The following discussion presents information about our consolidated results of operations, financial condition, liquidity and capital resources and should be read in conjunction with our consolidated financial statements and the notes thereto beginning on page F-1 of this Annual Report.





Overview


We are engaged in the business of helping U.S. based companies in highly regulated industries, including healthcare, be prepared to handle unforeseen cyber threats, comply with regulations, and gain the confidence that their efforts are strengthening their security posture and building resilience. This is achieved through our cybersecurity, privacy, compliance and audit services.

CynergisTek was born in healthcare and is one of the few consulting and advisory companies focused on converging security and privacy with a methodology to validate the rigor and effectiveness of the programs as a managed service. Our years of experience of understanding our client's unique challenges allows us to provide our customers with services designed around industry best practices to improve security controls, policies and procedures and to protect sensitive information. Our team of subject matter experts and consultants are comprised of knowledgeable professionals who have learned their craft both in the classroom and through years of practical on-the-job experience, including as policy makers, attorneys and leaders in cybersecurity, privacy and compliance.






         21

  Table of Contents



Our services are categorized into four service groups, which are: assess, build, manage, and validate. These services are designed to meet the client where they are in their security journey as recurring managed services under long-term contracts structured to provide a sustainable and growing program or under shorter duration consulting or professional services engagements.



    ·   Assess - identify, measure, and test security and privacy risk of an
        organization's readiness and verify and validate their programs meet
        compliance and business objectives through IT audits, technical testing,
        and risk and program assessments.
    ·   Build - develop policies and procedures and playbooks to help build out a
        fully comprehensive risk management program and provide resources to help
        organizations prioritize, implement and execute initiatives to strengthen
        their security and privacy programs.
    ·   Manage - provide on-going management and oversight of specific components
        of an organization's security and privacy programs to address or give
        alerts when an issue arises and to offer our expertise that they need to
        accelerate the effectiveness of their programs.
    ·   Validate - verify the processes, people, and technology are working
        effectively and provide insight to the ROI of an organization's security
        investment through advanced services requiring highly experienced
        resources and/or technology to deliver.



For sophisticated organizations our Managed Security Validation® program encompasses a bundle of services from the assess, build, manage, and validate categories to deliver clarity and guidance as a consistent partner helping maintain and grow their security infrastructure through more rigorous proactive testing, evaluation and validation services.





Impact of COVID-19 Pandemic


The ongoing COVID-19 pandemic and associated economic repercussions have significantly impacted, and are expected to continue to impact, our business and our operations.

Our current and potential customers' businesses, specifically in the healthcare industry, have been directly impacted both financially and operationally in many ways by the pandemic. During this time, cybersecurity risks in healthcare have increased particularly with increased adoption of remote access and increased adoption of telehealth, as well as decreased budgets, diversion of resources and focus from all areas not directly related to patient care. In the current periods, the pandemic has led to customers delaying or deferring cybersecurity buying decisions, has limited our ability to visit customers and potential customers, and has resulted in an overall decrease in our orders, bookings and revenues in 2020 and 2021.

We took steps to reduce expenses throughout the Company over the past eighteen months, including workforce reductions, substantially reducing Company travel, trade shows and other business meetings and decreasing expenditures. As we see the industry emerging from the pandemic, and returning to a new normal in 2022, we have begun to increase our sales and marketing efforts and building our sales and operational teams for growth.

With resources allocated to cybersecurity in healthcare constrained over the past eighteen months, we believe industry risks are increasing and expect the industry will need to increase attention and budgetary spending on cybersecurity in the near future. However, the ultimate duration and impact of the COVID-19 pandemic on our business, results of operations, financial condition and cash flows is uncertain. Even after the COVID-19 pandemic has subsided, we may continue to experience an adverse impact to our business and we anticipate that our results of operations in future periods may continue to be adversely impacted by the COVID-19 pandemic and its negative effects on global economic conditions. For additional risks relating to the COVID-19 pandemic, see Item 1A. Risk Factors in Part II of this report.






         22

  Table of Contents




Results of Operations


Year Ended December 31, 2021 Compared to the Year Ended December 31, 2020





Net Revenue


Revenue was $16.3 million for the year ended December 31, 2021, as compared to $18.9 million for the same period in 2020. Managed Services revenue decreased $2.3 million due primarily to the impact of COVID-19 on our healthcare customers, resulting in delayed renewals and reduced bookings and new customer contracts. Consulting and professional services revenue decreased $0.3 million primarily due to the completion of two customer contracts in the first half of 2020, combined with lower revenues from our Backbone business unit and delays and reduction in delivery of previously sold professional services due to the pandemic.

