UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d)

OF THE SECURITIES EXCHANGE ACT OF 1934

For the Fiscal Year Ended

December 31, 2022

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d)

OF THE SECURITIES EXCHANGE ACT OF 1934

For the Transition Period From

(Not Applicable)

Commission File Number 001-36636

(Exact name of the registrant as specified in its charter)

Delaware	05-0412693
(State or Other Jurisdiction of Incorporation or Organization)	(I.R.S. Employer Identification Number)

One Citizens Plaza, Providence, RI 02903

(Address of principal executive offices, including zip code)

(203) 900-6715

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Title of each class	Trading symbol(s)	Name of each exchange on which registered
Common stock, $0.01 par value per share	CFG	New York Stock Exchange
Depositary Shares, each representing a 1/40th interest in a share of 6.350% Fixed-to-Floating Rate Non-Cumulative Perpetual Preferred Stock, Series D	CFG PrD	New York Stock Exchange
Depositary Shares, each representing a 1/40th interest in a share of 5.000% Fixed-Rate Non-Cumulative Perpetual Preferred Stock, Series E	CFG PrE	New York Stock Exchange

Securities registered pursuant to Section 12(g) of the Act:

None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. ☑ Yes ☐ No

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. ☐ Yes ☑ No

Indicate by check mark whether the Registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports) and (2) has been subject to such filing requirements for the past 90 days. ☑ Yes ☐ No

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). ☑ Yes ☐ No

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act:

Large accelerated filer	☑	Accelerated filer	☐
Non-accelerated filer	☐	Smaller reporting company	☐
		Emerging growth company	☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☑

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). ☐ Yes ☑ No

The aggregate market value of voting stock held by non-affiliates of the registrant was $17,591,222,864 (based on the June 30, 2022 closing price of Citizens Financial Group, Inc. common shares of $35.69 as reported on the New York Stock Exchange). There were 484,106,460 shares of the registrant’s common stock ($0.01 par value) outstanding on January 31, 2023.

Documents incorporated by reference

Portions of Citizens Financial Group, Inc.’s proxy statement to be filed with the United States Securities and Exchange Commission in connection with Citizens Financial Group, Inc.’s 2023 annual meeting of stockholders (the “Proxy Statement”) are incorporated by reference into Part III hereof. Such Proxy Statement will be filed within 120 days of Citizens Financial Group, Inc.’s fiscal year ended December 31, 2022.

	Table of Contents
		Page
Glossary of Acronyms and Terms		2
Forward-looking Statements		5
Part I.
Item 1. Business		6
Item 1A. Risk Factors		20
Item 1B. Unresolved Staff Comments		35
Item 2. Properties		35
Item 3. Legal Proceedings		35
Item 4. Mine Safety Disclosures		35
Part II.
Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities		35
Item 6. Reserved		37
Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations		38
Item 7A. Quantitative and Qualitative Disclosures about Market Risk		78
Item 8. Financial Statements and Supplementary Data		79
Consolidated Balance Sheets		86
Consolidated Statements of Operations		87
Consolidated Statements of Comprehensive Income		88
Consolidated Statements of Changes in Stockholders’ Equity		89
Consolidated Statements of Cash Flows		90
Notes to Consolidated Financial Statements		92
Item 9. Changes in and Disagreements With Accountants on Accounting and Financial Disclosure		153
Item 9A. Controls and Procedures		154
Item 9B. Other Information		154
Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections		154
Part III.
Item 10. Directors, Executive Officers and Corporate Governance		155
Item 11. Executive Compensation		155
Item 12. Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters		155
Item 13. Certain Relationships and Related Transactions, and Director Independence		155
Item 14. Principal Accountant Fees and Services		156
Part IV.
Item 15. Exhibits and Financial Statement Schedules		156
Item 16. Form 10-K Summary		159
Signatures		160

Citizens Financial Group, Inc. | 1

GLOSSARY OF ACRONYMS AND TERMS

    The following is a list of common acronyms and terms we regularly use in our financial reporting:

AACL	Adjusted Allowance for Credit Losses
ACL	Allowance for Credit Losses: Allowance for Loan and Lease Losses plus Allowance for Unfunded Lending Commitments
AFS	Available for Sale
ALLL	Allowance for Loan and Lease Losses
ALM	Asset and Liability Management
AOCI	Accumulated Other Comprehensive Income (Loss)
ARRC	Alternative Reference Rates Committee
ASU	Accounting Standards Update
ATM	Automated Teller Machine
Bank Holding Company Act	The Bank Holding Company Act of 1956
BHC	Bank Holding Company
Board or Board of Directors	The Board of Directors of Citizens Financial Group, Inc.
bps	Basis Points
Capital Plan Rule	Federal Reserve Regulation Y Capital Plan Rule
CARES Act	Coronavirus Aid, Relief, and Economic Security Act
CBNA	Citizens Bank, National Association
CCAR	Comprehensive Capital Analysis and Review
CCB	Capital Conservation Buffer
CCMI	Citizens Capital Markets, Inc.
CECL	Current Expected Credit Losses (ASU 2016-13, Financial Instruments—Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments)
CET1	Common Equity Tier 1
CEO	Chief Executive Officer
CET1 capital ratio	Common Equity Tier 1 capital divided by total risk-weighted assets as defined under the U.S. Basel III Standardized approach
CFPB	Consumer Financial Protection Bureau
CFTC	Commodity Futures Trading Commission
Citizens, CFG, the Company, we, us, or our	Citizens Financial Group, Inc. and its Subsidiaries
CLO	Collateralized Loan Obligation
CLTV	Combined Loan-to-Value
CMO	Collateralized Mortgage Obligation
COVID	Coronavirus Disease
CRA	Community Reinvestment Act
CRE	Commercial Real Estate
DE&I	Diversity, Equity and Inclusion
DH Capital	DH Capital, LLC
DIF	Deposit Insurance Fund
Dodd-Frank Act	The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010
EAD	Exposure at Default
EPS	Earnings Per Share
ERISA	Employee Retirement Income Security Act of 1974
ESG	Environmental, Social, and Governance
ESPP	Employee Stock Purchase Program

Citizens Financial Group, Inc. | 2

EVE	Economic Value of Equity
Exchange Act	The Securities Exchange Act of 1934, as amended
Fannie Mae (FNMA)	Federal National Mortgage Association
FASB	Financial Accounting Standards Board
FCA	Financial Conduct Authority
FDIA	Federal Deposit Insurance Act
FDIC	Federal Deposit Insurance Corporation
Federal Banking Regulators	Board of Governors of the Federal Reserve System, Federal Deposit Insurance Corporation and Office of the Comptroller of the Currency
FFIEC	Federal Financial Institutions Examination Council
FHA	Federal Housing Administration
FHC	Financial Holding Company
FHLB	Federal Home Loan Bank
FICO	Fair Isaac Corporation (credit rating)
FINRA	Financial Industry Regulation Authority
FRB or Federal Reserve	Board of Governors of the Federal Reserve System and, as applicable, Federal Reserve Bank(s)
Freddie Mac (FHLMC)	Federal Home Loan Mortgage Corporation
FTE	Fully Taxable Equivalent
FTP	Funds Transfer Pricing
GAAP	Accounting Principles Generally Accepted in the United States of America
GDP	Gross Domestic Product
GLBA	Gramm-Leach-Bliley Act of 1999
Ginnie Mae (GNMA)	Government National Mortgage Association
GSE	Government Sponsored Entity
HSBC	HSBC Bank U.S.A., N.A.
HSBC transaction	Acquisition of HSBC East Coast branches and national online deposit business
HTM	Held To Maturity
ICE	Intercontinental Exchange
Investors	Investors Bancorp, Inc. and its subsidiaries
JMP	JMP Group LLC
Last-of-Layer	Last-of-layer is a fair value hedge of the interest rate risk of a portfolio of similar prepayable assets whereby the last dollar amount within the portfolio of assets is identified as the hedged item
LHFS	Loans Held for Sale
LGD	Loss Given Default
LIBOR	London Interbank Offered Rate
LIHTC	Low Income Housing Tax Credit
LTV	Loan to Value
MD&A	Management’s Discussion and Analysis of Financial Condition and Results of Operations
Mid-Atlantic	District of Columbia, Delaware, Maryland, New Jersey, New York, Pennsylvania, Virginia, and West Virginia
Midwest	Illinois, Indiana, Michigan, and Ohio
Modified AACL Transition	The Day-1 CECL adoption entry booked to ACL plus 25% of subsequent CECL ACL reserve build
Modified CECL Transition	The Day-1 CECL adoption entry booked to retained earnings plus 25% of subsequent CECL ACL reserve build
MSRs	Mortgage Servicing Rights

Citizens Financial Group, Inc. | 3

NCOs	Net charge-offs
New England	Connecticut, Maine, Massachusetts, New Hampshire, Rhode Island, and Vermont
NM	Not meaningful
NSFR	Net Stable Funding Ratio
OCC	Office of the Comptroller of the Currency
OCI	Other Comprehensive Income (Loss)
OFAC	Office of Foreign Assets Control
Operating Leverage	Period-over-period percent change in total revenue, less the period-over-period percent change in noninterest expense
OTC	Over the Counter
Parent Company	Citizens Financial Group, Inc. (the Parent Company of Citizens Bank, National Association and other subsidiaries)
PCD	Purchased Credit Deteriorated
PD	Probability of Default
peers or peer regional banks	Comerica, Fifth Third, Huntington, KeyCorp, M&T, PNC, Regions, Truist and U.S. Bancorp
PPP	The U.S. Small Business Administration’s Paycheck Protection Program
REIT	Real estate investment trust
ROTCE	Return on Average Tangible Common Equity
RPA	Risk Participation Agreement
RWA	Risk-Weighted Assets
SBA	United States Small Business Administration
SCB	Stress Capital Buffer
SEC	United States Securities and Exchange Commission
SOFR	Secured Overnight Financing Rate
SVaR	Stressed Value at Risk
Tailoring Rules	Rules establishing risk-based categories for determining prudential standards for large U.S. and foreign banking organizations, consistent with the Dodd-Frank Act, as amended by the Economic Growth, Regulatory Relief and Consumer Protection Act
TBAs	To-Be-Announced Mortgage Securities
TDR	Troubled Debt Restructuring
Tier 1 capital ratio	Tier 1 capital, which includes Common Equity Tier 1 capital plus non-cumulative perpetual preferred equity that qualifies as additional tier 1 capital, divided by total risk-weighted assets as defined under the U.S. Basel III Standardized approach
Tier 1 leverage ratio	Tier 1 capital, which includes Common Equity Tier 1 capital plus non-cumulative perpetual preferred equity that qualifies as additional tier 1 capital, divided by quarterly adjusted average assets as defined under the U.S. Basel III Standardized approach
TOP	Tapping Our Potential
Total capital ratio	Total capital, which includes Common Equity Tier 1 capital, tier 1 capital and allowance for credit losses and qualifying subordinated debt that qualifies as tier 2 capital, divided by total risk-weighted assets as defined under the U.S. Basel III Standardized approach
USDA	United States Department of Agriculture
VA	United States Department of Veterans Affairs
VaR	Value at Risk
VIE	Variable Interest Entities

Citizens Financial Group, Inc. | 4

FORWARD-LOOKING STATEMENTS

    This document contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. Any statement that does not describe historical or current facts is a forward-looking statement. These statements often include the words “believes,” “expects,” “anticipates,” “estimates,” “intends,” “plans,” “goals,” “targets,” “initiatives,” “potentially,” “probably,” “projects,” “outlook,” “guidance” or similar expressions or future conditional verbs such as “may,” “will,” “should,” “would,” and “could.”

    Forward-looking statements are based upon the current beliefs and expectations of management, and on information currently available to management. Our statements speak as of the date hereof, and we do not assume any obligation to update these statements or to update the reasons why actual results could differ from those contained in such statements in light of new information or future events. We caution you, therefore, against relying on any of these forward-looking statements. They are neither statements of historical fact nor guarantees or assurances of future performance. While there is no assurance that any list of risks and uncertainties or risk factors is complete, important factors that could cause actual results to differ materially from those in the forward-looking statements include the following, without limitation:

•Negative economic, business and political conditions, including as a result of the interest rate environment, supply chain disruptions, inflationary pressures and labor shortages, that adversely affect the general economy, housing prices, the job market, consumer confidence and spending habits;

•The rate of growth in the economy and employment levels, as well as general business and economic conditions, and changes in the competitive environment;

•Our ability to implement our business strategy, including the cost savings and efficiency components, and achieve our financial performance goals, including through the integration of Investors and the HSBC branches;

•The effects of geopolitical instability, including as a result of Russia’s invasion of Ukraine and the imposition of sanctions on Russia and other actions in response, on economic and market conditions, inflationary pressures and the interest rate environment, commodity price and foreign exchange rate volatility, and heightened cybersecurity risks;

•Our ability to meet heightened supervisory requirements and expectations;

•Liabilities and business restrictions resulting from litigation and regulatory investigations;

•Our capital and liquidity requirements under regulatory capital standards and our ability to generate capital internally or raise capital on favorable terms;

•The effect of changes in interest rates on our net interest income, net interest margin and our mortgage originations, mortgage servicing rights and mortgages held for sale;

•Changes in interest rates and market liquidity, as well as the magnitude of such changes, which may reduce interest margins, impact funding sources and affect the ability to originate and distribute financial products in the primary and secondary markets;

•The effect of changes in the level of checking or savings account deposits on our funding costs and net interest margin;

•Financial services reform and other current, pending or future legislation or regulation that could have a negative effect on our revenue and businesses;

•Environmental risks, such as physical or transitional risks associated with climate change, and social and governance risks, that could adversely affect our reputation, operations, business, and customers;

•A failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors or other service providers, including as a result of cyber-attacks; and

•Management’s ability to identify and manage these and other risks.

Citizens Financial Group, Inc. | 5

    In addition to the above factors, we also caution that the actual amounts and timing of any future common stock dividends or share repurchases will be subject to various factors, including our capital position, financial performance, capital impacts of strategic initiatives, market conditions, receipt of required regulatory approvals and other regulatory considerations, as well as any other factors that our Board of Directors deems relevant in making such a determination. Therefore, there can be no assurance that we will repurchase shares from or pay any dividends to holders of our common stock, or as to the amount of any such repurchases or dividends.

    More information about factors that could cause actual results to differ materially from those described in the forward-looking statements can be found under Item 1A “Risk Factors”.

