption of CECL. The interim final rule provided banking organizations that implemented CECL prior to the end of 2020 the option to delay for two years the estimated impact of CECL on regulatory capital relative to regulatory capital determined under the prior incurred loss methodology, followed by a three-year transition period to phase out the aggregate amount of capital benefit provided during the initial two-year delay. On August 26, 2020, the federal banking agencies issued a final rule that made certain technical changes to the interim final rule, including expanding the pool of eligible institutions. The Bank adopted the CECL model January 1, 2023, since it is a smaller reporting company.

Regulatory Capital

The FRB adopted risk-based capital guidelines for bank holding companies and state member banks, designed to absorb losses. The guidelines provide a systematic analytical framework, which makes regulatory capital requirements sensitive to differences in risk profiles among banking organizations, takes off-balance sheet exposures expressly into account in evaluating capital adequacy and incentivizes holding liquid, low-risk assets. Capital levels as measured by these standards are also used to categorize financial institutions for purposes of certain Prompt Corrective Action regulatory provisions.

In July 2013, the United States banking regulators issued new capital rules applicable to smaller banking organizations which also implement certain of the provisions of the Dodd-Frank Act (the “Basel III Capital Rules”). Community banking organizations, including CSB, began transitioning to the new rules on January 1, 2015. The new minimum capital requirements became effective on January 1, 2015; while a new capital conservation buffer and deductions from common equity capital phased in from January 1, 2016 through January 1, 2019, and most deductions from common equity tier 1 capital phased in from January 1, 2015 through January 1, 2019.

The Basel III Capital Rules include (i) a minimum common equity tier 1 capital ratio of 4.5%, (ii) a minimum tier 1 capital ratio of 6.0%, (iii) a minimum total capital ratio of 8.0%, and (iv) a minimum leverage ratio of 4.0%. Common equity for the common equity tier 1 capital ratio includes common stock (plus related surplus) and retained earnings, plus limited amounts of minority interests in the form of common stock, less the majority of certain regulatory deductions.

Tier 1 capital includes common equity as defined for the common equity tier 1 capital ratio, plus certain non-cumulative preferred stock and related surplus, cumulative preferred stock and related surplus, and trust preferred securities that have been grandfathered (but which are not permitted going forward), and limited amounts of minority interests in the form of additional tier 1 capital instruments, less certain deductions.

Tier 2 capital, which can be included in the total capital ratio, includes certain capital instruments (such as subordinated debt) and limited amounts of the allowance for loan and lease losses, subject to new eligibility criteria, less applicable deductions.

The deductions from common equity tier 1 capital include goodwill and other intangibles, certain deferred tax assets, mortgage-servicing assets above certain levels, gains on sale in connection with a securitization, investments in a banking organization’s own capital instruments, and investments in the capital of unconsolidated financial institutions (above certain levels).

Under the guidelines, capital is compared to the relative risk related to the balance sheet. To derive the risk included in the balance sheet, one of several risk weights is applied to different balance sheet and off-balance sheet assets, primarily based on the relative credit risk of the counterparty. The capital amounts and classification are also subject to qualitative judgments by the regulators about components, risk weightings, and other factors.

The Basel III Capital Rules place restrictions on the payment of capital distributions, including dividends, and certain discretionary bonus payments to executive officers in the event the Company does not hold a capital conservation buffer of greater than 2.5% composed of common equity tier 1 capital above its minimum risk-based capital requirements, or if its eligible retained income is negative in that quarter and its capital conservation buffer ratio was less than 2.5% at the beginning of the quarter. Pursuant to the FRB’s Small Bank Holding Company Policy statement (“SBHC Policy”), as amended in September 2018, a bank holding company with assets of less than $3 billion and meeting certain other requirements is not required to comply with the consolidated capital requirements until such company exceeds $3 billion in assets or is otherwise determined by the FRB not to qualify as a small bank holding company. On December 31, 2023, CSB was deemed to be a small bank holding company under the SBHC Policy and was not required to comply with the FRB’s regulatory capital requirements. The Bank, however, must comply with the new capital requirements.