While COVID-19 has negatively impacted our bookings and revenue in the current periods, it has also led to new services and additional opportunities. In the fourth quarter of 2021, we saw an increase in bookings partially as a result of our investments in sales and marketing and increased demand for our services and the size of our target contracts.





Cost of Revenues


Cost of revenues primarily consists of salaries and related expenses for direct labor and indirect support staff. Cost of revenues was $8.8 million for the year ended December 31, 2021, as compared to $12.6 million for the same period in 2020. We took actions to reduce compensation expenses by approximately $2.2 million and we also received a $1.5 million benefit from the employee retention credit provided under the CARES Act.

Gross margin was 46% of revenue for the year ended December 31, 2021, and 33% for the same period in 2020. Excluding the benefit from the employee retention tax credit in 2021, gross margin was 37% improving as a result of targeted expense reductions.





Sales and Marketing



Sales and marketing expenses include salaries, commissions and expenses for sales and marketing personnel, travel and entertainment, and other selling and marketing costs. Sales and marketing expenses were $4.9 million for the year ended December 31, 2021, as compared to $5.6 million for the same period in 2020. This decrease was due to $0.5 million in lower marketing and sales support payroll and benefit costs from the headcount reductions due to the COVID-19 pandemic, $0.2 million in lower stock compensation expense and $0.3 million benefit from employee retention tax credits. This decrease was partially offset by $0.1 million in recruiting costs to bring on a new sales leader and additional direct sales leads and an increase of $0.2 million in marketing spend as we began ramping up our sales and marketing efforts to support sales growth initiatives.





General and Administrative



General and administrative expenses include personnel costs for finance, administration, human resources, information systems, and general management, as well as facilities expenses, professional fees, legal expenses and other administrative costs. General and administrative expenses were $7.8 million for the year ended December 31, 2021, compared to $6.5 million for the same period in 2020. Excluding the costs related to the departure of our former CEO, general and administrative expenses increased by $0.2 million, primarily due to a $0.4 million increase in compensation expense offset by the benefit of $0.2 million of employee retention tax credits provided under the CARES Act.






         23

  Table of Contents



Valuation of Contingent Earnout

In December 2020, we performed a valuation to update our estimates of the contingent earn-out to be paid to the sellers of Backbone based on specified criteria over the three years following the acquisition of the business. As a result of the performance in the first year and updated expectations regarding future performance, the balance was adjusted from $2.4 million to $1.3 million.

In June 2021, we updated the estimates and adjusted the contingent earn-out as it was becoming more likely that the earnout targets would not be met for the final two-years of the measurement period. Accordingly, we reduced our estimate by $1.3 million, reflecting the updated performance expectations.

In September 2021, the Company renegotiated the earn-out targets with the sellers and updated our estimates of the contingent earn-out, resulting in an increase to the estimated contingent earn-out of $1.1 million. In December 2021, the Company updated its valuation based on performance during the fourth quarter of 2021 and updated projections for 2022 which resulted in an additional increase of the previous estimate of $0.5 million.

The changes in the contingent earnout are included in results of operations in the accompanying consolidated statement of operations.





Depreciation


Depreciation remained consistent at $0.2 million for the year ended December 31, 2021 and 2020, respectively.





Amortization


Amortization expense decreased slightly to $1.4 million for the year ended December 31, 2021, compared to $1.7 million for same period in 2020. Amortization expense decreased over the comparable periods as a portion of the intangible assets are now fully amortized.

Impairment of Goodwill and Definite-Live Intangible Assets and Revision of Useful Life

When the Company performed its annual impairment testing as of December 31, 2021, we concluded that there was no impairment

At the end of 2020, we identified circumstances in our business and in the marketplace, including the impact of COVID-19 on revenue growth and market valuation, that indicated that our goodwill and long-lived assets could be impaired. The Company engaged a valuation expert to assist management in updating its analysis of the fair value of the intangible assets and goodwill. As a result of this analysis the Company recorded an impairment loss to goodwill and intangible assets of $16.4 million, which was charged to operating expenses in the prior period.

Finance Cost for Equity Commitment

In April 2020 we issued a warrant to an investor in return for an obligation by the investor to purchase our common stock at a stated price as described in Note 12 to the consolidated financial statements. The fair value of this warrant of $390,000 was recorded as an expense at the time of issuance.





Net Interest Expense


Net interest expense for the year ended December 31, 2021 and 2020 were $0.1 million and $.01 million, respectively.






