What changed in this filing

/stocks — the workspaceLOADING

Item 1A. Risk Factors

2022-03-28 compared with 2021-03-25 · 317 added, 535 removed, 71 unchanged (92% of the section changed)

In addition to other information in this Form 10-K, the following risk factors should be carefully

considered in evaluating the Company and its businesses because these factors currently have, or may have, a significant impact on our business, operating results or financial condition.

Actual results could differ materially from those projected in

the forward-looking statements contained in this Form 10-K as a result of the risk factors discussed below and elsewhere in this Form 10-K.

We depend on the U.S.

Government for a significant portion of our sales and a significant decline in U.S.

Government defense and intelligence community spending, or a reallocation of spending to other priorities, could have an adverse impact on our financial condition

and results of operations .

Our sales are highly concentrated with the U.S.

The customer relationship with the U.S.

Government involves certain risks that are unique.

The programs in which we participate must compete with other programs and policy imperatives during the budget and appropriations process.

In each of the past three years, a substantial portion of

our net sales were to the U.S.

Government, particularly the DoD.

defense spending has historically been cyclical.

Defense budgets have received their strongest support when perceived threats to national security raise the level of concern over

the country’s safety.

As these threats subside, spending on the military tends to decrease.

Rising budget deficits, increasing national debt, the cost of the global war on terrorism, increasing costs for entitlement programs, and potentially the

large costs of combating the Coronavirus pandemic and addressing the health concerns and economic dislocation caused by COVID-19, continue to put pressure on all areas of discretionary spending, which could ultimately impact the defense budget and

other aspects of federal discretionary spending.

Government appropriations have been and continue to be affected by larger U.S.

Government budgetary

issues and related legislation.

In 2011, Congress enacted the Budget Control Act of 2011 (the “BCA”), which established specific limits on annual appropriations for fiscal years 2012-2021.

These limits were subsequently amended several times.

the expiration of the BCA at the end of FY 2021, there are no statutory limits in place for FY 2022.

According to the non-partisan Congressional Budget Office (CBO), since enactment of the BCA, federal

outlays devoted to defense programs fell from 4.5 percent as a share of Gross Domestic Product (GDP) to as low as 3.1 percent of GDP in each of fiscal years 2016-18, before rising slightly the past two years to a level of 3.4 percent in FY 2020.

Moreover, CBO reports that, as a result of the spending caps imposed by the BCA, non-adjusted defense outlays subsequently shrank from $699.4 billion in FY 2011 to as low as $583.4 billion in FY 2016, and did not again exceed their FY 2011 level

until FY 2020, when outlays were $713.8 billion, two percent above the FY 2011 level.

In FYs 2020 and 2021, the COVID-19 pandemic and associated economic dislocation in the United States has

resulted in an overwhelming federal response, including enactment of several massive and comprehensive emergency appropriations and economic stimulus measures.

These were in addition to annual appropriations legislation for FY 2021, which was not

enacted into law until late December 2020, nearly three months after the beginning of the fiscal year, during which time the government once again operated under a series of Continuing Resolutions which strictly limited new spending initiatives.

These enormous emergency spending packages and their resulting increases in the budget deficit will necessarily factor into future spending decisions to an unknown degree.

Further, as the outgoing Trump Administration did not complete its work on a

proposed FY 2022 budget prior to leaving office on January 20, 2021, and the incoming Biden Administration has been delayed in submitting a proposed budget to Congress, the proposed spending levels for FY 2022 cannot be predicted.

Finally, the near-

and long-term impacts of the COVID-19 health and associated economic crisis on federal budget planning and the government contracts that we hold, and on the federal procurements that we would otherwise compete for, cannot be known.

Should Congress and the White House be unable to make sufficient progress on the FY 2022 budget and

enact appropriations legislation prior to the beginning of the new fiscal year on October 1, 2021, the Department of Defense and other federal departments and agencies will likely again be funded for an unknown period of time under a Continuing

Resolution, which would restrict new spending initiatives.

We are subject to the seasonality of the U.S.

government spending.

We derive a substantial portion of our revenues from U.S.

government contracting, and as a result, we

are subject to the annual seasonality of the U.S.

government purchasing.

Because the U.S.

government fiscal year ends on September 30, it is not uncommon for U.S.

government agencies to award extra tasks in the weeks immediately prior to the end of

its fiscal year in order to avoid the loss of unexpended fiscal year funds.

As a result of this seasonality, we have historically experienced higher revenues in the third and fourth fiscal quarters, ending September 30 and December 31, respectively,

with the pace of orders typically substantially reduced during the first and second fiscal quarters ending March 31 and June 30, respectively.

In your evaluation of the Company and business, you should carefully consider the risks and uncertainties as described below, together with information included elsewhere in this report and other documents we file with the SEC.

These factors, as well as additional risks and uncertainties not currently known to us or that we currently believe are immaterial, may currently have, or may have, a significant impact on our business, operating results or financial condition.

Actual results could differ materially from those projected in the forward-looking statements contained in this Form 10-K as a result of the risk factors discussed below and elsewhere in this Form 10-K.

Business and Operational Risks

We have identified certain material weaknesses in our internal control over financial reporting, and, if our remediation of these material weaknesses is not effective, or if we fail to maintain effective internal control over financial reporting in the future, our ability to produce accurate and timely consolidated financial statements could be impaired, which could adversely affect investor confidence in our company and, as a result, the value of our common stock.

As a public company, we are required to comply with Section 404 of the Sarbanes-Oxley Act.

If we fail to abide by the applicable requirements of Section 404, regulatory authorities, such as the SEC, could subject us to sanctions or investigation, and our independent registered public accounting firm may not be able to certify as to the effectiveness of our internal control over financial reporting pursuant to an audit of our controls.

Even effective internal controls can provide only reasonable assurance with respect to the preparation and fair presentation of financial statements.

Accordingly, our internal control over financial reporting may not prevent or detect misstatements because of their inherent limitations, including the possibility of human error, the circumvention or overriding of controls, or fraud.

In connection with the audit of our consolidated financial statements as of and for the year ended December 31, 2021, we and our independent registered public accounting firm identified certain material weaknesses in our internal control over financial reporting related to a lack of certain controls, or improper execution of designed control procedures (1) over the accounting for revenue recognition in accordance with Accounting Standards Codification ("ASC") Topic 606, “Revenue from Contracts with Customers”, (2) over the accounting for software development costs in accordance with ASC Topic 985-20, “Software – Costs of Software to be Sold, Leased, or Marketed”, and ASC Topic 350-40, “Internal Use Software,” (3) over the completeness and accuracy of stock-based grants and the review of the inputs utilized in a third party valuation, (4) over the preparation and review of projected financial information utilized in the valuation of the business combination, (5) over the financial statement close process to ensure the consistent execution, accuracy, and timely review of account reconciliations, as well as review of the statement of cash flows, (6) over information technology general controls in the areas of user access, change management, and segregation of duties, including controls over the recording of journal entries, related to certain information technology systems that support the Company’s financial reporting process, and (7) over entity-level controls impacting the control environment and monitoring activities to prevent or detect material misstatements to the consolidated financial statements.

These control deficiencies could have resulted in a misstatement of accounts and disclosures that could have resulted in a material misstatement of our annual or interim consolidated financial statements that would not have been prevented or detected.

Accordingly, management has determined that these control deficiencies constitute material weaknesses.

As further described in Item 9A, Management's Report on Internal Control over Financial Reporting, we plan to implement several steps to address the underlying causes of the material weaknesses, including hiring additional accounting personnel and implementing training of new and existing personnel in new roles on proper execution of designed control procedures, enhancing processes, designing and implementing internal controls around revenue recognition, software development costs, stock-based compensation, and financial close and reporting, and enhancing user access provisioning and monitoring controls to enforce appropriate system access and segregation of duties.

While we believe our remediation plans described above should remediate the material weaknesses, we cannot provide assurance of when the material weaknesses will be remediated, nor can we be certain of whether additional actions will be required or the costs of any such actions.

Moreover, we cannot provide assurance that additional material weaknesses will not arise in the future.

While the material weaknesses discussed in Item 9A, Management's Report on Internal Control over Financial Reporting, did not result in material misstatements of our annual or interim consolidated financial statements, any failure to remediate the material weaknesses, or the identification of new material weaknesses in our internal control over financial reporting, could result in material misstatements in our financial statements that may continue undetected, negatively impacting the public perception of the Company and our securities and cause us to fail to meet our reporting and financial obligations or incur significant additional costs to remediate the material weaknesses, each of which could negatively affect our stock price, harm our ability to raise capital on favorable terms in the future or otherwise have a negative impact on our financial condition.

Our actual operating results may differ significantly from our guidance.

From time to time, we may release guidance in our quarterly earnings conference calls, quarterly earnings releases, or otherwise, regarding our future performance that represents our management’s estimates as of the date of release.

This guidance, which includes forward-looking statements, is based on projections prepared by our management.

Projections are based upon a number of assumptions and estimates that, while presented with numerical specificity, are inherently subject to significant business, economic and competitive uncertainties and contingencies, many of which are beyond our control and are based upon specific assumptions with respect to future business decisions, some of which will change.

Our aim is to state possible outcomes as high and low ranges to provide a sensitivity analysis as variables are changed but are not intended to imply that actual results could not fall outside of the suggested ranges.

The principal reason that we release guidance is to provide a basis for our management to discuss our business outlook with analysts and investors.

We do not accept any responsibility for any projections or reports published by any such third parties.

Guidance is necessarily speculative in nature, and it can be expected that some or all of the assumptions underlying the guidance furnished by us will not materialize or will vary significantly from actual results.

Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release.

Actual results may vary from our guidance and the variations may be material.

In light of the foregoing, investors are urged not to rely upon our guidance in making an investment decision regarding our common stock.

Any failure to successfully implement our operating strategy or the occurrence of any of the events or circumstances set forth in the “Risk Factors” section in this Form 10-K could result in the actual operating results being different from our guidance, and the differences may be adverse and material.

Our pricing structures for our solutions and services may change from time to time.

We expect that we may change our pricing model from time to time, including as a result of competition,

global economic conditions, and general reductions in our customers’ spending levels, pricing studies, or changes in how our solutions are broadly consumed.

Similarly, as we introduce new products and services, or as a result of the evolution of our

existing solutions and services, we may have difficulty determining the appropriate price structure for our products and services.

In addition, as new and existing competitors introduce new products or services that compete with ours, or revise their

pricing structures, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically.

Moreover, as we continue to target selling our solutions and services to larger organizations, these

larger organizations may demand substantial price concessions.

In addition, we may need to change pricing policies to accommodate government pricing guidelines for our contracts with federal, state, local, and foreign governments and government

reasonable period of time, our business, financial condition, and results of operations may be adversely impacted.