PART I

ITEM 1. BUSINESS

Citizens Financial Group, Inc. is headquartered in Providence, Rhode Island. We offer a broad range of retail and commercial banking products and services to individuals, small businesses, middle-market companies, large corporations and institutions. Our products and services are offered through more than 1,100 branches in 14 states and the District of Columbia and 123 retail and commercial non-branch offices, though certain lines of business serve national markets. At December 31, 2022, we had total assets of $226.7 billion, total deposits of $180.7 billion and total stockholders’ equity of $23.7 billion.

We are a BHC incorporated under Delaware state law in 1984 and our primary federal regulator is the FRB. CBNA is our banking subsidiary, whose primary federal regulator is the OCC.

Business Segments

We manage our business through two business segments: Consumer Banking and Commercial Banking. For additional information regarding our business segments see the “Business Operating Segments” section of Item 7 and Note 26 in Item 8. Our activities outside these segments are classified as “Other” and include treasury activities, wholesale funding activities, the securities portfolio, community development assets, and other unallocated assets, liabilities, capital, revenues, provision for credit losses and expenses, including income tax expense.

Consumer Banking Segment

Consumer Banking serves retail customers and small businesses with annual revenues of up to $25 million, with products and services that include deposit products, mortgage and home equity lending, credit cards, business loans, wealth management and investment services largely across our 14-state traditional banking footprint. We also offer auto, education and point-of-sale finance loans in addition to select digital deposit products nationwide.

Consumer Banking operates a multi-channel distribution network with a workforce of approximately 5,780 branch colleagues, approximately 1,100 branches, including 220 in-store locations, and approximately 3,400 ATMs. Our network includes approximately 1,250 specialists covering lending, savings and investment needs as well as a broad range of small business products and services. We serve customers on a national basis through telephone service centers as well as through our online and mobile platforms where we offer customers the convenience of depositing funds, paying bills and transferring money between accounts and from person to person, as well as a host of other everyday transactions.

Commercial Banking Segment

Commercial Banking primarily serves companies and institutions with annual revenues of over $25 million to more than $3.0 billion and strives to be our clients’ trusted advisor and preferred provider for their banking needs. We offer a broad complement of financial products and solutions, including lending and leasing, deposit and treasury management services, foreign exchange, interest rate and commodity risk management solutions, as well as syndicated loans, corporate finance, mergers and acquisitions, and debt and equity capital markets capabilities.

Commercial Banking is structured along business lines and product groups. The business lines, Corporate Banking and Commercial Real Estate, and the product groups, Corporate Finance & Capital Markets, and Treasury Solutions work in teams to understand client needs and provide comprehensive solutions to meet those needs. We acquire new clients through a coordinated approach to the market, leveraging deep industry knowledge in specialized banking groups and a geographic coverage model.

Citizens Financial Group, Inc. | 6

Corporate Banking serves middle market commercial and industrial clients with annual gross revenues of $25 million to $500 million, and mid-corporate clients with annual revenues of $500 million to more than $3.0 billion in the United States. In several areas, such as Aerospace, Defense and Government Services, Communications, Transportation and Logistics, Franchise, Human Capital Management, and Gaming we offer a more dedicated and tailored approach to better meet the unique needs of these client segments.

Commercial Real Estate provides customized debt capital solutions for middle market operators, institutional developers, investors, and REITs. Commercial Real Estate provides financing for projects primarily in the multi-family, co-op, office, industrial, retail, healthcare and hospitality sectors.

Corporate Finance & Capital Markets serves clients through key product groups including Corporate Finance, Capital Markets, and Global Markets. Corporate Finance provides advisory services to middle market and mid-corporate clients, including mergers and acquisitions and capital structure advice. The team works closely with industry-sector specialists within capital markets to advise our clients. Corporate Finance also provides acquisition and follow-on financing for new and recapitalized portfolio companies of key sponsors, with services meeting the unique and time-sensitive needs of private equity firms, management companies and funds, and underwriting and portfolio management expertise for leveraged transactions and relationships. Capital Markets originates, structures and underwrites credit and equity facilities targeting middle market, mid-corporate and private equity sponsors. They focus on offering value-added ideas to optimize their capital structures, including advising on and facilitating mergers and acquisitions, valuations, tender offers, financial restructurings, bond and equity underwriting, asset sales, divestitures and other corporate reorganizations and business combinations. Capital Markets also provides sales and trading across loan, fixed income and equity products, as well as other brokerage services including equity research. Global Markets provides foreign exchange, interest rate and commodities risk management services.

The Treasury Solutions product group supports Commercial Banking and certain small business clients with treasury management solutions, including domestic and international products and services related to receivables, payables, information reporting and liquidity management, as well as commercial credit cards and trade finance.

Business Strategy

Our mission is to help our customers, colleagues and communities reach their potential, and our vision is to become a top-performing bank distinguished by our customer-centric culture, mindset of continuous improvement, and excellent capabilities. We strive to understand customer and client needs, so we can tailor advice and solutions to help make them more successful. Our business strategy is designed to maximize the full potential of our businesses, drive sustainable growth and enhance profitability. Our success rests on our ability to distinguish ourselves as follows:

Maintain a high-performing, customer-centric organization: We continually strive to enhance our “customer-first” culture by emphasizing the “voice of the customer” to deliver the best possible banking experience. In addition, we are taking talent management to the next level, with a goal of attracting, developing and retaining great people, while ensuring strong leadership, teamwork, and a sense of empowerment, accountability and urgency.

Develop differentiated value propositions to acquire, deepen, and retain core customer segments: Our focus is on select customer segments where we believe we are well positioned to compete. In Consumer Banking, we focus on serving mass affluent and affluent customers, and small businesses customers nationally. In Commercial Banking, we focus on serving customers in the middle market, mid-corporate, and select industry verticals. By developing differentiated and targeted value propositions, building our fee-based businesses and developing innovative solutions, we believe we can attract new customers, deepen relationships with existing customers and deliver an enhanced customer experience. We are integrating recent transactions in the NYC Metro market area and are improving the productivity of those acquired branches and deepening relationships with those customers.

Citizens Financial Group, Inc. | 7

Build excellent capabilities designed to help us stand out from competitors: We strive to deliver seamless, multi-channel experiences that allow customers to interact with us when, where and how they choose. We are enhancing capabilities in key areas including consumer lending, wealth, capital markets and payments. We are on a multi-year digital transformation journey across our Consumer and Commercial organizations to digitize end-to-end customer experiences and transform our marketing to drive consumer-direct acquisition in order to satisfy rapidly changing customer preferences. We are accelerating the use of advanced data analytics and artificial intelligence for personalization and to provide timely, insight-driven, tailored advice in order to deliver solutions to consumer and business customers throughout their lifecycles.

Operate with financial discipline and a mindset of continuous improvement to self-fund investments: We believe that continued focus on operational efficiency is critical to our future profitability and ability to continue to reinvest to drive future growth. We launched the first Tapping our Potential (“TOP”) initiative in 2014 and have launched additional programs in subsequent years. These programs are designed to transform how we operate and to improve the effectiveness, efficiency, and competitiveness of our franchise. Our TOP 7 program was completed in 2022, and we are launching a TOP 8 program to allow us to continue to self-fund investments.

Prudently grow and optimize our balance sheet: We operate with a strong balance sheet with regard to capital and liquidity, coupled with a well-defined and prudent risk appetite. We continue to focus on thoughtfully growing our balance sheet by actively managing capital and resource allocations towards relationships-oriented growth to generate attractive risk-adjusted returns. Our goal is to be good stewards of our resources and continue to rigorously evaluate our execution.

Modernize our technology and operational models to improve delivery, organizational agility and speed to market: We are continuing to modernize our technology environment by strengthening our infrastructure and migrating applications to the cloud. We have deployed and scaled an agile operating model to improve our speed-to-market, deliver innovative products and services and strengthen collaboration across teams. We will also continue to actively incubate new innovative ideas and harness external innovation through FinTech partnerships to help deliver differentiated value-added experiences for our customers.

Embed risk management within our culture and operations: Given that the quality of our risk management program directly affects our ability to execute our strategy, we continue to work to further strengthen our risk management culture. Moreover, we are committed to continuously enhancing our processes and talent, and to making improvements in the platform including ongoing investments in risk technology and frameworks. These actions are designed to support and enhance our risk management capabilities and regulatory profile.

Competition

The financial services industry is highly competitive. Our branch footprint is predominantly in the New England, Mid-Atlantic and Midwest regions, though certain lines of business serve national markets. Within these markets we face competition from community banks, super-regional and national financial institutions, credit unions, savings and loan associations, mortgage banking firms, consumer finance companies, securities brokerage firms, insurance companies, money market funds, hedge funds and private equity firms. Some of our larger competitors may make available to their customers a broader array of products, pricing and structure alternatives while some smaller competitors may have more liberal lending policies and processes. Competition among providers of financial products and services continues to increase, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives. The ability of non-banking financial institutions, including FinTech companies, to provide services previously limited to commercial banks has also intensified competition.

In Consumer Banking, the industry has become increasingly dependent on and oriented toward technology-driven delivery systems, permitting transactions to be conducted through telephone, online and mobile channels. In addition, technology has lowered barriers to entry and made it possible for non-bank institutions to attract funds and provide lending and other financial products and services. The emergence of digital-only banking models has increased and we expect this trend to continue. Given their lower cost structure, these models are often, on average, able to offer higher rates on deposit products than retail banking institutions with a traditional branch footprint. The primary factors driving competition for loans and deposits are interest rates, fees charged, tailored value propositions to different customer segments, customer service levels, convenience, including branch locations and hours of operation, and the range of products and services offered.

Citizens Financial Group, Inc. | 8

In Commercial Banking, there is competition for quality loan originations from traditional banking institutions, particularly large regional banks, as well as commercial finance companies, leasing companies, other non-bank lenders, and institutional investors including collateralized loan obligation managers, hedge funds and private equity firms. Some larger competitors, including certain national banks that compete in our market area, may offer a broader array of products and, due to their asset size, may sometimes be in a position to hold more exposure on their balance sheet. We compete on a number of factors including providing innovative corporate finance solutions, quality of customer service and execution, range of products offered, price and reputation.

Human Capital Management

We believe that our long-term success depends on our ability to attract, develop, and retain a high-performing workforce. Our goal is to create an environment where colleagues can thrive personally and professionally and can maximize their potential. As of December 31, 2022, Citizens and its subsidiaries had 18,889 full-time equivalent employees, primarily across New England and the Mid-Atlantic. Our Board of Directors and the Compensation and Human Resources Committee are responsible for overseeing our human capital management strategy, with senior management providing regular updates to facilitate that oversight.

Leadership, Talent Development, and Talent Acquisition and Mobility

Our leaders are the catalysts to achieve the culture we want to foster. During 2022, we conducted a detailed assessment of the current state of our culture and leadership to inform future areas of focus. As we continue to prepare colleagues for the future, we are building capabilities by upskilling and reskilling colleagues to support new ways of working and operating models. We offer programs that include technical and skills-based programs as well as resources aligned with our leadership competencies. To deepen critical skills, we have expanded our learning academies focusing on Innovation, Agile, Next Gen Tech, Banking and Credit, and Data & Analytics. Through our development programs, we aim to equip colleagues with the skills necessary to excel in their current roles and to build competencies that will enable them to be highly valuable contributors in the future. Our culture is one of continuous learning, which we believe is crucial for colleagues to thrive as part of our organization and to feel a sense of accomplishment and purpose.

We continue to expand recruiting efforts across the different levels of the organization, with the goal of building a strong pipeline of future leaders. This includes strengthening opportunities for internal mobility within Citizens through rotational programs and our academies, as well as external partnerships to support our ability to hire critical talent in areas such as technology, digital, cyber, marketing and data.

Employee Engagement

As part of our ongoing efforts to develop a high performing workforce and make Citizens a great place to work and build a career, we have used McKinsey & Company’s Organizational Health Index (“OHI”) since our 2014 initial public offering to understand colleagues’ viewpoints about Citizens on a range of topics. OHI results are used to refine our focus, address gaps, and strengthen efforts to improve our organizational effectiveness and colleague experience. Since our inaugural survey, our overall OHI score has increased nearly 20 points to 77 in 2022 and is now within the first quartile of McKinsey’s global benchmarks. The results of our OHI surveys have been instrumental in helping management prioritize areas of change that are most important to colleagues. In 2023, we are transitioning to a new listening platform, which will include a colleague survey tool aimed at providing additional insights as we continue to evolve our strategy and culture.

Diversity, Equity and Inclusion

We foster a culture where all stakeholders feel respected, valued, and heard. Our DE&I strategy is focused on creating an environment of inclusion and belonging, building a more diverse workforce and evaluating the effectiveness of our initiatives.

We are committed to increasing the representation of women and people of color, particularly in leadership roles. To that end, we have continued to develop strong partnerships with business and community organizations to help identify qualified diverse candidates for roles within every segment of our organization. In addition, through our diverse hiring commitment, we aim to have at least 50% of candidates interviewed for mid-to-senior openings be women or people of color. Internal diversity scorecards are used to measure our progress across multiple DE&I metrics. As of December 31, 2022, approximately 58% of our colleagues were women and approximately 32% were people of color. In addition, approximately 31% of the members of our Board of Directors are women and approximately 15% are people of color. More detail regarding our workforce demographics can be found on our website and in our Corporate Responsibility Report.

Citizens Financial Group, Inc. | 9

Development programs are designed to build a strong pipeline of diverse emerging talent internally. Development efforts have been effective in increasing the number of women and people of color considered “ready now” succession candidates. We also partner with external organizations to offer additional resources for reskilling and upskilling diverse colleagues. We also offer education programs focused on embedding inclusive behaviors in our culture to all colleagues. We require all colleagues to attend inclusion training and there is additional targeted inclusion training specifically for colleagues in manager roles.

We use various resources to understand what drives a sense of inclusion and belonging and to identify what actions will be effective in attracting and retaining diverse colleagues. Analytics are used to help prioritize initiatives, including answers to OHI survey items, which we segment by various colleague populations to provide additional insights. In addition, we have seven business resource groups (“BRGs”), which are an extension of the business and are integral to identifying and formulating solutions to DE&I issues that are most important to customers, colleagues, and the community. Citizens BRGs include Citizens WIN (Women’s Impact Network), Citizens Elev8 (Rising Professionals), Prism (Multicultural), Citizens Pride (LGBTQ+), Citizens Veterans, and Citizens Awake (Disability Awareness). In 2023, we launched an additional BRG, Caring for Citizens (Caregivers). Each BRG is sponsored by a member of the executive team and, as of December 31, 2022, approximately 3,200 colleagues belonged to at least one BRG.

