CISO Global, Inc. - Annual Report: 2019 (Form 10-K)

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

FORM 10-K

(Mark One)

[X] ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2019

or

[  ] TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from __________________________ to __________________________

Commission file number 000-56059

CERBERUS CYBER SENTINEL CORPORATION

(Exact name of registrant as specified in its charter)

7333 E. Doubletree, Suite D270, Scottsdale, Arizona 85258

(Address of Principal Executive Offices) (Zip Code)

Registrant’s telephone number, including area code: (480) 389-3444

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: Common Stock, par value $0.00001

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes [  ] No [X]

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes [  ] No [X]

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes [X] No [  ]

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes [X] No [  ]

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by checkmark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. [  ]

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes [  ] No [X]

The aggregate market value of the common stock held by non-affiliates of the registrant as of the last business day of the registrant’s most recently completed second fiscal quarter (June 30, 2019) was $3,886,000, computed by reference to the price at which the common stock was last sold ($0.40 per share).

The registrant had 108,032,500 shares of common stock outstanding as of March 30, 2020.

CERBERUS CYBER SENTINEL CORPORATION

2019 FORM 10-K ANNUAL REPORT

TABLE OF CONTENTS

FORWARD-LOOKING STATEMENTS

The following discussion should be read in conjunction with the financial statements and related notes contained elsewhere in this Annual Report on Form 10-K. Certain statements made in this discussion are “forward-looking statements” within the meaning of 27A of the Securities Act of 1933, as amended (the “Securities Act”), and Section 21E of the Securities Exchange Act of 1934, as amended, (the “Exchange Act”). These statements are based upon beliefs of, and information currently available to, the Company’s management as well as estimates and assumptions made by the Company’s management. Readers are cautioned not to place undue reliance on these forward-looking statements, which are only predictions and speak only as of the date hereof. When used herein, the words “anticipate,” “believe,” “estimate,” “expect,” “forecast,” “future,” “intend,” “plan,” “predict,” “project,” “target,” “potential,” “will,” “would,” “could,” “should,” “continue” or the negative of these terms and similar expressions as they relate to the Company or the Company’s management identify forward-looking statements. Such statements reflect the current view of the Company with respect to future events and are subject to risks, uncertainties, assumptions, and other factors, including the risks relating to the Company’s business, industry, and the Company’s operations and results of operations. Should one or more of these risks or uncertainties materialize, or should the underlying assumptions prove incorrect, actual results may differ significantly from those anticipated, believed, estimated, expected, intended, or planned.

Although the Company believes that the expectations reflected in the forward-looking statements are reasonable, the Company cannot guarantee future results, levels of activity, performance, or achievements. Except as required by applicable law, including the securities laws of the United States, the Company does not intend to update any of the forward-looking statements to conform these statements to actual results.

Our financial statements are prepared in accordance with accounting principles generally accepted in the United States (“GAAP”). These accounting principles require us to make certain estimates, judgments and assumptions. We believe that the estimates, judgments and assumptions upon which we rely are reasonable based upon information available to us at the time that these estimates, judgments and assumptions are made. These estimates, judgments and assumptions can affect the reported amounts of assets and liabilities as of the date of the financial statements as well as the reported amounts of revenues and expenses during the periods presented. Our financial statements would be affected to the extent there are material differences between these estimates and actual results. The following discussion should be read in conjunction with our financial statements and notes thereto appearing elsewhere in this report.

Unless otherwise indicated or the context requires otherwise, the words “we,” “us,” “our,” the “Company” or “our Company” or “Cerberus Sentinel” refer to Cerberus Cyber Sentinel Corporation, a Delaware corporation, and its wholly-owned subsidiaries, GenResults, LLC, an Arizona limited liability company (“GenResults”), and TalaTek, LLC, a Virginia limited liability company (“TalaTek”).

Forward-looking statements made in this Annual Report on Form 10-K include statements about:

These statements are only predictions and involve known and unknown risks, uncertainties and other factors, including the risks in the section entitled “Risk Factors” set forth in this Annual Report on Form 10-K for the year ended December 31, 2019, any of which may cause our Company’s or our industry’s actual results, levels of activity, performance or achievements to be materially different from any future results, levels of activity, performance or achievements expressed or implied by these forward-looking statements. These risks may cause the Company’s or its industry’s actual results, levels of activity or performance to be materially different from any future results, levels of activity or performance expressed or implied by these forward-looking statements.

Although we believe that the expectations reflected in the forward-looking statements are reasonable, we cannot guarantee future results, levels of activity or performance. Moreover, neither we nor any other person assumes responsibility for the accuracy and completeness of these forward-looking statements. The Company is under no duty to update any forward-looking statements after the date of this report to conform these statements to actual results.

PART I

ITEM 1. BUSINESS

Corporate History

Cerberus Cyber Sentinel Corporation (“Cerberus Sentinel”) was formed on March 5, 2019 as a Delaware corporation. Our principal offices are located at 7333 E. Doubletree, Suite D270, Scottsdale, Arizona 85258.

Effective April 1, 2019, we acquired GenResults, LLC, an Arizona limited liability company (“GenResults”). GenResults was established on June 22, 2015. Prior to our acquisition of GenResults, GenResults was wholly owned by an entity affiliated with David G. Jemmett, our Chief Executive Officer and a director of the Company. As of December 31, 2019, GenResults is a wholly owned subsidiary of Cerberus Sentinel. Due to the companies being under common control, the Company accounted for the acquisition as a reorganization. See Note 4 in the accompanying financial statements beginning on page F-1.

On April 12, 2019, we consummated a transaction whereby VCAB Six Corporation, a Texas corporation, (“VCAB”) merged with and into us (the “VCAB Merger”). At the time of the VCAB Merger, VCAB was subject to a bankruptcy proceeding and had minimal assets, no equity owners and no liabilities, except for approximately 1,500 holders of Class 5 Allowed General Unsecured Claims and a holder of allowed administrative expenses (collectively the “Claim Holders”). Pursuant to the terms of the VCAB Merger, and in accordance with the bankruptcy plan, we issued an aggregate of 2,000,000 shares of our common stock (the “Plan Shares”) to the Claim Holders as full settlement and satisfaction of their respective claims. As provided in the bankruptcy plan, the Plan Shares were issued pursuant to Section 1145 of the United States Bankruptcy Code. As a result of the VCAB Merger, the separate corporate existence of VCAB was terminated. We entered into the merger in order to increase our shareholder base in order to, among other things, assist us in satisfying the listing standards of a national securities exchange.

Effective as of October 1, 2019, we entered into an Agreement and Plan of Merger (the “TalaTek Merger”) pursuant to which TalaTek, LLC, a Virginia limited liability company has become our wholly owned subsidiary. Under the TalaTek Merger, all issued and outstanding units representing membership interests in TalaTek were converted into an aggregate of 6,200,000 shares of our common stock.

On October 2, 2019, we filed a Registration Statement on Form 10-12G (the “Registration Statement”) with the Securities and Exchange Commission (“SEC”) to effect registration of our common stock, par value $0.00001, under the Exchange Act. The Registration Statement became effective on December 1, 2019.

Our Business

We are a security consulting company comprised of highly trained security professionals who work with clients to create a continuously aware security culture. We do not sell cybersecurity products. We position ourselves as a trusted cybersecurity advisor and are committed to delivering tailored security solutions to organizations of different sizes and across all geographies and industries to fit their budgetary needs and limit their cyber threat exposure.

We currently provide a multitude of cybersecurity services including managed security service, cybersecurity consulting, technology consulting, compliance auditing, vulnerability assessment, penetration testing, security remediation, Security Operations Center (“SOC”) set-up and consulting and cybersecurity training. We differentiate ourselves from competitors by staying technology agnostic. We believe that many cybersecurity service providers in the market today are committed to a specific technology solution which limits their service scope and ability to quickly respond to any emerging cybersecurity challenges. In addition, as we continue to serve our clients within our existing capacities, we plan to continue acquiring strategic acquisitions of small-to-medium-sized engineer-led cybersecurity service firms to continue to expand our service scope and geographical coverage. We believe that owning a world-class technology team with multi-faceted expertise is key to providing technology agnostic solutions to our clients and maximizing their return on investment from information technology (“IT”) and cybersecurity spending.

Cybersecurity Market

As the world has become increasingly connected through the Internet and the Internet of Things (“IoT”), cyberattacks have prevailed and evolved over the years, in different forms, causing uncontainable threats to the integrity and privacy of enterprise and personal data and resulted in significant economic losses globally. McKinsey Global Institute has estimated that approximately 127 new IoT devices connect to the Internet every second. By 2025, there are expected to be more than 75 billion IoT devices worldwide. Surveys from businesses in 2018 done by Cybint Solutions and Accenture have shown that 62% of businesses experienced phishing and social engineering attacks in 2018, and 68% of business leaders feel their cybersecurity risks are increasing. Gartner predicts that the worldwide spending on cybersecurity will increase from $114 billion in 2018 to $134 billion in 2022.

In response to the increasing economic damage caused by heightened cybersecurity risks, regulatory bodies have pushed the implementation of new cybersecurity legislations, and cyber insurance companies have increased minimum cybersecurity requirements. We believe that we are well positioned in a fast-growing industry to provide businesses with a wide scope of cybersecurity services and with significant opportunities for growth.

Service Offering

We currently offer two major types of services to clients including Managed Services and Consulting Services.

Managed Services

Our Managed Services focus on a holistic approach to cybersecurity based on an upfront gap analysis of our client’s existing cybersecurity practices. We offer multiple modules in the service portfolio including the following:

Consulting Services

Our consulting services includes a wide array of tailored solutions for organizations of all sizes. Our in-depth industry expertise allows us to act as the trusted advisor of our clients to help them lower their risk profile, minimize cost impact to organizations and meet regulatory compliance demands. We specialize in:

Growth Strategy

Cybersecurity service and consulting firms operate on various forms of business models. Cerberus Sentinel does not sell product; we promote a cybersecurity culture. Our growth strategy will focus on external acquisition and internal scalability to drive that culture within our clients’ organizations. Therefore, our revenue streams mainly come from service and consulting fees. As the cybersecurity market grows over years, we continue to see an increasing number of players entering the market with different sets of qualifications. However, organizations facing cybersecurity issues also usually lack the expertise to identify the right service provider or do not have the capital resources to hire a qualified CISO. We believe that this is where our growth opportunity lies since the lack of expertise leads to information asymmetry which causes additional noise in the cybersecurity marketplace and exposes organizations in greater risks if found issues are not mitigated with the right group of experts. Furthermore, the industry is in need of highly qualified technology professionals in the cybersecurity field. A limited pool of talent results in increasing compensation and cost to retain such talent which in turn compromises companies’ bottom line profitability and then increases the need to work externally with a partner such as Cerberus Sentinel. According a Cybersecurity Jobs Report released in 2017 by Herjavec Group, total unfilled cybersecurity positions will be approximately 3.5 million by 2021. We intend to capitalize on this gap as our growth opportunity.