We depend on computing infrastructure operated by Amazon Web Services (“AWS”), Microsoft, and other

third parties to support some of our solutions and customers, and any errors, disruption, performance problems, or failure in their or our operational infrastructure could adversely affect our business, financial condition, and results of operations.

We rely on the technology, infrastructure, and software applications, of certain third parties, such as

AWS and Microsoft Azure, in order to host or operate some of certain key platform features or functions of our business.

Additionally, we rely on computer hardware and cloud capabilities purchased in order to deliver our solutions and services.

not have control over the operations of the facilities of the third parties that we use.

If any of these third-party services experience errors, disruptions, security issues, or other performance deficiencies, if they are updated such that our

solutions become incompatible, if these services, software, or hardware fail or become unavailable due to extended outages, interruptions, defects, or otherwise, or if they are no longer available on commercially reasonable terms or prices (or at

all), these issues could result in errors or defects in our solutions, cause our solutions to fail, our revenue and margins could decline, or our reputation and brand to be damaged, we could be exposed to legal or contractual liability, our expenses

could increase, our ability to manage our operations could be interrupted, and our processes for managing our sales and servicing our customers could be impaired until equivalent services or

technology, if available, are identified, procured, and implemented, all of which may take significant time and resources, increase our costs, and could adversely affect our business.

Many of these third-party providers attempt to impose limitations

on their liability for such errors, disruptions, defects, performance deficiencies, or failures, and if enforceable, we may have additional liability to our customers or third-party providers.

We have experienced, and may in the future experience, disruptions, failures, data loss, outages, and

other performance problems with our infrastructure and cloud-based offerings due to a variety of factors, including infrastructure changes, introductions of new functionality, human or software errors, employee misconduct, capacity constraints,

denial of service attacks, phishing attacks, computer viruses, malicious or destructive code, or other security-related incidents, and our disaster recovery planning may not be sufficient for all situations.

If we experience disruptions, failures,

data loss, outages, or other performance problems, our business, financial condition, and results of operations could be adversely affected.

Our systems and the third-party systems upon which we and our customers rely are also vulnerable to

damage or interruption from catastrophic occurrences such as earthquakes, floods, fires, power loss, telecommunication failures, cybersecurity threats, terrorist attacks, natural disasters, public health crises such as the COVID-19 pandemic,

geopolitical and similar events, or acts of misconduct.

Despite any precautions we may take, the occurrence of a catastrophic disaster or other unanticipated problems at our or our third-party vendors’ hosting facilities, or within our systems or the

systems of third parties upon which we rely, could result in interruptions, performance problems, or failure of our infrastructure, technology, or solutions, which may adversely impact our business.

In addition, our ability to conduct normal business

operations could be severely affected.

In the event of significant physical damage to one of these facilities, it may take a significant period of time to achieve full resumption of our services, and our disaster recovery planning may not account for

all eventualities.

We expect that we may change our pricing model from time to time, including as a result of competition, global economic conditions, and general reductions in our customers’ spending levels, pricing studies, or changes in how our solutions are broadly consumed.

Similarly, as we introduce new products and services, or as a result of the evolution of our existing solutions and services, we may have difficulty determining the appropriate price structure for our products and services.

In addition, as new and existing competitors introduce new products or services that compete with ours, or revise their pricing structures, we may be unable to attract new customers at the same price or based on the same pricing model as we have used historically.

Moreover, as we continue to target selling our solutions and services to larger organizations, these larger organizations may demand substantial price concessions.

In addition, we may need to change pricing policies to accommodate government pricing guidelines for our contracts with federal, state, local, and foreign governments and government agencies.

If we are unable to modify or develop pricing models and strategies that are attractive to existing and prospective customers, while enabling us to significantly grow our sales and revenue relative to our associated costs and expenses in a reasonable period of time, our business, financial condition, and results of operations may be adversely impacted.

We depend on computing infrastructure operated by AWS, Microsoft, and other third parties to support some of our solutions and customers, and any errors, disruption, performance problems, or failure in their or our operational infrastructure could adversely affect our business, financial condition, and results of operations.

We rely on the technology, infrastructure, and software applications, of certain third parties, such as AWS and Microsoft Azure, in order to host or operate some of certain key platform features or functions of our business.

Additionally, we rely on third-party computer hardware and cloud capabilities in order to deliver our solutions and services.

We do not have control over the operations of the facilities of the third parties that we use.

If any of these third-party services experience errors, disruptions, security issues, or other performance deficiencies, if they are updated such that our solutions become incompatible, if these services, software, or hardware fail or become unavailable due to extended outages, interruptions, defects, or otherwise, or if they are no longer available on commercially reasonable terms or prices (or at all), these issues could result in errors or defects in our solutions, failure of our solutions to perform, decline in our revenue and margins, damage to our reputation and brand, exposure to legal or contractual liability, increase in our expenses, and interruption in our ability to manage our operations.

In addition, our processes for managing our sales and servicing our customers could be impaired until equivalent services or technology, if available, are identified, procured, and implemented, all of which may take significant time and resources, increase our costs, and could adversely affect our business.

Many of these third-party providers attempt to impose limitations on their liability for such errors, disruptions, defects, performance deficiencies, or failures, and if enforceable, we may have additional liability to our customers or third-party providers.

We may in the future experience, disruptions, failures, data loss, outages, and other performance problems with our infrastructure and cloud-based offerings due to a variety of factors, including infrastructure changes, introductions of new functionality, human or software errors, employee misconduct, capacity constraints, denial of service attacks, phishing attacks, computer viruses, malicious or destructive code, or other security-related incidents, and our disaster recovery planning may not be sufficient for all situations.

If we experience disruptions, failures, data loss, outages, or other performance problems, our business, financial condition, and results of operations could be adversely affected.

Our systems and the third-party systems upon which we and our customers rely are also vulnerable to damage or interruption from catastrophic occurrences such as earthquakes, floods, fires, power loss, telecommunication failures, cybersecurity threats, terrorist attacks, social unrest, natural disasters, public health crises such as the COVID-19 pandemic, geopolitical and similar events, or acts of misconduct.

Despite any precautions we may take, the occurrence of a catastrophic disaster or other unanticipated problems at our or our third-party vendors’ hosting facilities, or within our systems or the systems of third parties upon which we rely, could result in interruptions, performance problems, or failure of our infrastructure, technology, or solutions, which may adversely impact our business.

In addition, our ability to conduct normal business operations could be severely affected.

In addition, any negative publicity arising from these disruptions could harm our reputation and brand and adversely affect our business.

Furthermore, our solutions are in many cases important or essential to our customers’ operations,

including in some cases, their cybersecurity or oversight and compliance programs, and subject to service level agreements (“SLAs”).

Any interruption in our service, whether as a result of an internal or third-party issue, could damage our brand and

reputation, cause our customers to terminate or not renew their contracts with us or decrease use of our solutions and services, require us to indemnify our customers against certain losses, result in our issuing credit or paying penalties or fines,

subject us to other losses or liabilities, cause our solutions to be perceived as unreliable or unsecure, and prevent us from gaining new or additional business from current or future customers, any of which could harm our business, financial

condition, and results of operations.

Moreover, to the extent that we do not effectively address capacity constraints, upgrade our systems as

needed, and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business, financial condition, and results of operations could be adversely affected.

The provisioning of

additional cloud hosting capacity requires lead time.

Furthermore, our solutions are in many cases important or essential to our customers’ operations, including in some cases, their cybersecurity or oversight and compliance programs, and subject to service level agreements (“SLAs”).

Any interruption in our service, whether as a result of an internal or third-party issue, could damage our brand and reputation, cause our customers to terminate or not renew their contracts with us or decrease use of our solutions and services, require us to indemnify our customers against certain losses, result in our issuing credit or paying penalties or fines, subject us to other losses or liabilities, cause our solutions to be perceived as unreliable or unsecure, and prevent us from gaining new or additional business from current or future customers, any of which could harm our business, financial condition, and results of operations.

Moreover, to the extent that we do not effectively address capacity constraints, upgrade our systems as needed, and continually develop our technology and network architecture to accommodate actual and anticipated changes in technology, our business, financial condition, and results of operations could be adversely affected.

The provisioning of additional cloud hosting capacity requires lead time.

AWS, Microsoft Azure, and other third parties have no obligation to renew their agreements with us on commercially reasonable terms, or at all.

If AWS, Microsoft Azure, or other third parties

increase pricing terms, terminate or seek to terminate our contractual relationship, establish more favorable relationships with our competitors, or change or interpret their terms of service or policies in a manner that is unfavorable with respect

to us, we may be required to transfer to other cloud providers or invest in a private cloud.

If we are required to transfer to other cloud providers or invest in a private cloud, we could incur significant costs and experience possible service

interruption in connection with doing so, or risk loss of customer contracts if they are unwilling to accept such a change.

A failure to maintain our relationships with our third-party providers (or obtain adequate

replacements), and to receive services from such providers that do not contain any material errors or defects, could adversely affect our ability to deliver effective products and solutions to our customers and adversely affect our business and

results of operations.

We are dependent on a few key customer contracts for a significant portion of our future revenue, and

a significant reduction in services to one or more of these contracts would reduce our future revenue and harm our anticipated operating results.

A small number of our large customer contracts, including the TSA PreCheck™ enrollment program and our

program with CMS, are expected to comprise a significant portion of our future revenue.

Our business will likely be harmed if any of our key customer contracts do not generate as much revenue as we forecast, and the termination or delay of a large

contract or of multiple contracts could have a material adverse effect on our revenue and profitability.

Adverse events affecting the programs subject to these contracts could also negatively affect our ability to process transactions under those

contracts, which could adversely affect our revenue and results of operations.

For example, the COVID-19 pandemic may adversely affect or disrupt the TSA PreCheck™ enrollment program, which could lead to delays in the implementation of that program

and changes in demand for that program.

In addition, if the COVID-19 pandemic and associated protective or preventative measures expand, we may experience a material adverse effect on our business operations, revenues, financial condition, and

ability to execute on business or contract opportunities;

If AWS, Microsoft Azure, or other third parties increase pricing terms, terminate or seek to terminate our contractual relationship, establish more favorable relationships with our competitors, or change or interpret their terms of service or policies in a manner that is unfavorable with respect to us, we may be required to transfer to other cloud providers or invest in a private cloud.

In that case, we could incur significant costs and experience possible service interruption in connection with doing so, or risk loss of customer contracts if they are unwilling to accept such a change.

A failure to maintain our relationships with our third-party providers (or obtain adequate replacements), and to receive services from such providers that do not contain any material errors or defects, could adversely affect our ability to deliver effective products and solutions to our customers and adversely affect our business and results of operations.

We are dependent on a few key customer contracts for a significant portion of our future revenue, and a significant reduction in services or delay in implementation to one or more of these contracts would reduce or delay our future revenue and could materially affect our anticipated operating results.