         24

  Table of Contents




Other Income and Expense


The Company received notice in August 2021 from the Small Business Administration ("SBA") that the full principal balance and related interest on the Paycheck Protection Program ("PPP") Loan was forgiven and the Company recognized income of $2.8 million.





Income Tax Benefit


Income tax benefit was $1.1 million for the year ended December 31, 2021, as compared to $5.0 million in 2020. The decrease is due to smaller losses this year. Income tax benefit is based on estimated annual income tax rates that we anticipate for the tax years.

In March 2020, the Coronavirus Aid, Relief, and Economic Security Act ("CARES Act") was enacted in response to the COVID-19 pandemic. The CARES Act, among other things, permits NOL carryovers and carrybacks to offset 100% of taxable income for taxable years beginning before January 01, 2021. In addition, the CARES Act allows NOLs incurred in taxable years beginning after December 31, 2017, and before January 1, 2021, to be carried back to each of the five preceding taxable years to generate a refund of previously paid income taxes. Pursuant to this, in 2021 we applied for a refund of federal income taxes totaling approximately $1.4 million. This amount is included in income tax receivable as of December 31, 2021.

Liquidity and Capital Resources

As of December 31, 2021, our cash balance was $3.6 million, current assets minus current liabilities was positive $4.5 million and we have no long-term liabilities. The level of additional cash needed to fund operations and our ability to conduct business for the next twelve months will be influenced primarily by the following factors:





    ·   The pace at which we choose to invest resources in growing our business,
        both organically and through acquisition or other transactions;

    ·   Our ability to manage our operating expenses and maintain gross margins
        while attracting, recruiting and retaining cybersecurity privacy
        professionals;

    ·   demand for our services from healthcare providers; the near-term impact of
        the COVID-19 pandemic on our customers' allocation of time and resources
        to security and privacy, and their ability to pay for existing services as
        well as enter into new contractual arrangements during a period of crisis;
        and

    ·   general economic conditions and changes in healthcare reimbursement and
        regulatory environment, including effects of the COVID-19 pandemic.



We have historically funded our operating costs, acquisition activities, working capital requirements and capital expenditures with cash from operations, proceeds from the issuances of our common stock and other financing arrangements. As of the date of this Annual Report on Form 10-K, we are generating negative cash from operations and our overall revenue and business levels have been impacted by the COVID-19 pandemic over the past eighteen months. Our customer base is heavily concentrated in the healthcare provider space. The healthcare industry has experienced financial and operational disruption due to the pandemic. Sales cycles are longer, cybersecurity projects have been delayed and budgets have been constrained as healthcare providers focus on patient care and navigating the pandemic. If the pandemic continues or there are resurgences in 2022 that impact our customers' operations and resources available for cybersecurity and privacy projects, our cash flows, financial position and operating results for fiscal year 2022 and beyond could be negatively impacted.

During 2020 and 2021, we took actions to reduce expenses, conserve cash, and raise additional capital. During 2021, we raised $1.4 million in additional capital through an "at-the-market" or ATM offering. In addition, we received a $2.8 million PPP Loan (as described in Note 9 to the consolidated financial statements below) which was fully forgiven in August 2021. We also received approximately $0.7 million per quarter in employee retention tax credits in the first three quarters of 2021. With the proceeds from the PPP Loan and the employee retention tax credits, we were able to minimize staff reductions in the areas of Sales and Delivery, our primary customer facing roles, to lessen the impact to our customers during this time of heightened security risks for the healthcare industry. If necessary, we could further reduce personnel and other variable and semi-variable costs to conserve cash and operate as a going concern. However, those actions if required, could negatively impact our ability to grow the business as well as the overall long-term outlook of the business.






         25

  Table of Contents



We believe that our existing sources of liquidity, including cash and cash equivalents, expected tax refunds, the ability to raise equity under our effective Registration Statement on Form S-3 as well as our ability to manage the business to decrease expenses if necessary, will be sufficient to meet our projected capital needs for at least the next twelve months. As we execute our plans over the next twelve months, we intend to carefully monitor the impact of growth initiatives on our operating expenses, working capital needs and cash balances relative to the availability of cost-effective debt and equity financing. In the event that capital is not available, we may then have to scale back operations, reduce expenses, and/or curtail future plans to manage our liquidity and capital resources. However, we cannot provide assurance that we will be able to raise additional capital. The COVID-19 pandemic also continues to create uncertainty and volatility in the financial markets which may impact our operations and our ability to access capital and/or the terms under which we can do so.