Our external acquisition strategy will target engineer-owned cybersecurity firms in the top thirty U.S. markets with existing revenue in the range of $2 million to $15 million and profit margin of at least 15% to 25%, although there could be opportunities beyond the larger end of this range. We expect each acquisition to be strategic and accretive, and we expect to obtain direct access to a pool of ready-to-deploy and seasoned cybersecurity talent and enhanced access to a larger client base geographically.

Our internal scalability strategy will focus on exploring and materializing synergies with the acquired targets. With strategic acquisitions, on the topline, we expect to provide a broadened service offering which translates into more diverse revenue streams and a larger client base. We also anticipate that we will be able to broaden our geographical sales coverage and reduce client acquisition costs. We also intend to synergize best practices across the platform which will enhance client experience and client loyalty. On the bottom line, we plan to centralize general and administrative support functions in one location which will significantly improve net margin for all the service lines. This will allow our management to focus on sales initiatives and achieve internal operations scalability in a relatively short period of time. We estimate that with a typical acquisition, we will realize annual savings on centralized operations, generate additional revenue from upselling to existing clients, and add revenue from new clients. In the long term, we expect to become a pure-play cybersecurity consolidator in the U.S.

Acquisition of TalaTek

Effective October 1, 2019, we acquired TalaTek, a Virginia limited liability company formed on August 24, 2006. TalaTek provides complete integrated enterprise risk management services by leveraging their specialized combination of methodologies, processes and technology, collectively known as Enterprise Compliance Management Solution (“ECMS”). ECMS enables efficient and repeatable risk, compliance and information security management, facilitating continuous improvement and empowering clients to make better informed risk decisions. These services are currently provided primarily to the public sector.

Implications of Being an Emerging Growth Company

We are an “emerging growth company,” as that term is used in the Jumpstart Our Business Startups Act of 2012, or “JOBS Act.” An emerging growth company may take advantage of specified reduced reporting and other burdens that are otherwise applicable generally to public companies, and we have elected to comply with these reduced reporting and other burdens. These provisions include:

We could remain an emerging growth company until the earliest of (i) the last day of the first fiscal year in which our annual gross revenues exceed $1.07 billion, (ii) the last day of the fiscal year following the fifth anniversary of the date of the first sale of common stock under a registration statement under the Securities Act of 1933, (iii) the date that we become a “large accelerated filer” as defined in Rule 12b-2 under the Exchange Act, which would occur if the market value of our common stock that is held by non-affiliates exceeds $700 million as of the last business day of our most recently completed second fiscal quarter, or (iv) the date on which we have issued more than $1 billion in non-convertible debt during the preceding three year period. The foregoing amounts are subject to adjustment for inflation.

In addition, Section 107 of the JOBS Act provides that an emerging growth company can take advantage of the extended transition period provided in Section 7(a)(2)(B) of the Securities Act and Section 13(a) of the Exchange Act for complying with new or revised accounting standards that have different effective dates for public and private companies until those standards apply to private companies. We have elected to take advantage of the extended transition period for complying with the revised accounting standards. As a result, our financial statements may not be comparable to companies that comply with public company effective dates.

Competition in the Cybersecurity Market

The cybersecurity market is highly fragmented. In the top quartile, the market is dominated by several major global players including IBM Corporation, Cisco Systems, AVG Technologies, Broadcom and Dell, etc. The rest of the market is highly competitive without dominant players. North America is expected to continue its hold as the largest market size in the cybersecurity market through the year 2023, according to a report released by MarketsandMarkets.com (September 21, 2018).

We face direct competition from all small-to-medium-sized cybersecurity service providers nationwide given the broad service scope we currently provide. Many competitors provide cloud-based services which means our competition is not restricted by regions. It is critical for our executive management team to identify and attract strategic acquisition targets in order to strengthen our competitive advantage as a cybersecurity consolidator, which we believe brings higher service quality, more diverse service scope, and broader geographical coverage at a lower cost.

Intellectual Property

We intend to take appropriate steps to protect our intellectual property. We have registered the trademark “Cyber security is a culture, not a product,” which has been approved with an official registration date of October 29, 2019.

Government Regulation

The Company is not aware of any specific regulations that govern cybersecurity firms or the areas in which the Company operates. While there are a few federal cybersecurity regulations, they govern industries that the Company serves and exist to focus on specific industries.

The three main cybersecurity regulations are the 1996 Health Insurance Portability and Accountability Act (HIPAA), the 1999 Gramm-Leach-Bliley Act, and the 2002 Homeland Security Act, which included the Federal Information Security Management Act (FISMA). The three regulations mandate that healthcare organizations, financial institutions and federal agencies should protect their systems and information. FISMA, which applies to every government agency, requires the development and implementation of mandatory policies, principles, standards, and guidelines on information security. However, the regulations do not address numerous computer related industries, such as Internet Service Providers (ISPs) and software companies. Furthermore, the regulations do not specify what cybersecurity measures must be implemented and require only a “reasonable” level of security.

In addition, the National Cyber Security Division (NCSD) is another regulatory body that is a division of the Office of Cyber Security & Communications within the United States Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency.

Employees

As of December 31, 2019, we had 30 employees. In addition, we utilize independent contractors for projects of short duration or where specialized knowledge, or experience is needed for a complex project. We are not dependent on any independent contractor, and we believe adequate replacements would be available in the event any such contractor becomes unavailable to us. We believe our relations with our employees is good.

Transfer Agent

Our stock transfer agent is Securities Transfer Corporation, located at 2901 N. Dallas Parkway, Plano, Texas 75093. Their telephone number is (469) 633-0101, and their website is stctransfer.com.

Corporate and Available Information

Our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to those reports will be available free of charge through our website (http://cerberussentinel.com) as soon as practicable after such material is electronically filed with, or furnished to, the SEC. Except as otherwise stated in these documents, the information contained on our website or available by hyperlink from our website is not incorporated by reference into this report or any other documents we file, with or furnish to, the SEC.

ITEM 1A. RISK FACTORS

An investment in our common stock involves a number of very significant risks. Readers of this Annual Report on Form 10-K should carefully consider the following risks and uncertainties in addition to other information in this report in evaluating our company and its business before purchasing shares of our company’s common stock. Our business, operating results and financial condition could be seriously harmed due to any of the following risks. An investor in our common stock could lose all or part of their investment due to any of these risks.

Risks Related to Our Business and Industry

We will need to raise capital in order to realize our business plan and growth strategy, the failure of which could adversely impact our operations.

As of December 31, 2019, our business was not profitable, and we may incur additional costs in relation to future acquisitions which may result in shortage in capital resources. Without adequate funding, a significant increase in revenues, and successful integration of the acquired targets, we may not be able to sustain profitability in the existing lines of business and attract further capital. As of March 25, 2020, we had available cash resources of approximately $1,600,000.

We expect to continue to finance our operations with available net operating cash flows and will need to raise additional capital in the future by issuing equity or other forms of securities, which could significantly reduce the percentage ownership of our existing shareholders. Furthermore, any newly issued securities could have rights, preferences and privileges senior to those of our existing common stock and may have a dilutive impact on the ownership interest of existing shareholders.

We may have difficulty obtaining additional funds as and when needed, and we may have to accept terms that would adversely affect our shareholders. In addition, any adverse conditions in the credit and equity markets may adversely affect our ability to raise funds when needed. Any failure to achieve adequate funding will delay our acquisition efforts and could lead to abandonment of one or more of our acquisition initiatives, as well as prevent us from responding to competitive pressures or take advantage of unanticipated acquisition opportunities. Any additional equity financing will likely be dilutive to shareholders, and certain types of equity financing, if available, may involve restrictive covenants or other provisions that would limit how we conduct our business or finance our operations.

We are not profitable as of December 31, 2019, have limited cash flow and, unless we increase revenues and cash flow or raise additional capital, we may be unable to take advantage of any acquisition opportunities that arise or expand our business, all of which could adversely impact us.

For the year ended December 31, 2019 and as of the date of this report, we assessed our financial condition and concluded that we have sufficient resources for the next 12 months from the date of this report. Our auditor’s report for the year ended December 31, 2019 does not include a going concern opinion on the matter. However, management is still required to assess our ability to continue as a going concern. We had a net loss of $1,354,368 for the year ended December 31, 2019. During the same period, cash used in operations was $203,358 and our accumulated deficit as of December 31, 2019 was $1,453,510. Management is unable to predict if and when we will be able to generate significant positive cash flow or achieve profitability. Our plan regarding these matters is to strengthen our revenues and continue improving operational efficiencies across the business. There can be no assurances that we will be successful in increasing revenues, improving operational efficiencies or that financing will be available or, if available, that such financing will be available under favorable terms. In the event that we are unable to generate adequate revenues to cover expenses and cannot obtain additional financing into calendar year 2020, we may need to cut back or curtail our expansion plans.

We will need to grow the size and capabilities of our organization, and we may experience difficulties in managing this growth.

As of December 31, 2019, we had 30 employees. As our acquisition strategies develop, we must carefully integrate managerial, operational, sales, marketing, financial, and other personnel in the expanded organization and manage cost. Future growth will impose significant added responsibilities on members of management, including:

Our future financial performance and our ability to commercialize our strategic acquisitions will depend, in part, on our ability to effectively manage any future growth. Our management may also have to divert a disproportionate amount of its attention away from day-to-day activities in order to devote a substantial amount of time to managing these growth activities. This lack of long-term experience working together may adversely impact our senior management team’s ability to effectively manage our business and growth.

We depend on key personnel who would be difficult to replace, and our business plans will likely be harmed if we lose their services or cannot hire additional qualified personnel.

Our success depends substantially on the efforts and abilities of our senior management and certain key personnel, including, but not limited to our Chief Executive Officer, David G. Jemmett, and our President, William Santos. We currently do not hold any key man insurance for them. The competition for qualified management and key personnel is intense. The loss of services of one or more of our key employees, or the inability to hire, train, and retain key personnel, especially executive managers with cybersecurity industry knowledge, could delay the execution of new acquisitions, launch of new service programs, disrupt our business, and interfere with our ability to execute our business plan.