A small number of our large customer contracts, including for instance, the TSA PreCheck enrollment program, are expected to comprise a significant portion of our future revenue.

Our business will likely be harmed if any of our key customer contracts do not generate as much revenue as we forecast, and the termination or delay of a large contract or of multiple contracts could have a material adverse effect on our revenue and profitability.

Adverse events affecting the programs subject to these contracts could also negatively affect our ability to process transactions under those contracts, which could adversely affect our revenue and results of operations.

For example, the COVID-19 pandemic may adversely affect or disrupt the TSA PreCheck enrollment program, which could lead to further delays in the authorization and implementation of that program and changes in demand for that program.

however, the ultimate impact is highly uncertain and subject to change.

We will face risks associated with the growth of our business in new commercial markets and with new

customer verticals, and we may neither be able to continue our organic growth nor have the necessary resources to dedicate to the overall growth of our business.

We plan to expand our operations in new commercial markets, including those where we may have limited

operating experience, and may be subject to increased business, technology and economic risks that could affect our financial results.

We will face risks associated with the growth of our business in new commercial markets and with new customer verticals, and we may neither be able to continue our organic growth nor have the necessary resources to dedicate to the overall growth of our business.

We plan to expand our operations in new commercial markets, including those where we may have limited operating experience, and may be subject to increased business, technology and economic risks that could affect our financial results.

In recent periods, we have increased our focus on commercial customers.

In the future, we may increasingly focus on

such customers, including in the banking, financial services, healthcare, pharmaceutical, manufacturing, telecommunication, airlines and aerospace, insurance, retail, transportation, shipping and logistics, and energy industries, as well as other

critical infrastructure industries.

Entering new verticals and expanding in the verticals in which we are already operating will continue to require significant resources and there is no guarantee that such efforts will be successful or beneficial to

In the future, we may increasingly focus on such customers, including in the banking, financial services, healthcare, pharmaceutical, manufacturing, telecommunication, airlines and aerospace, insurance, retail, transportation, shipping and logistics, and energy industries, as well as other critical infrastructure industries.

Historically, sales to a new customer have often led to additional sales to the same customer or similarly situated customers.

As we expand into and within new and emerging markets and heavily regulated industry verticals, we will likely face

additional regulatory scrutiny, risks, and burdens from the governments and agencies which regulate those markets and industries.

While this approach to expansion within new commercial markets and verticals has proven successful in the past, it is

uncertain we will achieve the same penetration and organic growth in the future and our reputation, business, financial condition, and results of operations could be negatively impacted.

As we expand into and within new and emerging markets and heavily regulated industry verticals, we will likely face additional regulatory scrutiny, risks, and burdens from the governments and agencies which regulate those markets and industries.

While this approach to expansion within new commercial markets and verticals has proven successful in the past, it is uncertain we will achieve the same penetration and organic growth in the future, and our reputation, business, financial condition, and results of operations could be negatively impacted.

In the future, we may seek to enter into other credit facilities to help fund our working capital needs.

2 unchanged sentences

Such credit facilities will likely require us to pay a commitment fee on the undrawn amount and will likely contain a number of affirmative and restrictive covenants.

If we violate any such covenants, our lenders could accelerate the maturity of any debt outstanding and

we may be prohibited from making any distributions to our stockholders.

Such debt may be secured by our assets, including the stock we may own in subsidiaries and the rights we have under intercompany loan agreements that we may enter into in the

future with our businesses.

If we violate any such covenants, our lenders could accelerate the maturity of any debt outstanding and we may be prohibited from making any distributions to our stockholders.

Such debt may be secured by our assets, including the stock we may own in subsidiaries and the rights we have under intercompany loan agreements that we may enter into in the future with our businesses.

Our ability to meet our debt service obligations may be affected by events beyond our control and will depend primarily upon cash produced by our business.

Any failure to comply with the terms of our indebtedness may have

a material adverse effect on our financial condition.

In addition, we expect that such credit facilities will bear interest at floating rates which will

generally change as interest rates change.

our ability to service our debt and cause us to breach covenants contained in our third-party credit facilities.

Our business is subject to complex and evolving U.S.

laws and regulations regarding

privacy, data protection and security, technology protection, and other matters.

Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our business practices, monetary penalties,

increased cost of operations, or otherwise harm our business.

We are subject to a variety of local, state, national, and international laws and directives and

regulations in the United States and abroad that involve matters central to our business, including privacy and data protection, data security, data storage, retention, transfer and deletion, technology protection, and personal information.

data protection, data security, privacy, and other laws and regulations can impose different obligations or be more restrictive than those in the United States.

federal and state and foreign laws and regulations, which, depending on the

regime, may be enforced by private parties or government entities, are constantly evolving and can be subject to significant change, and they are likely to remain uncertain for the foreseeable future.

In addition, the application, interpretation, and

enforcement of these laws and regulations are often uncertain, and may be interpreted and applied inconsistently from country to country and inconsistently with our current policies and practices.

A number of proposals are pending before U.S.

federal, state, and foreign legislative and regulatory bodies that could significantly affect our business.

The overarching complexity of privacy and data protection laws and regulations around the world pose a

compliance challenge that could manifest in costs, damages, or liability in other forms as a result of failure to implement proper programmatic controls, failure to adhere to those controls, or

the malicious or inadvertent breach of applicable privacy and data protection requirements by us, our employees, our business partners, or our customers.

In addition to government regulation, self-regulatory standards and other industry standards may legally

or contractually apply to us, be argued to apply to us, or we may elect to comply with such standards or to facilitate our customers’ compliance with such standards.

Because privacy, data protection, and information security are critical competitive

factors in our industry, we may make statements on our website, in marketing materials, or in other settings about our data security measures and our compliance with, or our ability to facilitate our customers’ compliance with, these standards.

also expect that there will continue to be new proposed laws and regulations concerning privacy, data protection, and information security, and we cannot yet determine the impact such future laws, regulations and standards, or amendments to or

re-interpretations of existing laws and regulations, industry standards, or other obligations may have on our business.

New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, and contractual and other

obligations may require us to incur additional costs and restrict our business operations.

As these legal regimes relating to privacy, data protection, and information security continue to evolve, they may result in ever-increasing public scrutiny

and escalating levels of enforcement and sanctions.

Furthermore, because the interpretation and application of laws, standards, contractual obligations and other obligations relating to privacy, data protection, and information security are

uncertain, these laws, standards, and contractual and other obligations may be interpreted and applied in a manner that is, or is alleged to be, inconsistent with our data management practices, our policies or procedures, or the features of our

If so, in addition to the possibility of fines, lawsuits, and other claims, we could be required to fundamentally change our business activities and practices or modify our solutions, which could have an adverse effect on our business.

may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to fulfill existing obligations, make enhancements, or develop new solutions and features could be limited.

Furthermore, the costs of

compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our solutions.

These existing and proposed laws and regulations can be costly to comply with and can make our solutions

and services less effective or valuable, delay or impede the development of new products, result in negative publicity, increase our operating costs, require us to modify our data handling practices, limit our operations, impose substantial fines and

penalties, require significant management time and attention, or put our data or technology at risk.

Any failure or perceived failure by us or our solutions to comply with U.S., or applicable foreign laws, regulations, directives, policies, industry

standards, or legal obligations relating to privacy, data protection, or information security, or any security incident that results in loss of or the unauthorized access to, or acquisition, use, release, or transfer of, personal information,

personal data, or other customer or sensitive data sensitive data or information may result in governmental investigations, inquiries, enforcement actions and prosecutions, private claims and litigation, indemnification or other contractual

obligations, other remedies, including fines or demands that we modify or cease existing business practices, or adverse publicity, and related costs and liabilities, which could significantly and adversely affect our business and results of

Changes in accounting principles or their application to us could result in unfavorable accounting

charges or effects, which could adversely affect our results of operations and growth prospects.

We prepare consolidated financial statements in accordance with U.S.

In particular, we make

certain estimates and assumptions related to the adoption and interpretation of these principles including the recognition of our revenue and the accounting of our stock-based compensation expense with respect to our consolidated financial

If these assumptions turn out to be incorrect, our revenue or our stock-based compensation expense could materially differ from our expectations, which could have a material adverse effect on our financial results.

A change in any of

these principles or guidance, or in their interpretations or application to us, may have a significant effect on our reported results, as well as our processes and related controls, and may retroactively affect previously reported results or our

forecasts, which may negatively impact our financial statements.

For example, recent new standards issued by the Financial Accounting Standards Board could materially impact our consolidated financial statements .

The adoption of these new standards may potentially require enhancements or changes in our processes or systems and may require significant time and cost on behalf of our

financial management.

This may in turn adversely affect our results of operations and growth prospects.

If our judgments or estimates relating to our critical accounting policies are based on assumptions that

change or prove to be incorrect, our results of operations could fall below expectations of securities analysts and investors, resulting in a decline in our stock price.

The preparation of our consolidated financial statements in conformity with GAAP requires management to

make judgments, estimates, and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes.

We base our estimates on historical experience and on various other assumptions that we believe to be

reasonable under the circumstances, the results of which form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources.

results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and

investors, resulting in a decline in the trading price of our common stock.

Significant judgments, estimates, and assumptions used in preparing our consolidated financial statements include, or may in the future include, those related to revenue

recognition, stock-based compensation, common stock valuations, and income taxes.

A novel strain of coronavirus, COVID-19, as well as variants of this strain, may adversely affect our

future business operations, financial condition and our ability to execute on business or contract opportunities.

In December 2019, an outbreak of COVID-19 was reported in Wuhan, China.

On March 11, 2020, the World

Health Organization declared COVID-19 a global pandemic and on March 13, 2020, President Donald J.

Trump declared the virus a national emergency.

This highly contagious disease has spread to most of the countries in the world and throughout the

United States, creating a serious impact on customers, workforces, and suppliers, disrupting economies and financial markets, and potentially leading to a world-wide economic downturn.

COVID-19, as well as subsequently reported variants of this

strain, have caused a disruption of the normal operations of many businesses, including the temporary closure or scale-back of business operations and/or the imposition of either quarantine or remote work or meeting requirements for employees, either

by government order or on a voluntary basis.

The pandemic may adversely affect our customers’ ability to perform their missions and is in many cases disrupting their operations.

It may also impact the ability of our subcontractors, partners, and

suppliers to operate and fulfill their contractual obligations, and result in an increase in their costs and cause delays in performance.

These supply chain effects, and the direct effect of the virus and the disruption on our operations, may

negatively impact both our ability to meet customer demand and our revenue and profit margins.

Our employees, in some cases, are working remotely due either to safety concerns or to customer imposed limitations and using various technologies to

perform their functions.

We could see delays or changes in customer demand, particularly if government funding priorities change.

Additionally, the disruption and volatility in the global and domestic capital markets may increase the cost of capital

and limit our ability to access capital.