The implementation of the Basel III Capital Rules did not have a material impact on CSB’s or the Bank’s capital ratios.

Prompt Corrective Action

The federal banking agencies have established a system of “prompt corrective action” to resolve certain of the problems of undercapitalized institutions. This system is based on five capital level categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized”, and “critically undercapitalized.”

The federal banking agencies may (or in some cases must) take certain supervisory actions depending upon a bank’s capital level. For example, the banking agencies must appoint a receiver or conservator for a bank within 90 days after it becomes “critically undercapitalized” unless the bank’s primary regulator determines, with the concurrence of the FDIC, that other action would better achieve regulatory purposes. Banking operations otherwise may be significantly affected depending on a bank’s capital category. For example, a bank that is not “well capitalized” generally is prohibited from accepting brokered deposits and offering interest rates on deposits higher than the prevailing rate in its market, and the holding company of any undercapitalized depository institution must guarantee, in part, specific aspects of the bank’s capital plan for the plan to be acceptable.

In order to be “well-capitalized,” a bank must have a minimum common equity tier 1 capital ratio of 6.5%, a total risk-based capital ratio of at least 10.0%, a tier 1 risk-based capital ratio of at least 8.0%, and a leverage ratio of at least 5.0%, and the bank must not be subject to any written agreement, order, capital directive, or prompt corrective action directive to meet and maintain a specific capital level for any capital measure.

As of December 31, 2023, the Bank met the ratio requirements in effect at that date to be deemed “well-capitalized.” See Note 12 – Regulatory Matters of the Notes to Consolidated Financial Statements, located in Item 8 Financial Statements and Supplementary Data of this 10-K.

Deposit Insurance

Substantially all of the deposits of the Bank are insured up to applicable limits by the DIF, and the Bank is assessed quarterly deposit insurance premiums to maintain the DIF. Insurance premiums for each insured institution are determined based upon the institution’s capital level and supervisory rating provided to the FDIC by the institution’s primary federal regulator and other information deemed by the FDIC to be relevant to the risk posed to the DIF by the institution. The assessment rate is then applied to the amount of the institution’s assessment base to determine the institution’s insurance premium. The deposit insurance assessment base is calculated on average assets less average tangible equity.

The FDIC assesses a quarterly deposit insurance premium on each insured institution based on risk characteristics of the insured institution and may also impose special assessments in emergency situations. The premiums fund the DIF. Pursuant to the Dodd-Frank Act, the FDIC has established reserve ratios. On June 30, 2019, the reserve ratios were met and the FDIC applied credits for banks with assets of less than $10 billion ("small bank credits") beginning September 30, 2019 through the June 2020 premium payment. The FDIC rules further changed the method of determining risk-based assessment rates for established banks with less than $10 billion in assets to better ensure that banks taking on greater risks pay more for deposit insurance than banks that take on less risk. As of June 30, 2020, the FDIC’s designated reserve ratio (“DRR”) fell below the statutory minimum DRR of 1.35%, to 1.30%. As a result, the FDIC adopted a restoration plan requiring the restoration of the DRR to 1.35% within eight years (September 30, 2028). The FDIC rules further changed the method of determining risk-based assessment rates for established banks with less than $10 billion in assets to better ensure that banks taking on greater risks pay more for deposit insurance than banks that take on less risk. In the FDIC’s most recent semiannual update for the Amended Restoration Plan in November 2023, the FDIC noted that increased loss provisions associated with the failures of Silicon Valley Bank, Signature Bank and First Republic Bank in 2023 that reduced the DIF balance, coupled with strong growth in insured deposits, resulted in the reserve ratio declining 15 basis points from 1.25% as of December 31, 2022 to 1.10% as of June 30, 2023. Despite the decline in the reserve ratio, the FDIC staff projected that the reserve ratio remains on track to reach the statutory minimum of 1.35% ahead of the deadline of September 30, 2028. As a result, the FDIC staff recommended no changes to the Amended Restoration Plan and all scheduled assessment rates were maintained.