We operate in an industry that is experiencing a shortage of qualified engineers. If we are unable to recruit and retain key management, technical and sales personnel, our business would be negatively affected.

To execute our growth strategy, we must continue to attract and retain highly skilled employees. Competition for these employees is intense, especially for cybersecurity engineers, as there is a global shortage of engineers who can provide the technical and strategic skills required for us to deliver high levels of services to our clients and potential clients. We may not be successful in attracting and retaining qualified employees. We have from time-to-time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. Many of the companies with which we compete for these highly skilled employees have greater resources than we have. In addition, in making employment decisions, particularly in the high- technology industry, job candidates often consider the value of the stock options, restricted stock grants or other stock-based compensation they are to receive in connection with their employment. Declines in the value of our stock could adversely affect our ability to attract or retain key employees and result in increased employee compensation expenses. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

We depend on independent contractors to provide certain services that we do not have the expertise on internally. Any compromise in the service quality may delay our business processes and cause economic loss.

We currently rely, and for the foreseeable future will continue to rely, in substantial part on certain independent organizations, advisors and consultants to provide certain services. There can be no assurance that the services of these independent organizations, advisors and consultants will continue to be available to us on a timely basis when needed, or that we can find qualified replacements. In addition, if we are unable to effectively manage our outsourced activities or if the quality or accuracy of the services provided by consultants is compromised for any reason, some of our business activities may be delayed, or terminated, and we may not be able to mitigate negative impacts or otherwise advance our business. There can be no assurance that we will be able to manage our existing consultants or find other competent outside contractors and consultants on economically reasonable terms, if at all. If we are not able to effectively expand our organization by hiring new employees and expanding our groups of consultants and contractors, we may not be able to successfully implement the tasks necessary to further expand and, accordingly, may not achieve our business goals.

We have recently acquired TalaTek. Our growth strategy is driven by successful acquisitions of businesses that provide comparable or complementary services. Our ability to grow is limited if we fail to identify and consummate acquisitions.

We have recently acquired TalaTek, and we intend to consider additional potential strategic transactions, which could involve acquisitions of businesses or assets, joint ventures or investments in businesses or technologies that expand, complement or otherwise relate to our business. We may also consider, from time to time, opportunities to engage in joint ventures or other business collaborations with third parties. Should our relationships fail to materialize into significant agreements, or should we fail to work efficiently with these companies, we may lose sales and marketing opportunities and our business, results of operations and financial condition could be adversely affected.

Any business acquisition creates risks such as, among others: (i) the need to integrate and manage the businesses acquired with our own business; (ii) additional demands on our resources, systems, procedures and controls; (iii) disruption of our ongoing business; and (iv) diversion of management’s attention from other business concerns. Moreover, these transactions could involve: (a) substantial investment of funds or financings by issuance of debt or equity securities; (b) substantial investment with respect to technology transfers and operational integration; and (c) the acquisition or disposition of lines of businesses. Also, such activities could result in one-time charges and expenses and have the potential to either dilute the interests of our existing stockholders or result in the issuance of, or assumption of debt. Such acquisitions, investments, joint ventures or other business collaborations may involve significant commitments of financial and other resources. Any such activities may not be successful in generating revenue, income or other returns, and any resources we committed to such activities will not be available to us for other purposes. Moreover, if we are unable to access the capital markets on acceptable terms or at all, we may not be able to consummate acquisitions, or may have to do so on the basis of a less than optimal capital structure. Our inability to take advantage of growth opportunities or address risks associated with acquisitions or investments in businesses may negatively affect our operating results.

Additionally, any impairment of goodwill or other intangible assets acquired in an acquisition or in an investment, or charges to earnings associated with any acquisition or investment activity, may materially reduce our earnings. Future acquisitions or joint ventures may not result in their anticipated benefits and we may not be able to properly integrate acquired technologies or businesses with our existing operations or successfully combine personnel and cultures. Failure to do so could deprive us of the intended benefits of those acquisitions.

We intend to grow our client base significantly through acquisitions of other service providers. If we fail to retain existing clients and attract new clients through acquisitions, we may never be profitable.

Through acquisition of other service providers, we will inherit an increasingly larger client base, which creates cross-selling and up-selling opportunities. We need high-quality service and exemplary client management to retain and grow our client base. We also plan to launch sales and marketing efforts including trade show appearance, sales demo and advertising campaigns in various forms to promote our brand name. If our marketing efforts do not materialize, we may lose existing clients or fail to obtain new clients. Our inability to grow sales as the Company expands in operations may result in loss, and we may not be profitable for an extended period of time.

Our business strategy may impose limitations in our ability to accurately forecast future revenue and operating results.

Our operating results are dependent on a variety of factors including purchasing patterns of our clients, competitive pricing, debt servicing, and general economic trend. Our revenue and operating results may fluctuate if our sales target is not met, new service offerings receive poor client response, or client acquisition costs increase due to competition. In addition to these factors, our acquisition strategy may impose additional risks to the predictability of our operating results. Revenue streams may be volatile given uncertainty in the closing timeline of new acquisitions. Unexpected expenses may be incurred during due diligence and post-acquisition. Management intends to manage risk carefully with the acquisitions; however, limitations in our ability to forecast future revenue and operating results remain significant.

Our future results may be affected by various legal and regulatory proceedings and legal compliance risks, including those involving intellectual property, environmental, governmental regulations, the U.S. Foreign Corrupt Practices Act and other anti-bribery, anti-corruption, or other matters.

The outcome of these legal proceedings may differ from our expectations because the outcomes of litigation, including regulatory matters, are often difficult to reliably predict. Various factors or developments can lead us to change current estimates of liabilities and related insurance requirements where applicable, or make such estimates for matters previously not susceptible of reasonable estimates, such as a significant judicial ruling or judgment, a significant settlement, significant regulatory developments or changes in applicable law. A future adverse ruling, settlement or unfavorable development could result in future charges that could have a material adverse effect on our results of operations or cash flows in any particular period.

We face risks related to health epidemics and other outbreaks, which could significantly disrupt our operations.

Our business and operating results could be adversely impacted by the effects of epidemics, including but not limited to the coronavirus that has been reported to have surfaced in Wuhan, China in December 2019 and has since spread to most other parts of the world, including the United States, our principal market. We are closely monitoring the impact of the COVID-19 global outbreak, although there remains significant uncertainty related to the public health situation globally.

Our results of operations could be adversely affected to the extent that such coronavirus or any other epidemic generally harms the global economy. In addition, our customers and/or personnel may be adversely impacted as a result of a health epidemic or other outbreak. Our operation may experience disruptions, such as temporary closure of our offices and/or those of our customers, suspension of services and the shut-down of our channel sales efforts, some of which we are already experiencing and most likely will affect our sales pipeline in the coming quarters. These disruptions may require us to curtail our sales efforts or even force us to reduce our workforce in effort to conserve capital. Further impacts from the COVID-19 global outbreak could continue to materially and adversely affect our business, financial condition and results of operations.

Breaches of network or information technology security could have an adverse effect on our business.

Cyber-attacks or other breaches of network or IT security may cause equipment failures or disrupt the systems and operations of us and our clients. The potential liabilities associated with these events could exceed the insurance coverage we or our clients maintain, if any. An inability to operate as a result of such events, even for a limited period of time, may result in significant expenses or loss of market share to other competitors in the market we serve. In addition, a failure to protect our, or our client’s, enterprises, networks, privacy of customer and employee confidential data against breaches of network or IT security could result in damage to our reputation. To date, we have not been subject to cyber-attacks or other cyber incidents which, individually or in the aggregate, resulted in a material adverse effect on our business, operating results and financial condition.

Security threats to our own IT infrastructure may affect our clients indirectly. A party who is able to compromise the security measures on our networks or the security of our infrastructure could misappropriate our proprietary information or the personal information of our clients, cause interruptions or malfunctions in our operations or our clients’ operations or damage our computers or systems and those of our clients. As security is a primary competitive factor in our industry, such a compromise could be particularly harmful to our brand and reputation. We may be required to expend significant resources to protect against such threats or to alleviate problems caused by breaches in security. As techniques used to breach security change frequently, and are generally not recognized until launched against a target, we may not be able to implement security measures in a timely manner or, if and when implemented, we may not be able to determine the extent to which these measures could be circumvented. If we are unable to protect sensitive information, our clients or governmental authorities could question the adequacy of our threat mitigation and detection processes and procedures. Any breaches that may occur could expose us to increased risk of lawsuits, regulatory penalties, loss of existing or potential customers, harm to our reputation and increases in our security costs, which may not be fully insured or indemnified by other means. Additionally, breaches of our, or our clients’, systems could similarly result in a loss of confidence in our services or damage to our brand and reputation. Occurrence of any of these events could have a material adverse effect on our business, financial condition, operating results or prospects.

Because our services are aimed at protecting clients from, and limiting the impact of, critical business interruptions and losses related to cyber-attacks, if our client’s experience losses related to cyber-attacks that result in lost profits or other indirect or consequential damages to our clients, our clients may expose us to lawsuits. Our service agreements with our clients typically contain provisions limiting our liability. However, we cannot provide assurances that a court would enforce any contractual limitations on our liability. The outcome of any such lawsuit would depend on the specific facts of the case and any legal and policy considerations that we may not be able to mitigate. In such cases, we could be liable for substantial damage awards that may exceed our liability insurance coverage by unknown but significant amounts, which could materially impair our financial condition.

If we fail to meet our service level obligations under our service level agreements, we may be subject to certain penalties and could lose clients.

We have service level agreements with many of our managed services clients under which we guarantee specified levels of service availability. These arrangements require us to estimate the level of service we will provide. If we fail to meet our service level obligations under these agreements, we may be subject to penalties, which could result in higher than expected costs, and we may lose clients, which could lead to decreased revenue and decreased gross and operating margins. If we fail to meet our service level obligations under these agreements, our reputation may suffer as a result.

The nature of our business involves significant risks and uncertainties that may not be covered by insurance or indemnification.

We provide services in circumstances where insurance or indemnification may be not available. Our existing insurance coverages may not be sufficient or additional insurance may not be available to protect us against operational risks and other uncertainties that we face. Liabilities or claims arising from our services in excess of any indemnity or insurance coverage (or for which indemnity or insurance coverage is not available or is not obtained) could harm our financial condition, cash flows and operating results. Any claim, even if fully covered or insured, could negatively affect our reputation in the marketplace and make it more difficult for us to compete effectively. The defense of such claims may be costly and time-consuming and could divert the attention of management.