Health, Well-Being, and Workplace Flexibility

We prioritize the health and well-being of our colleagues and their loved ones. Our benefit programs are designed to support colleagues’ physical, mental, and financial well-being and we have added several resources in recent years, including additional mental and emotional health resources and emergency back-up child and adult care. We also recently enhanced our Parental Leave Policy to six weeks of paid time off for all permanent colleagues who become parents; birth mothers are eligible for an additional 10 weeks, for a total of 16 weeks. We added an ESG fund to our 401(k) plan investment options and there were no increases to colleague premiums, co-pays or deductibles for medical, dental, and vision coverage for 2023 in recognition of the impact of inflation on colleagues.

We implemented a return to office strategy which incorporates flexibility for colleagues. As part of that strategy, non-branch roles have been assigned to various categories including fully remote, hybrid, or fully in the office, based on the responsibilities of each role. This approach has allowed us to balance colleague flexibility with in-person collaboration, which we believe is key to maintaining our Company values and culture.

Fair and Equitable Compensation

We strive to compensate our colleagues fairly based on market data, experience, and performance, and we compare our compensation to other companies in our peer group as well as others in the financial services industry.

Part of our commitment to building and fostering a diverse, inclusive, high-performing culture includes ensuring our compensation and benefits are fair and competitive for all colleagues. We engage an independent third-party expert firm to conduct an annual pay equity analysis, accounting for factors that appropriately explain differences in pay such as performance and experience. Additional information about this analysis, including our most recent results, can be found on our website and in our Corporate Responsibility Report.

Environmental, Social and Governance

Investors have begun to consider how corporations are addressing ESG matters when making investment decisions. Specifically, certain investors are beginning to incorporate the business risks of climate change and the adequacy of a company’s response to climate change as part of their investment strategy.

In 2021, we announced targets to reduce our Scope 1 and 2 greenhouse gas emissions 30% by 2025 and 50% by 2035, based on our 2016 baseline. These reductions align with the recommendations of the Paris Agreement, which aims to limit average global temperature increase to well below 2 degrees Celsius compared to pre-industrial levels.

Citizens Financial Group, Inc. | 10

In 2022, we published our fifth annual Corporate Responsibility Report and completed the CDP’s Climate Change Questionnaire for the seventh time. We also issued our inaugural Task Force on Climate-related Financial Disclosures (“TCFD”) report and expanded our climate commitment by:

•joining the Partnership for Carbon Accounting Financials (“PCAF”), a collaboration among worldwide financial institutions working to develop and implement a harmonized approach to assess and disclose greenhouse gas (“GHG”) emissions associated with loans and investments;

•participating in the Risk Management Association Climate Risk Consortium, a financial industry group dedicated to advancing best practices in climate risk management; and

•entering into a virtual power purchase agreement with Ørsted, supporting the construction of the Sunflower Wind Project in Kansas, which will offset 100% of our power consumption across our entire operational footprint with renewable energy credits.

For more details regarding ESG and other corporate responsibility matters, go to our website.

Regulation and Supervision

Our operations are subject to extensive regulation, supervision and examination under federal and state laws and regulations. These laws and regulations cover all aspects of our business, including lending practices, deposit insurance, customer privacy and cybersecurity, capital adequacy and planning, liquidity, safety and soundness, consumer protection and disclosure, permissible activities and investments, and certain transactions with affiliates. These laws and regulations are intended primarily for the protection of depositors, the Deposit Insurance Fund and the banking system as a whole and not for the protection of shareholders or other investors. The discussion below outlines the material elements of selected laws and regulations applicable to us and our subsidiaries. Changes in applicable law or regulation, and in their interpretation and application by regulatory agencies and other governmental authorities, cannot be predicted, but may have a material effect on our business, financial condition or results of operations.

We are subject to examinations by federal banking regulators, as well as the SEC, FINRA and various state insurance and securities regulators. In some cases, regulatory agencies may take supervisory actions that may not be publicly disclosed, and such actions may restrict or limit our activities or activities of our subsidiaries. As part of our regular examination process, regulators may advise us to operate under various restrictions as a prudential matter. We have periodically received requests for information from regulatory authorities at the federal and state level, including from banking, securities and insurance regulators, state attorneys general, federal agencies or law enforcement authorities, and other regulatory authorities, concerning our business practices. Such requests are considered incidental to the normal conduct of business. For a further discussion of how regulatory actions may impact our business, see Item 1A “Risk Factors.” For additional information regarding regulatory matters, see Note 25 in Item 8.

Overview

We are a BHC under the Bank Holding Company Act. We have elected to be treated as a FHC under amendments to the Bank Holding Company Act as effected by GLBA. As such, we are subject to the supervision, examination and reporting requirements of the Bank Holding Company Act and the regulations of the FRB, including through the Federal Reserve Bank of Boston. Under the system of “functional regulation” established under the Bank Holding Company Act, the FRB serves as the primary regulator of our consolidated organization. The OCC serves as the primary regulator for CBNA and the SEC serves as the primary regulator of our broker-dealer and investment advisory subsidiaries, with each supervisory agency directly regulating the activities of those subsidiaries, and the FRB exercising a supervisory role.

The federal banking regulators have authority to approve or disapprove mergers, acquisitions, consolidations, the establishment of branches and similar corporate actions. These banking regulators also have the power to prevent the continuance or development of unsafe or unsound banking practices or other violations of law. Federal law governs the activities in which CBNA engages, including the investments it makes and the aggregate amount of available credit that it may grant to one borrower. Various consumer and compliance laws and regulations also affect its operations. The actions the FRB takes to implement monetary policy also affect us.

Citizens Financial Group, Inc. | 11

In addition, CBNA is subject to regulation, supervision and examination by the CFPB with respect to consumer protection laws and regulations. The CFPB has broad authority to regulate the offering and provision of consumer financial products by depository institutions, such as CBNA, with more than $10 billion in total assets. The CFPB may promulgate rules under a variety of consumer financial protection statutes, including the Truth in Lending Act, the Electronic Funds Transfer Act and the Real Estate Settlement Procedures Act.

Tailoring of Prudential Requirements

The FRB and the other federal banking regulators have enacted rules that tailor the application of the enhanced prudential standards to BHCs and depository institutions to implement the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 amendments to the Dodd-Frank Act (“Tailoring Rules”). Under the Tailoring Rules, we are subject to “Category IV standards,” which apply to banking organizations with at least $100 billion in total consolidated assets that do not meet any of the thresholds specified for Categories I through III.

    We discuss other elements of the Tailoring Rules where relevant below. The liquidity requirements are described below under “—Liquidity Requirements,” and the stress testing requirements are described below under “—Capital Planning and Stress Testing Requirements.”

    Bank and Financial Holding Company Regulation

As a FHC, we may engage in a broader range of activities than a BHC that is not also a FHC. These activities include securities underwriting and dealing, insurance underwriting and brokerage, merchant banking and other activities that are determined by the FRB, in coordination with the Treasury Department, to be “financial in nature or incidental thereto” or that the FRB determines unilaterally to be “complementary” to financial activities. In addition, a FHC may commence new permissible financial activities or acquire non-bank financial companies engaged in such activities, in either case, with after-the-fact notice to the FRB.

To maintain our FHC status, a BHC (and all of its depository institution subsidiaries), must remain “well capitalized” and “well managed,” as described below under “Federal Deposit Insurance Act”. If a BHC fails to meet these regulatory standards, the FRB could place limitations on its ability to conduct the broader financial activities permissible for FHCs or impose limitations or conditions on the conduct or activities of the BHC or its affiliates. If the deficiencies persisted, the FRB could order the BHC to divest any subsidiary bank or to cease engaging in any activities permissible for FHCs that are not permissible for BHCs, or the BHC could elect to conform its non-banking activities to those permissible for a BHC that is not also a FHC. In addition, the CRA requires U.S. banks to help serve the needs of their communities. If a depository institution subsidiary of a BHC were to receive a CRA rating of less than “satisfactory”, the BHC would be prohibited from engaging in certain activities or acquisitions (see “Community Reinvestment Act” below).

Federal and state laws impose notice and approval requirements for mergers and acquisitions of other depository institutions or BHCs. As noted above, FRB approval is generally not required for us to acquire a company engaged in activities that are financial in nature or incidental to activities that are financial in nature, as determined by the FRB. Prior regulatory approval is required, however, before we may acquire or control more than 5% of any class of voting shares or substantially all of the assets of a BHC (including a FHC) or a bank. In considering applications for approval of acquisitions, the banking regulators may take several factors into account, including the competitive effects of the transaction in the relevant geographic markets; the financial and managerial resources and future prospects of companies involved in the transaction; the effect of the transaction on the financial stability of the U.S. banking or financial system; the companies’ compliance with anti-money laundering laws and regulations; the convenience and needs to the communities to be served; and the records of performance under the CRA of the insured depository institutions involved in the transaction.

Capital

The U.S. Basel III rules apply to us. These rules establish risk-based and leverage capital requirements. The risk-based requirements are based on a banking organization’s risk-weighted assets, also known as RWA, which reflect the organization’s on- and off-balance sheet exposures, subject to risk weights. The leverage requirements are based on a banking organization’s average consolidated on-balance sheet assets. For more detail on our regulatory capital, see the “Capital and Regulatory Matters” section of Item 7.

Citizens Financial Group, Inc. | 12

We calculate RWA using the standardized approach and have made the one-time election to opt-out of recognizing in regulatory capital the impacts of net unrealized gains and losses included within AOCI for debt securities that are available for sale or held to maturity, accumulated net gains and losses on cash flow hedges and certain defined benefit pension plan assets.

On January 1, 2020, we adopted the CECL accounting standard. In reaction to the COVID disruption, on September 30, 2020, the federal banking regulators adopted a final rule relative to regulatory capital treatment of the ACL under CECL. This rule allowed electing banking organizations to delay the estimated impact of CECL on regulatory capital for a two-year period ending December 31, 2021, followed by a three-year transition period ending December 31, 2024. The three-year transition period will phase-in the reversal of the aggregate amount of the capital benefit provided during the initial two-year delay.

    Under the U.S. Basel III rules, the minimum capital ratios are:

•4.5% CET1 capital to risk-weighted assets;

•6.0% tier 1 capital (that is, CET1 capital plus additional tier 1 capital) to risk-weighted assets;

•8.0% total capital (that is, tier 1 capital plus tier 2 capital) to risk-weighted assets; and

•4.0% tier 1 capital to total average consolidated assets as defined under U.S. Basel III Standardized approach (known as the “leverage ratio”).

For BHCs with $100 billion or more in assets, such as us, the FRB’s capital rules impose a dynamic institution-specific SCB on top of each of the three minimum risk-weighted capital ratios listed above. Banking institutions that fail to meet the effective minimum ratios including the SCB will be subject to constraints on capital distributions, including dividends and share repurchases, and certain discretionary executive compensation. The severity of the constraints depends on the amount of the shortfall and the institution’s “eligible retained income”, defined as the greater of four quarter trailing net income net of distributions and tax effects not reflected in net income, or the average four quarter trailing net income.

As a Category IV firm, our SCB is re-calibrated with each biennial supervisory stress test and updated annually to reflect our planned common stock dividends. On August 4, 2022, the FRB announced, based on the results of the 2022 CCAR supervisory stress tests, that our SCB will remain at 3.4% through September 30, 2023. To incorporate the effects of the Investors acquisition on our capital requirements, the FRB will require that we participate in the 2023 CCAR supervisory stress test. For more details, see “—Capital Planning and Stress Testing Requirements” below and the “Capital and Regulatory Matters” section of Item 7.

    We are also subject to the FRB's risk-based capital requirements for market risk. See the “Market Risk” section of Item 7.

    Liquidity Requirements

The federal banking regulators have adopted the Basel III-based U.S. Liquidity Coverage Ratio rule, which is a quantitative liquidity metric designed to ensure that a covered bank or BHC maintains an adequate level of unencumbered high-quality liquid assets to cover expected net cash outflows over a 30-day time horizon under an acute liquidity stress scenario. Under the Tailoring Rules, Category IV firms with less than $50 billion in weighted short-term wholesale funding, including us, are not subject to any Liquidity Coverage Ratio requirement.

The Basel III framework also includes a second liquidity standard, the NSFR, which is designed to promote more medium- and long-term funding of the assets and activities of banks over a one-year time horizon. In October 2020, the federal banking regulators issued a final rule to implement the NSFR for large U.S. banking organizations. Under the final rule, Category IV firms with less than $50 billion in weighted short-term wholesale funding, including us, are not subject to the NSFR requirement.

Citizens Financial Group, Inc. | 13

Finally, per the liquidity rules included in the FRB’s enhanced prudential standards adopted pursuant to Section 165 of the Dodd-Frank Act, we are also required to maintain a buffer of highly liquid assets based on projected funding needs for 30 days. Under the Tailoring Rules, the liquidity buffer requirements continue to apply to Category IV firms, such as us, and we remain subject to liquidity risk management requirements. However, these requirements are now tailored such that we are required to:

•calculate collateral positions monthly, as opposed to weekly;

•establish a more limited set of liquidity risk limits than was previously required; and

•monitor fewer elements of intraday liquidity risk exposures than were previously monitored.

We are also now subject to liquidity stress testing quarterly, rather than monthly, and are required to report liquidity data on a monthly basis.

Capital Planning and Stress Testing Requirements

Under the Tailoring Rules, Category IV firms, such as us, are subject to biennial supervisory stress testing and are exempt from company-run stress testing and related disclosure requirements. The FRB continues to supervise Category IV firms on an ongoing basis, including evaluation of the capital adequacy and capital planning processes during off-cycle years. We remain subject to the requirement to develop, maintain and submit an annual capital plan for review and approval by our board of directors, or one of its committees, as well as FR Y-14 reporting requirements.

Regulations relating to capital planning, regulatory reporting, and stress testing and capital buffer requirements applicable to firms like us are presently subject to rule making and potential further guidance and interpretation by the applicable federal regulators. We will continue to evaluate the impact of these and any other prudential regulatory changes, including their potential resultant changes in our regulatory and compliance costs and expenses.

For more detail on our capital planning and stress testing requirements see the “Capital and Regulatory Matters” section of Item 7.

