# WM Technology, Inc.: Form 10-K/A for the period ended Dec 31, 2023

- Company: [WM Technology, Inc.](/companies/maps.md) (CIK 1779474)
- Form: 10-K/A
- Filed: 2024-08-30
- Accepted by EDGAR: Aug 30, 2024, 16:36 ET
- Period: 2023-12-31
- Accession: 0001779474-24-000045
- Inline XBRL: yes
- Main document: https://www.sec.gov/Archives/edgar/data/1779474/000177947424000045/maps-20231231.htm
- All documents and exhibits: https://www.sec.gov/Archives/edgar/data/1779474/000177947424000045/

## Controls and procedures

As filed, 10,908 characters.

### Evaluation of Disclosure Controls and Procedures

Disclosure controls are procedures that are designed with the objective of ensuring that information required to be disclosed in our reports filed under the Exchange Act, is recorded, processed, summarized and reported within the time period specified in the SEC’s rules and forms. Disclosure controls are also designed with the objective of ensuring that such information is accumulated and communicated to our management, including our executive chair and chief financial officer, as appropriate to allow timely decisions regarding required disclosure. We do not expect that our disclosure controls and procedures will prevent all errors and all instances of fraud. Disclosure controls and procedures, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the disclosure controls and procedures are met. Further, the design of disclosure controls and procedures must reflect the fact that there are resource constraints, and the benefits must be considered relative to their costs. Because of the inherent limitations in all disclosure controls and procedures, no evaluation of disclosure controls and procedures can provide absolute assurance that we have detected all our control deficiencies and instances of fraud, if any. The design of disclosure controls and procedures also is based partly on certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions.

With the foregoing in mind, our executive chair and chief financial officer (“Certifying Officers”) evaluated the effectiveness of our disclosure controls and procedures as of December 31, 2023, pursuant to Rule 13a-15(b) under the Exchange Act. Based on the evaluation, our executive chair and chief financial officer have concluded that as of December 31, 2023, our disclosure controls and procedures were not effective due to the material weaknesses in internal control over financial reporting described below.

### Changes in Internal Control Over Financial Reporting

Except for the material weaknesses identified during 2023, there were no changes in our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) of the Exchange Act) during the most recent fiscal quarter that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

### Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rule 13a-15(f) under the Exchange Act. Our internal control over financial reporting is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. GAAP and includes those policies and procedures that: (1) pertain to the maintenance of records that in reasonable detail accurately and fairly reflect our transactions and the dispositions of our assets; (2) provide reasonable assurance that our transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles and that our receipts and expenditures are being made only in accordance with appropriate authorizations; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of our assets that could have a material effect on our financial statements.

In designing and evaluating the disclosure controls and procedures and internal control over financial reporting, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures and internal control over financial reporting must reflect the fact that there are resource constraints and that management is required to apply judgment in evaluating the benefits of possible controls and procedures relative to their costs.

Under the supervision of and with the participation of our management, we assessed the effectiveness of our internal control over financial reporting as of December 31, 2023, using the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in Internal Control — Integrated Framework (2013). Based on the evaluation, our executive chair and chief financial officer have concluded that as of December 31, 2023, our internal control over financial reporting was not effective due to the material weaknesses in internal control over financial reporting described below. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis.

The following entity-level material weaknesses have been identified: We did not fully maintain components of the COSO framework, including elements of the control environment, risk assessment, information and communication and monitoring activities components, relating to (i) developing general control activities over technology to support the achievement of objectives across the entity, (ii) sufficiency of processes related to identifying and analyzing risks to the achievement of objectives, including technology, across the entity, and (iii) sufficiency of selecting and developing control activities that contribute to the mitigation of risks to the achievement of objectives to acceptable levels.

The entity-level material weaknesses contributed to other material weaknesses within our system of internal control over financial reporting as follow:

- We did not design and maintain effective information technology (IT) general controls for certain information systems supporting our key financial reporting processes. Specifically, we did not design, implement and maintain (a) change management controls to ensure that program and data changes affecting financial applications and underlying accounting records are identified, tested, authorized and implemented appropriately, (b) access controls to ensure appropriate IT segregation of duties are maintained that adequately restrict and segregate privileged access between environments which support development and production, and (c) controls to monitor on an on-going basis for the proper segregation of privileged access between environments which support development and production. As a result, IT application controls and business process controls that are dependent on the ineffective IT general controls, or that rely on data produced from systems impacted by the ineffective IT general controls, are also deemed ineffective, which affects substantially all of our financial statement account balances and disclosures.
- We did not design and maintain effective information technology (IT) general controls for certain information systems supporting our key financial reporting processes. Specifically, we did not design, implement and maintain sufficient change management, security, and operations controls for certain in-scope on-premise applications and vendor-supported applications.
- We did not design and maintain effective process-level controls related to the order-to-cash cycle (including revenues, accounts receivables, and deferred revenue), procure-to-pay-cycle (including operating expenses, prepaid expenses and other current assets, accounts payable and accrued expenses), capitalized software, and long-term assets. The material weakness related to the order-to-cash cycle resulted in an inadequate policy associated with our revenue recognition policies related to the cash collection of a certain subset of our customers that had been placed on a cash basis and, in turn, the restatement of our unaudited condensed consolidated financial statements in its prior three quarters reported in 2023 as of and for the three months ended March 31, 2023, six months ended June 30, 2023 and nine months ended September 30, 2023 included in our quarterly reports on Form 10-Q for the corresponding periods. Additionally, this material weakness could result in a misstatement of any account balances or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

For the year ended December 31, 2022, we identified a material weakness in internal control related to ineffective IT general controls in the areas of user access and program change-management over certain information technology systems that support our financial reporting processes. We took measures to remediate this material weakness, specifically by undertaking the following measures:

- removing developers’ administrative access from production systems;
- removing the ability for certain users, including developers, to access other users’ accounts; and
- implementing audit trails to log and monitor system configuration and data changes made by users to detect erroneous or unauthorized changes.

Our remediation efforts concluded as of June 30, 2023 when we determined that the above measures had been implemented. As of July 2023, administrative access to the sandbox environment where development activities take place was extended to users with administrative access to the production environment, thereby negating the remediation efforts taken. This access was not subject to our monthly monitoring control activity and persisted through the remainder of fiscal 2023. The lack of successful completion of our remediation efforts related to this material weakness identified for the year ended December 31, 2022 is reflected in the first bullet of our 2023 material weaknesses discussed above.

### Remediation

We have begun the process of evaluating the material weaknesses and developing our full remediation plan. Until the remediation plan is implemented, tested, and deemed effective we cannot assure that our actions will adequately remediate the material weaknesses or that additional material weaknesses in our internal controls will not be identified in the future. If we are unable to remediate the material weaknesses, our ability to record, process and report financial information accurately, and to prepare financial statements within the time periods specified by the rules and forms of the SEC, could be adversely affected and could reduce the market’s confidence in our financial statements and harm our stock price.

Filed Aug 30, 2024.
Source: SEC EDGAR, the filing index for accession 0001779474-24-000045. Last ingested by Listed: Nov 10, 2026, 04:18 ET. No prices; not investment advice.