We indemnify our officers and directors against liability to us and our security holders, and such indemnification could increase our operating costs.

Our certificate of incorporation and bylaws allow us to indemnify our officers and directors against claims associated with carrying out the duties of their offices. Our bylaws also allow us to reimburse them for the costs of certain legal defenses. Insofar as indemnification for liabilities arising under the Securities Act may be permitted to our officers, directors or control persons, the SEC has advised that such indemnification is against public policy and is therefore unenforceable.

Our industry is highly competitive, and there is no assurance that we will compete successfully.

Our current and potential competitors vary by size, service offerings and geographic location. Competitors include technology companies, consulting companies, telecommunication companies, technology resellers, hardware and software companies, and others. Many of our competitors have entrenched relationships in particular industries, or have gained a reputation for expertise in a specific segment of the cybersecurity market, including services, software and hardware. The primary competitive factors in our market are: security, reliability and functionality, customer service and technical expertise, reputation and brand recognition, financial strength, breadth of products and services offered, price, and scalability. Many of our current and potential competitors have substantially greater financial, technical and marketing resources; more diversified product and service offerings; larger customer bases; longer operating histories; greater brand recognition; and more established relationships in the industry than we do. As a result, some of these competitors may be able to:

Many of these companies have significantly greater financial, technical, marketing and other resources than we do and may be better positioned to acquire, offer and service complementary products and technologies. These companies and alliances resulting from possible combinations may create more compelling product and service offerings, be able to offer greater pricing flexibility than we can or engage in business practices that make it more difficult for us to compete effectively, including on the basis of sales and marketing programs (such as providing greater incentives to our channel partners to sell a competitor’s product), technology or product functionality. Competition could result in, among other things, a substantial loss of customers, reduction in revenues or increase in expenses, which could materially adversely affect our business, financial condition, results of operations or prospects.

Our success depends on our ability to protect our intellectual property and our proprietary technologies.

We rely on trade secrets to protect intellectual property, proprietary technology and processes, which we have or may develop in the future. There can be no assurances that secrecy obligations will be honored or that others will not independently develop similar or superior technology. The protection of intellectual property and/or proprietary technology through claims of trade secret status has been the subject of increasing claims and litigation by various companies both in order to protect proprietary rights as well as for competitive reasons even where proprietary claims are unsubstantiated. The prosecution of proprietary claims or the defense of such claims is costly and uncertain given the uncertainty and rapid development of the principles of law pertaining to this area. We may also be subject to claims by other parties regarding the use of intellectual property, technology information and data, which may be deemed proprietary to others.

Increasingly complex cybersecurity regulations and standards may have significant impact on our business, and it may require us to substantially invest in our development capabilities to meet compliance requirements and may negatively impact our ability to offer certain services and remain profitable.

Federal and State legislatures continue to advance policy proposals in recent years to address cyber threats directed at governments and private businesses. As threats continue to evolve and expand and as the pace of new technologies accelerates, legislatures are making cybersecurity measures a high priority. At the federal and state level, close to 300 bills or resolutions have been introduced and considered that deal significantly with cybersecurity. These proposals are at multiple stages of development and may shape out new standards concerning different areas. Our business expansion strategy focuses on accretive acquisitions of other cybersecurity service providers in the top thirty U.S. markets to achieve greater service coverage. The complex regulatory environment in each State may require us to dedicate additional resource to ensure our service scope and service quality are in compliance with the standards enacted in each State we operate business in. We may incur additional legal and compliance costs, and our service scope may be restrained due to compliance requirements. This will cause a delay in our service launch and negatively impact our operating results. We may also face litigations if we fail to respond accordingly to these regulatory measures in certain States.

We may become subject to disputes, including litigation, that could negatively impact our business and our profitability and financial condition.

We may become subject to disputes with third parties from time to time. Any such dispute could result in litigation between us and the other parties. Whether or not any dispute actually proceeds to litigation, we may be required to devote significant management time and attention and financial resources to its resolution (through litigation, settlement or otherwise), which would detract from our management’s ability to focus on our business. Any such resolution could involve the payment of damages or expenses by us, which may be significant. In addition, any such resolution could involve our agreement with terms that restrict the operation of our business.

If we incur additional debt, we will be subject to restrictive covenants and debt service obligations that could negatively impact our operations.

If we incur additional debt for operations or acquisitions, a portion of our cash flow will have to be dedicated to the payment of principal and interest on such indebtedness. Typical loan agreements also might contain restrictive covenants, which may impair our operating flexibility. Such loan agreements would also provide for default under certain circumstances, such as failure to meet certain financial covenants. A default under a loan agreement could result in the loan becoming immediately due and payable and, if unpaid, a judgment in favor of such lender which would be senior to the rights of our stockholders. A judgment creditor would have the right to foreclose on any of our assets resulting in a material adverse effect on our business, operating results or financial condition.

The preparation of our financial statements involves use of estimates, judgments and assumptions, and our financial statements may be materially affected if our estimates prove to be inaccurate.

Financial statements prepared in accordance with accounting principles generally accepted in the United States require the use of estimates, judgments, and assumptions that affect the reported amounts. Different estimates, judgments, and assumptions reasonably could be used that would have a material effect on the financial statements, and changes in these estimates, judgments, and assumptions are likely to occur from period to period in the future. These estimates, judgments, and assumptions are inherently uncertain, and, if they prove to be wrong, then we face the risk that charges to income will be required.

Risks Related to our Common Stock

The market price of our common stock may be volatile and may fluctuate in a way that is disproportionate to our operating performance.

Our stock price may experience substantial volatility as a result of a number of factors, including, among others:

Many of these factors are beyond our control. In addition to recent events, the stock markets have historically experienced substantial price and volume fluctuations. These fluctuations often have been unrelated or disproportionate to the operating performance of these companies. These broad market and industry factors could reduce the market price of our common stock, regardless of our actual operating performance.

Future sales of shares of our common stock by existing stockholders could depress the market price of our common stock.

We have an aggregate of 108,032,500 issued and outstanding shares of common stock as of March 25, 2020. The Plan Shares issued in connection with the merger with VCAB are freely tradeable. The remainder of the outstanding shares may be sold, subject to certain volume limitations, pursuant to Rule 144 or other available exemptions. Also, in the future, we may issue additional securities in connection with investments and acquisitions. The amount of our common stock issued in connection with an investment or acquisition could constitute a material portion of our then outstanding stock. Due to these factors, sales of a substantial number of shares of our common stock in the public market could occur at any time. These sales, or the perception in the market that the holders of a large number of shares intend to sell shares, could reduce the market price of our common stock.

Provisions in our Certificate of Incorporation, our By-laws and Delaware law might discourage, delay or prevent a change in control of our company or changes in our management and, therefore, depress the trading price of our common stock.

Provisions of our amended and restated certificate of incorporation, our amended and restated bylaws and Delaware law may have the effect of deterring unsolicited takeovers or delaying or preventing a change in control of our company or changes in our management, including transactions in which our stockholders might otherwise receive a premium for their shares over then current market prices. In addition, these provisions may limit the ability of stockholders to approve transactions that they may deem to be in their best interests. These provisions include the ability of our board of directors to designate the terms of and issue new series of preferred stock without stockholder approval, which could include the right to approve an acquisition or other change in our control or could be used to institute a rights plan, also known as a poison pill, that would work to dilute the stock ownership of a potential hostile acquirer, likely preventing acquisitions that have not been approved by our board of directors.

The existence of the forgoing provisions and anti-takeover measures could limit the price that investors might be willing to pay in the future for shares of our common stock. They could also deter potential acquirers of our company, thereby reducing the likelihood that an investor in our company could receive a premium for their common stock in an acquisition.

Our board of directors is expressly authorized to make, alter or repeal our by-laws by majority vote, while such action by stockholders would require a super majority vote; and establish advance notice requirements for nominations for elections to our board of directors or proposing matters that can be acted upon by stockholders at stockholder meetings.

These anti-takeover provisions and other provisions under Delaware law could discourage, delay or prevent a transaction involving a change in control of our company, including actions that our stockholders may deem advantageous, or negatively affect the trading price of our stock. These provisions could also discourage proxy contests and make it more difficult for stockholders to elect directors of their choosing and cause us to take other corporate actions they desire.

FINRA sales practice requirements may limit a stockholder’s ability to buy and sell our stock.

The Financial Industry Regulatory Authority, Inc. (“FINRA”) has adopted rules that require that, in recommending an investment to a client, a broker-dealer must have reasonable grounds for believing that the investment is suitable for that customer. Prior to recommending speculative low-priced securities to their non-institutional customers, broker-dealers must make reasonable efforts to obtain information about the customer’s financial status, tax status, investment objectives, and other information. Under interpretations of these rules, FINRA believes that there is a high probability that speculative low priced securities will not be suitable for certain customers. FINRA requirements will likely make it more difficult for broker-dealers to recommend that their customers buy our common stock, which may have the effect of reducing the level of trading activity in the shares, resulting in fewer broker-dealers may be willing to make a market in our shares, potentially reducing a stockholder’s ability to resell shares of our common stock.

If we issue additional shares in the future, it will result in the dilution of our existing shareholders.

Our Articles of Incorporation authorizes the issuance of up to 250,000,000 shares of our common stock with a par value of $0.00001 per share. Our Board of Directors may choose to issue some or all of such shares to acquire one or more companies and to fund our overhead and general operating requirements. The issuance of any such shares will reduce the book value per share and may contribute to a reduction in the market price of the outstanding shares of our common stock. If we issue any such additional shares, such issuance will reduce the proportionate ownership and voting power of all current shareholders. Further, such issuance may result in a change of control of our company.

Our directors and executive officers beneficially own a substantial majority of our outstanding capital stock and will have the ability to control our affairs.

Our directors and executive officers beneficially own approximately 80% of our outstanding capital stock. By virtue of these holdings, they effectively control the election of the members of our board of directors, our management and our affairs and may prevent us from consummating corporate transactions such as mergers, consolidations or the sale of all or substantially all of our assets that may be favorable from our standpoint or that of our other stockholders.

We do not know whether an active, liquid and orderly trading market will develop for our common stock.

