Vroom, Inc. 10-Q

Item 3. Quantitative and Qualitative Disclosure About Market Risk Market risk is the risk of economic losses due to adverse changes in financial market prices and rates. Our primary market risk has been interest rate risk. We do not have material exposure to commodity risk. Interest Rate Risk As of June 30, 2021, we had an outstanding balance under the 2020 Vehicle Floorplan Facility of $363.6 million. The 2020 Vehicle Floorplan Facility bears interest at a rate equal to the 1-Month LIBOR rate applicable in the immediately preceding month, plus a spread of 425 basis points. A hypothetical 10% change in interest rates during the periods presented would result in a change to interest expense of $0.3 million and $0.7 million for the three and six months ended June 30, 2021, respectively. As of June 30, 2021, we had an outstanding principal balance on our Notes of $625.0 million. As the interest rate on the Notes is fixed, we do not have exposure to interest rate risk. 51 Table of Contents Item 4. Cont rols and Procedures Limitations on effectiveness of controls and procedures In designing and evaluating our disclosure controls and procedures, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that management is required to apply judgment in evaluating the benefits of possible controls and procedures relative to their costs. Evaluation of Disclosure Controls and Procedures Our management, with the participation of our principal executive officer and principal financial officer, evaluated, as of the end of the period covered by this Quarterly Report on Form 10-Q, the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act). Based on that evaluation, and as a result of the material weaknesses described below, our principal executive officer and principal financial officer concluded that, as of June 30, 2021, our disclosure controls and procedures were not effective. In light of this fact, our management has performed additional analyses, reconciliations, and other post-closing procedures and has concluded that, notwithstanding the material weaknesses in our internal control over financial reporting, the condensed consolidated financial statements for the periods covered by and included in this Quarterly Report on Form 10-Q fairly state, in all material respects, our financial position, results of operations and cash flows for the periods presented in conformity with U.S. GAAP. Material Weaknesses A material weakness is a deficiency, or combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of annual or interim financial statements will not be prevented or detected on a timely basis. Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with GAAP. In connection with our audit of consolidated financial statements for the year ended December 31, 2018, we identified material weaknesses in our internal control over financial reporting. We did not design or maintain an effective control environment commensurate with our financial reporting requirements. Specifically, we lacked a sufficient complement of personnel with (i) an appropriate level of accounting knowledge, training and experience to appropriately analyze, record and disclose accounting matters timely and accurately, and (ii) an appropriate level of knowledge and experience to establish effective information technology processes and controls. This material weakness contributed to the following material weaknesses: • we did not design and maintain adequate controls over the preparation and review of certain account reconciliations and journal entries. Specifically, we did not design and maintain controls to ensure (i) the appropriate segregation of duties in the preparation and review of account reconciliations and journal entries and (ii) account reconciliations and journal entries were reviewed at the appropriate level of precision. • we did not design and maintain effective controls over certain information technology general controls for information systems and applications that are relevant to the preparation of the consolidated financial statements. Specifically, we did not design and maintain sufficient user and privileged access controls to ensure appropriate segregation of duties and adequate restricted user access to financial applications; program change management controls to ensure that IT program and data changes affecting financial IT applications and underlying accounting records are identified, tested, authorized and implemented appropriately; or computer operations controls as well as testing and approval controls for program development. The control deficiencies described above did not result in a misstatement to our annual or interim consolidated financial statements. However, each of the control deficiencies described above, if not remediated, could result in a misstatement of one or more account balances or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected, and, accordingly, we determined that these control deficiencies constitute material weaknesses. We have concluded that these material weaknesses arose because, as a private company, we did not have the necessary business processes, systems, personnel and related internal controls. 52 Table of Contents During the years ended December 31, 2019 and 2020, we commenced measures to address material weaknesses in our internal controls. In particular, we (i) hired additional finance and accounting personnel with expertise in preparation of financial statements and account reconciliations; (ii) further developed and documented our accounting policies; and (iii) hired a director responsible for implementation of information technology general controls. Further, we have continued to take additional steps to remediate these material weaknesses, including: • hired additional qualified accounting, financial reporting and information technology personnel with public company experience, including a Chief Information Security Officer; • provided additional training for our personnel on internal control over financial reporting; • implemented new financial systems and processes; • implemented additional review controls and processes and timely preparation of account reconciliations and analyses; • implemented processes and controls to better identify and manage segregation of duties; and • engaged an external advisor to assist with evaluating and documenting the design and operating effectiveness of internal controls and assisting with the remediation of deficiencies, as necessary. Changes in Internal Control over Financial Reporting While we believe that the efforts, as described above, have improved our internal control over financial reporting, the implementation of our remediation for the material weaknesses is ongoing and requires validation and testing of the design and operating effectiveness of internal controls over a sustained period of financial reporting cycles. Accordingly, we will not be able to fully remediate these material weaknesses until these steps have been completed. Except as otherwise described herein, there was no change in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the three months ended June 30, 2021 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting. 53 Table of Contents PART II - OTHER INFORMATION