ACME UNITED CORP

Evaluation of Disclosure Controls and Procedures.

An evaluation was performed under the supervision and with the participation of our management, including the Chief Executive Officer and Chief Financial Officer, of the effectiveness of the design and operation of our disclosure controls and procedures (as defined in Rule 13a-15(e) under the Exchange Act of 1934) as of December 31, 2024. Based on and as of the time of such evaluation, our management, including the Chief Executive Officer and Chief Financial Officer, concluded that our disclosure controls and procedures were not effective as of the end of the period covered by this report to ensure that information required to be disclosed by us in the reports that we file or submit is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission's rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure. As of December 31, 2024, our Chief Executive Officer and Chief Financial Officer have concluded that the financial statements included in this Annual Report on Form 10-K present fairly, in all material respects, the financial position, results of operations and cash flows of the Company in conformity with accounting principles generally accepted in the United States of America ("GAAP").

Management's Report on Internal Control over Financial Reporting.

Management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rules 13a-15(f) and 15d-15(f). The Company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of our financial reporting and the preparation of our financial statements in accordance with GAAP. Under the supervision and with the participation of management, including our Chief Executive Officer and Chief Financial Officer, the Company conducted an evaluation of the effectiveness of our internal control over financial reporting as of December 31, 2024, based on criteria established in Internal Control — Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

During the year ended December 31, 2024, management identified a material weakness in the Company’s internal control over financial reporting (ICFR) related to ineffective Information Technology General Controls (ITGCs) over logical security and privileged access management for a financially relevant system.

During a period of time in the fourth quarter of 2024, and prior to year end, the controls for modification of access, user recertification and privileged access controls over the respective financially relevant system were not operating effectively to ensure that users maintained proper segregation of duties. Specifically, one individual was given privileged access rights for the purpose of conducting maintenance on user access. Accordingly, this could have resulted in users having inappropriate access rights, leading to other ITGCs, automated process-level controls, and manual controls that are dependent upon the information derived from such financially relevant system to be ineffective.

Remediation

The privileged access for the one individual was removed on December 20, 2024 when the subject maintenance was completed. As part of its remediation efforts, management will further limit users with privileged access to ensure proper segregation of duties.

While this control deficiency constituted a material weakness, management has determined that it did not result in any misstatements to the financial statements, nor did it impact previously reported financial results.

Our independent registered public accounting firm, Marcum LLP, has issued an adverse attestation report on the effectiveness of our internal control over financial reporting as of December 31, 2024, as stated in their report which is included in the Financial Statements of this Annual Report on Form 10-K. Marcum LLP has also audited our consolidated financial statements at December 31, 2024, and for each of the two years in the period ended December 31, 2024, and its report dated March 6, 2025, expressed an unqualified opinion on our consolidated financial statements.

As previously reported, during the year ended December 31, 2023, management identified a material weakness related to ineffective ITGCs. It was determined that as of December 31, 2023, the Company's change management and logical controls were not designed and implemented effectively to ensure: 1) IT program and data changes affecting the Company's financial IT applications and underlying accounting records were identified, tested, authorized and implemented appropriately to validate that data produced by its relevant IT system(s) were complete and accurate and 2) appropriate segregation of duties that would adequately restrict user and privileged access to the financially relevant systems and underlying accounting records to the appropriate Company personnel. Other ITGCs, automated process-level controls, and manual controls that were dependent upon the information derived from such financially relevant systems were also determined to be ineffective as a result of such deficiency. This material weakness did not result in any misstatement of the Company's consolidated financial statements for any period presented.

To remediate the material weakness described above, during 2024, the Company implemented database change management and auditing software and has designed and implemented associated management review processes. These controls were added to provide assurance that IT program and data changes affecting the Company's accounting records are identified, tested, authorized and implemented appropriately. In addition, the added controls provide proper segregation of duties to restrict user and privileged access to appropriate Company personnel. As a result, the Company concluded that the controls were appropriately designed and operating effectively and have concluded that the material weakness has been remediated as of December 31, 2024.

Inherent Limitation on Effectiveness of Controls

Internal control over financial reporting is a process designed by, or under the supervision of, our Chief Executive Officer and Chief Financial Officer, and effected by the board of directors, management, and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP including those policies and procedures that: (i) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of our assets, (ii) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with GAAP and that receipts and expenditures are being made only in accordance with authorizations of our management and directors, and (iii) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of our assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with policies and procedures may deteriorate.

Changes in Internal Control over Financial Reporting.

Except for factors pertaining to the remediation of the material weakness identified above, there have not been any changes in our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the fourth fiscal quarter ended December 31, 2024, to which this report relates, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.