Both the health and economic aspects of COVID-19 are highly fluid and the future course of each is uncertain.

For these reasons and other reasons that may come to light if the coronavirus pandemic and

associated protective or preventative measures expand, we may experience a material adverse effect on our business operations, revenues and financial condition, and our ability to execute on business or contract opportunities, including the TSA

PreCheck TM enrollment program;

Any failure to comply with the terms of our indebtedness may have a material adverse effect on our financial condition.

In addition, we expect that such credit facilities will bear interest at floating rates which will generally change as interest rates change.

We will bear the risk that the rates that we are charged by our lenders will increase faster than we can grow the cash flow from our businesses, which could reduce profitability, materially adversely affect our ability to service our debt and cause us to breach covenants contained in our third-party credit facilities.

A novel strain of coronavirus, COVID-19, as well as variants of this strain, may adversely affect our future business operations, financial condition and our ability to execute on business or contract opportunities.

The COVID-19 pandemic disrupted the normal operations of many businesses and other organizations, including the temporary closure or scale-back of business operations and the imposition of either quarantine or remote work or meeting requirements for employees, either by government order or on a voluntary basis.

The ongoing pandemic may adversely affect our customers’ ability to perform their missions and is, in many cases disrupting their operations.

It may also result in a change in spending priorities on the part of our customers, which could precipitate the cancellation, delay or deferral of programs, contracts or business opportunities.

It may also impact the ability of our subcontractors, partners, and suppliers to operate and fulfill their contractual obligations, and result in an increase in their costs and cause delays in performance.

These supply chain effects, and the direct effect of the virus and the disruption on our operations, may negatively impact both our ability to meet customer demand and our revenue and profit margins.

Our employees, in some cases, are working remotely due either to safety concerns or to customer-imposed limitations and using various technologies to perform their functions.

On September 24, 2021, EO 14042 on Ensuring Adequate COVID Safety Protocols for Federal Contractors was issued requiring, amongst other things, all employees, sub-contractors and vendors working on certain federal contracts or who do work related to these federal contracts be fully vaccinated by December 8, 2021.

This EO is currently under a stay issued by the federal courts.

Additionally, the disruption and volatility in the global and domestic capital markets may increase the cost of capital and limit our ability to access capital.

Both the health and economic aspects of the COVID-19 pandemic are highly fluid and the future course of each is uncertain.

For these reasons and other reasons that may come to light if the COVID-19 pandemic and associated protective or preventative measures expand, we may experience a material adverse effect on our business operations, revenues and financial condition, and our ability to execute on business or contract opportunities.

However, its ultimate impact is highly uncertain and subject to change.

Our facilities or operations could be adversely affected by events outside of our control, such as

natural disasters, wars or health epidemics.

We may be impacted by natural disasters, wars, power outages, health epidemics or pandemics, or other

events outside of our control.

and other facilities may be seriously damaged, or we may have to stop or delay production and delivery of our solutions and services.

Although we maintain crisis management and disaster response plans, such events could make it difficult or

impossible for us to deliver our solutions and services to our customers, and could decrease demand for our offerings.

We may incur shutdowns, delays, disruptions or expenses relating to such events outside of our control, which could have a material

adverse impact on our business, operating results and financial condition.

Because we do not carry insurance for all of these possible losses, and significant recovery time could be required to resume operations, our financial condition and operating

results could be materially adversely affected by such an event outside of our control.

Government contracts are subject to competitive bidding, both upon initial issuance and

re-competition.

If we are unable to successfully compete in the bidding process or if we fail to win re-competitions, it could adversely affect our operating performance and lead to an unexpected loss of revenue.

Substantially all of our U.S.

Government contracts are awarded through a competitive bidding process

upon initial award and renewal, and we expect that this will continue to be the case.

There is often significant competition and pricing pressure as a result of this process.

The competitive bidding process presents a number of risks, including the

we may expend substantial funds and time to prepare bids and proposals for contracts that may ultimately be awarded to one of our

we may be unable to accurately estimate the resources and costs that will be required to perform any contract we are awarded, which

could result in substantial cost overruns;

we may encounter expense and delay if our competitors protest or challenge awards of contracts, and any such protest or challenge

could result in a requirement to resubmit bids on modified specifications or in the termination, reduction or modification of the awarded contract.

Additionally, the protest of contracts awarded to us may result in the delay of program

performance and the generation of revenue while the protest is pending;

if we are not given the opportunity to re- compete for U.S.

contracts previously awarded to us, we may incur expenses to protect such decision and ultimately may not succeed in competing for or winning such contract renewal.

Government contracts for which we compete typically have multiple option periods, and if we

fail to win a contract or a task order, we generally will be unable to compete again for that contract for several years.

If we fail to win new contracts or to receive renewal contracts upon re-competition, it may result in additional costs and

expenses and possible loss of revenue, and we will not have an opportunity to compete for these contract opportunities again until such contracts expire.

Government contracts

generally are not fully funded at inception and are subject to amendment or termination, which places a significant portion of our revenues at risk and could adversely impact our earnings .

Government sales are funded by customer budgets, which operate on an October-to-September

In February of each year, the President of the United States presents to the Congress the budget for the upcoming fiscal year.

This budget proposes funding levels for every federal agency and is the result of months of policy and program

reviews throughout the Executive branch.

From February through September of each year, the appropriations and authorization committees of Congress review the President’s budget proposals and establish the funding levels for the upcoming fiscal year

in appropriations and authorization legislation.

Once these levels are enacted into law, the Executive Office of the President administers the funds to the agencies.

There are two primary risks associated with this process.

First, the process may be

delayed or disrupted.

Changes in congressional schedules, negotiations for program funding levels or unforeseen world events can interrupt the funding for a program or contract.

Second, funds for multi-year contracts can be changed in subsequent

years in the appropriations process.

In addition, the U.S.

Government has increasingly relied on IDIQ contracts and other procurement vehicles that are subject to a competitive bidding and funding process even after the award of the basic contract,

adding an additional element of uncertainty to future funding levels.

Delays in the funding process or changes in funding or funding priorities can impact the timing of available funds or can lead to changes in program content or termination at the

government’s convenience.

The loss of anticipated funding or the termination of multiple or large programs could have an adverse effect on our future sales and earnings.

The health and economic crisis created by the Coronavirus pandemic, and the

substantial increase in federal spending devoted to addressing multiple aspects of the crisis, might cause changes in federal or agency spending priorities that might impact our customer’s willingness or ability to continue or extend our contracts or

procure contracts which we otherwise, in the absence of the crisis, might have secured.

We are subject to

substantial oversight from federal agencies that have the authority to suspend our ability to bid on contracts .

Government contractor, we are subject to oversight by many agencies and entities of the U.S.

Government that may investigate and make inquiries of our business practices and conduct audits of contract performance and cost accounting.

Depending on the results of any such audits and investigations, the U.S.

Government may make claims against

Government procurement regulations and practices, an indictment of a U.S.

Government contractor could result in that contractor being fined and/or suspended for a period of time from eligibility for bidding on, or for the award of, new

Government contracts.

A conviction could result in debarment for a specified period of time.

To the best of management’s knowledge, there are no pending investigations, inquiries, claims or audits against the Company likely to have a material

adverse effect on our business or our consolidated results of operations, cash flows or financial position.

We enter into fixed-price and other contracts that could subject us to losses if we experience cost

growth that cannot be billed to customers.

Our facilities or operations could be adversely affected by events outside of our control, such as natural disasters, wars or health epidemics or pandemics.

We may be impacted by natural disasters, wars, terrorist attacks, power outages, health epidemics or pandemics, or other events outside of our control.

If major disasters such as earthquakes, floods, hurricanes, tornadoes, fires, or other events occur, or our information system or communications network breaks down, operates improperly, or is unusable, our headquarters and other facilities may be seriously damaged, or we may have to stop or delay production and delivery of our solutions and services.

Although we maintain crisis management and disaster response plans, such events could make it difficult or impossible for us to deliver our solutions and services to our customers, and could decrease demand for our offerings.

We may incur shutdowns, delays, disruptions or expenses relating to such events outside of our control, which could have a material adverse impact on our business, operating results and financial condition.

Because we do not carry insurance for all of these possible losses, and significant recovery time could be required to resume operations, our financial condition and operating results could be materially adversely affected by such an event outside of our control.

We enter into fixed-price and other contracts that could subject us to losses if we experience cost growth that cannot be billed to customers.

Generally, our customer contracts are either fixed-priced or cost-reimbursable contracts.

fixed-priced contracts, which represented approximately 84.3% of our 2020 revenues, we receive a fixed price irrespective of the actual costs we incur and, consequently, we carry the burden of any cost overruns.

Due to their nature, fixed-priced

contracts inherently have more risk than cost reimbursable contracts, particularly fixed-price development contracts where the costs to complete the development stage of the program can be highly variable, uncertain and difficult to estimate.

cost reimbursable contracts, subject to a contract-ceiling amount in certain cases, we are reimbursed for allowable costs and paid a fee, which may be fixed or performance based.

If our costs exceed the contract ceiling and are not authorized by the

customer or are not allowable under the contract or applicable regulations, we may not be able to obtain reimbursement for all such costs and our fees may be reduced or eliminated.

Because many of our contracts involve advanced designs and innovative

technologies, we may experience unforeseen technological difficulties and cost overruns.

Under fixed-price contracts, which represented approximately 87.6% of our 2021 revenues, we receive a fixed price irrespective of the actual costs we incur and, consequently, we carry the burden of any cost overruns.

Due to their nature, fixed-price contracts inherently have more risk than cost reimbursable contracts, particularly fixed-price development contracts where the costs to complete the development stage of the program can be highly variable, uncertain and difficult to estimate.

Under cost-reimbursable contracts, subject to a contract-ceiling amount in certain cases, we are reimbursed for allowable costs and paid a fee, which may be fixed or performance based.

If our costs exceed the contract ceiling and are not authorized by the customer or are not allowable under the contract or applicable regulations, we may not be able to obtain reimbursement for all such costs and our fees may be reduced or eliminated.

Because many of our contracts involve advanced designs and innovative technologies, we may experience unforeseen technological difficulties and cost overruns.

Under both types of contracts, if we are unable to control costs or if our initial cost estimates are incorrect, we can lose money on these contracts.

addition, some of our contracts have provisions relating to cost controls and audit rights, and if we fail to meet the terms specified in those contracts, we may not realize their full benefits.

Lower earnings caused by cost overruns and cost

controls would have a negative impact on our results of operations.

We depend on third parties in order to fully perform under our contracts and the failure of a third

party to perform could have an adverse impact on our earnings.

We rely on subcontractors and other companies to provide raw materials, major components and subsystems

for our products or to perform a portion of the services that we provide to our customers.