There has been no public market for our common stock. An active trading market for our shares may never develop or be sustained. No assurance can be provided that a purchaser of our common stock will be able to resell their shares of common stock at or above the price that they acquired those shares. We can provide no assurances that the fair market value of common stock will increase or that the market price of common stock will not fluctuate or decline significantly.

We are eligible to be treated as an “emerging growth company,” as defined in the JOBS Act, and we cannot be certain if the reduced disclosure requirements applicable to emerging growth companies will make our common stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act. For as long as we continue to be an emerging growth company, we may take advantage of exemptions from various reporting and other requirements that are applicable to other public companies that are not emerging growth companies, including (i) not being required to comply with the auditor attestation requirements of Section 404(b) of the Sarbanes-Oxley Act, (ii) reduced disclosure obligations regarding executive compensation in this registration statement and our periodic reports and proxy statements and (iii) exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. We could be an emerging growth company for up to five years, although circumstances could cause us to lose that status earlier.

In addition, Section 107 of the JOBS Act provides that an emerging growth company can take advantage of the extended transition period provided in Section 7(a)(2)(B) of the Securities Act for complying with new or revised accounting standards that have different effective dates for public and private companies until those standards apply to private companies. We have elected to take advantage of the extended transition period for complying with the revised accounting standards. As a result, our financial statements may not be comparable to companies that comply with effective dates generally applicable to public companies.

Investors may find our common stock less attractive because we may rely on these exemptions, reduced reporting requirements and extended transition periods. If investors find our common stock less attractive as a result of any of the foregoing, there may be a less active trading market for our common stock and our stock price may be more volatile or may decrease.

We do not intend to pay dividends on any investment in the shares of stock of our company.

We have never paid any cash dividends, and currently do not intend to pay any dividends for the foreseeable future. The Board of Directors has not directed the payment of any dividends and does not anticipate paying dividends on the shares for the foreseeable future and intends to retain any future earnings to the extent necessary to develop and expand our business. Payment of cash dividends, if any, will depend, among other factors, on our earnings, capital requirements, and the general operating and financial condition, and will be subject to legal limitations on the payment of dividends out of paid-in capital. Because we do not intend to declare dividends, any gain on an investment in our company will need to come through an increase in the stock’s price. This may never happen, and investors may lose all of their investment in our company.

ITEM 1B. UNRESOLVED STAFF COMMENTS

Not Applicable.

ITEM 2. PROPERTIES

We do not own any real property. A description of the leased premises we utilize for offices facilities is as follows:

We believe that our offices are suitable to carry on our business. We also believe that, if required, suitable alternative or additional space will be available to us on commercially reasonable terms.

ITEM 3. LEGAL PROCEEDINGS

We are not involved in any pending legal proceedings that we anticipate would result in a material adverse effect on our business or operations.

ITEM 4. MINE SAFETY DISCLOSURES

Not applicable.

PART II

ITEM 5. MARKET FOR REGISTRANT’S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Market Information

There is no established public trading market in our common stock. Our securities are not listed for trading on any securities exchange nor are bid or asked quotations reported in any over-the-counter quotation service. We have filed application to make our shares of common stock eligible for quotation on the OTCQB Market.

As of March 25, 2020, there were approximately 715 holders of record of our common stock. As of the date of this filing, there were no reported sales prices of our common stock as it has not begun trading on the OTCQB. Shares of our common stock are also held in either nominee name or street name brokerage accounts, and consequently, we are unable to determine the total number of beneficial owners of our stock.

Dividend Policy

To date, we have paid no dividends on our common stock and do not expect to pay cash dividends in the foreseeable future. We plan to retain all earnings to provide funds for the operations of our company. In the future, our Board of Directors (the “Board”) will decide whether to declare and pay dividends based upon our earnings, financial condition, capital requirements, and other factors that our Board may consider relevant. We are not under any contractual restriction as to present or future ability to pay dividends.

Unregistered Sales of Equity Securities

During the year ended December 31, 2019, the Company issued a net total of 37,912,500 shares of common stock. Of this amount, 5,112,500 common shares were issued for cash at a price of $0.40 per share, 30,000,000 common shares were issued to employees at a fair value $0.006 per share, 600,000 common shares were issued to an employee at a fair value of $0.40 per share, 6,200,000 common shares were issued as part of the acquisition of TalaTek at a fair value of $0.40 per share, and 2,000,000 common shares were issued with a fair value of $0.006 per share as part of the VCAB acquisition. The Company relied on the exemption afforded by Section 4(a)(2) of the Securities Act. We believe that Section 4(a)(2) was available because none of such issuances involved underwriters, underwriting discounts or commissions; restrictive legends were placed on the certificates representing the shares purchased; and none of such sales were made by general solicitation. The Company issued 30,600,000 shares for services to employees and consultants in reliance upon the exemption afforded by Rule 701 of the Securities Act.

ITEM 6. SELECTED FINANCIAL DATA

Not applicable.

ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

The following Management’s Discussion and Analysis of Financial Condition and Results of Operations is intended to provide information necessary to understand our audited consolidated financial statements for the two-year period ended December 31, 2019 and highlight certain other information which, in the opinion of management, will enhance a reader’s understanding of our financial condition, changes in financial condition and results of operations. In particular, the discussion is intended to provide an analysis of significant trends and material changes in our financial position and the operating results of our business during the year ended December 31, 2019, as compared to the year ended December 31, 2018. This discussion should be read in conjunction with our consolidated financial statements for the two-year period ended December 31, 2019 and related notes included elsewhere in this Annual Report on Form 10-K. These historical financial statements may not be indicative of our future performance. This Management’s Discussion and Analysis of Financial Condition and Results of Operations contains numerous forward-looking statements, all of which are based on our current expectations and could be affected by the uncertainties and risks described throughout this filing, particularly in “Item 1A. Risk Factors.”

Corporate Overview

Cerberus Cyber Sentinel Corporation (“Cerberus Sentinel”) was formed on March 5, 2019 as a Delaware corporation. Our principal offices are located at 7333 E. Doubletree, Suite D270, Scottsdale, Arizona 85258.

Effective April 1, 2019, and effective on April 1, 2019, we acquired GenResults, LLC, an Arizona limited liability company (“GenResults”). GenResults was established on June 22, 2015. Prior to our acquisition of GenResults, GenResults was wholly-owned by an entity affiliated with David G. Jemmett, our Chief Executive Officer and a director of the Company. As of December 31, 2019, GenResults is a wholly-owned subsidiary of Cerberus Sentinel.

On April 12, 2019, we consummated a transaction whereby VCAB Six Corporation, a Texas corporation, (“VCAB”) merged with and into us (the “VCAB Merger”). At the time of the VCAB Merger, VCAB was subject to a bankruptcy proceeding and had minimal assets, no equity owners and no liabilities, except for approximately 1,500 holders of Class 5 Allowed General Unsecured Claims and a holder of allowed administrative expenses (collectively the “Claim Holders”). Pursuant to the terms of the VCAB Merger, and in accordance with the bankruptcy plan, we issued an aggregate of 2,000,000 shares of our common stock (the “Plan Shares”) to the Claim Holders as full settlement and satisfaction of their respective claims. As provided in the bankruptcy plan, the Plan Shares were issued pursuant to Section 1145 of the United States Bankruptcy Code. As a result of the VCAB Merger, the separate corporate existence of VCAB was terminated. We entered into the merger in order to increase our shareholder base in order to, among other things, assist us in satisfying the listing standards of a national securities exchange.

Effective as of October 1, 2019, we entered into an Agreement and Plan of Merger (the “TalaTek Merger”) pursuant to which TalaTek, LLC, a Virginia limited liability has become our wholly-owned subsidiary. Under the TalaTek Merger, all issued and outstanding units representing membership interests in TalaTek were converted into an aggregate of 6,200,000 shares of our common stock. TalaTek provides complete integrated enterprise risk management services by leveraging their specialized combination of methodologies, processes and technology, collectively known as Enterprise Compliance Management Solution (“ECMS”). ECMS enables efficient and repeatable risk, compliance and information security management, facilitating continuous improvement and empowering clients to make better informed risk decisions. These services are currently provided primarily to the public sector.

Our Business

We are a cybersecurity consulting company comprised of highly trained security professionals who work with clients to create a continuously aware security culture. We do not sell cybersecurity products. We position ourselves as a trusted cybersecurity advisor and are committed to delivering tailored security solutions to organizations of different sizes and across all geographies and industries to fit their budgetary needs and limit their cyber threat exposure.

We currently provide a multitude of cybersecurity services including managed security service, cybersecurity consulting, technology consulting, compliance auditing, vulnerability assessment, penetration testing, security remediation, SOC set-up and consulting and cybersecurity training. We differentiate ourselves from competitors by staying technology agnostic. We believe that many cybersecurity service providers in the market today are committed to a specific technology solution which limits their service scope and ability to quickly respond to any emerging cybersecurity challenges. In addition, as we continue to serve our clients within our existing capacities, we plan to continue acquiring strategic acquisitions of small-to-medium-sized engineer-led cybersecurity service firms to continue to expand our service scope and geographical coverage. We believe that owning a world-class technology team with multi-faceted expertise is key to providing technology agnostic solutions to our clients and maximizing their return on investment from information technology (“IT”) and cybersecurity spending.

Results of Operations

Comparison of the Year Ended December 31, 2019 to the Year Ended December 31, 2018

Our financial results for the year ended December 31, 2019 are summarized as follows in comparison to the year ended December 31, 2018:

For the Year Ended December 31, 2019

For the Year Ended December 31, 2018

Variance

Revenues

For the Year Ended December 31, 2019

For the Year Ended December 31, 2018

Variance

Revenues increased for Cerberus by $340,860, or 53%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of the Company introducing gap and risk assessment services as a new revenue stream in 2019 which accounted for $558,443 of total revenue. The increase in revenue from this new revenue stream was offset by a decrease of $433,066 in revenue from the Company’s managed security services, which was a result of variations in the mix of these services during the year.

Revenues increased for TalaTek by $925,464, or 100%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of the acquisition, which was consummated on October 1, 2019. As a result, revenues do not reflect a full year presentation from TalaTek and are included only for the period October 1, 2019 to December 31, 2019. Approximately $925,000 is attributable to TalaTek’s gap and risk assessment services.

Expenses

Cost of Revenues

For the Year Ended December 31, 2019

For the Year Ended December 31, 2018

Variance

Cost of revenues increased for Cerberus by $350,410, or 306%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, and was primarily the result of (i) the Company introducing gap and risk assessment services as a new revenue stream in 2019 which accounted for an additional $108,847 in cost of revenues and (ii) an increase in payroll and related costs of $197,830 due to an increase in employee and contractual labor after the reorganization. These increases were offset by the decrease in cost of revenues for security operations centers of $99,332, due to variations during the year for these managed security services.

