CIVISTA BANCSHARES INC

We, as management of Civista Bancshares, Inc., are responsible for establishing and maintaining effective internal control over financial reporting that is designed to produce reliable financial statements in conformity with United States generally accepted accounting principles. The system of internal control over financial reporting as it relates to the financial statements is evaluated for effectiveness by management and tested for reliability through a program of internal audits. Actions are taken to correct potential deficiencies as they are identified. Any system of internal control, no matter how well designed, has inherent limitations, including the possibility that a control can be circumvented or overridden and misstatements due to error or fraud may occur and not be detected. Also, because of changes in conditions, internal control effectiveness may vary over time. Accordingly, even an effective system of internal control will provide only reasonable assurance with respect to financial statement preparation.

Management assessed the Company’s system of internal control over financial reporting as of December 31, 2024, in relation to criteria for effective internal control over financial reporting as described in “2013 Internal Control – Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on this assessment, management concludes that, as of December 31, 2024, its system of internal control over financial reporting is effective and meets the criteria of the “2013 Internal Control – Integrated Framework”. Plante & Moran, PLLC, independent registered public accounting firm, has issued an audit report on the effectiveness of the Company’s internal control over financial reporting as of December 31, 2024.

Management is responsible for compliance with the federal and state laws and regulations concerning dividend restrictions and federal laws and regulations concerning loans to insiders designated by the FDIC as safety and soundness laws and regulations. Management has assessed compliance by the Company with the designated laws and regulations relating to safety and soundness. Based on the assessment, management believes that the Company complied, in all significant respects, with the designated laws and regulations related to safety and soundness for the year ended December 31, 2024.