Resolution Planning

Category IV firms are no longer required to submit resolution plans to the FRB and FDIC. However, CBNA is required to file periodically a separate resolution plan with the FDIC that should enable the FDIC, as receiver, to resolve the institution under applicable receivership provisions of the FDIA in a manner that ensures that depositors receive access to their insured deposits within one business day of the institution’s failure, maximizes the net present value return from the sale or disposition of its assets and minimizes the amount of any loss to the institution’s creditors. In June 2021, the FDIC issued a Statement on Resolution Plans for Insured Depository Institutions that, among other things, established a three-year filing cycle for banks with $100 billion or more in total assets, such as CBNA, and provides details regarding the content of the resolution plans that filers are required to prepare. CBNA submitted its most recent resolution plan to the FDIC on December 1, 2022.

Standards for Safety and Soundness

The FDIA requires the FRB, OCC and FDIC to prescribe operational and managerial standards for all insured depository institutions, including CBNA. The agencies have adopted regulations and interagency guidelines that set forth the safety and soundness standards used to identify and address problems at insured depository institutions before capital becomes impaired. If an agency determines that a bank fails to satisfy any standard, it may require the bank to submit an acceptable plan to achieve compliance, consistent with deadlines for the submission and review of such safety and soundness compliance plans. If, after being notified to submit a compliance plan, an institution fails to submit an acceptable compliance plan or fails in any material respect to implement an acceptable compliance plan, the agency must issue an order directing action to correct the deficiency and may issue an order directing other actions of the types to which an undercapitalized institution is subject under the FDIA. See “Federal Deposit Insurance Act” below. If an institution fails to comply with such an order, the agency may seek to enforce such order in judicial proceedings and to impose civil money penalties.

Citizens Financial Group, Inc. | 14

Federal Deposit Insurance Act

The FDIA requires, among other things, that the federal banking regulators take “prompt corrective action” with respect to depository institutions that do not meet minimum capital requirements, as described above in “Capital.” The FDIA sets forth the following five capital categories: “well-capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” and “critically undercapitalized.” A depository institution’s capital category depends upon how its capital levels compare with various relevant capital measures and certain other factors that are established by regulation. The federal banking regulators must take certain mandatory supervisory actions, and are authorized to take other discretionary actions, with respect to institutions that are undercapitalized, significantly undercapitalized or critically undercapitalized, with the actions becoming more restrictive and punitive the lower the institution’s capital category. Under existing rules, an institution that is not an advanced approaches institution, such as CBNA, is deemed to be “well capitalized” if it has a CET1 ratio of at least 6.5%, a tier 1 capital ratio of at least 8%, a total capital ratio of at least 10%, and a tier 1 leverage ratio of at least 5%.

The FDIA’s prompt corrective action provisions only apply to depository institutions and not to BHCs. The FRB’s regulations applicable to BHCs separately define “well capitalized” for BHCs, such as the Parent Company, to require maintaining a tier 1 capital ratio of at least 6% and a total capital ratio of at least 10%. As described above under “—Bank and Financial Holding Company Regulation”, a FHC that is not well-capitalized and well-managed (or whose bank subsidiaries are not well capitalized and well managed) under applicable prompt corrective action standards may be restricted in certain of its activities and ultimately may lose FHC status. As of December 31, 2022, both the Parent Company and CBNA were well-capitalized.

The FDIA prohibits insured banks from accepting brokered deposits or offering interest rates on any deposits significantly higher than the prevailing rate in the bank’s normal market area or nationally, depending upon where the deposits are solicited, unless it is “well-capitalized,” or it is “adequately capitalized” and receives a waiver from the FDIC. A bank that is “adequately capitalized” and accepts brokered deposits under a waiver from the FDIC may not pay an interest rate on any deposit in excess of 75 basis points over certain prevailing market rates. The FDIA imposes no such restrictions on a bank that is “well-capitalized.”

Deposit Insurance

The FDIA requires CBNA to pay deposit insurance assessments. FDIC assessment rates for large institutions are calculated based on one of two scorecards: one for most large institutions that have more than $10 billion in assets, such as CBNA, and another for “highly complex” institutions that have over $50 billion in assets and are fully owned by a parent with over $500 billion in assets. Each scorecard has a performance score and a loss-severity score that are combined to produce a total score, which is translated into an initial assessment rate. In calculating these scores, the FDIC utilizes the CAMELS ratings and forward-looking financial measures to assess an institution’s ability to withstand asset-related stress and funding-related stress. The FDIC may make discretionary adjustments to the total score, based upon significant risk factors that are not adequately captured in the scorecard. The total score is then translated to an initial base assessment rate on a non-linear, sharply increasing scale.

The deposit insurance assessment is calculated based on average consolidated total assets less average tangible equity of the insured depository institution during the assessment period. Deposit insurance assessments are also affected by the minimum reserve ratio with respect to the DIF. The FDIA established a minimum DIF reserve ratio of 1.15% prior to September 2020 and 1.35% thereafter. As of September 30, 2022, the reserve ratio of the DIF was 1.26%.

On October 18, 2022, the FDIC finalized a rule that will increase initial base deposit insurance assessment rates by 2 basis points, beginning with the first quarterly assessment period of 2023. The FDIC, as required under the FDIA, established a plan in September 2020 to restore the DIF reserve ratio to meet or exceed the statutory minimum of 1.35% within eight years. The increased assessment is intended to improve the likelihood that the DIF reserve ratio would reach the required minimum by the statutory deadline of September 30, 2028.

Dividends

Various federal statutory provisions and regulations, as well as regulatory expectations, limit the amount of dividends that we and our subsidiaries may pay.

Citizens Financial Group, Inc. | 15

Our payment of dividends to our stockholders is subject to the oversight of the FRB. In particular, the FRB reviews the dividend policies and share repurchases of a large BHC based on capital plans submitted as part of the CCAR process and on the results of stress tests, as discussed above. In addition to other limitations, our ability to make any capital distributions, including dividends and share repurchases, is subject to the prior approval of the FRB if we are required to resubmit our capital plan. See “—Capital” and “—Capital Planning and Stress Testing Requirements” above.

Dividends payable by CBNA, as a national bank subsidiary, are limited to the lesser of the amount calculated under a “recent earnings” test and an “undivided profits” test. Under the recent earnings test, a dividend may not be paid if the total of all dividends declared by a bank in any calendar year is in excess of the current year’s net income combined with the retained net income of the two preceding years, less any required transfers to surplus, unless the national bank obtains the approval of the OCC. Under the undivided profits test, a dividend may not be paid in excess of the entity’s “undivided profits” (generally, accumulated net profits that have not been paid out as dividends or transferred to surplus). Federal bank regulatory agencies have issued policy statements that provide that FDIC-insured depository institutions and their holding companies should generally pay dividends only out of their current operating earnings.

Support of Subsidiary Bank

Under Section 616 of the Dodd-Frank Act, which codifies the FRB’s long-standing “source of strength” doctrine, the Parent Company must serve as a source of financial and managerial strength for our depository institution subsidiary. The statute defines “source of financial strength” as the ability to provide financial assistance in the event of the financial distress at the insured depository institution. The FRB may require that the Parent Company provide such support at times even when the Parent Company may not have the financial resources to do so, or when doing so may not serve our interests or those of our shareholders or creditors. In addition, any capital loans by a BHC to its subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a BHC’s bankruptcy, any commitment by the BHC to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to a priority of payment.

Transactions with Affiliates and Insiders

Sections 23A and 23B of the Federal Reserve Act and related FRB rules, including Regulation W, restrict CBNA from extending credit to, or engaging in certain other transactions with, the Parent Company and its non-bank subsidiaries. These restrictions place limits on certain specified “covered transactions” between bank subsidiaries and their affiliates, which must be limited to 10% of a bank’s capital and surplus for any one affiliate and 20% for all affiliates. Furthermore, within the foregoing limitations as to amount, certain covered transactions must meet specified collateral requirements ranging from 100% to 130%. Covered transactions are defined to include, among other things, a loan or extension of credit, as well as a purchase of securities issued by an affiliate, a purchase of assets (unless otherwise exempted by the FRB) from the affiliate, the acceptance of securities issued by the affiliate as collateral for a loan, derivatives transactions and securities lending transactions where the bank has credit exposure to an affiliate, and the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate. All covered transactions, including certain additional transactions (such as transactions with a third party in which an affiliate has a financial interest), must be conducted on market terms. The FRB enforces these restrictions, and we are audited for compliance.

Section 23B prohibits an institution from engaging in certain transactions with affiliates unless the transactions are on terms substantially the same, or at least as favorable to the bank, as those prevailing at the time for comparable transactions with non-affiliated companies. Transactions between a bank and any of its subsidiaries that are engaged in certain financial activities may be subject to the affiliated transaction limits. The FRB also may designate banking subsidiaries as affiliates.

Pursuant to FRB Regulation O, we are also subject to quantitative restrictions on extensions of credit to executive officers, directors, principal stockholders and their related interests. In general, such extensions of credit may not exceed certain dollar limitations, must be made on substantially the same terms, including interest rates and collateral, as those prevailing at the time for comparable transactions with third parties and must not involve more than the normal risk of repayment or present other unfavorable features. Certain extensions of credit also require the approval of our Board.

Citizens Financial Group, Inc. | 16

Volcker Rule

The Dodd-Frank Act prohibits banks and their affiliates from engaging in proprietary trading and investing in, sponsoring and having certain relationships with private funds such as certain hedge funds or private equity funds. The statutory provision is commonly called the “Volcker Rule.” In 2019, the FRB, OCC, FDIC, SEC and CFTC (collectively, the “Volcker Agencies”) finalized amendments to their regulations to tailor the Volcker Rule’s compliance requirements to the amount of a firm’s trading activity, revise the definition of trading account, clarify certain key provisions in the Volcker Rule, and modify the information companies are required to provide the Volcker Agencies. Under those amendments, we are viewed as having “moderate” trading assets and liabilities, and therefore subject to a requirement to have a simplified compliance program that is appropriate for our activities, size, scope, and complexity. In June 2020, the Volcker Agencies finalized other regulations modifying the Volcker Rule’s prohibition on banking entities investing in or sponsoring hedge funds or private equity funds (referred to under the rule as covered funds). We do not expect either of these regulatory amendments to the Volcker Rule to have a material impact on Citizens.

Consumer Financial Protection Regulations

The retail activities of banks are subject to a variety of statutes and regulations designed to protect consumers and promote lending to various sectors of the economy and population. These laws include, but are not limited to, the Equal Credit Opportunity Act, the Fair Debt Collection Practices Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Home Mortgage Disclosure Act, the Service Members Civil Relief Act, the Expedited Funds Availability Act, the Right to Financial Privacy Act, the Truth in Savings Act, the Electronic Funds Transfer Act, and their respective federal regulations and state law counterparts.

In addition to these federal laws and regulations, the guidance and interpretations of the various federal agencies charged with the responsibility of implementing such regulations also influences loan and deposit operations.

The CFPB has broad rulemaking, supervisory, examination and enforcement authority over various consumer financial protection laws, including the laws referenced above, fair lending laws and certain other statutes. The CFPB also has examination and primary enforcement authority with respect to depository institutions with $10 billion or more in assets, including the authority to prevent unfair, deceptive or abusive acts or practices in connection with the offering of consumer financial products.

The Dodd-Frank Act permits states to adopt stricter consumer protection laws and standards that are more stringent than those adopted at the federal level, and in certain circumstances allows state attorneys general to enforce compliance with both the state and federal laws and regulations. State regulation of financial products and potential enforcement actions could also adversely affect our business, financial condition or results of operations.

Protection of Customer Personal Information and Cybersecurity

The privacy provisions of GLBA generally prohibit financial institutions, including us, from disclosing nonpublic personal financial information of consumer customers to third parties for certain purposes (primarily marketing) unless customers have the opportunity to opt out of the disclosure. The Fair Credit Reporting Act restricts information sharing among affiliates for marketing purposes. Both the Fair Credit Reporting Act and Regulation V, issued by the FRB, govern the use and provision of information to consumer reporting agencies.

The federal banking regulators regularly issue guidance regarding cybersecurity intended to enhance cyber risk management standards among financial institutions. Financial institutions are expected to design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers’ accessing internet-based services of the financial institution. Further, a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties. For a further discussion of risks related to cybersecurity, see Item 1A “Risk Factors.”

Citizens Financial Group, Inc. | 17

In November 2021, the federal banking regulators issued a final rule mandating financial institutions to report certain significant cybersecurity incidents to regulators. The final rule requires a financial institution to notify its primary banking regulator within 36 hours of certain significant cybersecurity incidents which has or is reasonably likely to disrupt or degrade its:

•ability to carry out banking operations, activities, or processes, or deliver banking products and services to a material portion of its customer base;

•business lines, including associated operations, services, functions, and support, that upon failure would result in a material loss of revenue, profit, or franchise value; or

•operations, including associated services, functions, and support, the failure or discontinuance of which would pose a threat to the financial stability of the United States.

Bank service providers are required to notify at least one designated point of contact at affected banking organization customers as soon as possible after any computer-security incident which has or is reasonably likely to materially disrupt or degrade covered services for four or more hours. The final rule was effective April 1, 2022, with a compliance date of May 1, 2022. In addition, in March 2022, the SEC proposed new rules that would require reporting on Form 8-K of material cybersecurity incidents.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted laws and regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. For example, the California Consumer Privacy Act, which became effective on January 1, 2020, gives new rights to California residents to require certain businesses to disclose or delete their personal information. In addition, many states have also recently implemented or modified their data breach notification and data privacy requirements. We expect this trend of state-level activity to continue and are continually monitoring developments in the states in which we operate.

Community Reinvestment Act

The CRA requires banking regulators to evaluate the Parent Company and CBNA in meeting the credit needs of our local communities, including providing credit to individuals residing in low- and moderate- income neighborhoods. The CRA also requires each appropriate federal bank regulatory agency, in connection with its examination of a depository institution, to assess such institution’s record in assessing and meeting the credit needs of the community served by that institution and assign ratings. The regulatory agency’s evaluation of the institution’s record and ratings are made public. These CRA performance evaluations are also considered by regulatory agencies in evaluating mergers, acquisitions and applications to open a branch or facility, and, in the case of a BHC that has elected FHC status, a CRA rating of at least “satisfactory” is required to commence certain new financial activities or to acquire a company engaged in such activities. CBNA received a rating of “outstanding” in our most recent CRA evaluation.