On November 16, 2023, the FDIC adopted a final rule implementing a special assessment to recover the loss to the DIF arising from the protection of uninsured depositors following the failures of Silicon Valley Bank and Signature Bank. The assessment base for the special assessment is equal to an insured depository institution’s estimated uninsured deposits reported for the quarter ended December 31, 2022, adjusted to exclude the first $5 billion in estimated uninsured deposits. The FDIC will collect the special assessment at an annual rate of approximately 13.4 basis points, over eight quarterly assessment periods, beginning with the first quarter of 2024. Because the Bank’s uninsured deposits were less than $5 billion for the quarter ended December 31, 2022, the Bank will not be subject to this special assessment.

As insurer, the FDIC is authorized to conduct examinations of, and to require reporting by, federally insured institutions. It also may prohibit any federally insured institution from engaging in any activity the FDIC determines by regulation or order to pose a serious threat to the DIF. The FDIC also has the authority to take enforcement actions against insured institutions. Insurance of deposits may be terminated by the FDIC upon a finding that the institution has engaged or is engaging in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order, or condition imposed by the FDIC or written agreement entered into with the FDIC.

The management of the Bank does not know of any practice, condition, or violation that might lead to termination of deposit insurance.

Limits on Dividends and Other Payments

There are various legal limitations on the extent to which subsidiary banks may finance or otherwise supply funds to their parent holding company. Under applicable federal and state laws, a subsidiary bank may not, subject to certain limited exceptions, make loans or extensions of credit to, or investments in the securities of, its parent holding company. Subsidiary banks are also subject to collateral security requirements for any loan or extension of credit permitted by such exceptions.

Payments of dividends by the Bank are limited by applicable state and federal laws and regulations. The ability of CSB to obtain funds for the payment of dividends and for other cash requirements is largely dependent on the amount of dividends that may be declared by the Bank. However, the FRB expects CSB to serve as a source of strength for the Bank and may require CSB to retain capital for further investment in the Bank, rather than pay dividends to CSB shareholders. Payment of dividends by the Bank may be restricted at any time at the discretion of its applicable regulatory authorities if they deem such dividends to constitute an unsafe or unsound banking practice. These provisions could have the effect of limiting CSB’s ability to pay dividends on its common shares.

FRB policy requires CSB to provide notice to the FRB in advance of the payment of a dividend to CSB’s shareholders under certain circumstances and states that insured banks and bank holding companies should generally only pay dividends out of current operating earnings. Additionally, the Ohio Revised Code restricts the amount a Bank can dividend if the total amount of all dividends, including the proposed dividend, declared by the Bank in any calendar year exceeds the total of its retained net income of that year to date, combined with its retained net income of the two preceding years, unless the dividend is approved by the Ohio Division of Financial Institutions.

Consumer Protection Laws and Regulations

Banks are subject to regular examination to ensure compliance with federal statutes and regulations applicable to their business, including consumer protection statutes and implementing regulations. The Dodd-Frank Act established the CFPB, which has extensive regulatory and enforcement powers over consumer financial products and services. The CFPB has adopted numerous rules with respect to consumer protection laws, amending some existing regulations and adopting new ones, and has commenced enforcement actions against various parties. The following are just some of the consumer protection laws applicable to the Bank:

The banking regulators also use their authority under the Federal Trade Commission Act to take supervisory or enforcement action with respect to unfair or deceptive acts or practices by banks that may not necessarily fall within the scope of specific banking or consumer finance law.

Community Reinvestment Act

CRA requires depository institutions to assist in meeting the credit needs of their market areas, including low- and moderate-income areas, consistent with safe and sound banking practice. Under this Act, each institution is required to adopt a statement for each of its market areas describing the depository institution’s efforts to assist in its community’s credit needs. Depository institutions are periodically examined for compliance and assigned one of four ratings: outstanding, satisfactory, needs improvement, or substantial noncompliance. The rating assigned to a financial institution is considered in connection with various applications submitted by a financial institution or its holding company to its banking regulators, including applications to acquire another financial institution or to open a new branch office. In addition, all subsidiary banks of a financial holding company must maintain a satisfactory or outstanding rating in order for the financial holding company to avoid limitations on its activities. The Bank received a rating of “outstanding" in its most recent CRA examination.