Cost of revenues increased for TalaTek by $471,094, or 100%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of the acquisition, which was consummated on October 1, 2019. As a result, costs of revenue do not reflect a full year presentation from TalaTek and are included only for the period October 1, 2019 to December 31, 2019. Approximately, $447,000 is attributable to TalaTek’s payroll and related services.

Operating Expenses

For the Year Ended December 31, 2019

For the Year Ended December 31, 2018

Variance

Operating expenses increased for Cerberus by $1,762,923 or 865%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, primarily as a result of (i) an increase of $616,393 in professional fees due to auditing and legal fees related to the Company’s filing of its Form 10, the GenResults reorganization the TalaTek acquisition, and (ii) an increase of $823,651 in stock-based compensation.

Operating expenses increased for TalaTek by $347,536, or 100%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of the acquisition, which was consummated on October 1, 2019. As a result, operating expenses do not reflect a full year presentation from TalaTek and are included only for the period October 1, 2019 to December 31, 2019. Approximately $124,000 is attributable to TalaTek’s payroll.

Proforma Results of Operations

Comparison of the Year Ended December 31, 2019 to the Year Ended December 31, 2018

The following unaudited pro forma information presents the financial results of operations of TalaTek for the years ended December 31, 2019 and 2018. It is presented below for illustrative purposes only and is not necessarily indicative of the results which would have been achieved or results which may be achieved in the future:

Revenues increased for TalaTek by $904,159, or 32%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of (i) an increase of approximately $50,000 per month that was added to a project starting in October 2018, (ii) an additional three month task that was added to the same project in May 2019 that totaled approximately $150,000, and (iii) a significant increase in project work from one customer.

Cost of revenues stayed relatively consistent and decreased for TalaTek by $183,150, or 8%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of a decreased cost in hosting services and salaries and health benefits associated with project employees.

Operating expenses increased for TalaTek by $660,981, or 187%, for the year ended December 31, 2019, as compared to the year ended December 31, 2018, as a result of (i) a loss on impairment of intangible assets of $100,000, (ii) approximately $138,000 and $32,000 that was expensed in 2019 for certain of the Company’s integrated solution programs that were not expensed in 2018, (iii) an increase of approximately $73,000 in recruiting expenses during 2019, (iv) an increase of approximately $36,000 related to the use of an outside consulting company to assist in a project, (v) an increase of approximately $30,000 in legal expenses as a result of the Merger, and (vi) an overall increase in administrative salaries and head count during 2019.

Working Capital

Current assets increased by $2,222,881, which was primarily attributable to the following: (i) an increase in cash and cash equivalents due primarily to proceeds from the sale of common stock of $2,045,000; and (ii) an increase in accounts receivable due to the acquisition of TalaTek. The increase in current liabilities is primarily due to the accounts payable and accrued liabilities acquired in the acquisition of TalaTek and Cerberus Sentinel’s accrued payroll.

Cash Flows

Operating Activities

Net cash used in operating activities was $203,358 for the year ended December 31, 2019 and was primarily due to the net loss of $1,354,368, partially offset by accounts payable and accrued expenses of approximately $146,000 and non-cash expenses of approximately $824,000 related to the issuance of common stock and options as compensation in lieu of cash.

Net cash provided by operating activities was $243,772 for the year ended December 31, 2018, primarily due to net income of $323,124, partially offset by accounts receivable of approximately $70,000.

Investing Activities

For the year ended December 31, 2019, net cash provided by investing activities was $169,790 which was primarily attributable to the $181,448 of cash acquired as part of the TalaTek acquisition.

For the year ended December 31, 2018, there was no cash used in or provided by investing activities.

Financing Activities

For the year ended December 31, 2019, net cash provided by financing activities was $1,830,207, of which approximately $2,045,000 was proceeds from the issuance of common stock for cash.

For the year ended December 31, 2018, net cash used in financing activities was $204,831, of which approximately $229,000 was attributable to distributions to the GenResults member.

Effects of Inflation

We do not believe that inflation has had a material impact on our business, revenues or operating results during the periods presented.

Critical Accounting Policies and Estimates

Our significant accounting policies are more fully described in the notes to our financial statements included in this Annual Report on Form 10-K for the fiscal year ended December 31, 2019. We believe that the accounting policies below are critical for one to fully understand and evaluate our financial condition and results of operations.

Fair Value Measurement

The fair value measurement guidance clarifies that fair value is an exit price, representing the amount that would be received to sell an asset or paid to transfer a liability in an orderly transaction between market participants. As such, fair value is a market-based measurement that should be determined based on assumptions that market participants would use in the valuation of an asset or liability. It establishes a fair value hierarchy that prioritizes the inputs to valuation techniques used to measure fair value. The hierarchy gives the highest priority to unadjusted quoted prices in active markets for identical assets or liabilities (Level 1 measurements) and the lowest priority to unobservable inputs (Level 3 measurements). The three levels of the fair value hierarchy under the fair value measurement guidance are described below:

Level 1 - Unadjusted quoted prices in active markets that are accessible at the measurement date for identical assets or liabilities;

Level 2 - Quoted prices in markets that are not active, or inputs that are observable, either directly or indirectly, for substantially the full term of the asset or liability; or

Level 3 - Prices or valuation techniques that require inputs that are both significant to the fair value measurement and unobservable (supported by little or no market activity).

Business Combination

The Company allocates the purchase price of an acquired business to the tangible and intangible assets acquired and liabilities assumed based upon their estimated fair values on the acquisition date. Any excess of the purchase price over the fair value of the net assets acquired is recorded as goodwill. Acquired tradenames and trademarks, customer base, non-compete agreements, intellectual property and technology, and the right of first option to acquire Saas product and related business are recognized at fair value. The purchase price allocation process requires management to make significant estimates and assumptions, especially at the acquisition date with respect to intangible assets. Direct transaction costs associated with the business combination are expensed as incurred. The allocation of the consideration transferred in certain cases may be subject to revision based on the final determination of fair values during the measurement period, which may be up to one year from the acquisition date. The Company includes the results of operations of the business that it has acquired in its consolidated results prospectively from the date of acquisition.

If the business combination is achieved in stages, the acquisition date carrying value of the acquirer’s previously held equity interest in the acquiree is re-measured to fair value at the acquisition date; any gains or losses arising from such re-measurement are recognized in profit or loss.

Goodwill

Goodwill represents the excess of the purchase price of acquired business over the estimated fair value of the identifiable net assets acquired. Goodwill is not amortized but is tested for impairment at least annually (at November 30), at the reporting unit level or more frequently if events or changes in circumstances indicate that the asset might be impaired. The goodwill impairment test is applied by performing a qualitative assessment before calculating the fair value of the reporting unit. If, on the basis of qualitative factors, it is considered not more likely than not that the fair value of the reporting unit is less than the carrying amount, further testing of goodwill for impairment would not be required. Otherwise, goodwill impairment is tested using a two-step approach.

The first step involves comparing the fair value of the reporting unit to its carrying amount. If the fair value of the reporting unit is determined to be greater than its carrying amount, there is no impairment. If the reporting unit’s carrying amount is determined to be greater than the fair value, the second step must be completed to measure the amount of impairment, if any. The second step involves calculating the implied fair value of goodwill by deducting the fair value of all tangible and intangible assets, excluding goodwill, of the reporting unit from the fair value of the reporting unit as determined in step one. The implied fair value of the goodwill in this step is compared to the carrying value of goodwill. If the implied fair value of the goodwill is less than the carrying value of the goodwill, an impairment loss equivalent to the difference is recorded.

Income Taxes

Deferred income tax assets and liabilities are computed for differences between the financial statement and tax basis of assets and liabilities that will result in taxable or deductible amounts in the future based on enacted tax laws and rates applicable to the periods in which the differences are expected to affect taxable income. Valuation allowances are established when necessary to reduce deferred tax assets to the amount expected to be realized. Income tax expense is the tax payable or refundable for the period plus or minus the change during the period in deferred tax assets and liabilities.

In addition, our management performs an evaluation of all uncertain income tax positions taken or expected to be taken in the course of preparing our income tax returns to determine whether the income tax positions meet a “more likely than not” standard of being sustained under examination by the applicable taxing authorities. This evaluation is required to be performed for all open tax years, as defined by the various statutes of limitations, for federal and state purposes.

On December 22, 2017, the President of the United States signed and enacted into law H.R. 1 (the “Tax Reform Law”). The Tax Reform Law, effective for tax years beginning on or after January 1, 2018, except for certain provisions, resulted in significant changes to existing United States tax law, including various provisions that are expected to impact us. The Tax Reform Law reduces the federal corporate tax rate from 35% to 21% effective January 1, 2018. We have analyzed the provisions of the Tax Reform Law to assess the impact on our consolidated financial statements.

Impairment of Long-Lived Assets

We will periodically evaluate the carrying value of long-lived assets to be held and used when events and circumstances warrant such a review and at least annually. The carrying value of a long-lived asset is considered impaired when the anticipated undiscounted cash flow from such asset is separately identifiable and is less than its carrying value. In that event, a loss is recognized based on the amount by which the carrying value exceeds the fair value of the long-lived asset. Fair value is determined primarily using the anticipated cash flows discounted at a rate commensurate with the risk involved. Losses on long-lived assets to be disposed of are determined in a similar manner, except that fair values are reduced for the cost to dispose.

Revenue Recognition

On January 1, 2018, the Company adopted the new accounting standard ASC 606, Revenue from Contracts with Customers, and the related amendments, (“New Revenue Standard”) to all contracts, using the modified retrospective method. The cumulative effect of initially applying the new revenue standard was immaterial.

The Company’s agreements are primarily service contracts that range in duration from a few months to one year. The Company recognizes revenue when control of these services is transferred to the customer for an amount, referred to as the transaction price, which reflects the consideration to which the Company is expected to be entitled in exchange for those goods or services.

A contract with a customer exists only when:

For the majority of its contracts, the Company receives non-refundable upfront payments. The Company does not adjust the promised amount of consideration for the effects of a significant financing component since the Company expects, at contract inception, that the period between the time of transfer of the promised goods or services to the customer and the time the customer pays for these goods or services to be generally one year or less. The Company’s credit terms to customers generally average thirty days, although in some cases there are payments required in 15 days.

