Infinite Group (IMCI) Risk Factors

We sell cybersecurity services, third-party software as well as our internally developed software, Nodeware.  As a result, we have been and will be a target of cyber-attacks designed to impede the performance of our products, penetrate our network security or the security of our cloud platform or our internal systems, or that of our customers, misappropriate proprietary information and/or cause interruptions to our services. For example, because Nodeware is a network vulnerability management tool, a successful cyber-attack on us may be perceived as a victory for the cyber attacker, thereby increasing the likelihood that we may be a target of more cyber-attacks, even absent financial motives. Further, if our systems are breached as a result of third-party action, employee error or misconduct, attackers could learn critical information about how our primary product operates to help protect our customers' IT infrastructures from cyber risk, thereby making our customers more vulnerable to cyber-attacks. In addition, if actual or perceived breaches of our network security occur, they could adversely affect the market perception of our Nodeware product, negatively affecting our reputation, and may expose us to the loss of our proprietary information or information belonging to our customers, investigations or litigation and possible liability, including injunctive relief and monetary damages. Such security breaches could also divert the efforts of our technical and management personnel. In addition, such security breaches could impair our ability to operate our business and provide products to our customers. If this happens, our reputation could be harmed, our revenue could decline, and our business could suffer.  We monitor our network continuously with our Nodeware product as well as other cybersecurity software. We are not aware of or identified an incident leading to a breach of our internal or external facing systems.  We have implemented several proactive policies and procedures to mitigate any internal incidents from outside forces. This includes deploying additional monitoring software, phishing training, creating an internal incident response team, and additional awareness through internal communications around typical attempts that outside forces use. While we have seen phishing attempts sent to certain email addresses, we have mitigated those through the aforementioned steps. Our internal security team has blocked the associated addresses and/or domains of the senders and has enhanced email security features to identify external emails. Overall, our internal security posture continues to evolve as the market evolves.  We have a cyber insurance policy which will cover certain expenses related to an attack, such as certain business interruption costs associated with an incident.

We believe that our future success depends upon our ability to continue to train, retain, effectively manage and attract highly skilled technical, managerial, sales and marketing personnel. This includes skills for our new initiatives in cybersecurity. Employee turnover is generally high in the IT services industry. If our efforts in these areas are not successful, our costs may increase, our sales efforts may be hindered, and the quality of our client service may suffer. Although we invest significant resources in recruiting and retaining employees, there is often significant competition for certain personnel in the IT services industry. From time to time, we experience difficulties in locating enough highly qualified candidates in desired geographic locations, or with required specific expertise.

We depend on one customer for a large portion of our revenue. During 2020, sales to one customer, including sales under subcontracts, accounted for 61.2% of total sales and 38.8% of accounts receivable at December 31, 2020. The loss of this customer could have a significant impact on our revenues and harm our business and results of operations.