First Financial Bankshares, Inc. (FFIN) — ESG & Values Scores

Environment story

FFIN discloses minimal direct environmental metrics and no formal net-zero commitment. The 10-K acknowledges climate change risks to loan collateral values and borrower creditworthiness, particularly from weather events and regional economic disruption. The company recognizes environmental liability exposure through real-estate lending (phase 1/phase 2 environmental reviews pre-foreclosure) but does not report Scope 1, 2, or 3 emissions, renewable energy percentage, or decarbonization capital expenditures. Oil and gas exposure in loan portfolio (~3.86% HFI) and trust revenues (~14% from oil/gas property management) create indirect fossil-fuel dependency. No disclosure of sustainability targets, carbon reduction initiatives, or climate litigation. The company acknowledges regulatory scrutiny on climate-related risk management and increasing stakeholder expectations but provides no quantified mitigation roadmap. Environmental score reflects absence of emissions transparency, undefined net-zero pathway (post-2050 or none = -15), and unmitigated supply-chain carbon risk (-15), partially offset by acknowledgment of environmental review processes in lending (+5).

Criticisms on file

Undisclosed Scope 1, 2, and 3 greenhouse gas emissions; no net-zero target year or decarbonization roadmap.
Source: FFIN 10-K SEC filing (2025); Item 1A Risk Factors, Climate Change section.
Oil and gas loan exposure (~3.86% of total HFI as of Dec 31, 2025) and trust revenue dependency (14% from oil/gas property management in 2025) create unmitigated fossil-fuel financial exposure.
Source: FFIN 10-K SEC filing (2025); Risk Factors, Economic Conditions & Market Related Risks.
Potential increased regulatory capital weighting on oil/gas loans due to climate advocacy and regulatory re-prioritization.
Source: FFIN 10-K SEC filing (2025); Item 1A Risk Factors, Compliance and Regulatory Risks section.

Disclosed initiatives

Environmental Due Diligence in Real Estate Lending

Company performs Phase 1 and Phase 2 environmental inspections before originating loans secured by real property and before foreclosure to evaluate hazardous/toxic substance risks.

Reduces direct environmental liability from contaminated collateral but does not address operational or supply-chain emissions.
Climate Risk Recognition in Regulatory Framework

10-K acknowledges federal banking agency focus on climate-related risk management, stress testing, and credit portfolio concentration based on climate factors.

Passive compliance posture; no proactive decarbonization or net-zero commitment disclosed.

Social story

FFIN does not disclose CEO-to-worker pay ratios, workforce diversity percentages, turnover rates, or active union relationships in the 10-K. The company acknowledges reliance on experienced management teams and notes that unexpected loss of key personnel could adversely affect operations. A transition and retirement agreement exists with the board chairman; no other employment agreements disclosed for key executives except change-of-control and equity-related confidentiality agreements. Supply-chain labor practices are not addressed. The company does not report formal diversity programs, EEO-1 disclosures, pay equity audits, or supplier diversity initiatives. No human rights, forced labor, or modern slavery statements identified. The 10-K references increased regulatory focus on fair lending (CRA, Equal Credit Opportunity Act, Fair Housing Act) and notes that failed compliance could result in damages, civil money penalties, injunctive relief, and restrictions on M&A activity. Lack of transparency on core social metrics and absence of disclosed diversity/inclusion initiatives result in a mid-range score, with partial credit for regulatory compliance framework and implicit acknowledgment of labor stability importance.

Criticisms on file

No disclosed CEO-to-median-worker pay ratio; no workforce diversity metrics (gender, race/ethnicity) published.
Source: FFIN 10-K SEC filing (2025); absence of such disclosures in full document.
No documented union relationships, collective bargaining agreements, or labor union standing disclosed.
Source: FFIN 10-K SEC filing (2025); no union-related disclosures in Risk Factors or business description sections.
No supply-chain labor audit, human rights due diligence, or modern slavery statement disclosed.
Source: FFIN 10-K SEC filing (2025); absence of supply-chain social responsibility disclosures.
Regulatory enforcement risk: CFPB, OCC, DOJ enforcement actions for fair lending violations could result in significant civil money penalties, injunctive relief, and restrictions on M&A and expansion.
Source: FFIN 10-K SEC filing (2025); Item 1A Risk Factors, Compliance and Regulatory Risks section.

Disclosed initiatives

Compliance with Fair Lending Laws and CRA

Company operates under regulatory requirements for non-discriminatory lending (CRA, Equal Credit Opportunity Act, Fair Housing Act) enforced by CFPB, OCC, DOJ, and state agencies.