The Company does not disclose the value of unsatisfied performance obligations for contracts with original expected duration of one year or less.

Disaggregation of Revenue

The following table disaggregates the Company’s revenues by major revenue streams:

Revenue consists of the following by service offering for the fiscal year ended December 31, 2019:

Revenue consists of the following by service offering for the fiscal year ended December 31, 2018:

The following table disaggregates the Company’s revenues by major sector:

Revenue consists of the following by sector for the fiscal year ended December 31, 2019:

Revenue consists of the following by sector for the fiscal year ended December 31, 2018:

Nature of Revenue Streams

The Company has four main revenue streams: Chief Information Security Officer (“CISO”) as a Service, Gap and Risk Assessment services, Managed Security Services, and Application Sales.

CISO as a Service

Revenue recognized under contracts for CISO as a Service contains a single performance obligation. The Company recognizes revenue as earned. For internal audit services revenue is recognized at a point of time when the result of the audit is turned over to the customer. For those consulting services that require an upfront fee the Company recognizes the revenue ratably over the course of the contract.

Gap and Risk Assessment

Revenue recognized under contracts for gap and risk assessment services are considered time and materials projects with multiple performance obligations. Revenue is allocated based on the approved hours worked and rate stated in the individual Statements of Work for the project and is recognized as the work is performed.

Managed Security Services

Revenue recognized under contracts for managed security services are considered time and materials projects with multiple performance obligations. Revenue is allocated based on the approved work hours and rate stated in the individual Statements of Work for the project and is recognized as invoices are generated and approved for distribution.

Application Sales

Revenue recognized under contracts for application sales contains a single performance obligation. The Company recognizes revenue as earned upon the download of the app by the customer.

Practical Expedients

As part of ASC 606, the Company has adopted several practical expedients including the Company’s determination that it need not adjust the promised amount of consideration for the effects of a significant financing component since the Company expects, at contract inception, that the period between when the Company transfers a promised service to the customer and when the customer pays for that service will be one year or less.

Reimbursed Expenses

The Company includes reimbursed expenses in revenues and costs of revenue as the Company is primarily responsible for fulfilling the promise to provide the specified service, including the integration of the related services into a combined output to the customer, which are inseparable from the integrated service. These costs include such items as consumables, transportation and travel expenses, over which the Company has discretion in establishing prices.

Costs of Revenue

Costs of revenue include (i) compensation and benefits for billable employees and consultants directly involved with delivering services offerings and engagements; (ii) consumables used for the services; and (iii) other expenses directly related to service contracts such as professional services, meals and travel expenses.

Volatility in Stock-Based Compensation

The volatility is based on historical volatilities of companies in comparable stages as well as the historical volatility of companies in the industry and, by statistical analysis of the daily share-pricing model. The volatility of stock-based compensation at any point in time is based on historical volatility of similar companies in the industry for the last two to five years.

New and Recently Adopted Accounting Pronouncements

Any new and recently adopted accounting pronouncements are more fully described in Note 3 to our consolidated financial statements included in this Annual Report for the year ended December 31, 2019.

Off-Balance Sheet Arrangements

We have no off-balance sheet arrangements that have or are reasonably likely to have a current or future effect on our financial condition, changes in financial condition, revenues or expenses, results of operations, liquidity, capital expenditures or capital resources that is material to stockholders.

ITEM 7A. QUANTITATIVE AND QUALITATIVE DISCLOSURES ABOUT MARKET RISK

Not applicable.

ITEM 8. FINANCIAL STATEMENTS AND SUPPLEMENTARY DATA

The information called for by Item 8 is included following the “Index to Financial Statements” on page F-1 contained in this Annual Report on Form 10-K.

ITEM 9. CHANGES IN AND DISAGREEMENTS WITH ACCOUNTANTS ON ACCOUNTING AND FINANCIAL DISCLOSURE

None.

ITEM 9A. CONTROLS AND PROCEDURES

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures (as that term is defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)) that are designed to ensure that information required to be disclosed in our reports under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to our management, including our principal executive officer who is also our principal financial officer, as appropriate, to allow timely decisions regarding required disclosures. In designing disclosure controls and procedures, our management necessarily was required to apply its judgment in evaluating the cost-benefit relationship of possible disclosure controls and procedures. The design of any disclosure controls and procedures also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions. Any controls and procedures, no matter how well designed and operated, can provide only reasonable, not absolute, assurance of achieving the desired control objectives.

Our management, with the participation of our principal executive officer who is also our principal financial officer, has evaluated the effectiveness of the design and operation of our disclosure controls and procedures as of the end of the period covered by this report. Based upon that evaluation and subject to the foregoing, our principal executive officer and principal financial officer concluded that, our disclosure controls and procedures were not effective due to the material weaknesses in internal control over financial reporting described below.

Management’s Report on Internal Control over Financial Reporting

Management of our Company and its consolidated subsidiaries is responsible for establishing and maintaining adequate internal control over financial reporting. The Company’s internal control over financial reporting is a process designed under the supervision of its principal executive and principal financial officers and effected by the Company’s Board, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of its consolidated financial statements for external reporting purposes in accordance with U.S. generally accepted accounting principles.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions or that the degree of compliance with the policies or procedures may deteriorate.

Material Weakness in Internal Control over Financial Reporting

Management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2019 based on the framework established in Internal Control—Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on this assessment, management has determined that the Company’s internal control over financial reporting as of December 31, 2019 was not effective.

A material weakness, as defined in the standards established by the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis.

The ineffectiveness of the Company’s internal control over financial reporting was due to the following material weaknesses which are indicative of many small companies with small number of staff:

Management’s Plan to Remediate the Material Weakness

Management plans to implement measures designed to ensure that control deficiencies contributing to the material weakness are remediated, such that these controls are designed, implemented, and operating effectively. The remediation actions planned include:

Our management will continue to monitor and evaluate the relevance of our risk-based approach and the effectiveness of our internal controls and procedures over financial reporting on an ongoing basis and is committed to taking further action and implementing additional enhancements or improvements, as necessary and as funds allow.

This annual report does not include an attestation report of the company’s registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to attestation by the Company’s registered public accounting firm pursuant to temporary rules of the SEC that permit the Company to provide only management’s report in this Annual Report on Form 10-K, which may increase the risk that weaknesses or deficiencies in our internal control over financial reporting go undetected.

Changes in Internal Control Over Financial Reporting

There have been no changes in our internal control over financial reporting (as defined in Rule 13a-15(f) and 15d-15(f) under the Exchange Act) during the quarter ended December 31, 2019 that have materially affected, or that are reasonably likely to materially affect, our internal control over financial reporting.

ITEM 9B. OTHER INFORMATION

None.

PART III

ITEM 10. DIRECTORS, EXECUTIVE OFFICERS AND CORPORATE GOVERNANCE

The following table sets forth certain information regarding our Directors and Executive Officers. The age of each Director and Executive Officer listed below is given as of December 31, 2019.

Our Executive Officers

David G. Jemmett – Chief Executive Officer & Director

Mr. Jemmett has been our Chief Executive Officer and a director of the Company since its formation. He also founded GenResults, LLC in 2015, which now a wholly owned subsidiary of the Company. From January 2014 through December 2014, Mr. Jemmett served as CEO of NantCloud, LLC, a provider of secure cloud-hosted applications for healthcare customers, and CTO of NantWorks, LLC, a parent company for the “Nant” family of companies. From 2005 to 2013, Mr. Jemmett was founder and CEO of ClearDATA Networks Corporation, a HIPAA compliant hosting company specializing in healthcare. He has been a guest speaker on CBS, CNN, MSNBC and CSPAN, and has spoken before the U.S. Senate Subcommittee on Telecommunications and Internet Security regarding internet technologies in 1998.

Mr. Jemmett is qualified for service as a director of the Company due to his extensive business background, his experience in the cybersecurity industry, and his significant equity ownership in the Company.

William Santos – Chief Operating Officer

Mr. Santos was appointed as Chief Operating Officer on July 15, 2019. He has spent over 30 years in technology sales, service delivery, and executive leadership. Prior to his appointment as the Company’s Chief Operating Officer, from February 2017 to November 2018, Mr. Santos was President of Stelligent Systems, an AWS DevOps organization. From November 2018 to July 2019, he served as CEO of Mphasis-Stelligent. After a 10-year career with IBM, Mr. Santos successfully launched and sold Atlantec Group, his first professional services firm. He started the professional services business unit at Software House International (SHI), growing it to over $30 million in revenue over a 5-year period. After SHI, Mr. Santos joined Hosting.com (HOSTING) in 2010 to build the professional services organization before shifting roles and leading the acquisition of several professional service organizations including Ntirety, a database services firm, and Stelligent Systems from 2013 to 2018. Most recently, Mr. Santos led the sale of Stelligent Systems to Mphasis, where he has been President & CEO of Mphasis Stelligent from 2018 to 2019. Mr. Santos has two degrees in computer science and engineering from the Massachusetts Institute of Technology.

Our Directors

Stephen Scott – Director

Mr. Scott was appointed as a director on April 11, 2019 and is a founder of the Company. Mr. Scott has been a Partner with Advisor ID (formerly BRI Partners), a financial services technology firm, since 2016. Mr. Scott was Managing Director of Longboard Asset Management from 2016 through 2017. From 2009 until 2016, Mr. Scott was at Van Eck Global, from 2009 to 2014, where he served as the Co-Head of the Alternatives Committee and as portfolio manager. Mr. Scott has founded and managed several investment partnerships focused on both private and public investment strategies since 1995.

Mr. Scott is qualified for service as a director of the Company due to his background in both the financial services and technology industries.

Ret. General Robert C. Oaks – Director

Ret. General Oaks was appointed as a director on May 1, 2019. He is a retired U.S. Air Force general who served as commander in chief of the U.S Air Forces in Europe, and commander, Allied Air Forces Central Europe, with headquarters at Ramstein Air Base, Germany. He retired as a four-star General and Commander and Chief of U.S. Air Forces Europe and NATO Central Europe in 1994 after serving 34 years. Following his retirement, Oaks was employed at U.S. Airways as Senior Vice President. In 2000, Oaks resigned from this position when he was called to serve the LDS Church, where he served until 2009, when he was released as a general authority. He earned a Bachelor of Science degree in Military Science from the U.S. Air Force Academy and a Master’s degree in Business Administration from Ohio State University prior to graduating from the Naval War College. Ret. General Oaks currently serves as the official Liaison for the Church of Jesus Christ to the U.S. Armed Forces.

