Resolute Holdings Management, Inc.

Risk Factors Summary

An investment in our company is subject to a number of risks. These risks relate to our business, the business of CompoSecure, which is operated through CompoSecure Holdings, the Spin-Off, our common stock and the securities market. Any of these risks and other risks could materially and adversely affect our business, results of operations, cash flows and financial condition and the actual outcome of matters as to which forward-looking statements are made in this Annual Report. Please read the information in the section captioned “Risk Factors” of this Annual Report for a description of the principal risks that we face. Some of the more significant challenges and risks we face include the following:

Risks Related to Our Business

We manage the business of a single company, CompoSecure Holdings, which subjects us to a greater risk of significant loss.

In connection with the Spin-Off, we entered into the CompoSecure Management Agreement. Although our business strategy is to enter into management agreements with other companies, no assurance can be given that we will be successful. As a result, for so long as our only management agreement is the CompoSecure Management Agreement, our revenues will be dependent on the CompoSecure Management Fee and other payments we receive from CompoSecure Holdings. The quarterly CompoSecure Management Fee we are entitled to receive from CompoSecure Holdings will be based on the performance of CompoSecure Holdings and, in particular, CompoSecure Holdings’ last 12 months’ Adjusted EBITDA, measured for the period ending on the fiscal quarter then ended as calculated in accordance with the CompoSecure Management Agreement. See “Item 1. Business – The CompoSecure Management Agreement – Management Fee.” Our business will therefore be subject to the business risks of CompoSecure, and may be significantly adversely affected if CompoSecure Holdings performs poorly or does not perform as expected. The business of CompoSecure, which is operated through a subsidiary of CompoSecure Holdings, is subject to risks that include, among other things, rapidly evolving domestic and global economic and political conditions, such as the war in Ukraine or global pandemics such as a resurgence of COVID-19, CompoSecure’s ability to maintain its relationships with its customers and attract new customers, increased

competition, cybersecurity and information technology (“IT”) infrastructure needs, disruptions to CompoSecure’s ability to manufacture new and existing products, supply chain and distribution issues, changes in the regulatory regimes to which CompoSecure is subject, CompoSecure’s ability to protect its intellectual property rights and the satisfactory resolution of disputes related thereto and product liability and warranty claims. Many of these factors may be beyond our control. If CompoSecure experiences these or other events, its business could be materially and adversely affected and the CompoSecure Management Fee which we are entitled could be lower than we expect. See “Risks Related to the Business of CompoSecure” elsewhere in this Risk Factors section. Furthermore, we expect that the initial resource investments required to build the capabilities required for us to perform our duties required by the CompoSecure Management Agreement will result in us initially operating with limited profitability.

Additionally, for so long as our managed companies consist solely or primarily of CompoSecure Holdings, our growth prospects will be substantially dependent on our ability to effectively manage and expand CompoSecure’s business, including by successfully identifying, negotiating, completing and integrating strategic acquisitions. Our ability to expand CompoSecure’s business is subject to a number of risks, including the inability to identify satisfactory strategic acquisition targets, difficulties in successfully integrating acquired operations and businesses, loss of key personnel, diversion of management resources, financial risks including unanticipated liabilities and incremental compliance costs due to the acquisition of businesses subject to heavy regulation and risks associated with achieving cost synergies. If we are unableto expand CompoSecure’s business, or such attempts are more costly or less successful than anticipated, our financial condition and results of operations could be adversely impacted.

Our growth prospects may depend upon the successful negotiation of management agreements with additional managed companies and the payment by those companies to us of management fees.

The successful expansion of our business may depend on our ability to identify additional companies with which to enter into agreements to manage their respective businesses in return for the payment to us of management fees and to effectively manage such additional businesses. We expect to face significant competition in identifying potential additional managed companies from a variety of other entities, including institutional investors and private equity, hedge and investment funds. For example, many of these entities may seek to acquire the potential managed company, which may make the value offered by one or more of these competitors more attractive to the managed company or its existing investors. Additionally, these competitors may have, among other things, greater resources, longer operating histories, more established relationships, greater expertise, better reputations, better access to funding, different regulatory barriers and different risk tolerances than we do. As a result, this competition could mean that we lose opportunities to enter into management agreements with prospective managed companies, or that the terms on which we enter into management agreements could be less beneficial to us than would otherwise have been the case. Evenif we are successful in negotiating additional management agreements with one or more prospective managed companies, we may be unable to successfully manage the day-to-day business and operations and oversee the strategy of these companies, which could result in us receiving lower management fees than we expect, and which could have a materially adverse impact on our business.

Additionally, we could incur significant fees and expenses identifying, investigating and attempting to enter into management agreements with potential managed companies, some of which we ultimately may not contract with, including fees and expenses relating to due diligence, transportation and travel, including in extended negotiation processes. Our ability to incur such fees and expenses will depend on our receiptof management fees from our managed companies and may depend on our ability to access other sources of financing, each of which is subject to the other risks described in this section. Furthermore, the demands on the time of our management team will increase if and as we seek to increase the number of companies that we manage, which could reduce the time that our management team has to allocate to the management of our existing managed company or companies, each of which could have a material adverse effect on our business.

We expect to structure the management fee payable to us pursuant to any future management agreement to be based on the managed company’s respective financial results. We intend to select managed companies for management on the basis of anticipated future performance, considering such companies’ past results of operations and financial condition, macroeconomic conditions and other factors that our Board deems advisable from time to time. However, our estimates of such fees will be based on the past results of operations of such managed companies and will require certain assumptions about their future performance, which may not be accurate. No assurance can be given that our estimates of future management fees to which we will be entitled will be correct during any particular period. The overall performance and financial results of other managed companies in the future, if any, may depend on factors beyond our control and may be subject to risks that differ from those that impact the business of CompoSecure.

The management fees payable to us by our managed companies may impact our management priorities or cause us to select riskier managed company businesses to increase our compensation.

The CompoSecure Management Agreement provides, and we expect that any management agreements we enter into with additional managed companies in the future will provide, for a management fee based on profitability metrics defined in each such management agreement, and these fees may impact our management priorities or cause us to select riskier managed company businesses. Certain of these measures may not be calculated in accordance with generally accepted accounting principles and may exclude the impact of certain costs, expenses and charges such as non-cash equity compensation expenses, depreciation and amortization, unrealized gains, losses or other non-cash items recorded in net income (loss) and non-recurring events, among others. For example, pursuant to the CompoSecure Management Agreement, we will earn a quarterly management fee based on CompoSecure Holdings’ last 12 months’ Adjusted EBITDA, measured for the period ending on the fiscal quarter then ended as calculated in accordance with the CompoSecure Management Agreement. See “Item 1. Business – The CompoSecure Management Agreement – Management Fee.”

