UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-Q

☒ QUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the Quarterly Period Ended September 30,March 31, 20222023

or

☐TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the Transition Period from _________ to _________

Commission file number: 001-41227

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC.

(Exact name of registrant as specified in its charter)

(480) 389-3444

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a small reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act: ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

As of November 14, 2022,May 10, 2023, there were 146,253,545154,676,477 shares of the registrant’s common stock outstanding.

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC.

QUARTERLY REPORT ON FORM 10-Q

FOR THE QUARTERLY PERIOD ENDED SEPTEMBER 30, 2022MARCH 31, 2023

TABLE OF CONTENTS

FORWARD-LOOKING STATEMENTS

ThisThe information contained in this report should be read in conjunction with the financial statements and related notes contained elsewhere in this Quarterly Report on Form 10-Q includes a number of forward-looking10-Q. Certain statements made in this report are “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended (the “Securities Act”), and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), that reflect management’s current views with respect to future events and financial performance.. These statements are based upon beliefs of, and information currently available to, us as of the date hereof, as well as estimates and assumptions made by us. Readers are cautioned not to place undue reliance on these forward-looking statements, which are only predictions and speak only as of the date hereof. When used herein, the words “anticipate,” “believe,” “estimate,” “expect,” “forecast,” “future,” “intend,” “plan,” “predict,” “project,” “target,” “potential,” “will,” “would,” “could,” “should,” “continue” or the negative of these terms and similar expressions identify forward-looking statements. Such statements reflect our current view with respect to future events and are subject to risks, uncertainties, assumptions, and other factors, including the risks relating to our business, industry, and our operations and results of operations. Should one or more of these risks or uncertainties materialize, or should the underlying assumptions prove incorrect, actual results may differ materiallysignificantly from those anticipated, believed, estimated, expected, intended, or planned.

Although we believe that the expectations reflected in the forward-looking statements are reasonable, we cannot guarantee future results, levels of activity, performance, or achievements. Except as required by applicable law, including the securities laws of the United States, we do not intend to update any of the forward-looking statements to conform these statements to actual results.

Forward-looking statements made in this Quarterly Report on Form 10-Q include statements about:

These statements are only predictions and involve known and unknown risks, uncertainties and other factors, including the risks detailed from time to time in our reports filed with the Securities and Exchange Commission (the “SEC”), including our Annual Report on Form 10-K for the fiscal year ended December 31, 2022, any of which may cause our or our industry’s actual results, levels of activity, performance, or achievements to be materially different from any future results, levels of activity, performance, or achievements expressed or implied by these forward-looking statements. These risks may cause our or our industry’s actual results, levels of activity, or performance to be materially different from any future results, levels of activity, or performance expressed or implied by these forward-looking statements.

Our financial statements are prepared in accordance with accounting principles generally accepted in the United States. These accounting principles require us to make certain estimates, judgments, and assumptions. We believe that the estimates, judgments, and assumptions upon which we rely are reasonable based upon information available to us at the time that these estimates, judgments, and assumptions are made. These estimates, judgments, and assumptions can affect the reported amounts of assets and liabilities as of the date of the financial statements as well as the reported amounts of revenue and expenses during the periods presented. Our financial statements would be affected to the extent there are material differences between these estimates and actual results. The following discussion should be read in conjunction with our financial statements and notes thereto appearing elsewhere in this report.

Forward-looking statements made in this Quarterly Report on Form 10-Q include statements about:

Such statements reflect our current view with respect to future events and are subject to risks, uncertainties, assumptions, and other factors, including the risks relating to our business, industry, and our operations and results of operations. It is not possible for us to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements we may make. In light of these risks, uncertainties and assumptions, the forward-looking events discussed in this report may not occur, and actual results could differ materially and adversely from those implied in our forward-looking statements.

You should not rely upon forward-looking statements as predictions of future events. Although we believe that the expectations reflected in the forward-looking statements are reasonable, we cannot guarantee future results, levels of activity, performance, or events and circumstances described in the forward-looking statements will be achieved or occur. Neither we nor any other person assumes responsibility for the accuracy and completeness of these forward-looking statements. Except as required by law, we undertake no obligation to update any forward-looking statements after the date of this report to conform these statements to actual results. Given these risks and uncertainties, readers are cautioned not to place undue reliance on such forward-looking statements, which are only predictions and speak only as of the date hereof.

PART I – FINANCIAL INFORMATION

Item 1. Financial Statements

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC. and subsidiaries

CONDENSED Consolidated Balance Sheets

(Unaudited)

The accompanying footnotes are an integral part of these unaudited condensed consolidated financial statements.