On October 24, 2023, the federal banking agencies, including the Federal Reserve Board, issued a final rule designed to strengthen and modernize the regulations implementing the CRA. The changes are designed to encourage banks to expand access to credit, investment and banking services in low- and moderate-income communities, adapt to changes in the banking industry, including mobile and internet banking, provide greater clarity and consistency in the application of the CRA regulations, and tailor CRA evaluations and data collection to bank size and type. The applicability date for the majority of the changes to the CRA regulations is January 1, 2026, and additional requirements will be applicable on January 1, 2027. CSB cannot predict the impact the changes to the CRA will have on its operations at this time.

Customer Privacy

Under the GLBA, federal banking agencies have adopted rules that limit the ability of banks and other financial institutions to disclose non-public information about consumers to nonaffiliated third parties. These limitations require distribution of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to nonaffiliated third parties.

USA Patriot Act

The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001, as amended (the “Patriot Act”), and related regulations require regulated financial institutions to establish a program specifying procedures for obtaining identifying information from customers seeking to open new accounts and establish enhanced due diligence policies, procedures and controls designed to detect and report suspicious activity.

The Anti-Money Laundering Act of 2020 (the “AMLA”), which amends the Bank Secrecy Act of 1970 (the “BSA”), was enacted in January 2021. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws. Among other things, it codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards for evaluating technology and internal processes for BSA compliance; expands enforcement-related and investigation-related authority, including increasing available sanctions for certain BSA violations and instituting BSA whistleblower initiatives and protections.

The Bank has established policies and procedures to be compliant with the requirements of the Patriot Act and the AMLA.

Office of Foreign Assets Control Regulation

The United States Treasury Department’s Office of Foreign Assets Control (“OFAC”) administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. CSB is responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious financial, legal and reputational consequences, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and civil money penalties against institutions found to be violating these obligations.

Cybersecurity

In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish several lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing Internet-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption, and maintenance of the financial institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the financial institution or its critical service providers fall victim to this type of cyber-attack. If CSB fails to observe the regulatory guidance, it could be subject to various regulatory sanctions, including financial penalties.

In February 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.

In November 2021, federal banking agencies issued a final rule that became effective in May 2022 requiring banking organizations that experience a cybersecurity incident to notify certain entities. A cybersecurity incident occurs when actual or potential harm to the confidentiality, integrity, or availability of information or an information system occurs, or there is a violation or imminent threat of a violation to banking security policies and procedures. The affected bank must notify its respective federal regulator of the cybersecurity incident as soon as possible and no later than 36 hours after the bank determines a cybersecurity incident that rises to the level of a notification incident has occurred. These notifications are intended to promote early awareness of threats to banking organizations and will help banks react to those threats before they manifest into larger incidents. This rule also requires bank service providers to notify their bank organization customers of a cybersecurity incident that has caused, or is reasonably likely to cause, a material service disruption or degradation for four or more hours.

Furthermore, once final rules are adopted, the Cyber Incident Reporting for Critical Infrastructure Act, enacted in March 2022, will require certain covered entities to report a covered cyber incident to the U.S. Department of Homeland Security’s Cybersecurity & Infrastructure Security Agency (“CISA”) within 72 hours after it reasonably believes an incident has occurred. Separate reporting to CISA will also be required within 24 hours, if a ransom payment is made as a result of a ransomware attack.

On July 26, 2023, the SEC adopted final rules that require public companies to promptly disclose material cybersecurity incidents in a Current Report on Form 8-K and detailed information regarding their cybersecurity risk management, strategy, and governance on an annual basis in an Annual Report on Form 10-K. Companies are required to report on Form 8-K any cybersecurity incident they determine to be material within four business days of making that determination. See Item 1C “Cybersecurity” in Part I of this Form 10-K. These SEC rules, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. CSB expects this trend of state-level activity in those areas to continue and is continually monitoring developments in the states in which our customers are located.