We face risks associated with conducting due diligence into potential additional managed companies.

Before entering into a management agreement with a new managed company, we expect to conduct due diligence that we deem reasonable and appropriate based on the facts and circumstances applicable to each managed company. Due diligence might entail evaluation of, among other things, important and complex business, financial, tax, accounting, environment, social and governance matters and legal issues, and assessment of cybersecurity and information technology systems. Outside consultants, legal advisors, accountants, investment banks and other third parties might be involved in the due diligence process to varying degrees depending on the type of managed company. Such involvement of third-party advisors or consultants can present a number of risks primarily relating to our reduced control of the functions that are outsourced.

In addition, if we are unable to timely engage third-party providers, our ability to evaluate and negotiate with more complex managed companies could be adversely affected.

When conducting due diligence and making an assessment regarding a potential managed company, we expect to rely on the resources available to us, including publicly available information about a potential managed company, and in some cases, information provided by the company and/or third-party investigations. The due diligence investigation that we, or third parties acting on our behalf, carry out with respect to a potential managed company might not reveal or highlight all relevant facts that are necessary or helpful in evaluating such potential managed company. Certain considerations covered by our diligence are continuously evolving, including from an assessment, regulatory and compliance standpoint, and we may not accurately or fully anticipate such evolution. In addition, instances of fraud and other deceptive practices committed by the management teams of potential managed companies could undermine our due diligence efforts with respect to such companies. Moreover, such an investigation will not necessarily result in the managed company being successful. Conduct occurring at managed companies, even activities that occurred prior to the Company’s management, could have an adverse impact on our results of operations and financial condition.

We may change our strategies from time to time.

While we generally intend to seek attractive returns primarily through the long-term management of the businesses of CompoSecure and of additional managed companies that we may identify from time to time, we may pursue additional business strategies and may modify or depart from our initial business strategy, process and techniques, in light of changing market conditions or other factors as we determine appropriate. For example, as our management agreements and the related obligations to provide management services will not create a mutually exclusive relationship between us, on the one hand, and any of our managed companies, including CompoSecure Holdings, on the other, we may decide to focus our efforts on the management of the business of one or more of our managed companies including CompoSecure Holdings, a small number of managed companies, or we may pursue additional management agreements with additional managed companies in varied business sectors and/or geographic regions that provide for short- or long-term management of all or less than all of a managed company’s business. Additionally, any projections/estimates regarding the number, size or type of companies that we may manage, the mannerin which we may manage such companies, or the fee arrangements that we may enter into with such companies (or similar estimates) are estimates based only on our intent as of the date of such statements and are subject to change due to market conditions and/or other factors.

There is no information as to the nature and terms of any managed companies that a prospective stockholder can evaluate when determining whether to purchase our shares. Stockholders will not have an opportunity to evaluate for themselves or to approve any managed companies or any management arrangements, if any, that we enter into with such additional managed companies. Stockholders will therefore be relying on our discretion whether to manage additional companies and our ability to select any such additional companies to be managed by us and to agree to the terms on which we will manage such companies, including the terms of any management fees. Because management of the business of CompoSecure and any such additional managed companies is expected to occur over a substantial period of time, we face a number of risks, including the risk of adverse changes in the financial markets.

The termination of the CompoSecure Management Agreement or the management agreements that we may enter into with other companies from time to time, or the reduction of the management fees payable to us thereunder, would materially and adversely affect us.

The CompoSecure Management Agreement will initially have a term of 10 years, following which it will be subject to automatic renewal for successive 10-year periods. We and CompoSecure Holdings will each have the right to terminate the CompoSecure Management Agreement upon the occurrence of certain events, including certain events in connection with which CompoSecure Holdings will have the right to terminate the CompoSecure Management Agreement without paying to us any termination fees. See “Item 1. Business – The CompoSecure Management Agreement – Termination Fees.” Additionally, following the initial term of the CompoSecure Management Agreement, the management fees payable to us thereunder could be reduced, including upon an election by us not to receive our management fee for a given quarterly period. See “Item 1. Business – The CompoSecure Management Agreement – Management Fees.” Furthermore, the management agreements that we may enter into with other companies from time to time may contain termination and renewal provisions, and those provisions may or not be similar to the termination and renewal provisions contained in the CompoSecure Management Agreement. The termination of any management agreement, including the CompoSecure Management Agreement, or the reduction of fees payable to us thereunder, would each have a material adverse impact on our financial condition and results of operations.

Our managed companies, including CompoSecure Holdings, may not be able to successfully fund future activities of new businesses on acceptable terms.

In order for our managed companies to undertake certain future business activities, including future strategic acquisitions, we expect that our managed companies, including CompoSecure Holdings, will need to raise capital primarily through the sale of additional shares of equity securities or through the incurrence of debt. The timing and size of such funding cannot be readily predicted, and our managed companies may need to obtain funding on short notice in order for them and for us to fully benefit from attractive opportunities. Such funding may not be available on terms favorable or acceptable to us or at all, which could limit our managed companies’ ability to undertake these business activities, and which in turn could materially adversely impact our ability to successfully pursue our strategy of growth.

We may enter into management agreements with a limited number of companies, or with companies that are concentrated in certain industries or geographic regions, which could negatively affect our performance to the extent those concentrated holdings perform poorly.

We are not subject to any requirements as to the degree of diversification of the companies we manage, either by size, geographic region, asset type or sector. Although we expect to seek to manage diversified companies, to the extent the companies we manage are concentrated in a particular market, we may become more susceptible to fluctuations in value and returns resulting from adverse economic or business conditions affecting that particular market. During periods of difficult market conditions or economic slowdown in certain regions and in certain countries, the adverse effect on us could be exacerbated by a geographic or sectoral concentration of our managed companies. For us to achieve attractive returns, it might be the case that one or a few of our managed companies need to perform very well. There are no assurances that this will bethe case.

Generally accepted accounting principles and related accounting pronouncements, implementation guidelines and interpretations regarding a wide range of matters relevant to our business, such as revenue recognition, asset impairment and fair value determinations, inventories, business combinations and intangible asset valuations, leases, litigation, among others, are highly complex and involve many subjective assumptions, estimates and judgments. Changes in these rules or their interpretation or changes in our assumptions, estimates or judgments could significantly change our reported or expected financial performance or financial condition.

We are a new company and have a limited operating history.