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC. and subsidiaries

CONDENSED Consolidated STATEMENTS OF OPERATIONS AND COMPREHENSIVE LOSS

(Unaudited)

The accompanying footnotes are an integral part of these unaudited condensed consolidated financial statements.

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC. and subsidiaries

CONDENSED Consolidated STATEMENTS of CHANGES IN STOCKHOLDERS’ EQUITY

(Unaudited)

The accompanying footnotes are an integral part of these unaudited condensed consolidated financial statements.

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC. and subsidiaries

CONDENSED Consolidated STATEMENTS OF CASH FLOWS

(Unaudited)

The accompanying footnotes are an integral part of these unaudited condensed consolidated financial statements.

CERBERUS CYBER SENTINEL CORPORATIONCISO GLOBAL, INC. and subsidiaries

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS

(Unaudited)

Unless otherwise indicated or the context requires otherwise, the terms “we,” “us,” “our,” and “our company” refer to Cerberus Cyber Sentinel Corporation,CISO Global, Inc., a Delaware corporation (“Cerberus”), and its wholly owned subsidiaries, including GenResults, LLC, an Arizona limited liability company (“GenResults”), TalaTek, LLC, a Virginia limited liability company (“TalaTek”), Technologyville, Inc., an Illinois corporation (“Techville”), Clear Skies Security, LLC, a Georgia limited liability company (“Clear Skies”), Alpine Security, LLC, an Illinois limited liability company (“Alpine”), Catapult Acquisition Corporation, a New Jersey corporation (“VelocIT”), Ocean Point Equities, Inc., a British Virgin Islands company (“Arkavia”), True Digital Security, Inc., a Delaware corporation (“True Digital”), RED74 LLC, a New Jersey limited liability company (“RED74”), Atlantic Technology Systems, Inc., a New Jersey corporation (“ATS”), Atlantic Technology Enterprises, Inc., a New Jersey corporation (“ATE” and together with ATS, “Atlantic”), Creatrix, Inc., a Maryland corporation (“Creatrix”), CyberViking, LLC, an Oregon limited liability company (“CyberViking”), Servicios Informaticos CUATROi, S.P.A., a Chilean corporation, Comercializadora CUATROi S.P.A., a Chilean corporation CUATROi Peru, S.A.C., a Peruvian corporation, and CUATROi S.A.S., a Colombian corporation (collectively “CUARTOi”), NLT Networks, S.P.A., a Chilean corporation; NLT Tecnologias, Limitada, a Chilean corporation, and NLT Servicios Profesionales, S.P.A., a Chilean corporation (collectively “NLT”), White and Blue Solutions, LLC, a Florida limited liability company (“W&B” and together with NLT, “NLT Secure”).subsidiaries. Unless otherwise specified, all dollar amounts are expressed in United States dollars.

NOTE 1 –ORGANIZATION OF BUSINESS AND BACKGROUNDGOING CONCERN

Description of the Business

We are a cybersecurity and compliance company comprised of highly trained and seasoned security professionals who work with clients to enhance or create a better cyber posture inimprove their organization.cybersecurity posture. We provide a full range of cybersecurity consulting and related services, encompassing all three pillars of compliance, cybersecurity,strategy and culture.risk, cyber defense operations, architecture and engineering, and readiness and resiliency. Our services include secured managed services, compliance services, security operations center (“SOC”) services, virtual Chief Information Security Officer (“vCISO”) services, incident response, certifieddigital forensics, technical assessments, and cybersecurity training.

On January 5, 2022, We believe that culture is the foundation of every successful cybersecurity and compliance program. To deliver that outcome, we entered intodeliver a stock purchase agreement (the “True Digital Stock Purchase Agreement”)holistic solution that provides these services in a unified way from a dedicated team of subject matter experts. In contrast to the majority of cybersecurity firms that are focused on a specific technology or service, we seek to differentiate ourselves by remaining technology agnostic, focusing on aggregating teams of highly sought-after practitioners. We continually seek to identify and acquire cybersecurity talent to expand our service scope and geographical coverage to provide the best possible service for our clients. We believe that bringing together a world-class team of technological experts with certain stockholders of True Digital and an agreement and plan of merger (the “True Digital Merger Agreement”) with True Digital and certain of its other stockholders. On January 19, 2022, the transactions contemplated by the True Digital Stock Purchase Agreement and the True Digital Merger Agreement were consummated, with True Digital becoming a wholly owned subsidiary of our company.