Effect of Environmental Regulation

Compliance with federal, state, and local provisions regulating the discharge of materials into the environment, or otherwise relating to the protection of the environment, has not had a material effect upon the capital expenditures, earnings, or competitive position of CSB or its subsidiaries. CSB believes the nature of the operations of its subsidiaries has little, if any, environmental impact. CSB, therefore, anticipates no material capital expenditures for environmental control facilities for its current fiscal year or for the foreseeable future.

CSB believes its primary exposure to environmental risk is through the lending activities of the Bank. In cases where management believes environmental risk potentially exists, the Bank mitigates environmental risk exposure by requiring environmental site assessments at the time of loan origination to confirm collateral quality as to commercial real estate parcels posing higher than normal potential for environmental impact, as determined by reference to present and past uses of the subject property and adjacent sites.

Executive and Incentive Compensation

Following the adoption of additional listing requirements in 2023 to comply with the Dodd-Frank Act and rules adopted by the SEC in October 2022, public companies listed on the NYSE or Nasdaq are now required to adopt and implement “clawback” procedures policies for incentive compensation payments and to disclose the details of the procedures, which allow recovery of incentive compensation that was paid on the basis of erroneous financial information necessitating an accounting restatement due to material noncompliance with financial reporting requirements. This clawback policy is intended to apply to compensation paid within the three completed fiscal years immediately preceding the date the issuer is required to prepare a restatement a three-year look-back window of the restatement and would cover all executives (including former executives) who received incentive awards. CSB adopted a clawback policy effective December 1, 2023, though it is not required to do so.

Future Legislation

Various and significant legislation affecting financial institutions and the financial industry is from time to time adopted by the U.S. Congress and state legislatures, and regulatory agencies frequently adopt or amend regulations. Such legislation and regulation may continue to change banking laws and regulations and the operating environment of CSB and its subsidiaries in substantial and unpredictable ways and could significantly increase or decrease costs of doing business, limit or expand permissible activities, or affect the competitive balance among financial institutions. The nature and extent of future legislative and regulatory changes affecting financial institutions remains very unpredictable.

Statistical Disclosures

The following schedules present, for the periods indicated, certain financial and statistical information of the Company as required under the SEC’s “Subpart 1400 of regulation S-K”, as amended on September 11, 2020, or a specific reference as to the location of required disclosures in Item 7 Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) or Item 8 Financial Statements and Supplementary Data of this Annual Report on Form 10-K.

Distribution of Assets, Liabilities, and Stockholders’ Equity; Interest Rates and Interest Differential

The information set forth under the heading, “Average Balance Sheets and Net Interest Margin Analysis” located in the MD&A is incorporated by reference herein.

The information set forth under the heading, “Rate/Volume Analysis of Changes in Income and Expense” located in the MD&A is incorporated by reference herein.

Investment Portfolio

The following is a schedule of maturities for each category of debt securities and the related weighted average yield of such securities as of December 31, 2024:

The weighted average yields are calculated using amortized cost of investments and are based on coupon rates for securities purchased at par value, and on effective interest rates considering amortization or accretion if securities were purchased at a premium or discount. The weighted average yield on tax-exempt obligations is presented on a tax-equivalent basis using the Company’s marginal federal income tax rate of 21%.

Loan Portfolio

The following is a schedule of maturities of loans based on contract terms and assuming no amortization or prepayments, as of December 31, 2024:

The following is a schedule of fixed rate and variable rate loans due after one year from December 31, 2024.

Summary of Credit Loss Experience

The following schedule presents an analysis of net charge-offs (recoveries) to average loans, and related ratios for the years ended:

The following schedule is a breakdown of the allowance for credit losses allocated by type of loan and related ratios. While management’s periodic analysis of the adequacy of the allowance for credit losses may allocate portions of the allowance for specific problem-loan situations, the entire allowance is available for any loan charge-offs that occur.