Occasionally, we rely on only one or two sources of supply, which, if disrupted, could have an adverse effect on our ability to meet our commitments to

In addition, some of our contracts have provisions relating to cost controls and audit rights, and if we fail to meet the terms specified in those contracts, we may not realize their full benefits.

Lower earnings caused by cost overruns and cost controls would have a negative impact on our results of operations.

We depend on third parties in order to fully perform under our contracts and the failure of a third party to perform could have an adverse impact on our earnings.

We rely on subcontractors and other companies to provide raw materials, major components and subsystems for our products or to perform a portion of the services that we provide to our customers.

Occasionally, we rely on only one or two sources of supply, which, if disrupted, could have an adverse effect on our ability to meet our commitments to customers.

We depend on these subcontractors and vendors to fulfill their contractual obligations in a timely and satisfactory manner in full compliance with customer requirements.

If one or more of our subcontractors or suppliers is unable to

satisfactorily provide on a timely basis the agreed-upon supplies or perform the agreed-upon services, our ability to perform our obligations as a prime contractor may be adversely affected.

Our future profitability

depends, in part, on our ability to develop new technologies and maintain a qualified workforce to meet the needs of our customers .

Virtually all of the products that we produce and sell are highly engineered and require sophisticated

manufacturing and system integration techniques and capabilities.

If one or more of our subcontractors or suppliers is unable to satisfactorily provide on a timely basis the agreed-upon supplies or perform the agreed-upon services, our ability to perform our obligations as a prime contractor may be adversely affected.

Our future profitability depends, in part, on our ability to develop new technologies and maintain a qualified workforce to meet the needs of our customers .

Virtually all of the products we produce and sell are highly engineered and require sophisticated manufacturing and system integration techniques and capabilities.

The government market in which we primarily operate is characterized by rapidly changing technologies.

The product and program needs of our government and commercial customers change

and evolve regularly.

The product and program needs of our government and commercial customers change and evolve regularly.

Accordingly, our future performance in part depends on our ability to identify emerging technological trends, develop and manufacture competitive products, and bring those products to market quickly at cost-effective prices.

addition, because of the highly specialized nature of our business, we must be able to hire and retain the skilled and appropriately qualified personnel necessary to perform the services required by our customers.

If we are unable to develop new

products that meet customers’ changing needs or successfully attract and retain qualified personnel, future sales and earnings may be adversely affected.

The business environment in which we operate is highly competitive and may impair our ability to achieve

revenue growth.

We operate in industry segments that are diverse.

Based upon our current market analysis, there is no

single company or small group of companies in a dominant competitive position.

Some large competitors offer capabilities in a number of markets that overlap many of the same areas in which we offer services, while certain companies are focused upon

only one or a few of such markets.

Some of the firms that compete with us in multiple areas include:

Northrop Grumman, Lockheed Martin and General Dynamics.

In addition, we compete with smaller specialty companies, including risk and compliance

management companies, organizational messaging companies, and security consulting organizations, and companies that provide secure network offerings.

If we do not compete effectively, we may suffer price reductions, reduced gross margins, and loss of

market share.

Some of our security

solutions have lengthy sales and implementation cycles, which could significantly impact our results of operations if projected orders are not realized .

In addition, because of the highly specialized nature of our business, we must be able to hire and retain the skilled and appropriately qualified personnel necessary to perform the services required by our customers.

If we are unable to develop new products that meet customers’ changing needs or successfully attract and retain qualified personnel, future sales and earnings may be adversely affected.

Some of our security solutions have lengthy sales and implementation cycles, which could significantly impact our results of operations if projected orders are not realized .

We market the majority of our security solutions directly to U.S.

government customers.

implementation of our services to these entities typically involves a lengthy education process and a significant technical evaluation and commitment of capital and other resources.

This process is also subject to the risk of delays associated with

customers’ internal budgeting and other procedures for approving large capital expenditures, deploying new technologies within their networks and testing and accepting new technologies that affect key operations.

As a result, the sales and

implementation cycles associated with certain of our services can be lengthy.

The sale and implementation of our services to these entities typically involves a lengthy education process and a significant technical evaluation and commitment of capital and other resources.

This process is also subject to the risk of delays associated with customers’ internal budgeting and other procedures for approving large capital expenditures, deploying new technologies within their networks and testing and accepting new technologies that affect key operations.

As a result, the sales and implementation cycles associated with certain of our services can be lengthy.

Our quarterly and annual operating results could be materially harmed if orders forecasted for a specific customer for a particular quarter are not realized.

1 unchanged sentence

As a cybersecurity company and a U.S.

defense contractor, we face cyber threats, threats to the physical

security of our facilities and employees, and terrorist acts.

We also are exposed to the potential for business disruptions associated with information technology failures, natural disasters, or public health or economic crises, such as that created

by the Coronavirus pandemic.

We routinely experience cyber security threats, threats to our information technology infrastructure and attempts to gain access to our sensitive information, as do our customers, suppliers, subcontractors and joint

venture partners.

defense contractor, we face cyber threats, threats to the physical security of our facilities and employees, and terrorist acts.

We are also exposed to the potential for business disruptions associated with information technology failures, natural disasters, or public health or economic crises, such as that created by the COVID-19 pandemic.

We routinely experience cybersecurity threats, threats to our information technology infrastructure and attempts to gain access to our sensitive information, as do our customers, suppliers, subcontractors and joint venture partners.

We may experience similar security threats at customer sites that we operate and manage as a contractual requirement.

Prior cyber attacks directed at us have not had a material impact on our financial results, and we believe our

threat detection and mitigation processes and procedures are adequate.

The threats we face vary from attacks common to most industries to more advanced and persistent, highly organized adversaries who target us because we protect national security

Prior cyberattacks directed at us have not had a material impact on our financial results, and we believe our threat detection and mitigation processes and procedures are adequate.

The threats we face vary from attacks common to most industries to more advanced and persistent, highly organized adversaries who target us because we protect national security information.

If we are unable to protect sensitive information, our customers or governmental authorities could question the adequacy of our threat mitigation and detection processes and procedures.

Due to the evolving nature of these security

threats, however, the impact of any future incident cannot be predicted.

Occurrence of any of these events could adversely affect our internal operations, the services we provide to our customers, loss of competitive advantages derived from our

research and development efforts or other intellectual property, early obsolescence of our products and services, our future financial results, or our reputation.

If we are unable to protect our intellectual property, our revenues may be impacted adversely by the

unauthorized use of our products and services.

Due to the evolving nature of these security threats, however, the impact of any future incident cannot be predicted.

The occurrence of any of these events could adversely affect our internal operations, the services we provide to our customers, loss of competitive advantages derived from our research and development efforts or other intellectual property, early obsolescence of our products and services, our future financial results, or our reputation.

If we are unable to protect our intellectual property, our revenues may be impacted adversely by the unauthorized use of our products and services.

Our success depends on our internally developed technologies, patents and other intellectual property.

Despite our precautions, it may be possible for a third party to copy or otherwise obtain and use our trade secrets or other forms of intellectual property without authorization.

Furthermore, the laws of foreign countries may not protect our

proprietary rights in those countries to the same extent U.S.

Furthermore, the laws of foreign countries may not protect our proprietary rights in those countries to the same extent U.S.

law protects these rights in the United States.

In addition, it is possible that others may independently develop substantially equivalent intellectual property.

If we do not effectively

protect our intellectual property, our business could suffer.

In the future, we may have to resort to litigation to enforce our intellectual property rights, to protect our trade secrets or to determine the validity and scope of the proprietary

rights of others.

If we do not effectively protect our intellectual property, our business could suffer.

In the future, we may have to resort to litigation to enforce our intellectual property rights, to protect our trade secrets or to determine the validity and scope of the proprietary rights of others.

This type of litigation, regardless of its outcome, could result in substantial costs and diversion of management and technical resources.

If we are unable to license third-party technology that is used in our products and services to perform

key functions, the loss could have an adverse effect on our revenues.

The third-party technology licenses used by us may not continue to be available on commercially

reasonable terms or at all.

Our business could suffer if we lost the rights to use these technologies.

If we are unable to license third-party technology that is used in our products and services to perform key functions, the loss could have an adverse effect on our revenues.

The third-party technology licenses used by us may not continue to be available on commercially reasonable terms or at all.

Our business could suffer if we lost the right to use these technologies.

A third party could claim that the licensed software infringes a patent or other proprietary right.

Litigation between the licensor and a

third-party or between us and a third-party could lead to royalty obligations for which we are not indemnified or for which indemnification is insufficient, or we may not be able to obtain any additional license on commercially reasonable terms or at

Litigation between the licensor and a third party or between us and a third party could lead to royalty obligations for which we are not indemnified or for which indemnification is insufficient, or we may not be able to obtain any additional license on commercially reasonable terms or at all.

The loss of, or our inability to obtain or maintain, any of these technology licenses could delay the introduction of new products or services until equivalent technology, if available, is identified, licensed and integrated.

This could harm our

We are involved in a number of legal proceedings.

We cannot predict the outcome of litigation and other

contingencies with certainty.

Our business may be adversely affected by the outcome of legal proceedings and other contingencies that

cannot be predicted with certainty.

As required by GAAP, we estimate loss contingencies and establish reserves based on our assessment of contingencies where liability is deemed probable and the amount of loss is reasonably estimable in light of the

facts and circumstances known to us at a particular point in time.

Subsequent developments in legal proceedings may affect our assessment of the potential for liability and our estimates of the loss contingency recorded as a liability or as a reserve

against assets in our financial statements.

For a description of our current legal proceedings, see Note 13 – Commitments, Contingencies and Subsequent Events to the consolidated financial statements.

Any potential future acquisitions, strategic investments, divestitures, mergers or joint ventures may

subject us to significant risks, any of which could harm our business.

Our long-term strategy may include identifying and acquiring, investing in or merging with suitable

candidates on acceptable terms, or divesting of certain business lines or activities.

In particular, over time, we may acquire, make investments in, or merge with providers of product offerings that complement our business or may terminate such

This could harm our business.

Any potential future acquisitions, strategic investments, divestitures, mergers or joint ventures may subject us to significant risks, any of which could harm our business.

Our long-term strategy may include identifying and acquiring, investing in or merging with suitable candidates on acceptable terms, or divesting of certain business lines or activities.

In particular, over time, we may acquire, make investments in, or merge with providers of product offerings that complement our business or may terminate such activities.

Mergers, acquisitions, and divestitures include a number of risks and present financial, managerial and operational challenges, including but not limited to:

1 unchanged sentence

• Possible material weaknesses in internal control over financial reporting;

increased expenses including legal, administrative and compensation expenses related to newly hired or terminated

increased costs to integrate the technology, personnel, customer base and business practices of the acquired company

• Increased expenses including legal, administrative and compensation expenses related to newly hired or terminated employees;

• Increased costs to integrate the technology, personnel, customer base and business practices of the acquired company with us;

• Potential exposure to material liabilities not discovered in the due diligence process;

potential adverse effects on reported operating results due to possible write-down of goodwill and other intangible

assets associated with acquisitions;

• Potential adverse effects on reported operating results due to possible write-down of goodwill and other intangible assets associated with acquisitions;

• Unavailability of acquisition financing or unavailability of such financing on reasonable terms.

