Item 9A. Controls and Procedures.

(a) Evaluation of disclosure controls and procedures. Based upon their evaluation of the effectiveness of M&T’s disclosure controls and procedures (as defined in Exchange Act rules 13a-15(e) and 15d-15(e)), René F. Jones, Chairman of the Board and Chief Executive Officer, and Darren J. King, Senior Executive Vice President and Chief Financial Officer, concluded that M&T’s disclosure controls and procedures were effective as of December 31, 2022.

(b) Management’s annual report on internal control over financial reporting. Included under the heading “Report on Internal Control Over Financial Reporting” at Item 8 of this Annual Report on Form 10-K.

(c) Attestation report of the registered public accounting firm. Included under the heading “Report of Independent Registered Public Accounting Firm” at Item 8 of this Annual Report on Form 10-K.

(d) Changes in internal control over financial reporting. M&T regularly assesses the adequacy of its internal control over financial reporting and enhances its controls in response to internal control assessments and internal and external audit and regulatory recommendations. No changes in internal control over financial reporting have been identified in connection with the evaluation of disclosure controls and procedures during the quarter ended December 31, 2022 that have materially affected, or are reasonably likely to materially affect, M&T’s internal control over financial reporting. Management has excluded processes and controls of People’s United that have not yet been converted to M&T's systems or processes from its assessment of internal control over financial reporting for the year ended December 31, 2022. Assets and liabilities associated with those processes and procedures as of December 31, 2022 include loans and leases of $5.8 billion, other assets of $107 million and other liabilities of $184 million. Approximately $280 million of total revenues for the nine months ended December 31, 2022 was contributed from business activities of People's United that have not yet been converted to M&T's systems or processes.