On May 5, 2022, the FRB, OCC and FDIC jointly issued a notice of proposed rulemaking proposing revisions to the agencies’ CRA regulations, including with respect to the delineation of assessment areas, the overall evaluation framework and performance standards and metrics, the definition of community development activities, and data collection and reporting. The proposed rule would adjust CRA evaluations based on bank size and type, with many of the proposed changes applying only to banks with over $2 billion in assets and several applying only to banks with over $10 billion in assets, such as CBNA. We will continue to evaluate the impact of any changes to the regulations implementing the CRA.

Compensation

Our compensation practices are subject to oversight by the FRB and the OCC. The federal banking regulators have issued guidance designed to ensure that incentive compensation arrangements at banking organizations take into account risk and are consistent with safe and sound practices. The guidance sets forth the following three key principles with respect to incentive compensation arrangements:

•the arrangements should provide employees with incentives that appropriately balance risk and financial results in a manner that does not encourage employees to expose their organizations to imprudent risk;

•the arrangements should be compatible with effective controls and risk management; and

•the arrangements should be supported by strong corporate governance.

Citizens Financial Group, Inc. | 18

The guidance provides that supervisory findings with respect to incentive compensation will be incorporated, as appropriate, into the organization’s supervisory ratings.

The U.S. financial regulators, including the FRB, the OCC and the SEC, jointly proposed regulations in 2011 and again in 2016 to implement the incentive compensation requirements of Section 956 of the Dodd-Frank Act. These regulations have not been finalized.

Anti-Money Laundering

The Bank Secrecy Act (“BSA”) and the Patriot Act contain anti-money laundering (“AML”) and financial transparency provisions intended to detect and prevent the use of the U.S. financial system for money laundering and terrorist financing activities. The BSA, as amended by the Patriot Act, requires depository institutions and their holding companies to undertake activities including maintaining an AML program, verifying the identity of customers, verifying the identity of certain beneficial owners for legal entity customers, monitoring for and reporting suspicious transactions, reporting on cash transactions exceeding specified thresholds, and responding to requests for information by regulatory authorities and law enforcement agencies. We are also required to provide our employees with AML training, designate an AML compliance officer, and undergo an annual, independent audit to assess the effectiveness of our AML program. We have implemented policies, procedures, and internal controls that are designed to comply with these AML requirements. Financial services regulators are focusing their examinations on AML compliance, and we continue to monitor and augment, where necessary, our AML compliance programs. The federal banking agencies are required, when reviewing bank and bank holding company acquisition or merger applications, to take into account the effectiveness of the AML activities of the applicants.

The Anti-Money Laundering Act of 2020 (“AMLA”), enacted on January 1, 2021 as part of the National Defense Authorization Act, does not directly impose new requirements on financial institutions, but requires the U.S. Treasury Department to issue National Anti-Money Laundering and Countering the Financing of Terrorism Priorities and conduct studies and issue regulations that may, over the next few years, significantly alter some of the due diligence, recordkeeping and reporting requirements that the BSA and the Patriot Act impose on financial institutions. The AMLA also increases penalties for violations of the BSA and significantly expands a whistleblower award program both of which could increase the prospect of regulatory enforcement. In June 2021, the Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Treasury Department, issued the priorities for AML and countering the financing of terrorism policy, as required under the AMLA. The priorities include: corruption, cybercrime, terrorist financing, fraud, transnational crime, drug trafficking, human trafficking and proliferation financing.

Office of Foreign Assets Control Regulation

The U.S. has imposed economic sanctions that affect transactions with designated foreign countries, nationals and others. These are typically known as the “OFAC” rules based on their administration by the U.S. Treasury Department Office of Foreign Assets Control. The OFAC-administered sanctions targeting countries take many different forms. Generally, they contain one or more of the following elements:

•restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on U.S. persons engaging in financial transactions relating to, making investments in, or providing investment-related advice or assistance to, a sanctioned country; and

•a blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest, by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (e.g., property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC.

OFAC publishes, and routinely updates, lists of names of persons and organizations suspected of aiding, harboring or engaging in terrorist acts, including the Specially Designated Nationals and Blocked Persons. We are responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. If we find a name on any transaction, account or wire transfer that is on an OFAC list, we must freeze such account, file a suspicious activity report and notify the appropriate authorities. Failure to comply with these sanctions could have serious legal and reputational consequences.

Citizens Financial Group, Inc. | 19

Regulation of Broker-Dealers

Our subsidiaries, CCMI, Citizens Securities, Inc., and JMP Securities LLC are registered broker-dealers with the SEC and subject to regulation and examination by the SEC as well as FINRA and other self-regulatory organizations. These regulations cover a broad range of issues, including capital requirements; sales and trading practices; use of client funds and securities; the conduct of directors, officers and employees; record-keeping and recording; supervisory procedures to prevent improper trading on material nonpublic information; qualification and licensing of sales personnel; and limitations on the extension of credit in securities transactions. In addition to federal registration, state securities commissions require the registration of certain broker-dealers.

Heightened Risk Governance Standards

CBNA is subject to OCC guidelines imposing heightened risk governance standards on large national banks with average total consolidated assets of $50 billion or more. The guidelines set forth minimum standards for the design and implementation of a bank’s risk governance framework, and minimum standards for oversight of that framework by a bank’s board of directors. The guidelines are intended to protect the safety and soundness of covered banks and improve bank examiners’ ability to assess compliance with the OCC’s expectations. Under the guidelines, a bank may use its parent company’s risk governance framework if the framework meets the minimum standards, the risk profiles of the parent company and the covered bank are substantially the same, and certain other conditions are met. CBNA has elected to use the Parent Company’s risk governance framework. A bank’s board of directors is required to have two members who are independent of the bank and parent company management. A bank’s board of directors is responsible for ensuring that the risk governance framework meets the standards in the guidelines, providing active oversight and a credible challenge to management’s recommendations and decisions and ensuring that the parent company decisions do not jeopardize the safety and soundness of the bank.

 Intellectual Property

In the highly competitive banking industry in which we operate, trademarks, service marks and logos are important to the success of our business. We own and license a variety of trademarks, service marks, logos and pending registrations and are spending significant resources to develop our stand-alone brands.

Website Access to Citizens’ Filings with the SEC

We maintain a website at investor.citizensbank.com. We make available on our website, free of charge, our annual reports on Form 10-K, quarterly reports on Form 10-Q and current reports on Form 8-K, including exhibits, and amendments to those reports that are filed or furnished to the SEC pursuant to Section 13(a) of the Securities Exchange Act of 1934. These documents are made available on our website as soon as reasonably practicable after they are electronically filed with or furnished to the SEC. The SEC also maintains an internet site (www.sec.gov) that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC.

ITEM 1A. RISK FACTORS

We are subject to a number of risks potentially impacting our business, financial condition, results of operations and cash flows. As we are a financial services organization, certain elements of risk are inherent in our transactions and operations and are present in the business decisions we make. We, therefore, encounter risk as part of the normal course of our business and we design risk management processes to help manage these risks. Our success is dependent on our ability to identify, understand and manage the risks presented by our business activities so that we can appropriately balance revenue generation and profitability. These risks include, but are not limited to, credit risk, market risk, liquidity risk, operational risk, model risk, technology, regulatory and legal risk and strategic and reputational risk. We discuss our principal risk management processes and, in appropriate places, related historical performance in the “Risk Governance” section in Item 7.

You should carefully consider the following risk factors that may affect our business, financial condition and results of operations. Other factors that could affect our business, financial condition and results of operation are discussed in the “Forward-Looking Statements” section above. However, there may be additional risks that are not presently material or known, and factors besides those discussed below, or in this or other reports that we file or furnish with the SEC, that could also adversely affect us.

Citizens Financial Group, Inc. | 20

Risks Related to Our Business

We may not be able to successfully execute our business strategy.

Our business strategy is designed to maximize the full potential of our business and drive sustainable growth and enhanced profitability, and our success rests on our ability to maintain a high-performing, customer-centric organization; develop differentiated value propositions to acquire, deepen, and retain core customer segments; build excellent capabilities designed to help us stand out from our competitors; operate with financial discipline and a mindset of continuous improvement to self-fund investments; prudently grow and optimize our balance sheet; modernize our technology and operational models to improve delivery, organizational agility and speed to market; and embed risk management within our culture and our operations. Our future success and the value of our stock will depend, in part, on our ability to effectively implement our business strategy, including the cost savings and efficiency components, and achieve our financial performance goals, including through the integration of Investors and the HSBC branches. There are risks and uncertainties, many of which are not within our control, associated with each element of our strategy. If we are not able to successfully execute our business strategy, we may never achieve our financial performance goals and any shortfall may be material. See the “Business Strategy” section in Item 1 for further information.

Supervisory requirements and expectations on us as a financial holding company and a bank holding company and any regulator-imposed limits on our activities could adversely affect our ability to implement our strategic plan, expand our business, continue to improve our financial performance and make capital distributions to our stockholders.

Our operations are subject to extensive regulation, supervision and examination by the federal banking agencies (the FRB, the OCC and the FDIC), as well as the CFPB. As part of the supervisory and examination process, if we are unsuccessful in meeting the supervisory requirements and expectations that apply to us, regulatory agencies may from time to time take supervisory actions against us that may not be publicly disclosed. Such actions may include restrictions on our activities or the activities of our subsidiaries, informal (nonpublic) or formal (public) supervisory actions or public enforcement actions, including the payment of civil money penalties, which could increase our costs and limit our ability to implement our strategic plans and expand our business, and as a result could have a material adverse effect on our business, financial condition or results of operations. See the “Regulation and Supervision” section in Item 1 for further information.

Difficult economic conditions, including inflationary pressures or volatility in the financial markets would likely have an adverse effect on our business, financial position and results of operations.

Robust demand, labor shortages and supply chain constraints have led to persistent inflationary pressures throughout the economy. In response to these inflationary pressures, the FRB has raised benchmark interest rates in recent months and may continue to raise interest rates in response to economic conditions, particularly a continued high rate of inflation. Amidst these uncertainties, including potential recessionary economic conditions, financial markets have continued to experience volatility. Changes in interest rates can affect numerous aspects of our business and may impact our future performance. See risk factor headed “Changes in interest rates may have an adverse effect on our profitability” below for more information on the risks associated with changes in interest rates.

Prolonged periods of inflation may impact our profitability by negatively impacting our costs and expenses, including increasing funding costs and expense related to talent acquisition and retention, and negatively impacting consumer demand and client purchasing power for our products and services. If significant inflation continues, our business could be negatively affected by, among other things, increased default rates leading to credit losses which could adversely impact our earnings and capital.

Any of the effects of these adverse economic conditions would likely have an adverse impact on our earnings, with the significance of the impact generally depending on the nature and severity of the adverse economic conditions.

Citizens Financial Group, Inc. | 21

Changes in interest rates may have an adverse effect on our profitability.

Net interest income historically has been, and we anticipate that it will remain, a significant component of our total revenue. This is due to the fact that a high percentage of our assets and liabilities have been and will likely continue to be in the form of interest-bearing or interest-related instruments. Changes in interest rates can have a material effect on many areas of our business, including net interest income, deposit costs, loan volume and delinquency, and the value of our mortgage servicing rights. Interest rates are highly sensitive to many factors that are beyond our control, including general economic conditions and policies of various governmental and regulatory agencies and, in particular, the Federal Open Market Committee. Changes in monetary policy, including changes in interest rates, could influence not only the interest we receive on loans and securities and the amount of interest we pay on deposits and borrowings, but such changes could also affect our ability to originate loans and obtain deposits and the fair value of our financial assets and liabilities. If the interest rates on our interest-bearing liabilities increase at a faster pace than the interest rates on our interest earning assets, our net interest income may decline and, with it, a decline in our earnings may occur. Our net interest income and our earnings would be similarly affected if the interest rates on our interest earning assets declined at a faster pace than the interest rates on our interest-bearing liabilities.

We cannot control or predict with certainty changes in interest rates. Global, national, regional and local economic conditions, competitive pressures and the policies of regulatory authorities, including monetary policies of the FRB, affect interest income and interest expense. Although we have policies and procedures designed to manage the risks associated with changes in market interest rates, as further discussed under the “Risk Governance” section in Item 7, changes in interest rates still may have an adverse effect on our profitability.

If our ongoing assumptions regarding borrower or depositor behavior or overall economic conditions are significantly different than we anticipate, then our risk mitigation may be insufficient to protect against interest rate risk and our net income would be adversely affected.

Changes in the method pursuant to which the LIBOR and other benchmark rates are calculated and their planned discontinuance could adversely impact our business operations and financial results.

Many of our lending products, securities, derivatives, and other financial transactions utilize a benchmark rate, such as LIBOR, to determine the applicable interest rate or payment amount. The U.K. Financial Conduct Authority and the ICE Benchmark Administration have announced that the publication of the most commonly used U.S. Dollar LIBOR tenors will cease to be provided or cease to be representative after June 30, 2023. The publication of all other LIBOR settings ceased to be provided or ceased to be representative as of December 31, 2021. The Adjustable Interest Rate (LIBOR) Act (LIBOR Act), enacted in March 2022, provides a statutory framework to replace U. S. Dollar LIBOR with a benchmark rate based on the Secured Overnight Financing Rate (SOFR) for contracts governed by U.S. law that have no fallbacks or fallbacks that would require the use of a poll or LIBOR-based rate, and in December 2022, the FRB adopted rules which identify different SOFR-based replacement rates for derivative contracts, for cash instruments such as floating-rate notes and preferred stock, for consumer loans, for certain government-sponsored enterprise contracts and for certain asset-backed securities. We continue to monitor market developments and regulatory updates related to the cessation of LIBOR, as well as collaborate with regulators and industry groups on the transition. As the transition from LIBOR is ongoing, there continues to be uncertainty as to the ultimate effect of the transition on the financial markets for LIBOR-linked financial instruments.

The discontinuation of a benchmark rate, changes in a benchmark rate, or changes in market perceptions of the acceptability of a benchmark rate, including LIBOR, could, among other things, adversely affect the value of and return on certain of our financial instruments or products, result in changes to our risk exposures, or require renegotiation of previous transactions. In addition, any such discontinuation or changes, whether actual or anticipated, could result in market volatility, increased compliance, legal and operational costs, and risks associated with customer disclosures and contract negotiations. Although the LIBOR Act includes safe harbors if the FRB-identified SOFR-based replacement rate is selected, these safe harbors are untested. As a result, and despite the enactment of the LIBOR Act, for the most commonly used U.S. Dollar LIBOR settings, the use or selection of a successor rate could also expose us to risks associated with disputes with customers and other market participants in connection with implementing LIBOR fallback provisions. For more information on our LIBOR transition, see the “Market Risk” section in Item 7.

