CISO Global, Inc. 10-Q

Item 4. Controls and Procedures Evaluation of Disclosure Controls and Procedures We maintain disclosure controls and procedures (as that term is defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) that are designed to provide reasonable assurance that information required to be disclosed in our reports under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosures. In designing and evaluating our disclosure controls and procedures, management recognizes that any disclosure controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that management is required to apply judgment in evaluating the benefits of possible controls and procedures relative to their costs. Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of the design and operation of our disclosure controls and procedures as of the end of the period covered by this report. Based upon that evaluation, our principal executive officer and principal financial officer concluded that, as of September 30, 2023, our disclosure controls and procedures were not effective due to the material weaknesses in internal control over financial reporting described below. Thus there remains a reasonable possibility that a material misstatement of our interim financial statements will not be prevented or detected on a timely basis. This does not include an evaluation by our independent registered public accounting firm regarding our internal control over financial reporting. Accordingly, we cannot provide reasonable assurance that information required to be disclosed by us in reports we file or submit under the Exchange Act is recorded, processed, summarized, and reported, to allow our principal financial and executive officers to make timely decisions regarding required disclosures as of September 30, 2023. Our management’s evaluation was based on the following material weaknesses in our internal control over financial reporting, which existed as of December 31, 2022 and which continue to exist, as discussed in our Annual Report on Form 10-K for the fiscal year ended December 31, 2022: ● lack of risk assessment procedures on internal controls to detect financial reporting risks in a timely manner; and ● lack of documentation on policies and procedures that are critical to the accomplishment of financial reporting objectives. A material weakness is a control deficiency or combination of control deficiencies that results in more than a remote likelihood that a material misstatement of the annual or interim financial statements will not be prevented or detected on a timely basis. As a company with limited accounting resources, a significant amount of management’s time and attention has been and will be diverted from our business to ensure compliance with these regulatory requirements. Management’s Plan to Remediate the Material Weaknesses We are implementing measures designed to ensure that control deficiencies contributing to the material weakness are remediated, such that these controls are designed, implemented, and operating effectively. The remediation actions planned include: ● identifying gaps in our skills base and the expertise of our staff required to meet the financial reporting requirements of a public company; and ● developing policies and procedures on internal control over financial reporting and monitoring the effectiveness of operations on existing controls and procedures. We will continue to monitor and evaluate the relevance of our risk-based approach and the effectiveness of our internal controls and procedures over financial reporting on an ongoing basis, and we are committed to taking further action and implementing additional enhancements or improvements, as necessary and in accordance with financial and budgetary considerations. Changes in Internal Control Over Financial Reporting There have been no changes in our internal control over financial reporting (as defined in Rule 13a-15(f) and 15d-15(f) under the Exchange Act) during the quarter ended September 30, 2023, other than those noted above, that have materially affected, or that are reasonably likely to materially affect, our internal control over financial reporting. 28 PART II – OTHER INFORMATION Item 1. Legal Proceedings We are currently not a party to any material legal proceedings. Item 1A. Risk Factors We have disclosed under the heading “Risk Factors” in our Annual Report on Form 10-K for the year ended December 31, 2022, filed with the SEC on March 31, 2023, risk factors that materially affect our business, financial condition, or results of operations. There have been no material changes from the risk factors previously disclosed. ITEM 2. UNREGISTERED SALES OF EQUITY SECURITIES AND USE OF PROCEEDS None. Item 3. Defaults upon Senior Securities None. Item 4. Mine Safety Disclosures Not Applicable.