We have a limited operating history upon which prospective stockholders can evaluate our performance. Further, stockholders should draw no conclusions from the prior experience of the members of our management team and should not expect to achieve similar returns. The past performance of our management team is not predictive of our performance, in particular because the structure, terms and objectives of the entities in or through which they achieved such performance may differ from ours. Any information regarding performance by, or businesses associated with, David Cote and other members of our management team is presented for informational purposes only. Any past experience and performance, including related to the acquisition of interests in, and management of, companies by David Cote or other members of our management team is not a guarantee of any results with respect to our future performance. You should not rely on the historical record and performance of David Cote or other members of our management team, or the companies and other entities with which they are or have been associated, as indicative of the future performance of an investment in us or the returns we will, or are likely to, generate going forward. Our managed companies may differ in a number of respects from previous companies that our management team have managed or in which they have invested. Additionally, our management team has not previously sponsored or managed a company whose business is based on the generation of fees from the long-term management of public companies across multiple industries, sectors and geographies. Moreover, we are subject to all of the business risks and uncertainties associated with any new managed company, including the risk that we will not achieve our business objectives and that the value of our common stock could decline substantially.

We and our managed companies are dependent upon our key personnel for our future success, particularly David Cote and Tom Knott.

We are dependent on our key management members to carry out our business strategies, including the management of CompoSecure Holdings, the identification and management of additional managed companies from time to time, and the execution of our business strategy described in the section titled “Item 1. Business.” Our future success depends to a significant extent on the continued service and coordination of our personnel, including our senior management team, particularly David Cote, our Executive Chairman, and Tom Knott, our Chief Executive Officer. The extent and nature of the experience of Mr. Cote, Mr. Knott and our other personnel and the nature of the relationships they have with external contacts, although not guarantees of positive results, are critical to the success of our business. Our personnel have significant management experience, and we cannot assure stockholders of their continued employment with us. The unplanned departure of any of our personnel could have a material adverse effect on our ability to implement our business strategy and could have a material adverse effect on our business, financial condition or results of operations. Furthermore, competition for experienced management personnel could requireus to pay higher compensation and provide additional benefits to retain or attract qualified personnel, which could result in higher compensation expenses for us. Additionally, our management members’ other commitments may result in a conflict of interest in allocating their time between our operations and our management and operations of other businesses. See “Risks Related to Our Business — Conflicts of interest with our directors, executive officers or other employees could damage our reputation and negatively impact our business.”

Conflicts of interest with our directors, executive officers or other employees could damage our reputation and negatively impact our business.

Our arrangements with our directors, executive officers and other employees could give rise to additional conflicts of interest. The following discussion describes certain of these actual, potential or apparent conflicts of interest and how we intend to manage them. If we are unable to successfully manage conflicts of interest relating to arrangements with our directors, executive officers and other employees, we could be subject to lawsuits or regulatory enforcement actions or we could face other adverse consequences and reputational harm, all of which could cause our performance to suffer and thus adversely affect our results of operations, financial condition and cash flow. The following summary is not intended to be an exhaustive list of all conflicts or their potential consequences. Identifying potential conflicts of interest is complex and fact-intensive, and it is not possible to foresee every conflict of interest that will arise.

Potential conflicts of interest with our directors, executive officers or other employees. Our directors, executive officers and other employees, including Mr. Cote and Mr. Knott, may engage in other business activities. This may result in a conflict of interest in allocating their time between our operations and our management and operations of other businesses. Additionally, some of our directors, executive officers or other employees are or will be directors, executive officers, employees or direct or indirect holders of interests in CompoSecure and/or our other managed companies. In addition, our directors, executive officers and other employees are not expressly prohibited from investing in or managing other entities, including those that are in the same or similar line of business as our managed companies. Our management agreements and the related obligations to provide management services will not create a mutually exclusive relationship between us, on the one hand, and our managed companies, including CompoSecure Holdings, on the other. As a result, our directors, executive officers and other employees may have duties to these other entities, which duties could conflict with the duties they owe to us and could result in action or inaction detrimental to our business. One or more committees of our Board, excluding any directors who may have an interest or involvement, will review and address, as appropriate, certain actual or perceived conflicts of interest involving, among others, our executive officers or directors, and our related person transactions policy requires the review by one or more committees of our Board, excluding any directors who may have an interest or involvement, of certain transactions involving us and our directors, executive officers, 5% or greater stockholders and other related persons as defined under the policy. Nevertheless, potential or perceived conflicts could lead to investor dissatisfaction, harm our reputation or result in litigation or regulatory enforcement actions.

*Interest of our directors, executive officers or other employees in our managed companies.*Certain of our directors, executive officers and other employees, or their respective affiliates, directly or indirectly, currently hold and may in the future hold interests in CompoSecure, and may in the future hold interests in our other managed companies, in each case that differ from your interests in such companies. While we believe that these interests help align the interests of our directors, executive officers and other employees with those of our managed companies’ investors and provide a strong incentive to enhance the performance of our managed companies, these arrangements could also give rise to conflicts of interest. For example, pursuant to the CompoSecure Management Agreement, we will have the ability to waive or defer any fees payable to us by CompoSecure Holdings, and we expect to negotiate additional management agreements such that we will have the ability to waive or defer fees payable from time to time from additional managed companies under their respective management agreements, and the interests of our directors, executive officers and other employees (or their respective affiliates) in such managed companies could influence our decisions whether to waive or defer any such fees. Additionally, our directors, executive officers and other employees may from time to time receive a portion of their compensation from our managed companies, which may influence the manner in which we manage such companies. Additionally, some of our directors, executive officers or other employees (or their respective affiliates) may also have or make personal investments in entities that are not affiliated with us that may compete for the same management opportunities, which likewise could give rise to potential conflicts of interest.

Risks Related to the Business of CompoSecure

Rapidly evolving domestic and global economic conditions are beyond CompoSecure’s control and could materially adversely affect CompoSecure’s business, operations and results of operations.

U.S. and international markets and, in particular, the rapidly evolving digital assets industry, are experiencing uncertain and volatile economic conditions, including from the after-effects of the COVID-19 pandemic, the war in Ukraine, the conflict in Israel, Gaza and the surrounding areas, inflation, threats or concerns of recession, and supply chain disruptions. These conditions make it extremely difficult for CompoSecure and its suppliers to accurately forecast and plan future business activities. Additionally, a

significant downturn in the domestic or global economy may cause CompoSecure’s existing customers to pause or delay orders and prospective customers to defer new projects. Together, these circumstances create an environment in which it is challenging for CompoSecure to predict future operating results, particularly for its Arculus products and services. If these uncertain business, macroeconomic or political conditions continue or further decline, CompoSecure’s business, financial condition and results of operations could be materially adversely affected, each of which could impact the CompoSecure Management Fee payable to us.

CompoSecure may not be able to sustain its revenue growth rate in the future.