On January 18, 2022, we completed a $10,300,000 underwritten public offering of shares of our common stock, pursuant to which an aggregate of 2,060,000 shares of our common stock were issued. In addition, we granted the underwriter warrants to purchase an aggregate of 144,200 shares of our common stock. We used the net proceeds from the offering to fund acquisitions, sales, marketing, and general corporate purposes. In connection with the public offering, our common stock was listed on The Nasdaq Stock Market LLC.

On June 1, 2022, we entered into a stock purchase agreement with the stockholders of Creatrix, pursuant to which we acquired all of the issued and outstanding capital stock of Creatrix, with Creatrix becoming a wholly owned subsidiary of our company. Creatrix offers recognizedmulti-faceted expertise in identity management as well as systems integrationthe critical aspects of cybersecurity is key to providing technology to our clients in a business environment that are experiencing challenges attracting and software engineering,retaining cybersecurity talent, thereby setting us apart from competitors and specializes in biometrics, vetting, credentialing, and case management.

On July 1, 2022, we entered intoin-house security teams. Our goal is to create a stock purchase agreement with CyberViking and its interest holders, pursuant to which we acquired all of the issued and outstanding units of CyberViking, with CyberViking becoming a wholly owned subsidiary of our company. CyberViking specializes in application security services, incident response, and threat hunting as well as the creation and managementculture of security operation centers.

On August 25, 2022, we entered intoand to help quantify, define, and capture a stock purchase agreement with CUATROireturn on investment from information technology and its partners, pursuant to which we acquired all ofcybersecurity spending. Our brand rallies around the issued and outstanding units of CUATROi, with CUATROi becoming a wholly owned subsidiary of our company. CUATROibattle cry: “Cyber security is a cloud, managed services provider & cybersecurity company with offices in South America.

On September 1, 2022, we entered intoCulture, not a stock purchase agreement with NLT Secure and its interest holders, pursuant to which we acquired all of the issued and outstanding units of NLT Secure, with NLT Secure becoming a wholly owned subsidiary of our company. NLT Secure provides a broad range of security solutions and managed services to organizations throughout South America.Product.”

Basis of Presentation

Our financial statements have been prepared in accordance with accounting principles generally accepted in the United States (“GAAP”) and include our accounts and the accounts of our subsidiaries. All material intercompany accounts and transactions have been eliminated.

Our interim financial statements are unaudited, and in our opinion, include all adjustments of a normal recurring nature necessary for the fair presentation of the periods presented. The results for the interim periods are not necessarily indicative of the results to be expected for any subsequent period or for the year ending December 31, 2022.2023. These unaudited condensed consolidated financial statements and related notes should be read in conjunction with our audited financial statements for the year ended December 31, 2021.2022.

Going Concern

The accompanying unaudited condensed consolidated financial statements have been prepared on a going concern basis, which contemplates the realization of assets and satisfaction of liabilities in the normal course of business. For the three months ended March 31, 2023, we incurred a net loss of $34,841,689 and had negative cash flows from operations of $2,110,872. At March 31, 2023, we had total current assets of $15,064,867 and total current liabilities of $21,657,003, resulting in a working capital deficit of $6,592,136. At March 31, 2023, we had cash and cash equivalents of $3,823,735.

Based on our current business plan, we believe our cash balance as of the date of this filing, together with anticipated revenues, will be sufficient to meet our anticipated cash requirement for the near term. However, there can be no assurance that the current business plan will be achievable. Such conditions raise substantial doubts about our ability to continue as a going concern for one year from the date the unaudited condensed consolidated financial statements are issued.

Our existence is dependent upon our ability to develop profitable operations. We are devoting substantially all of our efforts to developing our business, reducing overhead costs, and raising capital, although there can be no assurance that our efforts will be successful. No assurance can be given that our actions will result in profitable operations or the resolution of liquidity problems. The accompanying unaudited condensed consolidated financial statements do not include any adjustments that might result should we be unable to continue as a going concern.

In order to improve our liquidity, in addition to a planned reduction in overhead costs, we are actively pursuing additional debt and/or equity financing through discussions with investment bankers and private investors. There can be no assurance that we will be successful in our efforts to secure additional financing.

The unaudited condensed consolidated financial statements do not include any adjustments relating to the recoverability of assets and the amount or classification of liabilities that might be necessary should we be unable to continue as a going concern.

Reclassifications

Certain reclassificationsReclassifications of certain immaterial prior period amounts have been made to the financial statements for the nine months ended September 30, 2021 to conform to the financial statements presentation for the nine months ended September 30, 2022. These reclassifications had no effect on net loss or cash flows as previously reported.current period presentation.