Ensures legal compliance but does not demonstrate proactive diversity or equity advancement beyond regulatory minimum.
Cybersecurity and Fraud Training Program

All employees receive cybersecurity and fraud training at new employee orientation, monthly security awareness videos, and annual computer-based training. Information security awareness training provided to customers and communities.

Addresses operational risk management; no direct social benefit but indicates investment in employee development and customer protection.
Management Retention and Transition Planning

Transition and retirement agreement in place with board chairman; change-of-control agreements for key executives; confidentiality and non-competition agreements related to equity grants.

Supports management continuity; no disclosed diversity or inclusion objectives.

Governance story

FFIN discloses limited board independence data; no explicit percentage provided in the 10-K. The company operates a single-class share structure (no dual-class voting penalties apply). Board governance includes a Risk Committee, Audit Committee, and Compensation Committee oversight structure with external regulatory examination by Federal Reserve Board, OCC, FDIC, and CFPB. The company acknowledges heightened regulatory requirements as a $10B+ asset bank holding company subject to enhanced examination and Dodd-Frank compliance (including Durbin Amendment debit card interchange fee caps, which reduced FFIN's interchange income starting July 2022). No specific lobbying expenditure disclosure is provided in the 10-K; the company acknowledges regulatory scrutiny on climate, consumer protection, and fair lending but does not detail active lobbying to weaken these standards. Cybersecurity governance includes a Chief Information Security Officer with 20+ years of experience and structured oversight through Risk Committee, Technology Risk Committee, Security Advisory Committee, and Board-level education programs. The company disclosed no material cybersecurity breaches in fiscal 2025 but acknowledged past threats (malware, viruses) and ongoing vulnerabilities. No antitrust, consumer-safety, or financial-fraud regulatory proceedings reported. Governance score reflects adequate regulatory compliance framework, board committee structure, and cybersecurity governance, offset by limited board independence transparency and absence of clear anti-corruption/lobbying disclosures.

Criticisms on file

No explicit disclosure of board independence percentage; unable to verify if independence exceeds 75% threshold or assess compliance with governance best practices.
Source: FFIN 10-K SEC filing (2025); Item 2 (Directors, Executive Officers, and Corporate Governance) not provided in source documents.
No disclosure of annual lobbying expenditures or positions on environmental deregulation, consumer protection rollbacks, or climate policy.
Source: FFIN 10-K SEC filing (2025); absence of lobbying disclosures in Risk Factors or Business Description sections.
Past cybersecurity breaches and threats (malware, viruses, computer virus attacks) acknowledged; company states no material impact to date but ongoing vulnerability to sophisticated attacks.
Source: FFIN 10-K SEC filing (2025); Item 1C Cybersecurity and Item 1A Risk Factors, Operational Risk section.
FDIC special assessment of $2.06 million (2023-2024) related to systemic banking failures; no indication of direct regulatory enforcement action against FFIN.
Source: FFIN 10-K SEC filing (2025); Item 1A Risk Factors, Compliance and Regulatory Risks section.

Disclosed initiatives

Board and Management Cybersecurity Governance

Chief Information Security Officer (CISO) with 20+ years of experience oversees Information Security Program. CISO reports to Risk Committee and Board of Directors. Board receives annual education on cybersecurity threats and evolving risk landscape. Risk Committee, Technology Risk Committee, Security Advisory Committee, and subsidiary boards provide oversight.

Establishes governance accountability for cyber risk; demonstrates board-level engagement with operational security.
Regulatory Compliance and Risk Management Framework

Company operates under Federal Reserve Board, OCC, FDIC, and CFPB supervision. Subject to Basel III capital requirements, Dodd-Frank provisions (including Durbin Amendment), and heightened examination as a $10B+ bank holding company.

Ensures regulatory compliance; Durbin Amendment reduced interchange income starting July 2022, impacting profitability but reflecting compliance with consumer protection policy.
Internal Controls and Audit Committee Oversight

Company maintains documented internal control system and procedures. Audit Committee and management-level committees oversee financial reporting, information security, and operational risk.

Provides checks and balances on financial reporting and operational integrity.

These are Missionomics' own editorial scores — directional signals built from disclosed facts under a published method, not certifications or definitive ratings of First Financial Bankshares, Inc.. Coverage and confidence vary by data point, and figures can lag real-world changes. Read the full Methodology for sourcing, scoring, and correction details — or open First Financial Bankshares, Inc. in the app for interactive charts and portfolio building.

More in Financial Services

Berkshire Hathaway Inc. (BRK-B) JPMorgan Chase & Co. (JPM) Visa Inc. (V) Mastercard Incorporated (MA) Bank of America Corporation (BAC) Morgan Stanley (MS)