CompoSecure may not continue to achieve sales growth in the future, and you should not consider its sales growth in fiscal 2024 as indicative of future performance. It is also possible that CompoSecure’s growth rate may slow in future periods due to a number of factors, which may include slowing demand for its products, increased competition, decreasing growth of its overall market or inability to engage and retain customers. If CompoSecure is unable to maintain consistent sales or continue its sales growth, it may be difficult for CompoSecure to maintain profitability, which could have an adverse impact on the CompoSecure Management Fee payable to us.

Failure to retain existing customers or identify and attract new customers could adversely affect CompoSecure’s business, financial condition and results of operations.

CompoSecure’s two largest customers are JPMorgan Chase and American Express. Together, these customers represented approximately 63% and 71% of CompoSecure Holdings’ net sales for the years ended December 31, 2024 and 2023, respectively. CompoSecure’s ability to meet its customers’ high-quality standards in a timely manner is critical to its business success. If CompoSecure is unable to provide its products and services at high quality and in a timely manner, its customer relationships may be adversely affected, which could result in the loss of customers.

CompoSecure’s ability to maintain relationships with its customers or attract new customers may be affected by several factors beyond its control, including more attractive product offerings from its competitors, widespread industry disruptions (such as adverse crypto market disruptions, adoption or enactment of new legislation or agency rules and the outcomes of regulatory enforcement actions and other major litigation), pricing pressures or the financial health of these customers, many of whom operate in competitive businesses and depend on favorable macroeconomic conditions. In addition, CompoSecure may also be limited in the products it can offer and the pricing it can receive for such products due to restrictions present in certain of its customer contracts, which may negatively impact its ability to retain existing customers or attract new customers. If CompoSecure experiences difficulty retaining customers and attracting new customers, its business, financial condition and results of operations may be materially and adversely affected, which may materially and adversely affect the CompoSecure Management Fee payable to us.

Any failure by CompoSecure to identify, manage, integrate and complete acquisitions and other significant transactions successfully could harm its financial results, business and prospects.

As part of CompoSecure’s business strategy, CompoSecure may from time to time seek to acquire businesses or interests in businesses, including non-controlling interests, or form joint ventures or create strategic alliances. The due diligence CompoSecure undertakes with respect to potential targets may not reveal or highlight all relevant facts that are necessary or helpful in evaluating the potential target, and CompoSecure will incur expenses in connection with performing such due diligence whether or not an acquisition is ultimately completed. Whether CompoSecure realizes the anticipated benefits from such activities may depend, in part, upon the successful integration between the businesses involved, the performance and development of the underlying products, capabilities or technologies, its correct assessment of assumed liabilities and the management of the operations. Accordingly, CompoSecure’s financial results could be adversely affected by unanticipated performance and liability issues, its failure to achieve synergies and other benefits CompoSecure expected to obtain, transaction-related charges, or other factors some or all of which may materially and adversely affect the CompoSecure Management Fee payable to us.

CompoSecure’s ability to realize the expected synergies and benefits of an acquisition may be subject to, among other things, its ability to complete the timely integration of operations and systems, standards, controls, procedures, policies and technologies, difficulties in achieving anticipated cost savings, synergies, business opportunities and growth prospects from the combination, and difficulties in managing the expanded operations of a significantly larger and more complex combined business.

Data and security breaches could compromise CompoSecure’s systems and confidential information, cause reputational and financial damage and increase risks of litigation, which could adversely affect its business, financial condition and results of operations.

CompoSecure’s IT infrastructure’s ability to reliably and securely protect the sensitive confidential information of its customers, which include large financial institutions, is critical to its business. Security breaches have become more common across many industries. Cyber incidents have been increasing in sophistication and can include third parties gaining access to employee or customer data using stolen or inferred credentials, computer malware, viruses, spamming, phishing attacks, ransomware, card skimming code and other deliberate attacks and attempts to gain unauthorized access. The occurrence of these types of incidents in CompoSecure’s computer networks, databases or facilities could lead to the inappropriate use or disclosure of personal information, including sensitive personal information of customers and employees, which could harm CompoSecure’s business and reputation, adversely affect consumers’ confidence in CompoSecure’s business and products, result in inquiries and fines or penalties from regulatory or governmental authorities, cause a loss of customers, pose increased risks of lawsuits and subject CompoSecure to potential financial losses.

Additionally, it is possible that unauthorized access to sensitive customer and business data may be obtained through inadequate use of security controls by CompoSecure’s customers, suppliers or other vendors.

CompoSecure has administrative, technical and physical security measures in place and has policies and procedures in place to both evaluate the security protocols and practices of its vendors and to contractually require service providers to whom CompoSecure discloses data to implement and maintain reasonable privacy and security measures. However, although cybersecurity remains a high priority, CompoSecure’s activities and investment may not sufficiently protect its system or network against cyber threats, nor sufficiently prevent or limit the damage from any future security breaches. As these threats continue to evolve, CompoSecure may be required to expend significant capital and other resources to protect against these security breaches or to alleviate problems caused by these breaches, including costs to deploy additional personnel and protection technologies, train employees and engage third-party experts and consultants, which could materially and adversely affect CompoSecure’s business, financial condition and results of operations. Although CompoSecure maintains cyber liability insurance, CompoSecure cannot be certain that its coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to CompoSecure on economically reasonable terms or at all. Furthermore, any material breach of CompoSecure’s security systems could harm its competitive position, result in a loss of customer trust and confidence and cause CompoSecure to incur significant costs to mitigate or remedy any damage resulting from system or network disruptions, whether caused by cyber-attacks, security breaches or otherwise, which could ultimately adversely affect its business, financial condition and results of operations and adversely affect the CompoSecure Management Feepayable to us.

System outages, data loss or other interruptions affecting CompoSecure’s operations could adversely affect its business and reputation.

The ability to efficiently execute and operate business functions and systems without interruption is critical to CompoSecure’s business. A significant portion of the communication between CompoSecure’s employees, customers and suppliers relies upon CompoSecure’s integrated and complex IT systems.

CompoSecure depends on the reliability of its IT infrastructure and software and its ability to expand and innovate its technologies and technological processes in response to changing needs. A system outage or data loss or interruption could cause damage to CompoSecure’s brand and reputation. Such operational interruptions could also cause CompoSecure to become liable to third parties, including its customers.

CompoSecure must be able to protect its processing and other systems from interruption to successfully operate its business. In an effort to do so, CompoSecure has taken preventative actions and adopted protective procedures to ensure the continuation of core business operations in the event that normal operations could not be performed because of events outside of CompoSecure’s control. These actions and procedures taken and adopted by CompoSecure may, however, insufficiently prevent or limit the damage from future disruptions, if any, and any such disruptions could adversely affect CompoSecure’s business, financial condition and results of operations and could adversely affect the CompoSecure Management Fee payable to us.