The accompanying consolidated financial statements do not include any adjustments relating to the recoverability and classification of recorded asset amounts and classification of liabilities that might be necessary should the Company be unable to continue as a going concern.

In addition, our business is subject to additional risks and uncertainties, including, but not limited to, those described in Item 1A. "Risk Factors".

Off-Balance Sheet Arrangements

Our off-balance sheet arrangements consist primarily of purchase and other commitments arising in the normal course of business, as further discussed below under the section "Contractual Obligations, Contingent Liabilities and Commitments." As of December 31, 2021, we did not have any other relationships with unconsolidated entities or financial partners, such as entities often referred to as structured finance or special purpose entities, which would have been established for the purpose of facilitating off-balance sheet arrangements or other contractually narrow or limited purposes.

Application of Critical Accounting Policies and Critical Accounting Estimates

The SEC defines critical accounting policies as those that are, in management's view, most important to the portrayal of our financial condition and results of operations and most demanding of our judgment. The discussion and analysis of our financial condition and results of operations are based upon our financial statements, which were prepared in accordance with accounting principles generally accepted in the U.S., which is referred to as "GAAP." The preparation of these financial statements requires us to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosures of contingent assets and liabilities. On an on-going basis, we evaluate these estimates, including those related to stock-based compensation, customer programs and incentives, bad debts, intangible assets, income taxes, contingencies and litigation. We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances, the results of which form the basis for making judgments about the carrying values of assets and liabilities that are not readily apparent from other sources. Actual results may differ from these estimates under different assumptions or conditions.

We consider the following accounting policies to be those most important to the portrayal of our financial condition and those that require the most subjective judgment:






         26

  Table of Contents



Revenue Recognition and Deferred Revenue

We operate under a consolidated strategy and management structure, deriving revenue from the following sources:



  · Managed services
  · Consulting and professional services



Revenue is recognized pursuant to Accounting Standard Codification ("ASC") Topic 606, "Revenue from Contracts with Customers". Accordingly, revenue is recognized at an amount that reflects the consideration to which we expect to be entitled in exchange for transferring goods or services to a customer. This principle is applied using the following 5-step process:





    1.  Identify the contract with the customer - A contract with a customer
        exists when (i) we enter into an enforceable contract with a customer that
        defines each party's rights regarding the services to be transferred and
        identifies the payment terms related to these services, (ii) the contract
        has commercial substance and the parties are committed to perform, and
        (iii) we determine that collection of substantially all consideration to
        which it will be entitled in exchange for services that will be
        transferred is probable based on the customer's intent and ability to pay
        the promised consideration.

    2.  Identify the performance obligations in the contract - Performance
        obligations promised in a contract are identified based on the services
        that will be transferred to the customer that are both capable of being
        distinct, whereby the customer can benefit from the service either on its
        own or together with other resources that are readily available from third
        parties or from us, and are distinct in the context of the contract,
        whereby the transfer of the services is separately identifiable from other
        promises in the contract. To the extent a contract includes multiple
        promised services, we apply judgment to determine whether promised
        services are capable of being distinct and distinct in the context of the
        contract. If these criteria are not met the promised services are
        accounted for as a combined performance obligation.

    3.  Determine the transaction price - The transaction price is determined
        based on the consideration to which we will be entitled in exchange for
        transferring services to the customer.

    4.  Allocate the transaction price to the performance obligations in the
        contract - If the contract contains a single performance obligation, the
        entire transaction price is allocated to the single performance
        obligation. Contracts that contain multiple performance obligations
        require an allocation of the transaction price to each performance
        obligation based on a relative standalone selling price ("SSP") basis.
        Determination of SSP requires judgment. We determine standalone selling
        price taking into account available information such as historical selling
        prices of the performance obligation, overall strategic pricing objective,
        market conditions and internally approved pricing guidelines related to
        the performance obligations.

    5.  Recognize revenue when (or as) each performance obligation is satisfied -
        We satisfy performance obligations over time. Revenue is recognized over
        the time the related performance obligation is satisfied by transferring a
        promised service to a customer.




Managed Services



Managed services contracts are typically long-term contracts lasting three years. Revenue is earned monthly during the term of the contract, as services are provided at a fixed fee and is recognized ratably over the contract term beginning on the commencement date of the contract. Revenue related to managed services provided is recognized based on the customer utilization of such resources, which management estimates to occur ratably over the customer contract term.






         27

  Table of Contents



Consulting and Professional Services

Consulting and professional services contracts are typically short-term, project-based services rendered on either a fixed fee or a time and materials basis. These contracts are normally for a duration of less than one year. For fixed fee arrangements, revenue is normally recognized ratably over the term of the project. For time and materials arrangements, revenues are recognized as the services are rendered.