Any acquired business, technology, service or product could significantly under-perform relative to our

expectations, and may not achieve the benefits we expect from possible acquisitions.

For all these reasons, our pursuit of an acquisition, investment, divestiture, merger, or joint venture could cause its actual results to differ materially from

those anticipated.

Weakened global economic conditions may adversely affect our industry, business, operating results and

financial condition.

Our overall performance depends in part on worldwide economic and geopolitical conditions.

States and other key international economies have experienced cyclical downturns from time to time in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate

profitability, volatility in credit, equity and foreign exchange markets, bankruptcies and overall uncertainty with respect to the economy.

These economic conditions can arise suddenly and the full impact of such conditions can remain uncertain at

any point in time.

In addition, geopolitical developments, such as potential trade wars, can increase levels of political and economic unpredictability globally and increase the volatility of global financial markets.

Moreover, these conditions can

affect the rate of information technology spending and could adversely affect our customers’ ability or willingness to purchase our solutions and services, delay prospective customers’ purchasing decisions, reduce the value or duration of their

subscription contracts, or affect attrition rates, all of which could adversely affect our future sales and operating results.

Clim a te change may have a long-term impact on our business.

While we seek to mitigate our business risks associated with climate change by establishing robust

environmental programs, we recognize that there are inherent climate related risks wherever business is conducted.

Access to clean water and reliable energy in the communities where we conduct our business, whether for our offices, vendors, customers

or other stakeholders, is a priority.

Any of our primary locations may be vulnerable to the adverse effects of climate change.

Climate related events, including the increasing frequency of extreme weather events and their impact on U.S.

infrastructure, have the potential to disrupt our business, our third party suppliers, or the operations and/or business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations.

Any failure in our delivery of high-quality technical support services may adversely affect our

relationships with our customers and our financial results.

Our customers depend on our support organization to resolve technical issues relating to our solutions

and offerings.

Any acquired business, technology, service or product could significantly underperform relative to our expectations and may not achieve the benefits we expect from possible acquisitions.

For all these reasons, our pursuit of an acquisition, investment, divestiture, merger, or joint venture could cause its actual results to differ materially from those anticipated.

Any failure in our delivery of high-quality technical support services may adversely affect our relationships with our customers and our financial results.

Our customers depend on our support organization to resolve technical issues relating to our solutions and offerings.

We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services.

Increased customer demand for these services, without corresponding revenues, could increase costs and adversely

affect our operating results.

Increased customer demand for these services, without corresponding revenues, could increase costs and adversely affect our operating results.

In addition, our sales process is highly dependent on our solutions and business reputation and on positive recommendations from our existing customers.

Any failure to maintain high-quality technical support, or a market

perception that we do not maintain high-quality support, could adversely affect our reputation, our ability to sell our offerings to existing and prospective customers, and our business, operating results and financial position.

We may lose key members of our management team, development and operations personnel, or subject matter

experts, and may be unable to attract and retain employees we need to support our operations and growth.

Our success depends substantially upon the continued services of our executive officers and other key

members of management, particularly our chief executive officer.

Any failure to maintain high-quality technical support, or a market perception that we do not maintain high-quality support, could adversely affect our reputation, our ability to sell our offerings to existing and prospective customers, and our business, operating results and financial position.

We may lose key members of our management team, development and operations personnel, or subject matter experts, and may be unable to attract and retain employees we need to support our operations and growth.

Our success depends substantially upon the continued services of our executive officers and other key members of management, particularly our chief executive officer.

From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives.

Such changes in our executive management team may be

disruptive to our business.

Such changes in our executive management team may be disruptive to our business.

We are also substantially dependent on the continued service of our existing development and operations personnel and subject matter experts because of the complexity of our services and technologies.

The loss of one or

more of our key employees or groups could seriously harm our business.

The technology industry is subject to substantial and continuous competition for engineers and other

subject matter experts with high levels of experience in designing, developing and managing software, cybersecurity, and Internet-related services, as well as competition for sales executives, data scientists and operations personnel.

We may not be

successful in attracting and retaining qualified personnel.

We have from time to time experienced, and we expect to continue to experience, difficulty in hiring, developing, integrating and retaining highly skilled employees with appropriate

qualifications.

These difficulties may be amplified by evolving restrictions on immigration, travel, or availability of visas for skilled technology workers.

These difficulties may potentially be further amplified by the high cost of living in

Washington D.C.

The loss of one or more of our key employees or groups could seriously harm our business.

The technology industry is subject to substantial and continuous competition for engineers and other subject matter experts with high levels of experience in designing, developing and managing software, cybersecurity, and internet-related services, as well as competition for sales executives, data scientists and operations personnel.

We may not be successful in attracting and retaining qualified personnel.

We have from time to time experienced, and we expect to continue to experience, difficulty in hiring, developing, integrating and retaining highly skilled employees with appropriate qualifications.

These difficulties may be amplified by evolving restrictions on immigration, travel, or the availability of visas for skilled technology workers.

These difficulties may potentially be further amplified by the high cost of living in the Washington D.C.

metropolitan area, where our headquarters and one of our other offices are located.

If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely

If our customers do not renew their subscriptions or contracts for our solutions and services, our

revenue could decline and our business may suffer.

Our customers have no obligation to renew or extend their subscriptions or contracts for our solutions

or services after the expiration of the contractual period, which vary in length, and in the normal course of business, some customers have elected not to renew or extend.

It is difficult to predict attrition rates given the varying needs of our

customer base.

customers, competition, pricing increases or changes and deteriorating general economic conditions or budgetary constraints.

Our future success also depends in part on our ability to sell additional features and services, more

subscriptions or enhanced editions of our services to our current customers.

If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

If our customers do not renew their subscriptions or contracts for our solutions and services, our revenue could decline and our business may suffer.

Our customers have no obligation to renew or extend their subscriptions or contracts for our solutions or services after the expiration of the contractual period, which vary in length, and in the normal course of business, some customers have elected not to renew or extend.

It is difficult to predict attrition rates given the varying needs of our customer base.

Our attrition rates may increase or fluctuate as a result of a number of factors, including customer dissatisfaction with our services, customers’ spending levels, mix of customer base, decreases in the number of users at our customers, competition, pricing increases or changes and deteriorating general economic conditions or budgetary constraints.

Our future success also depends in part on our ability to sell additional features and services, more subscriptions or enhanced editions of our services to our current customers.

This may also require increasingly sophisticated and costly sales efforts that are targeted at senior leaders.

Similarly, the rate at which our customers purchase new or

enhanced services depends on a number of factors, some of which are beyond our control.

If customers do not renew or extend their subscriptions or contracts, do not purchase additional

features or enhanced solutions, or if attrition rates increase, our business could be harmed.

If our security measures or those of our third-party data center hosting facilities, cloud computing

platform providers or third-party service partners, or the underlying infrastructure of the internet are breached, and unauthorized access is obtained to a customer’s data, our data or our IT systems, or authorized access is blocked or disabled, our

services may be perceived as not being secure, customers may curtail or stop using our services, and we may incur significant reputational harm, legal exposure and liabilities, or a negative financial impact.

Our services sometimes involve the storage and transmission of our customers’ and our customers'

customers' proprietary and other sensitive data, including financial information and personally identifiable information.

While we have security measures in place to protect our customers and our customers’ customers' data, our services and

underlying infrastructure may in the future be materially breached or compromised as a result of the following:

third party attempts to fraudulently induce employees or customers into disclosing sensitive information such as user names, passwords

or other information to gain access to our customers’ data, our data or our IT systems;

Similarly, the rate at which our customers purchase new or enhanced services depends on a number of factors, some of which are beyond our control.

If customers do not renew or extend their subscriptions or contracts, do not purchase additional features or enhanced solutions, or if attrition rates increase, our business could be harmed.

If our security measures or those of our third-party data center hosting facilities, cloud computing platform providers or third-party service partners, are inadequate, or if the underlying infrastructure of the internet is breached, or if unauthorized access to a customer’s data or our data or our IT systems is obtained, or if authorized access to our customer's data or our data or our IT systems is blocked or disabled, our services may be perceived as not being secure, customers may curtail or stop using our services, and we may incur significant reputational harm, legal exposure and liabilities, or a negative financial impact.

Our services sometimes involve the storage and transmission of our customers’ and our customers' customers' proprietary and other sensitive data, including financial information and personally identifiable information.

While we have security measures in place to protect our customers and our customers’ customers' data, our services and underlying infrastructure may in the future be materially breached or compromised as a result of the following:

• Third-party attempts to fraudulently induce employees or customers into disclosing sensitive information such as user names, passwords or other information to gain access to our customers’ data, our data or our IT systems;

• Efforts by individuals or groups of hackers and sophisticated organizations, including state-sponsored organizations or nation-states;

cyber-attacks on our internally built infrastructure;

• Cyberattacks on our internally built infrastructure;

• Vulnerabilities resulting from enhancements and updates to our existing solutions;

1 unchanged sentence

• Vulnerabilities existing within newly acquired or integrated technologies and infrastructures;

attacks on, or vulnerabilities in, the many different underlying networks and services that power the internet that our products

depend on, most of which are not under our control or the control of our vendors, partners, or customers;

• Attacks on, or vulnerabilities in, the many different underlying networks and services that power the internet that our products depend on, most of which are not under our control or the control of our vendors, partners, or customers;

• Employee or contractor errors or intentional acts that compromise our security systems.

These risks are mitigated, to the extent possible, by our ability to maintain and improve business and

data governance policies, enhanced processes and internal security controls, including our ability to escalate and respond to known and potential risks.

Although we have developed systems and processes designed to protect our customers’ and our

customers’ customers’ sensitive data, as well as our data, we can provide no assurances that such measures will provide absolute security.

In the normal course of business, we are the target of malicious cyber-attack attempts.

To date, any such

attempts have not been material or significant to us, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or significant.

A security breach or incident could result in unauthorized parties obtaining access to, or the denial of

authorized access to, our IT systems or data, or our customers' systems or data, including intellectual property, proprietary, sensitive, or other confidential information.

A security breach could also result in a loss of confidence in the security

of our services, damage our reputation, negatively impact our future sales, disrupt our business and lead to increases in insurance premiums and legal and financial exposure and liability.

Finally, the detection, prevention and remediation of known

or potential security vulnerabilities, including those arising from third-party hardware or software, may result in additional financial burdens due to additional direct and indirect costs, such as additional infrastructure capacity spending to

mitigate any system degradation.