Disruptions at CompoSecure’s primary production facility may adversely affect its business, results of operations and/or financial condition.

A substantial portion of CompoSecure’s manufacturing capacity is located at its primary production facility. Any serious disruption at such facility could impair CompoSecure’s ability to manufacture enough products to meet customer demand and could increase its costs and expenses and adversely affect its revenues. CompoSecure’s other facilities may not have the requisite equipment or sufficient capacity, may have higher costs and expenses, or may experience significant delays to adequately increase production to satisfactorily meet its customers’ expectations or requirements. Long-term production disruptions may cause its customers to modify their payment card programs to use plastic cards or to seek an alternative supply of metal cards. Any such production disruptions could adversely impact CompoSecure’s business, financial condition and results of operations, which could adversely impact the CompoSecure Management Fee payable to us.

CompoSecure’s future growth may depend upon its ability to develop, introduce, manufacture and commercialize new products, which can be a lengthy and complex process. If CompoSecure is unable to introduce new products and services in a timely manner, its business could be materially adversely affected.

The markets for CompoSecure’s products and services are subject to technological changes, frequent introductions of new products and services and evolving industry standards. The process for developing innovative or technologically enhanced products can deplete time, money and resources and requires the ability to accurately forecast technological, market and industry trends. For example, CompoSecure has historically focused on the payment card industry, but it is a new entrant into the digital assets industry. In order to achieve successful technical execution of new products, CompoSecure may need to undertake time-consuming and expensive research and development activities, which could negatively impact the servicing of its existing customers. CompoSecure may also experience difficult market conditions, such as the recent widespread disruptions in the digital asset industry, that could delay or prevent the successful research and development, marketing launches and consumer deployment of such newly designed products, whereby CompoSecure could incur significant additional cost and expense. If the products and solutions derived from the Arculus platform fail to gain market acceptance, CompoSecure’s ability to achieve future growth could be significantly impaired. In addition, competitors may develop and commercialize competing products faster and more efficiently than CompoSecure is able to do so, which could further negatively impact its business.

CompoSecure’s product and service offerings could be rendered obsolete if CompoSecure is unable to develop and introduce innovative products in a cost-effective and timely manner. In particular, the rise in the adoption of wireless or mobile payment systems may make physical metal cards less attractive as a method of payment, which could result in less demand for these products. Although to date CompoSecure has not witnessed a material reduction in card-based payments in the United States resulting from the emergence of wireless or mobile payment systems, such payment systems offer consumers an alternative method to make purchases without the need to carry a physical card by relying on cellular telephones or other technological products to make payments. If these wireless or mobile payment systems are widely adopted, it could result in a reduction of the number of physical payment cards issued to consumers. Moreover, other developing or unforeseen technology solutions and products could render CompoSecure’s existing products unpopular, irrelevant or obsolete altogether.

CompoSecure’s ability to develop and deliver new products and services successfully will depend on various factors, including its ability to: effectively identify and capitalize upon opportunities in new and emerging product markets; invest resources in innovation and research and development; develop and implement new processes for the manufacture or offer of new products or services; complete and introduce new products and integrated services solutions in a timely manner; license any required third-party technology or intellectual property rights; qualify for and obtain required industry certification for its products; and retain and hire talent experienced in developing new products and services. CompoSecure’s business and growth also depend in part on the success of its strategic relationships with third parties, including technology partners or other technology companies whose products are integrated with CompoSecure’s products.

Failure of any of these technology companies to maintain, support or secure their technology platforms in general, and CompoSecure’s integrations in particular, or errors or defects in such third parties’ technologies or products, could adversely affect CompoSecure’s relationships with customers, damage its brand and reputation and could adversely affect CompoSecure’s business, financial condition and results of operations, which could adversely affect the CompoSecure Management Fee payable to us.

CompoSecure’s ability to enhance its existing products and to develop and introduce innovative new products that continue to meet the needs of its customers may affect its future success. CompoSecure may experience difficulties that could delay or prevent the successful development, marketing or deployment of these products, or its newly enhanced services may not meet market demands or achieve market traction. CompoSecure’s potential failure to complete or gain market acceptance of new products, services and technologies could adversely affect its ability to retain existing customers or attract new ones.

A disruption in CompoSecure’s operations or supply chain or the performance of its suppliers, liquidity partners and/or development partners could adversely affect its business and financial results.

As a company engaged in manufacturing and distribution, CompoSecure is subject to the risks inherent in such activities, including disruptions or delays in supply chain or information technology, product quality control, as well as other external factors over which CompoSecure has no control. Some of the key components used in the manufacture of CompoSecure’s products are metals, NFC-enabled chips and EMV chips, which CompoSecure sources from several key suppliers. CompoSecure obtains its components from multiple suppliers located in the United States and abroad, on a purchase order basis. Changes in the financial or business condition of CompoSecure’s suppliers and/or development partners could subject CompoSecure to losses or adversely affect its ability to bring products to market. Additionally, the failure of CompoSecure’s suppliers and/or development partners to comply with applicable standards, perform as expected and deliver goods and services in a timely manner in sufficient quantities could adversely affect CompoSecure’s customer service levels and overall business. Any increases in the costs of goods and services for CompoSecure’s business may also adversely affect its profit margins, particularly if CompoSecure is unable to achieve higher price increases or otherwise increase cost or operational efficiencies to offset the higher costs.

Additionally, CompoSecure partners with third-party providers to offer certain Arculus-related services to its customers. If any of these third parties experiences operational interference or disruptions, fails to perform its obligations and meet CompoSecure’s expectations, experiences a cybersecurity incident, fails to comply with applicable regulatory and/or licensing requirements which may evolve over time or is subject to regulatory enforcement proceedings concerning their operations, the operations of the Arculus solutions could be disrupted or otherwise adversely affected.

Security markets, including the market for authentication solutions, are rapidly evolving to address increasing and challenging cyber threats, including identity theft, and CompoSecure’s Arculus Authenticate solutions may not achieve widespread market acceptance. In addition, there is a risk that the Arculus Authenticate solutions may not provide protection against all or a sufficient amount of the ever-changing security vulnerabilities, exploits or cyber-attacks.

Cybersecurity markets are experiencing significant and fast-paced technological change, evolving industry standards and customer needs. CompoSecure’s Arculus Authenticate solutions represent a new and innovative approach to identity protection and may not achieve widespread market acceptance. Other methods, technologies, products or services may offer similar or better authentication solutions than CompoSecure’s hardware authentication solutions. If CompoSecure is unable to adapt to such changes, its ability to compete effectively may be adversely impacted, which could have a negative effect on CompoSecure’s business, financial condition or results of operations, which could adversely impact the CompoSecure Management Fee payable to us. In addition, there is a risk that the Arculus Authenticate solutions may not provide protection against all or a sufficient amount of the ever-changing security vulnerabilities, exploits or cyber-attacks.