Citizens Financial Group, Inc. | 22

We could fail to attract, retain or motivate highly skilled and qualified personnel, including our senior management, other key employees or members of our Board, which could impair our ability to successfully execute our strategic plan and otherwise adversely affect our business.

A cornerstone of our strategic plan involves the hiring of highly skilled and qualified personnel. Accordingly, our ability to implement our strategic plan and our future success depends on our ability to attract, retain and motivate highly skilled and qualified personnel, including our senior management and other key employees and directors. The marketplace for skilled personnel is becoming more competitive, which means the cost of hiring, incentivizing and retaining skilled personnel may continue to increase. For example, the increase in remote and hybrid work arrangements has also increased competition for skilled personnel, and our current or future approach to in-office and remote-work arrangements may not meet the needs or expectations of current or prospective employees or may not be perceived as favorable as compared to the arrangements offered by other companies, which could adversely affect our ability to attract and retain skilled and qualified personnel. The failure to attract or retain, including as a result of an untimely death or illness of key personnel, or replace a sufficient number of appropriately skilled and key personnel could place us at a significant competitive disadvantage and prevent us from successfully implementing our strategy, which could impair our ability to implement our strategic plan successfully, achieve our performance targets and otherwise have a material adverse effect on our business, financial condition and results of operations.

Limitations on the manner in which regulated financial institutions, such as us, can compensate their officers and employees, including those contained in pending rule proposals implementing requirements of Section 956 of the Dodd-Frank Act, may make it more difficult for such institutions to compete for talent with financial institutions and other companies not subject to these or similar limitations. If we are unable to compete effectively, our business, financial condition and results of operations could be adversely affected, perhaps materially.

Our ability to meet our obligations, and the cost of funds to do so, depend on our ability to access identified sources of liquidity at a reasonable cost.

Liquidity risk is the risk that we will not be able to meet our obligations, including funding commitments, as they come due. This risk is inherent in our operations and can be heightened by a number of factors, including an over-reliance on a particular source of funding (including, for example, secured FHLB advances), changes in credit ratings or market-wide phenomena such as market dislocation and major disasters. Like many banking groups, our reliance on customer deposits to meet a considerable portion of our funding has grown over recent years, and we continue to seek to increase the proportion of our funding represented by customer deposits. However, these deposits are subject to fluctuation due to certain factors outside our control, such as increasing competitive pressures for retail or corporate customer deposits, changes in interest rates and returns on other investment classes, or a loss of confidence by customers in us or in the banking sector generally which could result in a significant outflow of deposits within a short period of time. To the extent there is heightened competition among U.S. banks for retail customer deposits, this competition may increase the cost of procuring new deposits and/or retaining existing deposits, and otherwise negatively affect our ability to grow our deposit base. An inability to grow, or any material decrease in, our deposits could have a material adverse effect on our ability to satisfy our liquidity needs.

Maintaining a diverse and appropriate funding strategy for our assets consistent with our wider strategic risk appetite and plan remains challenging, and any tightening of credit markets could have a material adverse impact on us. In particular, there is a risk that corporate and financial institution counterparties may seek to reduce their credit exposures to banks and other financial institutions (for example, reductions in unsecured deposits supplied by these counterparties), which may cause funding from these sources to no longer be available. Under these circumstances, we may need to seek funds from alternative sources, potentially at higher costs than has previously been the case, or may be required to consider disposals of other assets not previously identified for disposal, in order to reduce our funding commitments.

Citizens Financial Group, Inc. | 23

A reduction in our credit ratings, which are based on a number of factors, could have a material adverse effect on our business, financial condition and results of operations.

Credit ratings affect the cost and other terms upon which we are able to obtain funding. Rating agencies regularly evaluate us, and their ratings are based on a number of factors, including our financial strength. Other factors considered by rating agencies include conditions affecting the financial services industry generally. Any downgrade in our ratings would likely increase our borrowing costs, could limit our access to capital markets, and otherwise adversely affect our business. For example, a ratings downgrade could adversely affect our ability to sell or market certain of our securities, including long-term debt, engage in certain longer-term derivatives transactions and retain our customers, particularly corporate customers who may require a minimum rating threshold in order to place funds with us. In addition, under the terms of certain of our derivatives contracts, we may be required to maintain a minimum credit rating or have to post additional collateral or terminate such contracts. Any of these results of a rating downgrade could increase our cost of funding, reduce our liquidity and have adverse effects on our business, financial condition and results of operations.

Our financial performance may be adversely affected by deterioration in borrower credit quality, particularly in the New England, Mid-Atlantic and Midwest regions, where our operations are predominately concentrated.

We have exposure to many different industries and risks arising from actual or perceived changes in credit quality and uncertainty over the recoverability of amounts due from borrowers is inherent in our businesses. Our exposure may be exacerbated by the geographic concentration of our operations, which are predominately located in the New England, Mid-Atlantic and Midwest regions. The credit quality of our borrowers may deteriorate for a number of reasons that are outside our control, including as a result of prevailing economic and market conditions and asset valuation. The trends and risks affecting borrower credit quality, particularly in the New England, Mid-Atlantic and Midwest regions, have caused, and in the future may cause, us to experience impairment charges, increased repurchase demands, higher costs, additional write-downs and losses and an inability to engage in routine funding transactions, which could have a material adverse effect on our business, financial condition and results of operations.

Our framework for managing risks may not be effective in mitigating risk and loss.

Our risk management framework is made up of various processes and strategies to manage our risk exposure. The framework to manage risk, including the framework’s underlying assumptions, may not be effective under all conditions and circumstances. If the risk management framework proves ineffective, we could suffer unexpected losses and could be materially adversely affected.

One of the main types of risks inherent in our business is credit risk. An important feature of our credit risk management system is to employ an internal credit risk control system through which we identify, measure, monitor and mitigate existing and emerging credit risk of our customers. As this process involves detailed analyses of the customer or credit risk, taking into account both quantitative and qualitative factors, it is subject to human error. In exercising their judgment, our employees may not always be able to assign an accurate credit rating to a customer or credit risk, which may result in our exposure to higher credit risks than indicated by our risk rating system.

In addition, we have undertaken certain actions to enhance our credit policies and guidelines to address potential risks associated with particular industries or types of customers, as discussed in more detail under the “Risk Governance” and “Market Risk” sections in Item 7. However, we may not be able to effectively implement these initiatives, or consistently follow and refine our credit risk management system. If any of the foregoing were to occur, it may result in an increase in the level of nonaccrual loans and a higher risk exposure for us, which could have a material adverse effect on us.

Citizens Financial Group, Inc. | 24

Changes in our accounting policies or in accounting standards could materially affect how we report our financial results and condition.

From time to time, the FASB and SEC change the financial accounting and reporting standards that govern the accounting for our financial results and the preparation of our financial statements. These changes can be operationally complex to implement and can materially impact how we record and report our financial condition and results of operations. For example, in June 2016, the FASB issued Accounting Standards Update 2016-13, Measurement of Credit Losses on Financial Instruments (“CECL”), that substantially changed the accounting for credit losses on loans and other financial assets held by banks, financial institutions and other organizations. Upon adoption of CECL on January 1, 2020, we recognize credit losses on these assets equal to management’s estimate of credit losses over the full remaining expected life. We consider all relevant information when estimating expected credit losses, including details about past events, current conditions, and reasonable and supportable forecasts. As evidenced in the first half of 2020 due to the impact of COVID-19, the standard introduces heightened volatility in provision for credit losses, given uncertainty in the accuracy of macroeconomic forecasts over longer time horizons, variances in the rate and composition of loan growth, and changes in overall loan portfolio size and mix. As a result, it is possible that our ongoing reported earnings and lending activity could be negatively impacted. For more information regarding CECL, see Note 6 in Item 8.

Our financial and accounting estimates and risk management framework rely on analytical forecasting and models.

The processes we use to estimate our inherent loan losses and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on our financial condition and results of operations, depends upon the use of analytical and forecasting models. Some of our tools and metrics for managing risk are based upon our use of observed historical market behavior. We rely on quantitative models to measure risks and to estimate certain financial values. Models may be used in such processes as determining the pricing of various products, grading loans and extending credit, measuring interest rate and other market risks, predicting losses, assessing capital adequacy and calculating regulatory capital levels, as well as estimating the value of financial instruments and balance sheet items. Poorly designed or implemented models present the risk that our business decisions based on information incorporating such models will be adversely affected due to the inadequacy of that information. Moreover, our models may fail to predict future risk exposures if the information used in the model is incorrect, obsolete or not sufficiently comparable to actual events as they occur. We seek to incorporate appropriate historical data in our models, but the range of market values and behaviors reflected in any period of historical data is not at all times predictive of future developments in any particular period and the period of data we incorporate into our models may turn out to be inappropriate for the future period being modeled. In such case, our ability to manage risk would be limited and our risk exposure and losses could be significantly greater than our models indicated. In addition, if existing or potential customers believe our risk management is inadequate, they could take their business elsewhere. This could harm our reputation as well as our revenues and profits. Finally, information we provide to our regulators based on poorly designed or implemented models could also be inaccurate or insufficient. Some of the decisions that our regulators make, including those related to capital distributions to our stockholders, could be adversely affected due to their perception that the quality of the models used to generate the relevant information is insufficient.

The preparation of our financial statements requires the use of estimates that may vary from actual results. Particularly, various factors may cause our Allowance for Credit Losses to increase.

The preparation of audited Consolidated Financial Statements in conformity with GAAP requires management to make significant estimates that affect the financial statements. Our most critical accounting estimate is the ACL. The ACL is a reserve established through a provision for credit losses charged to expense and represents our estimate of expected credit losses within the existing loan and lease portfolio and unfunded lending commitments. The level of the ACL is based on periodic evaluation of the loan and lease portfolios and unfunded lending commitments that are not unconditionally cancellable considering a number of relevant underlying factors, including key assumptions and evaluation of quantitative and qualitative information.

Citizens Financial Group, Inc. | 25

The determination of the appropriate level of the ACL inherently involves a degree of subjectivity and requires that we make significant estimates of current credit risks and future trends, all of which may undergo material changes. Changes in economic conditions affecting borrowers, the stagnation of certain economic indicators that we are more susceptible to, such as unemployment and real estate values, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside our control, may require an increase in the ACL. In addition, bank regulatory agencies periodically review our ACL and may require an increase in the ACL or the recognition of further loan charge-offs, based on judgments that can differ from those of our own management. In addition, if charge-offs in future periods exceed the ACL—that is, if the ACL is inadequate—we will need to recognize additional provision for credit losses. Should such additional provision expense become necessary, it would result in a decrease in net income and capital and may have a material adverse effect on us. For more information regarding our use of estimates in preparation of financial statements, see Note 1 in Item 8 and the “Critical Accounting Estimates” section in Item 7.

Operational risks are inherent in our businesses.

Our operations depend on our ability to process a very large number of transactions efficiently and accurately while complying with applicable laws and regulations. Operational risk and losses can result from internal and external fraud; improper conduct or errors by employees or third parties; failure to document transactions properly or to obtain proper authorization; failure to comply with applicable regulatory requirements and conduct of business rules; equipment failures, including those caused by natural disasters or by electrical, telecommunications or other essential utility outages; business continuity and data security system failures, including those caused by computer viruses, cyber-attacks against us or our vendors, or unforeseen problems encountered while implementing major new computer systems or upgrades to existing systems; or the inadequacy or failure of systems and controls, including those of our suppliers or counterparties. Although we have implemented risk controls and loss mitigation actions, and substantial resources are devoted to developing efficient procedures, identifying and rectifying weaknesses in existing procedures and training staff, it is not possible to be certain that such actions have been or will be effective in controlling each of the operational risks faced by us. Any weakness in these systems or controls, or any breaches or alleged breaches of such laws or regulations, could result in increased regulatory supervision, enforcement actions and other disciplinary action, and have an adverse impact on our business, applicable authorizations and licenses, reputation and results of operations.

The financial services industry, including the banking sector, is undergoing rapid technological change as a result of changes in customer behavior, competition and changes in the legal and regulatory framework, and we may not be able to compete effectively as a result of these changes.

The financial services industry, including the banking sector, is continually undergoing rapid technological change with frequent introductions of new technology-driven products and services. In addition, new, unexpected technological changes could have a disruptive effect on the way banks offer products and services. We believe our success depends, to a great extent, on our ability to address customer needs by using technology to offer products and services that provide convenience to customers and to create additional efficiencies in our operations. However, we may not be able to, among other things, keep up with the rapid pace of technological changes, effectively implement new technology-driven products and services or be successful in marketing these products and services to our customers. As a result, our ability to compete effectively to attract or retain new business may be impaired, and our business, financial condition or results of operations may be adversely affected.

In addition, changes in the legal and regulatory framework under which we operate require us to update our information systems to ensure compliance. Our need to review and evaluate the impact of ongoing rule proposals, final rules and implementation guidance from regulators further complicates the development and implementation of new information systems for our business. Also, recent regulatory guidance has focused on the need for financial institutions to perform increased due diligence and ongoing monitoring of third-party vendor relationships, thus increasing the scope of management involvement and decreasing the efficiency otherwise resulting from our relationships with third-party technology providers. Given the significant number of ongoing regulatory reform initiatives, it is possible that we incur higher than expected information technology costs in order to comply with current and impending regulations. See “—Supervisory requirements and expectations on us as a FHC and a BHC and any regulator-imposed limits on our activities could adversely affect our ability to implement our strategic plan, expand our business, continue to improve our financial performance and make capital distributions to our stockholders.”

Citizens Financial Group, Inc. | 26

We are subject to a variety of cybersecurity risks that, if realized, could adversely affect how we conduct our business.