Our ability to deliver our services is dependent on the development and maintenance of the

infrastructure of the Internet by third parties.

The Internet’s infrastructure is comprised of many different networks and services that are highly

fragmented and distributed by design.

This infrastructure is run by a series of independent third-party organizations that work together to provide the infrastructure and supporting services of the Internet under the governance of the Internet

Corporation for Assigned Numbers and Names (ICANN) and the Internet Assigned Numbers Authority (IANA), now under the stewardship of ICANN.

The Internet has experienced a variety of outages and other delays as a result of damages to portions of

its infrastructure, denial-of-service attacks or related cyber incidents, and it could face outages and delays in the future.

These outages and delays could reduce the level of Internet usage or result in fragmentation of the Internet, resulting in

multiple separate Internets.

These risks are mitigated, to the extent possible, by our ability to maintain and improve business and data governance policies, enhanced processes and internal security controls, including our ability to escalate and respond to known and potential risks.

Although we have developed systems and processes designed to protect our customers’ and our customers’ customers’ sensitive data, as well as our data, we can provide no assurances that such measures will provide absolute security.

In the normal course of business, we are the target of malicious cyberattack attempts.

To date, any such attempts have not been material or significant to us, including to our reputation or business operations, or had a material financial impact, but there can be no assurance that future cyberattacks will not be material or significant.

A security breach or incident could result in unauthorized parties obtaining access to, or the denial of authorized access to, our IT systems or data, or our customers' systems or data, including intellectual property, proprietary, sensitive, or other confidential information.

A security breach could also result in a loss of confidence in the security of our services, damage our reputation, negatively impact our future sales, disrupt our business and lead to increases in insurance premiums and legal and financial exposure and liability.

Finally, the detection, prevention and remediation of known or potential security vulnerabilities, including those arising from third-party hardware or software, may result in additional financial burdens due to additional direct and indirect costs, such as additional infrastructure capacity spending to mitigate any system degradation.

Our ability to deliver our services is dependent on the development and maintenance of the infrastructure of the internet by third parties.

The internet’s infrastructure is comprised of many different networks and services that are highly fragmented and distributed by design.

This infrastructure is run by a series of independent third-party organizations that work together to provide the infrastructure and supporting services of the internet under the governance of the Internet Corporation for Assigned Numbers and Names ("ICANN") and the Internet Assigned Numbers Authority ("IANA"), now an affiliate of ICANN.

The internet has experienced a variety of outages and other delays as a result of damages to portions of its infrastructure, denial-of-service attacks or related cyber incidents, and it could face outages and delays in the future.

These outages and delays could reduce the level of internet usage or result in fragmentation of the internet, resulting in multiple separate internets.

These scenarios are not under our control and could reduce the availability of the internet to us or our customers for delivery of our internet-related services.

Any resulting interruptions in our services or the ability

of our customers to access our services could result in a loss of potential or existing customers and harm our business.

Any resulting interruptions in our services or the ability of our customers to access our services could result in a loss of potential or existing customers and harm our business.

Sales to customers outside the United States expose us to risks inherent in international operations.

We sell our services outside the United States and are subject to risks and challenges associated with

international business.

We intend to continue to expand our international sales efforts.

The risks and challenges associated with sales to customers outside the United States or those that can affect international operations generally, include:

We sell our services outside the U.S.

and are subject to risks and challenges associated with international business.

The risks and challenges associated with sales to customers outside the U.S.

or those that can affect international operations generally, include:

• Localization of our services, including translation into foreign languages and associated expenses;

2 unchanged sentences

• Evolving domestic and international tax environments;

liquidity issues or political actions by sovereign nations, including nations with a controlled currency environment, which could

result in decreased values of these balances or potential difficulties protecting our foreign assets or satisfying local obligations;

foreign currency fluctuations and controls, which may make our services more expensive for international customers and could add

volatility to our operating results;

compliance with multiple, conflicting, ambiguous or evolving governmental laws and regulations, including employment, tax, privacy,

anti-corruption, import/export, antitrust, data transfer, storage and protection, and industry-specific laws and regulations, including rules related to compliance by our third-party resellers and our ability to identify and respond timely to

compliance issues when they occur;

vetting and monitoring our third-party resellers in new and evolving markets to confirm they maintain standards consistent with our

brand and reputation;

uncertainty regarding regulation, currency, tax, and operations resulting from the Brexit vote that could disrupt trade, the sale of

our services and commerce, and movement of our people between the United Kingdom, European Union, and locations;

• Liquidity issues or political actions by sovereign nations, including nations with a controlled currency environment, which could result in decreased values of these balances or potential difficulties protecting our foreign assets or satisfying local obligations;

• Foreign currency fluctuations and controls, which may make our services more expensive for international customers and could add volatility to our operating results;

• Compliance with multiple, conflicting, ambiguous or evolving governmental laws and regulations, including employment, tax, privacy, anti-corruption, import/export, antitrust, data transfer, storage and protection, and industry-specific laws and regulations, including rules related to compliance by our third-party resellers and our ability to identify and respond timely to compliance issues when they occur;

• Vetting and monitoring our third-party resellers in new and evolving markets to confirm they maintain standards consistent with our brand and reputation;

• Changes in the public perception of governments in the regions where we operate or plan to operate;

• Regional data privacy laws and other regulatory requirements;

treatment of revenue from international sources, intellectual property considerations and changes to tax codes, including being

subject to foreign tax laws and being liable for paying withholding income or other taxes in foreign jurisdictions;

• Treatment of revenue from international sources, intellectual property considerations and changes to tax codes, including being subject to foreign tax laws and being liable for paying withholding income or other taxes in foreign jurisdictions;

• Different pricing environments;

5 unchanged sentences

Any of these factors could negatively impact our business and results of operations.

The above factors

may also negatively impact our ability to successfully expand into emerging market countries, where we have little or no operating experience, where it can be costly and challenging to establish and maintain operations, including hiring and managing

required personnel, and difficult to promote our brand, and where we may not benefit from any first-to-market advantage or otherwise succeed.

We are subject to governmental export and import controls that could impair our ability to compete in international markets

and subject us to liability if we are not in full compliance with applicable laws.

Some of our solutions are subject to export and import controls, including the Commerce Department’s

Export Administration Regulations, U.S.

The above factors may also negatively impact our ability to successfully expand into emerging market countries, where we have little or no operating experience, where it can be costly and challenging to establish and maintain operations, including hiring and managing required personnel, and difficult to promote our brand, and where we may not benefit from any first-to-market advantage or otherwise succeed.

We are involved in a number of legal proceedings.

We cannot predict the outcome of litigation and other contingencies with certainty.

Our business may be adversely affected by the outcome of legal proceedings and other contingencies that cannot be predicted with certainty.

As required by U.S.

GAAP, we estimate loss contingencies and establish reserves based on our assessment of contingencies where liability is deemed probable and reasonably estimable in light of the facts and circumstances known to us at a particular point in time.

Subsequent developments in legal proceedings may affect our assessment and estimates of the loss contingency recorded as a liability or as a reserve against assets in our financial statements.

For a description of our current legal proceedings, see Note 18 - Commitments, Contingencies and Subsequent Events to the consolidated financial statements.

Industry and Economic Risk

We depend on the U.S.

government for a significant portion of our sales and a significant decline in U.S.

government defense and intelligence community spending, or a reallocation of spending to other priorities, could have an adverse impact on our financial condition and results of operations .

Our sales are highly concentrated with the U.S.

The customer relationship with the U.S.

government involves certain risks that are unique.

The programs in which we participate must compete with other programs and policy imperatives during the budget and appropriations process.

In each of the past three years, a substantial portion of our net sales was to the U.S.

government, particularly the DoD.

government's defense spending has historically been cyclical.

Defense budgets have received their strongest support when perceived threats to national security raise the level of concern over the country’s safety.

As these threats subside, spending on the military tends to decrease.

Rising budget deficits, increasing national debt, the cost of the global war on terrorism, increasing costs for entitlement programs, cost of new domestic initiatives, and the large and continued costs of combating the COVID-19 pandemic and addressing the health concerns and economic dislocation caused by COVID-19, continue to put pressure on all areas of discretionary spending, which could ultimately impact the defense budget and other aspects of federal discretionary spending.

We are subject to the seasonality of U.S.

government spending.

We derive a substantial portion of our revenues from U.S.

government contracting, and as a result, we are subject to the annual seasonality of U.S.

government purchasing.

Because the U.S.

government fiscal year ends on September 30, it is not uncommon for U.S.

government agencies to award extra tasks in the weeks immediately prior to the end of its fiscal year in order to avoid the loss of unexpended fiscal year funds.

As a result of this seasonality, we have historically experienced higher revenues in the third and fourth fiscal quarters, ending September 30 and December 31, respectively, with the pace of orders typically substantially reduced during the first and second fiscal quarters ending March 31 and June 30, respectively.

government contracts are subject to competitive bidding, both upon initial issuance and re-competition.

If we are unable to successfully compete in the bidding process or if we fail to win re-competitions, it could adversely affect our operating performance and lead to an unexpected loss of revenue.

Many of our U.S.

government contracts are awarded through a competitive bidding process upon initial award and renewal, and we expect that this will continue to be the case.

There is often significant competition and pricing pressure as a result of this process.

The competitive bidding process presents a number of risks, including the following:

• We may expend substantial funds and time to prepare bids and proposals for contracts that may ultimately be awarded to one of our competitors;

• We may be unable to accurately estimate the resources and costs that will be required to perform any contract we are awarded, which could result in substantial cost overruns;

• We may encounter expense and delay if our competitors protest or challenge awards of contracts, and any such protest or challenge could result in a requirement to resubmit bids on modified specifications or in the termination, reduction or modification of the awarded contract;

• The protest of contracts awarded to us may result in the delay of program performance and the generation of revenue while the protest is pending;

• If we are not given the opportunity to re-compete for U.S.

government contracts previously awarded to us, we may incur expenses to protect such decision and ultimately may not succeed in competing for or winning such contract renewal.

government contracts for which we compete typically have multiple option periods, and if we fail to win a contract or a task order, we generally will be unable to compete again for that contract for several years.

If we fail to win new contracts or to receive renewal contracts upon re-competition, it may result in additional costs and expenses and possible loss of revenue, and we will not have an opportunity to compete for these contract opportunities again until such contracts expire.

The business environment in which we operate is highly competitive and may impair our ability to achieve revenue growth.

We operate in industry segments that are diverse.

Based upon our current market analysis, there is no single company or small group of companies in a dominant competitive position.

Some large competitors offer capabilities in a number of markets that overlap many of the same areas in which we offer services, while certain companies are focused upon only one or a few of such markets.

Some of the firms that compete with us in multiple areas include:

Northrop Grumman, Lockheed Martin and General Dynamics.