Internal and external factors, including possible defects in CompoSecure’s products, or system failures in services provided by third parties for use with Arculus Authenticate solutions, could cause CompoSecure’s products and/or services to become vulnerable to security attacks which could result in the loss of identity protection for businesses and consumers. As the Arculus Authenticate solutions include hardware tokens which are expected to be replaced from time to time as needed (similar to payment cards), CompoSecure does not intend to provide remote updates or upgrades to its hardware products. There is, therefore, a risk that CompoSecure’s hardware authentication products could become ineffective against evolving cybersecurity threats. Any such developments, real or perceived, may have a negative impact on CompoSecure’s reputation, which could have a negative effect upon its business, financial condition or results of operations, andwhich could negatively impact the CompoSecure Management Feepayable to us.

Digital asset storage systems, such as the Arculus Cold Storage Wallet, are subject to potential illegal misuse, risks related to a loss of funds due to theft of digital assets, security and cybersecurity risks, system failures and other operational issues, which could cause damage to CompoSecure’s reputation and brand.

Digital assets have the potential to be used for financial crimes or other illegal activities. Even if CompoSecure complies with all laws and regulations, CompoSecure has no ability to ensure that its customers, partners or others to whom it licenses or sells its products and services comply with all laws and regulations applicable to them and their transactions. Any negative publicity CompoSecure receives regarding any allegations of unlawful uses of the Arculus Cold Storage Wallet could damage its reputation, and such damage could be material and adverse, including to aspects of CompoSecure’s business that are unrelated to the Arculus platform. More generally, any negative publicity regarding unlawful uses of digital assets in the marketplace could materially reduce the demand for CompoSecure’s products and solutions derived from the Arculus platform.

The Arculus Cold Storage Wallet uses an architecture where the private keys needed to access digital assets are stored outside of the Internet. Through the use of the Arculus Cold Storage Wallet, CompoSecure’s three-factor authentication technology may be able to increase the safety of users’ assets during storage, as compared to storing such digital assets in a hot storage wallet, which is constantly connected to the internet. Further, digital assets are controllable only by the possessor of both the unique public and private keys relating to the local or online digital wallet in which they are held, which wallet’s public key or address is reflected in the public network. There is no guarantee that these security measures or any that CompoSecure may develop in the future will be effective. Notwithstanding the increased security of the Arculus Cold Storage Wallet as compared to a hot storage wallet system, any loss of private keys, or hack or other compromise or failure, of the Arculus Cold Storage Wallet and its security features could materially and adversely affect CompoSecure’s customers’ ability to access or sell their digital assets and could cause significant reputational harm to CompoSecure’s Arculus Cold Storage Wallet business, which could have a material adverse effect on CompoSecure’s business, financial condition and results of operations and materially adversely affect the CompoSecure Management Fee payable to us.

Regulatory changes or actions may restrict the use of the Arculus Cold Storage Wallet or digital assets in a manner that adversely affects CompoSecure’s business, prospects or operations.

Regulatory uncertainty surrounding the digital asset environment and the regulatory classification of such digital assets

As digital assets have grown in both popularity and market size, the regulatory approach by governments worldwide has varied significantly, with some deeming them illegal and others permitting their use and trade under specified conditions. Currently, there is no uniformly applicable legal or regulatory regime governing digital assets in most jurisdictions, including in the United States.

The occurrence of adverse market events, such as bankruptcies of prominent digital asset entities (like FTX), may increase regulatory scrutiny and may prompt new compliance requirements that could adversely affect CompoSecure’s ability to develop and offer digital asset-related services and products, such as the Arculus Cold Storage Wallet, or impose significant costs on CompoSecure.

In the United States, the legal and regulatory landscape applicable to digital assets remains uncertain, with overlapping authority existing between and among various U.S. federal agencies, including the U.S. Commodity Futures Trading Commission (the “CFTC”) and the SEC. This regulatory overlap contributes to ongoing legal and regulatory ambiguity, particularly concerning whether and, if so, when certain transactions in digital assets constitute transactions in securities.

U.S. regulators, courts and lawmakers alike are grappling with these questions, and the legal landscape remains uncertain.

While the SEC has brought multiple enforcement actions against digital asset projects, including trading platforms that the SEC believes were operating, among other things, as unregistered exchanges, thus far, such cases have not resolved the legal uncertainty in the United States concerning digital assets, including questions concerning the very application of the U.S. federal securities laws to digital assets and digital asset-related activities, including in the secondary trading market. Several of such recent enforcement actions are court cases that remain ongoing and, to the extent that courts have rendered opinions, those opinions, and the reasoning in support of them, have not necessarily been consistent with one another.

While actions taken by President Trump following his January 2025 inauguration have appeared to signal the beginning of a much more favorable U.S. governmental approach to digital assets, legal and regulatory uncertainty remains, including concerning the regulatory characterization and treatment of various digital asset-related products, services, platforms, markets and activities, including non-fungible tokens (“NFTs”), decentralized finance (“DeFi”) and decentralized autonomous organizations (“DAOs”), all of which have drawn regulatory attention in recent years.

In particular, as a result of actions by private plaintiffs and regulators alike, under various theories of liability, among other things, DAOs have been characterized by certain plaintiffs as unincorporated associations or general partnerships, with some plaintiffs asserting that liability should be assigned to participants in DAO governance, while others have sought to establish joint and several liability for DAO members generally, including on negligence theories of liability. The terms “DeFi” and “DAO” may be interpreted broadly to encompass a wide variety of projects, services and participants, and if a regulator or private plaintiff were to claim that Arculus is deemed to have participated in or facilitated DeFi- or DAO-related activities that were in violation of applicable law, there may be significant associated risks, including the potential for joint and several liability.

In addition to the U.S. regulatory questions before the courts, multiple Congressional digital asset-related bills have been published, including some with a focus on digital asset market structure. While multiple bills describe joint oversight by the SEC and CFTC over the digital assets markets and focus on market structure, at this time, it is unclear whether any of these bills ultimately will become law.

Moreover, given recent geopolitical conflict and instability, certain U.S. legislators and regulators have signaled heightened concerns about national security and the importance of “know your customer” (“KYC”), anti-money laundering (“AML”), counter financing of terrorism (“CFT”) and sanctions checks and compliance, including concerns about potential use by certain terrorist groups of digital assets to fund their operations or evade U.S. sanctions. In addition to the introduction of potential digital asset-focused legislation in Congress aimed at addressing such concerns, regulators have focused on enforcement. In 2022 and 2023, OFAC sanctioned digital assets market participants alleged to have supported sanctioned countries and/or terrorist operations, and, in 2023, the U.S. Treasury’s FinCEN, pursuant to seldom-used powers granted to it under Section 311 of the USA PATRIOT Act, designated an entire class of transactions, namely transactions associated with digital asset mixers, as being of primary money laundering concern. At present, as a result of ongoing litigation concerning the virtual currency mixer known as Tornado Cash, uncertainty exists concerning the ability of OFAC to impose sanctions in the digital asset space, particularly in the case of immutable smart contracts.

