First National Corporation

Item 1A. Risk Factors

Except for the following risks related to the acquisition of Touchstone, there were no material changes to the Companys risk factors as disclosed in its Annual Report on Form 10-K for the year ended December 31, 2023.

Risks Related to the Acquisition of Touchstone

Combining Touchstone into the Company may be more difficult, costly or time-consuming than we expect.

The success of the Merger will depend, in part, on the Companys ability to realize the anticipated benefits and cost savings from combining the business of Touchstone into the business of the Company without materially disrupting the existing customer relationships of Touchstone or the Company. If the Company is not able to achieve these objectives, the anticipated benefits and cost savings of the Merger may not be realized fully, or at all, or may take longer to realize than expected.

The success of the Merger will depend, in part, on the Companys ability to successfully combine the businesses of the Company and Touchstone. To realize these anticipated benefits, the Company will integrate Touchstones business into its own. The integration process in the Merger could result in the disruption of ongoing business, inconsistencies in standards, controls, procedures, and policies that affect adversely the Companys ability to maintain relationships with customers and employees or achieve the anticipated benefits of the Merger. If the Company experiences difficulties with the integration process, the anticipated benefits of the Merger may not be realized, fully or at all, or may take longer to realize than expected. As with any merger of financial institutions, there also may be disruptions that cause the Company to lose customers or cause customers to withdraw their deposits from Touchstone or the Bank, or other unintended consequences that could have a material adverse effect on the Companys results of operations or financial condition after the Merger. These integration matters could have an adverse effect on the Company for an indeterminate period after consummation of the Merger.

The Company may not be able to effectively integrate the operations of Touchstone into the Bank.

The future operating performance of the Company and the Bank will depend, in part, on the success of the merger of Touchstone with and into the Bank. The success of the subsidiary bank merger will, in turn, depend on a number of factors, including the Companys ability to (i) integrate the operations and branches of Touchstone and the Bank, (ii) retain the deposits and customers of Touchstone and the Bank, (iii) control the incremental increase in noninterest expense arising from the Merger in a manner that enables the combined bank to improve its overall operating efficiencies, and (iv) retain and integrate the appropriate personnel of Touchstone into the operations of the Bank, and reduce overlapping bank personnel. The integration of Touchstone and the Bank will require the dedication of the time and resources of the Banks management and may temporarily distract managements attention from the day-to-day business of the Bank. If the Bank is unable to successfully integrate Touchstone, the Bank may not be able to realize expected operating efficiencies and eliminate redundant costs.

Regulatory approvals may not be received, may take longer than expected, or may impose conditions that are not presently anticipated or that could have an adverse effect on the combined company following the Merger.

Before the Merger may be completed, the Company and the Bank must obtain approvals from the Federal Reserve and the Virginia Bureau of Financial Institutions. Other approvals, waivers or consents from regulators may also be required. These regulators may impose conditions on the completion of the Merger or require changes to the terms of the Merger. Such conditions or changes and the process of obtaining regulatory approvals could have the effect of delaying completion of the Merger and the subsidiary bank merger, imposing additional costs on the combined company or limiting the revenues of the combined company, any of which might have an adverse effect on the combined company following the Merger.

A significant delay in the completion of the Merger could have a material adverse effect on the Company and Touchstone as a combined company.

The merger agreement with Touchstone is subject to a number of conditions that must be fulfilled in order to complete the Merger. Those conditions include, among others: (1) approval of the Merger by the Companys and Touchstones shareholders, (2) receipt of all required approvals from bank regulatory authorities and expiration of all applicable waiting periods, (3) absence of any law or order prohibiting or restricting the completion of the Merger, and (4) effectiveness of the Companys registration statement filed with the SEC. Certain costs relating to the Merger, such as legal, accounting and financial advisory fees, must be paid even if the Merger is not completed. If the Merger is not completed, the Company would have to recognize these expenses and its management would have committed substantial time and resources without realizing the expected benefits of the Merger.

If these conditions to the completion of the Merger are not fulfilled when expected and, as a result, the completion of the Merger is delayed, the diversion of management attention from pursuing other opportunities, the constraints in the merger agreement on the ability to make significant changes to each companys ongoing business during the pendency of the Merger, the incurrence of additional merger related expenses, and other market and economic factors could have a material adverse effect on the combined company's business, financial condition and results of operations.

The Company and Touchstone will be subject to business uncertainties and contractual restrictions while the Merger is pending.

Uncertainty about the effect of the Merger on employees and customers may have an adverse effect on the Company and Touchstone. These uncertainties may impair the Companys and Touchstones ability to attract, retain and motivate key personnel until the Merger is completed, and could cause customers and others that deal with the Company and Touchstone to seek to change existing business relationships with the Company and Touchstone. Retention of certain employees by the Company and Touchstone may be challenging while the Merger is pending, as certain employees may experience uncertainty about their future roles with the Company or Touchstone. If key employees depart because of issues relating to the uncertainty and difficulty of integration or a desire not to remain with the Company or Touchstone, the Companys or Touchstones business, or the business of the combined company following the Merger, could be harmed. In addition, subject to certain exceptions, the Company and Touchstone have each agreed to operate its business in the ordinary course prior to closing and refrain from taking certain specified actions until the Merger occurs, which may prevent the Company from pursuing attractive business opportunities that may arise prior to the completion of the Merger.

43

43