Information security risks for large financial institutions such as us have increased significantly in recent years in part because of the proliferation of new technologies, such as the internet and mobile banking to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, nation-states, activists and other external parties. Third parties with whom we or our customers do business also present operational and information security risks to us, including security breaches or failures of their own systems. Risks relating to cyber-attacks on our vendors and other third parties, including supply chain attacks affecting our software and information technology service providers, have been rising as such attacks become increasingly frequent and severe. The possibility of employee error, failure to follow security procedures, or malfeasance also presents these risks, particularly given the recent trend towards remote work arrangements. Our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks as well as in the third-party computer systems and networks used to provide products and services on our behalf. In addition, to access our products and services, our customers may use personal computers, smartphones, tablets, and other mobile devices that are beyond our control environment. Although we believe that we have appropriate information security procedures and controls based on our adherence to applicable laws and regulations, industry standards and best practices, our technologies, systems, networks and our customers’ devices may be the target of cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, theft, sale or loss or destruction of the confidential, and/or proprietary information of CFG, our customers, our vendors, our counterparties, or our employees. We are under continuous threat of loss or network degradation due to cyber-attacks, such as computer viruses, malicious or destructive code, phishing attacks, ransomware, and Distributed Denial of Service (“DDoS”) attacks. This is especially true as we continue to expand customer capabilities to utilize the Internet and other remote channels to transact business. Two of the most significant cyber-attack risks that we face are e-fraud and loss of sensitive customer data. Loss from e-fraud occurs when cybercriminals extract funds directly from customers’ or our accounts using fraudulent schemes that may include Internet-based funds transfers. We have been subject to a number of e-fraud incidents historically. We have also been subject to attempts to steal sensitive customer data, such as account numbers and social security numbers, through unauthorized access to our computer systems including computer hacking. Such attacks are less frequent but could present significant reputational, legal and regulatory costs to us if successful. We have implemented certain technology protections such as Customer Profiling and Set-Up Authentication to be in compliance with the FFIEC Authentication and Access to Financial Institution Services and Systems guidelines.

As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our layers of defense or to investigate and remediate any information security vulnerabilities. System enhancements and updates may also create risks associated with implementing new systems and integrating them with existing ones. Due to the complexity and interconnectedness of information technology systems, the process of enhancing our layers of defense can itself create a risk of systems disruptions and security issues. In addition, addressing certain information security vulnerabilities, such as hardware-based vulnerabilities, may affect the performance of our information technology systems. The ability of our hardware and software providers to deliver patches and updates to mitigate vulnerabilities in a timely manner can introduce additional risks, particularly when a vulnerability is being actively exploited by threat actors. Cyber-attacks against the patches themselves have also proven to be a significant risk that companies will have to address going forward.

Despite our efforts to prevent a cyber-attack, a successful cyber-attack could persist for an extended period of time before being detected, and, following detection, it could take considerable time for us to obtain full and reliable information about the cybersecurity incident and the extent, amount and type of information compromised.  During the course of an investigation, we may not necessarily know the full effects of the incident or how to remediate it, and actions and decisions that are taken or made in an effort to mitigate risk may further increase the costs and other negative consequences of the incident. Moreover, potential new regulations may require us to disclose information about a cybersecurity event before it has been resolved or fully investigated.

Citizens Financial Group, Inc. | 27

The techniques used by cyber criminals change frequently, may not be recognized until launched and can be initiated from a variety of sources, including terrorist organizations and hostile foreign governments. These actors may attempt to fraudulently induce employees, customers or other users of our systems to disclose sensitive information in order to gain access to data or our systems. In the event that a cyber-attack is successful, our business, financial condition or results of operations may be adversely affected. For a discussion of the guidance that federal banking regulators have released regarding cybersecurity and cyber risk management standards, see the “Regulation and Supervision” section of Item 1.

We rely heavily on communications and information systems to conduct our business.

We rely heavily on communications and information systems to conduct our business. Any failure, interruption or breach in security of these systems, including due to hacking or other similar attempts to breach information technology security protocols, could result in failures or disruptions in our customer relationship management, general ledger, deposit, loan and other systems. Although we have established policies and procedures designed to prevent or limit the effect of the possible failure, interruption or security breach of our information systems, there can be no assurance that these policies and procedures will be successful and that any such failure, interruption or security breach will not occur or, if they do occur, that they will be adequately addressed. The occurrence of any failure, interruption or security breach of our information systems could require us to devote substantial resources (including management time and attention) to recovery and response efforts, damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny, or expose us to civil litigation and possible financial liability. Although we maintain insurance coverage for information security events, we may incur losses as a result of such events that are not insured against or not fully covered by our insurance.

We rely on third parties for the performance of a significant portion of our information technology.

We rely on third parties for the performance of a significant portion of our information technology functions and the provision of information technology and business process services. For example, (i) unaffiliated third parties operate data communications networks on which certain components and services relating to our online banking system rely, (ii) third parties host or maintain many of our applications, including a commercial loan system, which is hosted and maintained by Automated Financial Systems, Inc., and our Mobile Digital Banking Application, which is hosted and maintained by Amazon Web Services, Inc., (iii) Fidelity Information Services, LLC maintains our core deposits system, (iv) Infosys Limited provides us with a wide range of information technology support services, including service desk, end user support, production application support, and private cloud support, and (v) Kyndryl, Inc. provides us with mainframe support services. The success of our business depends in part on the continuing ability of these (and other) third parties to perform these functions and services in a timely and satisfactory manner, which performance could be disrupted or otherwise adversely affected due to failures or other information security events originating at the third parties or at the third parties’ suppliers or vendors (so-called “fourth party risk”). For example, during 2021, there were a number of widely publicized cases of outages in connection with access to cloud service providers. We may not be able to effectively monitor or mitigate fourth-party risk, in particular as it relates to the use of common suppliers or vendors by the third parties that perform functions and services for us. If we experience a disruption in the provision of any functions or services performed by third parties, we may have difficulty in finding alternate providers on terms favorable to us and in reasonable time frames. If these services are not performed in a satisfactory manner, we would not be able to serve our customers well. In either situation, our business could incur significant costs and be adversely affected.

We are exposed to reputational risk and the risk of damage to our brands and the brands of our affiliates.

Our success and results depend, in part, on our reputation and the strength of our brands. We are vulnerable to adverse market perception as we operate in an industry where integrity, customer trust and confidence are paramount. We are exposed to the risk that litigation, employee misconduct, operational failures, the outcome of regulatory or other investigations or actions, press speculation and negative publicity, perception of our environmental, social and governance practices and disclosures, among other factors, could damage our brands or reputation. Our brands and reputation could also be harmed if we sell products or services that do not perform as expected or customers’ expectations for the product are not satisfied.

Citizens Financial Group, Inc. | 28

Unpredictable catastrophic events, including pandemics, terrorist attacks, extreme weather events and other large-scale catastrophes, could have an adverse effect on our business, financial position and results of operations.

The occurrence of catastrophic events, including pandemics, such as COVID-19, terrorists attacks, extreme weather events, such as hurricanes, tropical storms, or tornadoes, and other large-scale catastrophes could adversely affect our business, financial condition or results of operations, including by affecting the stability of our deposit base, impairing the ability of our borrowers to repay outstanding loans, impairing the value of collateral securing loans, causing significant property damage or operational disruptions, resulting in loss of revenue or causing us to incur additional expenses.

For example, the COVID-19 pandemic has in the past negatively affected, and could in the future negatively affect, the global and U.S. economies, including by increasing unemployment levels, disrupting supply chains and businesses in many industries, lowering equity market valuations, decreasing liquidity in fixed income markets, and creating significant volatility and disruption in financial markets. This has in the past resulted in, and could in the future result in, higher and more volatile provisions for credit losses and has in the past adversely affected, and could in the future adversely affect, our noninterest income. The extent to which the COVID-19 pandemic could adversely affect our business, financial condition and results of operations, as well as our liquidity and capital profile, will depend on future developments, which are highly uncertain and cannot be predicted, including the scope and duration of the pandemic, any resurgence of COVID-19 cases and the emergence of new variants, the widespread availability, use and effectiveness of vaccines, actions taken by governmental authorities and other third parties in response to the pandemic and the direct and indirect impact of the pandemic on us, our clients and customers, our service providers and other market participants. As the COVID-19 pandemic adversely affects us, it may also have the effect of heightening many of the other risks described herein.

Furthermore, although we maintain both business continuity and disaster recovery plans, if a terrorist attack, extreme weather event, or other catastrophe rendered both our production data center in Rhode Island and our recovery data center in North Carolina unusable, there can be no assurance that these plans and related capabilities will adequately protect us from such events, and our business, financial condition or results of operations could be adversely affected.

The effects of geopolitical instability, such as Russia’s invasion of Ukraine, may adversely affect us and create significant risks and uncertainties for our business, with the ultimate impact dependent on future developments, which are highly uncertain and unpredictable.

Ongoing geopolitical instability, such as Russia’s invasion of Ukraine, has negatively impacted, and could in the future negatively impact, the global and U.S. economies, including by causing supply chain disruptions, rising prices for oil and other commodities, volatility in capital markets and foreign currency exchange rates, rising interest rates and heightened cybersecurity risks. The extent to which such geopolitical instability, such as Russia’s invasion of Ukraine, adversely affects our business, financial condition and results of operations, as well as our liquidity and capital profile, will depend on future developments, which are highly uncertain and unpredictable, including with respect to Russia’s invasion, the extent and duration of the invasion and economic sanctions imposed on Russia, and the immeasurable humanitarian toll inflicted on Ukraine. If geopolitical instability adversely affects us, it may also have the effect of heightening other risks related to our business.

Risks Related to Our Industry

Any deterioration in national economic conditions could have a material adverse effect on our business, financial condition and results of operations.

Our business is affected by national economic conditions, as well as perceptions of those conditions and future economic prospects. Changes in such economic conditions are not predictable and cannot be controlled. Adverse economic conditions, such as challenges in the global supply chain and recent inflationary trends, could require us to charge off a higher percentage of loans and increase the provision for credit losses, which would reduce our net income and otherwise have a material adverse effect on our business, financial condition and results of operations.

Citizens Financial Group, Inc. | 29

We operate in an industry that is highly competitive, which could result in losing business or margin declines and have a material adverse effect on our business, financial condition and results of operations.

We operate in a highly competitive industry. The industry could become even more competitive as a result of reform of the financial services industry resulting from the Dodd-Frank Act and other legislative, regulatory and technological changes, as well as continued consolidation. We face aggressive competition from other domestic and foreign lending institutions and from numerous other providers of financial services, including non-banking financial institutions that are not subject to the same regulatory restrictions as banks and BHCs, securities firms and insurance companies, and competitors that may have greater financial resources.

With respect to non-banking financial institutions, technology and other changes have lowered barriers to entry and made it possible for non-banks to offer products and services traditionally provided by banks. For example, consumers can maintain funds that would have historically been held as bank deposits in brokerage accounts or mutual funds. Consumers can also complete transactions such as paying bills and/or transferring funds directly without the assistance of banks. In addition, the emergence, adoption and evolution of new technologies that do not require intermediation, including distributed ledgers such as digital assets and blockchain, as well as advances in robotic process automation, could significantly affect the competition for financial services. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. Some of our non-bank competitors are not subject to the same extensive regulations we are and, therefore, may have greater flexibility in competing for business. As a result of these and other sources of competition, we could lose business to competitors or be forced to price products and services on less advantageous terms to retain or attract clients, either of which would adversely affect our profitability.

Climate change manifesting as physical or transition risks could adversely affect our operations, businesses and customers.

There is increasing global concern over the risks of climate change and related environmental sustainability matters. The physical risks of climate change include discrete events, such as flooding and wildfires, and longer-term shifts in climate patterns, such as extreme heat, sea level rise, and more frequent and prolonged drought. Such events could disrupt our operations or those of our clients, customers, or service providers, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility.

We are also exposed to risks associated with the transition to a lower-carbon economy in response to concerns around climate change. Such risks may result from changes in policies, laws and regulations, technologies, or market preferences that are intended to address climate change. These changes could materially and negatively impact our or our customers’ business, results of operations, financial condition and our reputation, including as a result of our or our customers’ involvement in, or decision not to participate in, certain industries or projects associated with exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change. Ongoing legislative or regulatory uncertainties and changes regarding climate risk management and practices may result in higher regulatory, compliance, credit and reputational risks and costs.

The conditions of other financial institutions or of the financial services industry could adversely affect our operations and financial condition.

Financial services institutions are typically interconnected as a result of trading, investment, liquidity management, clearing, counterparty and other relationships. Within the financial services industry, the default by any one institution could lead to defaults by other institutions. Concerns about, or a default by, one institution could lead to significant liquidity problems and losses or defaults by other institutions, as the commercial and financial soundness of many financial institutions are closely related as a result of these credit, trading, clearing and other relationships. Even the perceived lack of creditworthiness of, or questions about, a counterparty may lead to market-wide liquidity problems and losses or defaults by various institutions. This systemic risk may adversely affect financial intermediaries, such as clearing agencies, banks and exchanges with which we interact on a daily basis, or key funding providers such as the FHLBs, any of which could have a material adverse effect on our access to liquidity or otherwise have a material adverse effect on our business, financial condition and results of operations.

Citizens Financial Group, Inc. | 30

Risks Related to Regulations Governing Our Industry

As a financial holding company and a bank holding company, we are subject to comprehensive regulation that could have a material adverse effect on our business and results of operations.

As a FHC and a BHC, we are subject to comprehensive regulation, supervision and examination by the FRB. In addition, CBNA is subject to comprehensive regulation, supervision and examination by the OCC. Our regulators supervise us through regular examinations and other means that allow the regulators to gauge management’s ability to identify, assess and control risk in all areas of operations in a safe and sound manner and to ensure compliance with laws and regulations. In the course of their supervision and examinations, our regulators may require improvements in various areas. If we are unable to implement and maintain any required actions in a timely and effective manner, we could become subject to informal (nonpublic) or formal (public) supervisory actions and public enforcement orders that could lead to significant restrictions on our existing business or on our ability to engage in any new business. Such forms of supervisory action could include, without limitation, written agreements, cease and desist orders, and consent orders and may, among other things, result in restrictions on our ability to pay dividends, requirements to increase capital, restrictions on our activities, the imposition of civil monetary penalties, and enforcement of such actions through injunctions or restraining orders. We could also be required to dispose of certain assets and liabilities within a prescribed period. The terms of any such supervisory or enforcement action could have a material adverse effect on our business, financial condition and results of operations.

We are a BHC that has elected to become a FHC pursuant to the Bank Holding Company Act. FHCs are allowed to engage in certain financial activities in which a BHC is not otherwise permitted to engage. However, to maintain FHC status, a BHC (and all of its depository institution subsidiaries) must be “well capitalized” and “well managed.” If a BHC ceases to meet these capital and management requirements, there are many penalties it would be faced with, including the FRB may impose limitations or conditions on the conduct of its activities, and it may not undertake any of the broader financial activities permissible for FHCs or acquire a company engaged in such financial activities without prior approval of the FRB. If a company does not return to compliance within 180 days, which period may be extended, the FRB may require divestiture of that company’s depository institutions. To the extent we do not meet the requirements to be a FHC in the future, there could be a material adverse effect on our business, financial condition and results of operations.