In addition, the U.S. Treasury, the Internal Revenue Service (the “IRS”) and other agencies also continue to propose new rules and guidance applicable to digital assets, such as regulations on tax information reporting and withholding obligations. In December 2024, the U.S. Treasury finalized a rule requiring digital asset brokers, including non-custodial brokers, to report additional user information, although such rule is the subject of ongoing litigation.

In addition to a lack of clarity at the U.S. federal level, the various U.S. states and the District of Columbia take a variety of differing approaches to digital asset regulation and legislation, which may not be consistent with the positions of other U.S. states or other jurisdictions, or with the U.S. federal government’s approach. For that reason, even if the U.S. federal government under the Trump administration takes a more crypto-friendly stance to digital asset regulations, that does not necessarily mean that U.S. states or other jurisdictions will adopt a consistent or similar approach.

In sum, the U.S. federal regulators and courts, and various U.S. state and non-U.S. regulators, are still developing their frameworks for regulating digital assets. If CompoSecure is found to have supported purchase and swap transactions in the Arculus Cold Storage Wallet for digital assets which subsequently are determined to be securities, it is possible that CompoSecure could be viewed as inadvertently acting as an unlicensed broker-dealer which could subject it to, among other things, regulatory enforcement actions, censure, monetary fines, restrictions on the conduct of CompoSecure’s Arculus activities and/or rescission/damages claims by customers who use the Arculus Cold Storage Wallet. CompoSecure’s failure to comply with applicable laws or regulations, or the costs associated with defending any action alleging its noncompliance with applicable laws or regulations, could materially and adversely affect CompoSecure, its business and its results of operations, which could materially and adversely affect the CompoSecure Management Fee payable to us.

Further, a particular digital asset’s status as a “security” or other regulatory investment or the treatment of digital currency for tax purposes, in any relevant jurisdiction is subject to a high degree of uncertainty and potential inconsistency across regulatory regimes, and if CompoSecure is unable to properly characterize a digital asset or assess its tax treatment, CompoSecure may be

subject to regulatory scrutiny, investigations, fines, and other penalties, which may adversely affect CompoSecure’s business, operating results and financial condition, each of which may materially and adversely affect the CompoSecure Management Fee payable to us.

In order to determine whether a particular digital asset is a security (or whether transactions in such digital assets would constitute an offer or sale of a security), prior to supporting purchase and swap transactions on the Arculus Cold Storage Wallet in such digital asset, CompoSecure relies upon legal and regulatory analysis of legal counsel with expertise in the digital asset industry. While the methodology CompoSecure has used, and expects to continue to use, to determine if purchase and swap transactions in a digital asset will be supported in the Arculus Cold Storage Wallet is ultimately a risk-based assessment, it does not preclude legal or regulatory action based on the presence of a security.

Because the Arculus Cold Storage Wallet may facilitate purchase and swap transactions in digital assets that could be classified as “securities,” CompoSecure’s business may be subject to additional risk because such digital assets are subject to heightened scrutiny, including under customer protection, anti-money laundering, counter terrorism financing and sanctions regulations. To the extent the Arculus Cold Storage Wallet supports purchase and swap transactions in any digital assets that are deemed to be securities under any of the laws of the U.S. or another jurisdiction, or in a proceeding in a court of law or otherwise, it may have adverse consequences. To counter such risks, CompoSecure may have to remove Arculus Cold Storage Wallet support for purchase and swap transactions in certain digital assets if and when such digital assets are designated as securities, which could hurt sales of CompoSecure’s Arculus products and services and materially adversely affect the CompoSecure Management Fee payable to us. Alternatively, CompoSecure may be required to partner with third-party registered securities broker/dealers to facilitate securities trading by Arculus customers, and CompoSecure may be unsuccessful in efforts to establish such a partnership.

In addition, CompoSecure does not currently intend to effect or otherwise facilitate trading in securities by its Arculus customers through the use of its Arculus Cold Storage Wallet if such activities would require the use of a registered broker-dealer or investment adviser. Despite implementing policies and procedures to monitor compliance with relevant laws, with a goal of ensuring that CompoSecure’s Arculus activities do not result in CompoSecure inadvertently acting as an unregistered broker-dealer or investment advisor, CompoSecure cannot assure that these measures will be completely effective. Should regulators challenge CompoSecure’s stance regarding its non-obligations under various securities regulations, this could have a material and adverse impact on its operations. If CompoSecure is found by relevant regulatory agencies to have inadvertently acted as an unregistered broker-dealer with respect to purchase and swap transactions in particular digital assets, CompoSecure would expect to immediately cease supporting purchase and swap transactions in those digital assets unless and until either the digital asset at issue is determined by the SEC or a judicial ruling to not be a security, or it partners with a third-party registered broker-dealer or investment adviser, acquire a registered broker-dealer or investment adviser or register CompoSecure as a securities broker-dealer or investment adviser, any of which CompoSecure may elect not to do or may not be successful in doing. For any period of time during which CompoSecure is found to have inadvertently acted as an unregistered broker-dealer or investment adviser, CompoSecure could be subject to, among other things, regulatory enforcement actions, monetary fines, censure, restrictions on the conduct of its Arculus activities and/or rescission/damages claims by customers who use the Arculus Cold Storage Wallet. CompoSecure’s failure to comply with applicable laws or regulations, or the costs associated with defending any action alleging its noncompliance with applicable laws or regulations, could materially and adversely affect CompoSecure, its business and its results of operations and materially adversely affect the CompoSecure Management Fee payable to us.

CompoSecure believes the storage and peer-to-peer/send & receive functionality provided by the Arculus Cold Storage Wallet does not involve any purchase, sale or other transaction effected by it (or any party other than the sender and the recipient). Further, CompoSecure is not compensated for such user-directed activities. However, regulators may determine that user-directed peer-to-peer transfers using the Arculus Cold Storage Wallet, or other Arculus-related activities would require registration and compliance with broker-dealer and/or securities exchange regulations.