Ret. General Oaks is qualified for service as a director of the Company due to his experience with national security issues, including cybersecurity, through his extensive military service.

R. Scott Holbrook – Director

Mr. Holbrook was appointed as a director on May 1, 2019. He is a healthcare technology veteran, having served as the Executive Vice President of Medicity (a population health management companies with solutions for health information exchange, business intelligence, and provider and patient engagement.) from 2002 to 2013. In 1998 Mr. Holbrook founded KLAS where he remains as a board member. He has served in executive positions at IHC, GTE, Sunquest Information Systems, Integrated Medical Networks and is a founder of Park City Solutions. Since 2013, Mr. Holbrook has been a Principal at Mountain Summit Advisors (a specialty firm focused on mergers and acquisition of primarily healthcare technology and services) and a strategic advisor to Health Catalyst (a company focused on data analytics and warehousing primarily in healthcare). Mr. Holbrook is a HIMSS Fellow. He holds a Master of Science from Utah State University and a Bachelor of Science from Brigham Young University.

Mr. Holbrook is qualified for service as a director of the Company as a result of his significant experience in the healthcare technology sector.

Andrew McCain – Director

Mr. McCain was appointed as a director on May 1, 2019. He is the President and Chief Operating Officer for Hensley Beverage Company, where he has served since 2014. Mr. McCain received his Bachelor of Arts in Mathematics in 1984 and an MBA in 1986 from Vanderbilt University. He is a board member of the Arizona Super Bowl Host Committee, the Arizona 2016 College Football Championship Local Organizing Committee, Chairman of Hensley Employee Foundation and a Patrons Committee member of United Methodist Outreach Ministries’ New Day Centers. He is past Chairman of the Board of the Fiesta Bowl, past Chairman of the Anheuser-Busch National Wholesaler Advisory Panel and past Chairman of the Greater Phoenix Chamber of Commerce.

Mr. McCain is qualified for service as a director of the Company due to his significant business experience and leadership.

Board of Directors

Our Board currently consists of five (5) members. All directors hold office until the next annual meeting of stockholders. At each annual meeting of stockholders, the successors to directors whose terms then expire are elected to serve from the time of election and qualification until the next annual meeting following election.

Management has been delegated the responsibility for meeting defined corporate objectives, implementing approved strategic and operating plans, carrying on our business in the ordinary course, managing cash flow, evaluating new business opportunities, recruiting staff and complying with applicable regulatory requirements. The Board exercises its supervision over management by reviewing and approving long-term strategic, business and capital plans, material contracts and business transactions, and all debt and equity financing transactions and stock issuances.

Director Independence

Our Board is comprised of a majority of independent directors. In determining director independence, the Company uses the definition of independence in Rule 5605(a)(2) of the listing standards of The Nasdaq Stock Market.

The Board has concluded that each of Ret. General Oaks, Mr. Holbrook and Mr. McCain is “independent” based on the listing standards of the Nasdaq Stock Market, having concluded that any relationship between such director and our company, in its opinion, does not interfere with the exercise of independent judgment in carrying out the responsibilities of a director.

Board Committees

Our Board has not yet established any separate committees.

DELINQUENT SECTION 16(a) REPORTS

Section 16(a) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), requires officers and directors of the Company and persons who beneficially own more than ten percent (10%) of the common stock outstanding to file initial statements of beneficial ownership of common stock (Form 3) and statements of changes in beneficial ownership of common stock (Forms 4 or 5) with the SEC. Officers, directors and greater than 10% stockholders are required by SEC regulation to furnish us with copies of all such forms they file.

Our records reflect that all reports which were required to be filed pursuant to Section 16(a) of the Securities Exchange Act of 1934, as amended, were not filed on a timely basis.

ITEM 11. EXECUTIVE COMPENSATION

The following table shows the total compensation paid or accrued during the year ended December 31, 2019, to our Chief Executive Officer, Chief Financial Officer and our next most highly compensated executive officer who earned more than $100,000 during the year ended December 31, 2019 and were serving as executive officers as of such date (the “named executive officers”). The Company was formed in 2019, and our wholly owned subsidiaries did not pay any compensation to the named executive officers for the year ended December 31, 2018.

Summary Compensation Table

Outstanding Equity Awards at December 31, 2019

The following table summarizes the outstanding equity awards held by each named executive officer of our company as of December 31, 2019.

Option Exercises in 2019

There were no option exercises by our named executive officers during our fiscal year ended December 31, 2019.

Narrative Disclosure to Summary Compensation Table

David G. Jemmett

On September 30, 2019, the Company entered into an employment agreement with Mr. Jemmett, who has served as our Chief Executive Officer since inception, to serve as the Company’s Chief Executive Officer (the “Jemmet Employment Agreement”). The Jemmett Employment Agreement is evergreen and can be terminated by either party.

Pursuant to the Jemmett Employment Agreement, Mr. Jemmett will earn an initial base annual salary of $225,000, which will be increased to an annual base salary of $250,000 upon the Company’s listing under ticker symbol CISO. Mr. Jemmett’s base salary may be increased in accordance with the Company’s normal compensation and performance review policies. He is entitled to receive a discretionary annual bonus of up to 100% of his annual base salary, at the discretion of the Board, based on performance and company objectives. Subject to approval by the Board, Mr. Jemmett is entitled to stock options under the Company’s 2019 Equity Incentive Plan. The stock options will vest at 33% on the one-year anniversary of the Jemmett Employment Agreement and the remaining 66% of the options will vest monthly over the next 12 months. As of the date of this report the Board has not approved or granted any stock options to Mr. Jemmett. Mr. Jemmett will also be eligible to participate in the Company’s standard benefit plan.

Director Compensation

The following table sets forth for each director certain information concerning their compensation for the year ended December 31, 2019:

Notes:

Compensation Committee Interlocks and Insider Participation

None of our executive officers has served as a member of the Board, or as a member of the compensation or similar committee, of any entity that has one or more executive officers who served on our Board or Compensation Committee during the fiscal year ended December 31, 2019.

ITEM 12. SECURITY OWNERSHIP OF CERTAIN BENEFICIAL OWNERS AND MANAGEMENT AND RELATED STOCKHOLDER MATTERS

The following table sets forth certain information with respect to the beneficial ownership of our common stock as of March 25, 2020 for (a) the named executive officers, (b) each of our directors, (c) all of our current directors and executive officers as a group and (d) each stockholder known by us to own beneficially more than 5% of our common stock. Beneficial ownership is determined in accordance with the rules of the SEC and includes voting or investment power with respect to the securities. We deem shares of common stock that may be acquired by an individual or group within 60 days of March 25, 2020 pursuant to the exercise of options or warrants to be outstanding for the purpose of computing the percentage ownership of such individual or group but are not deemed to be outstanding for the purpose of computing the percentage ownership of any other person shown in the table. Except as indicated in footnotes to this table, we believe that the stockholders named in this table have sole voting and investment power with respect to all shares of common stock shown to be beneficially owned by them based on information provided to us by these stockholders. Percentage of ownership is based on 108,032,500 shares of common stock outstanding on March 25, 2020.

Security Ownership of Certain Beneficial Holders

Security Ownership of Directors and Executive Officers

Notes:

Securities Authorized for Issuance Under Existing Equity Compensation Plan

The following table summarizes certain information regarding our equity compensation plans as of December 31, 2019:

ITEM 13. CERTAIN RELATIONSHIPS AND RELATED TRANSACTIONS, AND DIRECTORS INDEPENDENCE

Transactions with Related Persons

Except as set out below, as of December 31, 2019, there have been no transactions, or currently proposed transactions, in which we were or are to be a participant and the amount involved exceeds the lesser of $120,000 or one percent of the average of our total assets at year-end for the last two completed fiscal years, and in which any of the following persons had or will have a direct or indirect material interest:

Note Payable with Executive Officer

On December 31, 2018, the Company entered into an unsecured note payable with Jemmett Enterprises, LLC, an entity under common control of the Company’s majority stockholder, for a principal amount of $200,000. The note has a maturity date of June 30, 2020, and bears an interest rate of 6% per annum. During the year ended December 31, 2019, the Company made cash payments of $90,213. The outstanding principal balance of this loan is $109,787 and $200,000, as of December 31, 2019 and 2018, respectively.

Agreement with Eventus Consulting, P.C.

On November 8, 2019, the Company entered into financial consulting agreement with Eventus Consulting, P.C., an Arizona corporation, (“Eventus”), of which Neil Reithinger, Chief Financial Officer advisor to the Company, is the sole shareholder, pursuant to which Eventus is to provide financial and accounting consulting services to the Company. In consideration for Eventus’ services, the Company agreed to pay Eventus according to its standard hourly rate structure. The term of the agreement is perpetual unless otherwise terminated upon thirty days’ notice by either Eventus or the Company. As of December 31, 2019, Eventus was paid $6,500 and was owed $4,553 for accrued and unpaid services under the financial consulting agreement.

Named Executive Officers and Current Directors

For information regarding compensation for our named executive officers and current directors, see “Executive Compensation.”

Director Independence

See “Directors, Executive Officers and Corporate Governance – Director Independence” and “Directors, Executive Officers and Corporate Governance – Board Committees” in Item 10 above.

ITEM 14. PRINCIPAL ACCOUNTANT FEES AND SERVICES

The Board of the Company has appointed Semple, Marchal & Cooper, LLP (“SMC”) as our independent registered public accounting firm (the “Independent Auditor”) for the year ending December 31, 2019. The following table sets forth the fees billed to the Company for professional services rendered by SMC for the year ended December 31, 2019:

Pre-Approval Policies and Procedures

We have not yet established an audit committee. Until then, there are no formal pre-approval policies and procedures. Our directors pre-approve all services, including both audit and non-audit services, provided by our independent accountants. For audit services, each year the independent auditor provides our directors with an engagement letter outlining the scope of the audit services proposed to be performed during the year, which must be formally accepted by the directors before the audit commences.

Prior to engagement of an Independent Auditor for the next year’s audit, management will submit an aggregate of services expected to be rendered during that year for each of three categories of services to the Board for approval.

PART IV

ITEM 15. EXHIBITS AND FINANCIAL STATEMENT SCHEDULES

ITEM 16. FORM 10-K SUMMARY

Not applicable.

SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

CERBERUS CYBER SENTINEL CORPORATION

Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant and in the capacities and on the dates indicated.