We may be unable to disclose some restrictions or limitations on our operations imposed by our regulators.

From time to time, bank regulatory agencies take supervisory actions that restrict or limit a financial institution’s activities and lead it to raise capital or subject it to other requirements. Directives issued to enforce such actions may be confidential and thus, in some instances, we are not permitted to publicly disclose these actions. In addition, as part of our regular examination process, our regulators may advise us to operate under various restrictions as a prudential matter. Any such actions or restrictions, if and in whatever manner imposed, could adversely affect our costs and revenues. Moreover, efforts to comply with any such nonpublic supervisory actions or restrictions may require material investments in additional resources and systems, as well as a significant commitment of managerial time and attention. As a result, such supervisory actions or restrictions, if and in whatever manner imposed, could have a material adverse effect on our business and results of operations; and, in certain instances, we may not be able to publicly disclose these matters.

Citizens Financial Group, Inc. | 31

The regulatory environment in which we operate continues to be subject to significant and evolving regulatory requirements that could have a material adverse effect on our business and earnings.

We are heavily regulated by multiple banking, consumer protection, securities and other regulatory authorities at the federal and state levels. This regulatory oversight is primarily established to protect depositors, the DIF, consumers of financial products, and the financial system as a whole, not our security holders. Changes to statutes, regulations, rules or policies, including the interpretation, implementation or enforcement of statutes, regulations, rules or policies, could affect us in substantial and unpredictable ways, including by, for example, subjecting us to additional costs, limiting the types of financial services and other products we may offer, limiting our ability to pursue acquisitions and increasing the ability of third parties, including non-banks, to offer competing financial services and products. In recent years, we, together with the rest of the financial services industry, have faced particularly intense scrutiny, with many new regulatory initiatives and vigorous oversight and enforcement on the part of numerous regulatory and governmental authorities. Legislatures and regulators have pursued a broad array of initiatives intended to promote the safety and soundness of financial institutions, financial market stability, the transparency and liquidity of financial markets, and consumer and investor protection. Certain regulators and law enforcement authorities have also recently required admissions of wrongdoing and, in some cases, criminal pleas as part of the resolutions of matters brought by them against financial institutions. Any such resolution of a matter involving us could lead to increased exposure to civil litigation, could adversely affect our reputation, could result in penalties or limitations on our ability to do business or engage in certain activities and could have other negative effects. In addition, a single event or issue may give rise to numerous and overlapping investigations and proceedings, including by multiple federal and state regulators and other governmental authorities.

We are also subject to laws and regulations relating to the privacy of the information of our customers, employees, counterparties and others, and any failure to comply with these laws and regulations could expose us to liability and/or reputational damage. As new privacy-related laws and regulations are implemented, the time and resources needed for us to comply with those laws and regulations, as well as our potential liability for non-compliance and our reporting obligations in the case of data breaches, may significantly increase.

While there have been significant revisions to the laws and regulations applicable to us that have been finalized in recent years, there are other rules to implement changes that have yet to be proposed or enacted by our regulators. The final timing, scope and impact of these changes to the regulatory framework applicable to financial institutions remains uncertain. For more information on regulations to which we are subject and recent initiatives to reform financial institution regulation, see the “Regulation and Supervision” section in Item 1.

We are subject to capital adequacy and liquidity standards, and if we fail to meet these standards our financial condition and operations would be adversely affected.

We are subject to several capital adequacy and liquidity standards. To the extent that we are unable to meet these standards, our ability to make distributions of capital will be limited and we may be subject to additional supervisory actions and limitations on our activities. See “Regulation and Supervision” in Item 1 and the “Capital and Regulatory Requirements” and “Liquidity” sections in Item 7, for further discussion of the regulations to which we are subject.

The Parent Company could be required to act as a “source of strength” to CBNA, which would have a material adverse effect on our business, financial condition and results of operations.

FRB policy historically required BHCs to act as a source of financial and managerial strength to their subsidiary banks. The Dodd-Frank Act codified this policy as a statutory requirement. This support may be required by the FRB at times when we might otherwise determine not to provide it or when doing so is not otherwise in the interests of CFG or our stockholders or creditors, and may include one or more of the following:

•The Parent Company may be compelled to contribute capital to CBNA, including by engaging in a public offering to raise such capital. Furthermore, any extensions of credit from the Parent Company to CBNA that are included in CBNA’s capital would be subordinate in right of payment to depositors and certain other indebtedness of CBNA.

•In the event of a BHC’s bankruptcy, any commitment that the BHC had been required to make to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

•In the event of impairment of the capital stock of CBNA, the Parent Company, as CBNA’s stockholder, could be required to pay such deficiency.

Citizens Financial Group, Inc. | 32

The Parent Company depends on CBNA for substantially all of its revenue, and restrictions on dividends and other distributions by CBNA could affect its liquidity and ability to fulfill our obligations.

As a BHC, the Parent Company is a separate and distinct legal entity from CBNA, our banking subsidiary. The Parent Company typically receives substantially all of our revenue from dividends from CBNA. These dividends are the principal source of funds to pay dividends on our equity and interest and principal on our debt. Various federal and/or state laws and regulations, as well as regulatory expectations, limit the amount of dividends that CBNA may pay to the Parent Company. Also, our right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of the subsidiary’s creditors. In the event CBNA is unable to pay dividends to the Parent Company, it may not be able to service debt, pay obligations or pay dividends on its common stock. The inability to receive dividends from CBNA could have a material adverse effect on our business, financial condition and results of operations. See the “Supervision and Regulation” section in Item 1 and the “Capital and Regulatory Matters” section in Item 7.

From time-to-time, we may become or are subject to regulatory actions that may have a material impact on our business.

We may become or are involved, from time to time, in reviews, investigations and proceedings (both formal and informal) by governmental and self-regulatory agencies regarding our business. These regulatory actions involve, among other matters, accounting, compliance and operational matters, certain of which may result in adverse judgments, settlements, fines, penalties, injunctions or other relief that may require changes to our business or otherwise materially impact our business.

In regulatory actions, such as those referred to above, it is inherently difficult to determine whether any loss is probable or whether it is possible to reasonably estimate the amount of any loss. We cannot predict with certainty if, how or when such proceedings will be resolved or what the eventual fine, penalty or other relief, conditions or restrictions, if any, may be, particularly for actions that are in their early stages of investigation. The Parent Company may be required to make significant restitution payments to CBNA customers arising from certain compliance issues and also may be required to pay civil money penalties in connection with certain of these issues. This uncertainty makes it difficult to estimate probable losses, which, in turn, can lead to substantial disparities between the reserves we may establish for such proceedings and the eventual settlements, fines, or penalties. Adverse regulatory actions could have a material adverse effect on our business, financial condition and results of operations.

We are and may be subject to litigation that may have a material impact on our business.

Our operations are diverse and complex and we operate in legal and regulatory environments that expose us to potentially significant litigation risk. In the normal course of business, we have been named, from time to time, as a defendant in various legal actions, including arbitrations, class actions and other litigation, arising in connection with our activities as a financial services institution, including with respect to alleged unfair or deceptive business practices and mis-selling of certain products. Certain of the actual or threatened legal actions include claims for substantial compensatory and/or punitive damages or claims for indeterminate amounts of damages. In some cases, the entities that would otherwise be the primary defendants in such cases are bankrupt or in financial distress. Moreover, a number of recent judicial decisions have upheld the right of borrowers to sue lending institutions on the basis of various evolving legal theories, collectively termed “lender liability.” Generally, lender liability is founded on the premise that a lender has either violated a duty, whether implied or contractual, of good faith and fair dealing owed to the borrower or has assumed a degree of control over the borrower resulting in the creation of a fiduciary duty owed to the borrower or its other creditors or stockholders. This could increase the amount of private litigation to which we are subject. For more information regarding ongoing significant legal proceedings in which we may be involved, see Note 19 in Item 8.

Citizens Financial Group, Inc. | 33

Compliance with anti-money laundering and anti-terrorism financing rules involves significant cost and effort.

We are subject to rules and regulations regarding money laundering and the financing of terrorism. Monitoring compliance with anti-money laundering and anti-terrorism financing rules can put a significant financial burden on banks and other financial institutions and poses significant technical challenges. Although we believe our current policies and procedures are sufficient to comply with applicable rules and regulations, we cannot guarantee that our anti-money laundering and anti-terrorism financing policies and procedures completely prevent situations of money laundering or terrorism financing. Any such failure events may have severe consequences, including sanctions, fines and reputational consequences, which could have a material adverse effect on our business, financial condition or results of operations.

Risks Related to our Common Stock

Our stock price may be volatile, and you could lose all or part of your investment as a result.

You should consider an investment in our common stock to be risky, and you should invest in our common stock only if you can withstand a significant loss and wide fluctuation in the market value of your investment. The market price of our common stock could be subject to wide fluctuations in response to, among other things, the factors described in this “Risk Factors” section, and other factors, some of which are beyond our control. These factors include:

•quarterly variations in our results of operations or the quarterly financial results of companies perceived to be similar to us;

•changes in expectations as to our future financial performance, including financial estimates by securities analysts and investors;

•our announcements or our competitors’ announcements regarding new products or services, enhancements, significant contracts, acquisitions or strategic investments;

•fluctuations in the market valuations of companies perceived by investors to be comparable to us;

•future sales of our common stock;

•additions or departures of members of our senior management or other key personnel;

•changes in industry conditions or perceptions; and

•changes in applicable laws, rules or regulations and other dynamics.

Furthermore, the stock markets have experienced price and volume fluctuations that have affected and continue to affect the market price of equity securities of many companies. These fluctuations have often been unrelated or disproportionate to the operating performance of these companies. These broad market fluctuations, as well as general economic, systemic, political and market conditions, such as recessions, loss of investor confidence, interest rate changes or international currency fluctuations, may negatively affect the market price of our common stock.

If any of the foregoing occurs, it could cause our stock price to fall and may expose us to securities class action litigation that, even if unsuccessful, could be costly to defend and a distraction to management.

We may not repurchase shares or pay cash dividends on our common stock.

Holders of our common stock are only entitled to receive such dividends as our Board of Directors may declare out of funds legally available for such payments. Although we have historically declared cash dividends on our common stock, we are not required to do so and may reduce or eliminate our common stock dividend in the future. This could adversely affect the market price of our common stock. Also, as a BHC, our ability to repurchase shares and declare and pay dividends is dependent on certain federal regulatory considerations, including the rules of the FRB regarding capital adequacy and dividends. Additionally, we are also generally required to receive the FRB’s approval for any dividends, share repurchases, or redemption of capital securities if we are required to resubmit our capital plan. Further, if we are unable to satisfy the capital requirements applicable to us for any reason, we may be limited in our ability to repurchase shares and declare and pay dividends on our capital stock. See the “Regulation and Supervision” section in Item 1, for further discussion of the regulations to which we are subject.

Citizens Financial Group, Inc. | 34

“Anti-takeover” provisions and the regulations to which we are subject may make it more difficult for a third party to acquire control of us, even if the change in control would be beneficial to stockholders.

We are a BHC incorporated in the state of Delaware. Anti-takeover provisions in Delaware law and our restated certificate of incorporation and amended and restated bylaws, as well as regulatory approvals that would be required under federal law, could make it more difficult for a third party to take control of us and may prevent stockholders from receiving a premium for their shares of our common stock. These provisions could adversely affect the market price of our common stock and could reduce the amount that stockholders might get if we are sold.

Furthermore, banking laws impose notice, approval and ongoing regulatory requirements on any stockholder or other party that seeks to acquire direct or indirect “control” of an FDIC-insured depository institution. These laws include the Bank Holding Company Act and the Change in Bank Control Act.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 2. PROPERTIES

We lease seven operations centers in Boston, Medford, and Westwood, Massachusetts; Pittsburgh, Pennsylvania; Franklin, Tennessee; Irving, Texas and Glen Allen, Virginia. We own two principal operations centers in Johnston and East Providence, Rhode Island. At December 31, 2022, our subsidiaries owned and operated a total of 59 facilities and leased an additional 1,293 facilities. We believe our current facilities are adequate to meet our needs. See Note 7 and Note 9 in Item 8 for more information regarding our premises and equipment, and leases, respectively.

ITEM 3. LEGAL PROCEEDINGS

Information required by this item is presented in Note 19 in Item 8 and is incorporated herein by reference.

ITEM 4. MINE SAFETY DISCLOSURES

Not applicable.

PART II

ITEM 5. MARKET FOR REGISTRANT’S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Our common stock is traded on the New York Stock Exchange under the symbol “CFG.” As of January 31, 2023, our common stock was owned by 7,306 holders of record (including Cede & Co.) and approximately 525,000 beneficial shareholders whose shares were held in “street name” through a broker or bank. Information relating to compensation plans under which our equity securities are authorized for issuance is presented in Item 12.

The following graph compares the cumulative total stockholder returns for our performance during the five-year period ended December 31, 2022 relative to the performance of the Standard & Poor’s 500® index, a commonly referenced U.S. equity benchmark consisting of leading companies from diverse economic sectors; the KBW Nasdaq Bank Index (“BKX”), composed of 24 leading national money centers, regional banks and thrifts; and a group of other banks that constitute our peer regional banks. The graph assumes a $100 investment at the closing price on December 31, 2017 in each of CFG common stock, the S&P 500 index, the BKX and the peer market-capitalization weighted average and assumes all dividends were reinvested on the date paid. The points on the graph represent the fiscal quarter-end amounts based on the last trading day in each subsequent fiscal quarter.

Citizens Financial Group, Inc. | 35

This graph shall not be deemed “soliciting material” or be filed with the Securities and Exchange Commission for purposes of Section 18 of the Securities Exchange Act of 1934, as amended (“Exchange Act”), or otherwise subject to the liabilities under that Section, and shall not be deemed to be incorporated by reference into any filing of Citizens Financial Group, Inc. under the Securities Act of 1933, as amended, or the Exchange Act.

	12/31/2022	12/31/2021	12/31/2020	12/31/2019	12/31/2018	12/31/2017
CFG	$114	$132	$96	$103	$73	$100
S&P 500 Index	157	191	149	126	96	100
KBW BKX Index	109	139	100	112	82	100
Peer Regional Bank Average	113	137	102	114	85	100

Issuer Purchase of Equity Securities

Details of the repurchases of the Company’s common stock during the three months ended December 31, 2022 are included below:

Period Total Number of Shares Repurchased(1)