In addition, we compete with smaller specialty companies, including risk and compliance management companies, organizational messaging companies, and security consulting organizations, and companies that provide secure network offerings.

If we do not compete effectively, we may suffer price reductions, reduced gross margins, and loss of market share.

government contracts generally are not fully funded at inception and are subject to amendment or termination, which places a significant portion of our revenues at risk and could adversely impact our earnings .

government sales are funded by customer budgets, which operate on an October-to-September fiscal year.

In February of each year, the President of the United States presents to Congress the budget for the upcoming fiscal year.

This budget proposes funding levels for every federal agency and is the result of months of policy and program reviews throughout the Executive branch.

Once these levels are enacted into law, the Executive Office of the President administers the funds to the agencies.

There are two primary risks associated with this process.

First, the process may be delayed or disrupted.

Changes in congressional schedules, negotiations for program funding levels or unforeseen world events can interrupt the funding for a program or contract.

Second, funds for multi-year contracts can be changed in subsequent years in the appropriations process.

In addition, the U.S.

government has increasingly relied on IDIQ contracts and other procurement vehicles that are subject to a competitive bidding and funding process even after the award of the basic contract, adding an element of uncertainty to future funding levels.

Delays in the funding process or changes in funding or funding priorities can impact the timing of available funds or can lead to changes in program content or termination at the government’s convenience.

The loss of anticipated funding or the termination of multiple or large programs could have an adverse effect on our future sales and earnings.

The continuing health and economic crisis created by the COVID-19 pandemic and the substantial increase in federal spending devoted to addressing multiple aspects of the crisis may continue to cause changes in federal or agency spending priorities that might impact our customer’s willingness or ability to continue or extend our contracts or procure contracts which we otherwise, in the absence of the crisis, might have secured.

Weakened global economic conditions may adversely affect our industry, business, operating results and financial condition.

Our overall performance depends in part on worldwide economic and geopolitical conditions.

The United States and other key international economies have experienced cyclical downturns from time to time in which economic activity was impacted by falling demand for a variety of goods and services, restricted credit, poor liquidity, reduced corporate profitability, volatility in credit, equity and foreign exchange markets, bankruptcies and overall uncertainty with respect to the economy.

These economic conditions can arise suddenly and the full impact of such conditions can remain uncertain at any point in time.

In addition, geopolitical developments, such as the recent invasion of Ukraine by Russia, can increase levels of political and economic unpredictability globally and increase the volatility of global financial markets.

Moreover, these conditions can affect the rate of information technology spending and could adversely affect our customers’ ability or willingness to purchase our solutions and services, delay prospective customers’ purchasing decisions, reduce the value or duration of their subscription contracts, or affect attrition rates, all of which could adversely affect our future sales and operating results.

Clim a te change may have a long-term impact on our business.

There are inherent climate related risks wherever business is conducted.

Access to clean water and reliable energy in the communities where we conduct our business, whether for our offices, vendors, customers or other stakeholders, is a priority.

Any of our primary locations may be vulnerable to the adverse effects of climate change.

Climate-related events, including the increasing frequency of extreme weather events and their impact on U.S.

critical infrastructure, have the potential to disrupt our business, our third-party suppliers, or the operations and business of our customers, and may cause us to experience higher attrition, losses and additional costs to maintain or resume operations.

Changes in accounting principles or their application to us could result in unfavorable accounting charges or effects, which could adversely affect our results of operations and growth prospects.

We prepare consolidated financial statements in accordance with U.S.

In particular, we make certain estimates and assumptions related to the adoption and interpretation of these principles including the recognition of our revenue and the accounting of our stock-based compensation expense with respect to our consolidated financial statements.

A change in any of these principles or guidance, or in their interpretations or application to us, may have a significant effect on our reported results, as well as our processes and related controls, and may retroactively affect previously reported results or our forecasts, which may negatively impact our financial statements.

For example, any recent new standards issued by the Financial Accounting Standards Board could materially impact our consolidated financial statements .

The adoption of these new standards may potentially require enhancements or changes in our processes or systems and may require significant time and cost on behalf of our financial management.

This may, in turn, adversely affect our results of operations and growth prospects.

If our judgments or estimates relating to our critical accounting policies are based on assumptions that change or prove to be incorrect, our results of operations could fall below expectations of securities analysts and investors, resulting in a decline in our stock price.

The preparation of our consolidated financial statements in conformity with U.S.

GAAP requires management to make judgments, estimates, and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes.

We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, the results of which form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources.

Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our common stock.

Significant judgments, estimates, and assumptions used in preparing our consolidated financial statements include, or may in the future include, those related to revenue recognition, stock-based compensation, common stock valuations, and income taxes.

Legal and Regulatory Risks

Our business is subject to complex and evolving U.S.

laws and regulations regarding privacy, data protection and security, technology protection, and other matters.

Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our business practices, monetary penalties, increased cost of operations, or otherwise harm our business.

We are subject to a variety of local, state, national, and international laws and directives and regulations in the United States and abroad that involve matters central to our business, including privacy and data protection, data security, data storage, retention, transfer and deletion, technology protection, and personal information.

Foreign data protection, data security, privacy, and other laws and regulations can impose different obligations or be more restrictive than those in the United States.

federal and state and foreign laws and regulations, which, depending on the regime, may be enforced by private parties or government entities, are constantly evolving and can be subject to significant change, and they are likely to remain uncertain for the foreseeable future.

In addition, the application, interpretation, and enforcement of these laws and regulations are often uncertain, and may be interpreted and applied inconsistently from country to country and inconsistently with our current policies and practices.

A number of proposals are pending before U.S.

federal, state, and foreign legislative and regulatory bodies that could significantly affect our business.

The overarching complexity of privacy and data protection laws and regulations around the world pose a compliance challenge that could manifest in costs, damages, or liability in other forms as a result of failure to implement proper programmatic controls, failure to adhere to those controls, or the malicious or inadvertent breach of applicable privacy and data protection requirements by us, our employees, our business partners, or our customers.

In addition to government regulation, self-regulatory standards and other industry standards may legally or contractually apply to us, be argued to apply to us, or we may elect to comply with such standards or to facilitate our customers’ compliance with such standards.

Because privacy, data protection, and information security are critical competitive factors in our industry, we may make statements on our website, in marketing materials, or in other settings about our data security measures and our compliance with, or our ability to facilitate our customers’ compliance with, these standards.

We also expect that there will continue to be new proposed laws and regulations concerning privacy, data protection, and information security, and we cannot yet determine the impact such future laws, regulations and standards, or amendments to or re-interpretations of existing laws and regulations, industry standards, or other obligations may have on our business.

New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, and contractual and other obligations may require us to incur additional costs and restrict our business operations.

As these legal regimes relating to privacy, data protection, and information security continue to evolve, they may result in ever-increasing public scrutiny and escalating levels of enforcement and sanctions.

Furthermore, because the interpretation and application of laws, standards, contractual obligations and other obligations relating to privacy, data protection, and information security are uncertain, these laws, standards, and contractual and other obligations may be interpreted and applied in a manner that is, or is alleged to be, inconsistent with our data management practices, our policies or procedures, or the features of our solutions.

We may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to fulfill existing obligations, make enhancements, or develop new solutions and features could be limited.

Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to the businesses of our customers may limit the use and adoption of, and reduce the overall demand for, our solutions.

These existing and proposed laws and regulations can be costly to comply with and can make our solutions and services less effective or valuable, delay or impede the development of new products, result in negative publicity, increase our operating costs, require us to modify our data handling practices, limit our operations, impose substantial fines and penalties, require significant management time and attention, or put our data or technology at risk.

Any failure or perceived failure by us or our solutions to comply with U.S., or applicable foreign laws, regulations, directives, policies, industry standards, or legal obligations relating to privacy, data protection, or information security, or any security incident that results in loss of or the unauthorized access to, or acquisition, use, release, or transfer of, personal information, personal data, or other customer or sensitive data or information may result in governmental investigations, inquiries, enforcement actions and prosecutions, private claims and litigation, indemnification or other contractual obligations, other remedies, including fines or demands that we modify or cease existing business practices, or adverse publicity, and related costs and liabilities, which could significantly and adversely affect our business and results of operations.

We are subject to substantial oversight from federal agencies that have the authority to suspend our ability to bid on contracts .

government contractor, we are subject to oversight by many agencies and entities of the U.S.

government that may investigate and make inquiries of our business practices and conduct audits of contract performance and cost accounting.

Depending on the results of any such audits and investigations, the U.S.

government may make claims against us.

government procurement regulations and practices, an indictment of a U.S.

government contractor could result in that contractor being fined and/or suspended for a period of time from eligibility for bidding on, or for the award of, new U.S.

government contracts.

A conviction could result in debarment for a specified period of time.

To the best of management’s knowledge, there are no pending investigations, inquiries, claims or audits against the Company likely to have a material adverse effect on our business or our consolidated results of operations, cash flows or financial position.

We are subject to governmental export and import controls that could impair our ability to compete in international markets and subject us to liability if we are not in full compliance with applicable laws.

Some of our solutions are subject to export and import controls, including without limitation, the Department of State's Directorate of Defense Trade Controls, the Commerce Department’s Export Administration Regulations, U.S.

Customs regulations and various economic and trade sanctions regulations established by the Treasury Department’s Office of Foreign Assets Control.

If we fail to comply with these U.S.

export control laws and

import laws we and certain of our employees could be subject to substantial civil or criminal penalties, including the possible loss of export or import privileges;

export control laws and import laws, we and certain of our employees could be subject to substantial civil or criminal penalties, including the possible loss of export or import privileges;

fines, which may be imposed on us and responsible employees or managers;

extreme cases, the incarceration of responsible employees or managers.

and, in extreme cases, the incarceration of responsible employees or managers.

Obtaining the necessary authorizations, including any required license, may be time-consuming, is not guaranteed and may result in the delay or loss of sales opportunities.

2 unchanged sentences

embargoed or sanctioned countries, governments and persons.

Even though we take precautions to prevent our solutions

from being provisioned or provided to U.S.

Even though we take precautions to prevent our solutions from being provisioned or provided to U.S.

sanctions targets in violation of applicable regulations, our solutions could be provisioned to those targets despite such precautions.

Any such sales could have negative consequences, including government

investigations, penalties and reputational harm.

Changes in our solutions or changes in export and import regulations may create delays in the introduction, sale and deployment of our solutions in international markets or prevent the export or import

of our solutions to certain countries, governments or persons altogether.

Any decreased use of our solutions or limitation on our ability to export or sell our solutions may adversely affect our business, financial condition and results of

Any such sales could have negative consequences, including government investigations, penalties and reputational harm.

Any decreased use of our solutions or limitation on our ability to export or sell our solutions may adversely affect our business, financial condition and results of operations.

Unresolved Staff Comments

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1A. Risk Factors