Use of Estimates

GAAP requires management to make estimates and assumptions that affect the reported amounts in our unaudited condensed consolidated financial statements. We periodically evaluate our estimates and adjust prospectively, if necessary. We believe our estimates and assumptions are reasonable; however, actual results could materially differ.

We believe the critical accounting policies discussed below affects our more significant judgments and estimates used in the preparation of the accompanying unaudited condensed consolidated financial statements. Significant estimates include the allowance for doubtful accounts, the carrying value of intangible assets and goodwill, deferred tax asset and valuation allowance, the estimated fair value of assets acquired, liabilities assumed and stock issued in business combinations, and assumptions used in the Black-Scholes option pricing model, such as expected volatility, risk-free interest rate, share price, and expected dividend rate.

NOTE 2 – SUMMARY OF SIGNIFICANT ACCOUNTING POLICIES

Revenue

Our revenue is derived from two major types of services to clients: security managed services and professional services. With respect to security managed services, we provide culture education and enablement, tools and technology provisioning, data and privacy monitoring, regulations and compliance monitoring, remote infrastructure administration, and cybersecurity services, including, but not limited to, antivirus and patch management. With respect to professional services, we provide cybersecurity consulting, compliance auditing, vulnerability assessment and penetration testing, and disaster recovery and data backup solutions.

Our revenue is categorized and disaggregated as reflected in our unaudited condensed consolidated statement of operations as follows:

Security Managed Services

Security managed services revenue primarily consists of compliance, security managed services, SOC managed services, and vCISO. We considered these services to be a single performance obligation, and revenue is recognized as services and materials are provided to the customer.

Professional Services

Professional services revenue primarily consists of technical assessments, incident response and forensics, training, and other cybersecurity services. We considered these services to be a single performance obligation, and revenue is recognized in the period in which the performance obligations are satisfied.

Accounts Receivable

Accounts receivable are reported at their outstanding unpaid principal balances, net of allowances for doubtful accounts. We periodically assess our accounts and other receivables for collectability on a specific identification basis. We provide for allowances for doubtful receivables based on management’s estimate of uncollectible amounts considering age, collection history, and any other factors considered appropriate. Payments are generally due within 30 days of invoice. We write off accounts receivable against the allowance for doubtful accounts when a balance is determined to be uncollectible. As of September 30, 2022March 31, 2023 and December 31, 2021,2022, our allowance for doubtful accounts was $308,560199,945 and $77,811270,011, respectively.

Inventory

Inventory consists of software licenses and computer equipment for sale to customers. Inventory is measured using the first-in, first-out method and stated at lower of cost or net realizable value as of September 30, 2022March 31, 2023 and December 31, 2021.2022. The value of inventories is reduced for excess and obsolete inventories. We monitor inventory to identify events that would require impairment due to obsolete inventory and adjust the value of inventory when required. We recorded no inventory impairment losses for the ninethree months ended September 30, 2022March 31, 2023 and 2021.2022.

Fair Value Measurements

As defined in ASC (“Accounting Standards Codification”) 820, Fair Value Measurements and Disclosures, fair value is the price that would be received to sell an asset or paid to transfer a liability in an orderly transaction between market participants at the measurement date (exit price). ASC 820 establishes a fair value hierarchy that prioritizes the inputs used to measure fair value. The hierarchy gives the highest priority to unadjusted quoted prices in active markets for identical assets or liabilities (Level 1 measurement) and the lowest priority to unobservable inputs (Level 3 measurement). This fair value measurement framework applies at both initial and subsequent measurement.

Net Loss per Common Share

Net loss per common share is computed by dividing the net loss by the weighted average number of common shares outstanding during the period. For dilutive securities, all outstanding options are considered potentially outstanding common stock. The dilutive effect, if any, of stock options is calculated using the treasury stock method. All outstanding convertible notes are considered common stock at the beginning of the period or at the time of issuance, if later, pursuant to the if-converted method. Since the effect of common stock equivalents is anti-dilutive with respect to losses, the options and shares issuable upon conversion thereof have been excluded from our computation of net loss per common share for the ninethree months ended September 30, 2022March 31, 2023 and 2021.2022.