Deferred and Unbilled Revenue



We receive payments from customers based on billing schedules established in our contracts. Deferred revenue primarily consists of billings or payments received in advance of the amount of revenue recognized and such amounts are recognized as the revenue recognition criteria are met. Unbilled revenue reflects our conditional right to receive payment from customers for our completed performance under contracts.

Accounts Receivable Valuation and Related Reserves

We estimate the losses that may result from that portion of our accounts receivable that may not be collectible as a result of the inability of our customers to make required payments. Management specifically analyzes customer concentration, customer creditworthiness, current economic trends, COVID-19 developments and changes in customer payment terms when evaluating the adequacy of the allowance for doubtful accounts. We review past due accounts on a monthly basis and record an allowance for doubtful accounts where we deem appropriate.

Impairment Review of Goodwill and Intangible Assets

We periodically evaluate our intangible assets and goodwill relating to acquisitions for impairment. Goodwill is not amortized but is evaluated at least annually at year end for any impairment in the carrying value. We review our intangible assets for impairment whenever events or changes in circumstances indicate that the carrying value of such assets may not be recoverable. Factors we consider important which could trigger an impairment review include, but are not limited to, the following: significant underperformance relative to expected historical or projected future operating results; significant changes in the manner of our use of the acquired assets or the strategy for our overall business; and a significant negative industry or economic trend for a sustained period. Goodwill and intangible asset impairment assessments are generally determined based on fair value techniques, including determining the estimated future discounted and undiscounted cash flows over the remaining useful life of the asset. Those models require estimates of future revenue, profits, capital expenditures and working capital for each reporting unit. We estimate these amounts by evaluating historical trends, the current state of the Company's industries and the economy, current budgets, and operating plans. Determining the fair value of reporting units and goodwill includes significant judgment by management and different judgments could yield different results. Any resulting impairment loss could have a material impact on our financial condition and results of operations.





Stock-Based Compensation



Under the fair value recognition provisions of the authoritative guidance, stock-based compensation cost granted to employees is measured at the grant date based on the fair value of the award and is recognized as expense over the requisite service or performance period, which is the vesting period. Stock options and warrants issued to consultants and other non-employees as compensation for services to be provided to us are accounted for based upon the fair value of the services provided or the estimated fair value of the option or warrant, whichever can be more clearly determined. We currently use the Black-Scholes option pricing model to determine the fair value of stock options and warrants. The determination of the fair value of stock-based payment awards on the date of grant using an option-pricing model is affected by our stock price as well as assumptions regarding a number of complex and subjective variables. These variables include our expected stock price volatility over the term of the awards, the expected term of the award, the risk-free interest rate and any expected dividends. Compensation cost associated with grants of restricted stock units are also measured at fair value on the date of the grant. We evaluate the assumptions used to value restricted stock units on a quarterly basis. When factors change, including the market price of the stock, stock-based compensation expense may differ significantly from what has been recorded in the past. If there are any modifications or cancellations of the underlying unvested securities, we may be required to accelerate, increase or cancel any remaining unearned stock-based compensation expense.






         28

  Table of Contents




Income Taxes


Deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial reporting requirements and those imposed under federal and state tax laws. Deferred taxes are provided for timing differences in the recognition of revenue and expenses for income tax and financial reporting purposes and are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred tax assets and liabilities of a change in tax rates is recognized in income in the period that includes the enactment date. Deferred income tax expense represents the change during the period in the deferred tax assets and liabilities. Realization of the deferred tax asset is largely dependent on generating sufficient taxable income in future years. Deferred tax assets are reduced by a valuation allowance when, in the opinion of management, it is more likely than not that some portion or all the deferred tax assets will not be realized. Use of our net operating loss deferred assets may be limited by changes in our ownership.

The above listing is not intended to be a comprehensive list of all of our accounting policies. In many cases, the accounting treatment of a particular transaction is specifically dictated by GAAP, with no need for management's judgment in its application. There are also areas in which management's judgment in selecting any available alternative would not produce a materially different result. Please see our audited consolidated financial statements and notes thereto which begin on page F-1 of this Annual Report on Form 10-K, which contain accounting policies and other disclosures required by GAAP and please refer to the disclosures in Note 1 of our consolidated financial statements for a summary of our significant accounting policies.

Recent Accounting Pronouncements

Refer to Note 1 to the consolidated financial statements for information regarding recent accounting pronouncements.

© Edgar Online, source Glimpses