The following tables summarize the securities that were excluded from the diluted per share calculation because the effect of including these potential shares was antidilutive due to our net loss position even though the exercise price could be less than the average market price of the common shares:

SUMMARY OF SECURITIES EXCLUDED FROM DILUTED PER SHARE 

Deferred Revenue

Deferred revenue primarily consists of billings or payments received from customers in advance of revenue recognized for the services provided to our customers or annual licenses and is recognized as services are performed or ratably over the life of the license. We generally invoice customers in advance or in milestone-based installments. Deferred revenue of $52,8241,709,844 was recognized as revenue for the ninethree months ended September 30, 2022,March 31, 2023, which was included in the deferred revenue balance as of December 31, 2021.2022. As of September 30, 2022,March 31, 2023, deferred revenue related to such customer payments was $3,074,173, all of which is expected to be recognized during the succeeding 12-month period and is therefore presented as current.

Deferred revenue consisted of the following:

SCHEDULE OF DEFERRED REVENUE 

Income Taxes

Deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial statement carrying amounts of existing assets and liabilities and their respective tax bases. Deferred tax assets and liabilities, including tax loss and credit carry forwards, are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred tax assets and liabilities of a change in tax rates is recognized in income in the period that includes the enactment date.

We utilize ASC 740, Income Taxes, which requires the recognition of deferred tax assets and liabilities for the expected future tax consequences of events that have been included in the unaudited condensed consolidated financial statements or tax returns. We account for income taxes using the asset and liability method to compute the differences between the tax basis of assets and liabilities and the related financial amounts, using currently enacted tax rates. A valuation allowance is recorded when it is “more likely than not” that a deferred tax asset will not be realized. At September 30, 2022 and DecemberMarch 31, 2021,2023, our net deferred tax asset has been fully reserved.reserved due to our current period impairment, we expect to be in a net deferred tax asset position in Chile, and a valuation allowance has been recorded for this jurisdiction during the current period.

For uncertain tax positions that meet a “more likely than not” threshold, we recognize the benefit of uncertain tax positions in the unaudited condensed consolidated financial statements. Our practice is to recognize interest and penalties, if any, related to uncertain tax positions in income tax expense in the unaudited condensed consolidated statements of operations when a determination is made that such expense is likely.

Recently Issued Accounting Standards

In May 2021, the Financial Accounting Standards Board (“FASB”) issued Accounting Standards Update (“ASU”) No. 2021-04, Earnings Per Share (Topic 260), Debt — Modifications and Extinguishments (Subtopic 470-50), Compensation — Stock Compensation (Topic 718), and Derivatives and Hedging — Contracts in Entity’s Own Equity (Subtopic 815-40): Issuer’s Accounting for Certain Modifications or Exchanges of Freestanding Equity-Classified Written Call Options (a consensus of the Emerging Issues Task Force). The ASU requires issuers to account for modifications or exchanges of freestanding equity-classified written call options that remain equity classified after the modification or exchange based on the economic substance of the modification or exchange. Under the ASU, an issuer determines the accounting for the modification or exchange based on whether the transaction was done to issue equity, to issue or modify debt, or for other reasons. The ASU is applied prospectively and is effective for us for fiscal years beginning after December 15, 2021 and interim periods within those fiscal years. Early adoption is permitted. We adopted the standard on January 1, 2022, and management noted that there is no material impact to the unaudited condensed consolidated financial statements.

In October 2021, the FASB issued ASU No. 2021-08, Business Combinations (Topic 805): Accounting for Contract Assets and Liabilities from Contracts with Customers. The new guidance requires contract assets and contract liabilities acquired in business combinations to be recognized in accordance with ASC Topic 606 as if the acquirer had originated the contracts. The ASU is applied prospectively and is effective for us for fiscal years beginning after December 15, 2022 and interim periods within those fiscal years. Early adoption is permitted. We are currently evaluating the impact that adopting this standard will have on the unaudited condensed consolidated financial statements.

All other newly issued but not yet effective accounting pronouncements have been deemed to be not applicable or immaterial to us.

NOTE 3 – ACQUISITIONS

True Digital Security, Inc.

On January 5, 2022, we entered into the True Digital Stock Purchase Agreement with certain stockholders of True Digital and the True Digital Merger Agreement with True Digital and certain of its other stockholders. On January 19, 2022, the transactions contemplated by the True Digital Stock Purchase Agreement and the True Digital Merger Agreement were consummated, with True Digital becoming a wholly owned subsidiary of our company (the “True Digital Acquisition”). True Digital’s outstanding common stock was exchanged for $6,153,000 in cash and 8,229,000 shares of our common stock.

The following table summarizes the allocation of the purchase price to the fair values of the assets acquired and the liabilities assumed as of the transaction date:

SUMMARY OF SIGNIFICANT FAIR VALUE ASSETS ACQUIRED AND LIABILITIES