Regulatory Risks of Operating as an Unregistered Exchange or as Part of an Unregistered Exchange Mechanism

Any venue that brings together purchasers and sellers of digital assets that are characterized as securities in the United States is generally subject to registration as a national securities exchange, or must qualify for an exemption, such as by being operated by a registered broker-dealer as an alternative trading system (or “ATS”). To the extent that any venue accessed via the Arculus Cold Storage Wallet is not so registered (or appropriately exempt), CompoSecure may be unable to permit continued support for purchase and swap transactions for digital assets that become subject to characterization as securities and due to operation of an unregistered

exchange or as part of an unregistered exchange mechanism, CompoSecure could be subject to significant monetary penalties, censure or other actions that may have a material and adverse effect on CompoSecure. While CompoSecure does not believe that the Arculus Cold Storage Wallet, which facilitates purchase and swap transactions in certain digital assets, is itself a securities exchange or ATS or is part of an unregistered exchange mechanism, regulators may determine that this is the case, and CompoSecure would then be required to register as a securities exchange or qualify and register as an ATS, either of which could cause CompoSecure to discontinue its purchase and swap support for such digital assets or otherwise limit or modify Arculus Cold Storage Wallet functionality or access.

In September 2022, the SEC proposed a rule change concerning the definition of “exchange.” Especially in light of the recent political developments in the United States, it is not yet clear whether or in what form such proposed rule change may be adopted. Nevertheless, it remains possible that a change to the definition of “exchange” could result in regulators determining that the Arculus Cold Storage Wallet is functioning as a securities exchange or ATS or is part of an unregistered exchange mechanism, in which case, the potential registration requirements, or cessation, limitation or other modifications contemplated above could become necessary or advisable. Any such discontinuation, limitation or other modification could negatively affect CompoSecure’s business, operating results, and financial condition, which could negatively impact the CompoSecure Management Fee payable to us.

CompoSecure’s inability to safeguard against misappropriation or infringement of its intellectual property may adversely affect its business.

CompoSecure’s patents, trade secrets and other intellectual property rights are critical to its business. CompoSecure’s ability to safeguard its proprietary product designs and production processes against misappropriation by third parties is necessary to maintain CompoSecure’s competitive position within its industry. Therefore, CompoSecure routinely enters into confidentiality agreements with its employees, consultants and strategic partners to limit access to, and distribution of, CompoSecure’s proprietary information in an effort to safeguard its proprietary rights and trade secrets. However, such efforts may not adequately protect CompoSecure’s intellectual property against infringement and misappropriation by unauthorized third parties. Such third parties could interfere with CompoSecure’s relationships with customers if they are successful in attempts to misappropriate CompoSecure’s proprietary information or copy its products designs, or portions thereof. Additionally, because some of CompoSecure’s customers purchase products on a purchase order basis and not pursuant to a detailed written contract, where CompoSecure does not have the benefit of written protections with respect to certain intellectual property terms beyond standard terms and conditions, CompoSecure may be exposed to potential infringement of its intellectual property rights. Enforcing its intellectual property rights against unauthorized use may be expensive and cause CompoSecure to incur significant costs, all of which could adversely affect CompoSecure’s business, financial condition and results of operations. There is no assurance that CompoSecure’s existing or future patents will not be challenged, invalidated or otherwise circumvented. The patents and intellectual property rights CompoSecure obtains, including its intellectual property rights which are formally registered in the United States and abroad, may be insufficient to provide meaningful protection or commercial advantage. Moreover, CompoSecure may have difficulty obtaining additional patents and other intellectual property protections in the future. Effective patent, trademark, service mark, copyright and trade secret protection may not be available in every country in which CompoSecure provides its products or services. Any of the foregoing factors may have a material adverse effect on CompoSecure’s business, which may materially adversely affect the CompoSecure Management Fee payable to us.

CompoSecure may incur substantial costs because of litigation or other proceedings relating to patents and other intellectual property rights.

Companies in CompoSecure’s industry have commenced litigation to properly protect their intellectual property rights. Any proceedings or litigation that CompoSecure initiates to enforce its intellectual property rights, or any intellectual property litigation asserted against CompoSecure, could be costly and divert the attention of managerial and other personnel and further, could result in an adverse judgment or other determination that could preclude CompoSecure from enforcing its intellectual property rights or offering some of its products to its customers. Royalty or other payments arising in settlements could negatively impact CompoSecure’s profit margins and financial results. If CompoSecure is unable to successfully defend against claims that it has infringed the intellectual property rights of others, CompoSecure may need to indemnify some customers and strategic partners related to allegations that its products infringe the intellectual property rights of others. Additionally, some of CompoSecure’s customers, suppliers and licensors may not be obligated to indemnify CompoSecure for the full costs and expenses of defending against infringement claims. CompoSecure may also be required to defend against alleged infringement of the intellectual property rights of third parties because its products contain technologies properly sourced from suppliers or customers. CompoSecure may be unable to

determine in a timely manner or at all whether such intellectual property use infringes the rights of third parties. Any such litigation or other proceedings could adversely affect CompoSecure’s business, financial condition and results of operations and could adversely affect the CompoSecure Management Fee payable to us.

Production quality and manufacturing process disruptions could adversely affect CompoSecure’s business.

CompoSecure’s products and technological processes are highly complex, require specialized equipment to manufacture and are subject to strict tolerances and requirements. CompoSecure has experienced in the past, and may experience in the future, production disruptions due to machinery or technology failures, or as a result of external factors such as delays or quality control issues regarding materials provided by CompoSecure’s suppliers. Utilities interruption or other factors beyond CompoSecure’s control like natural disasters may also cause production disruptions. Such disruptions can reduce product yields and product quality, or interrupt or halt production altogether. As a result, CompoSecure may be required to deliver products at a lower quality level in a less timely or cost-effective manner, rework or replace products, or may not be able to deliver products at all. Any such event could adversely affect CompoSecure’s business, financial condition and results of operations, which could adversely affect the CompoSecure Management Fee payable to us.

CompoSecure is dependent on certain distribution partners for distribution of its products and services. A loss of distribution partners could adversely affect CompoSecure’s business.

A small number of distribution partners currently deliver a significant percentage of CompoSecure’s products and services to customers. CompoSecure intends to continue devoting resources in support of its distribution partners, but there are no guarantees that these relationships will remain in place over the short or long term. In addition, CompoSecure cannot be assured that any of these distribution partners will continue to generate current levels of customer demand. A loss of any of these distribution partners could have a material adverse effect on CompoSecure’s business, financial condition and results of operations, which could materially adversely affect the CompoSecure Management Fee payable to us.

CompoSecure faces competition that may result in a loss of its market share and/or a decline in profitability.

CompoSecure’s industry is highly competitive and CompoSecure expects it to remain highly competitive as competitors cut production costs, new product markets develop and other competitors attempt to enter the markets in which CompoSecure operates or new markets in which it may enter. Some of CompoSecure’s existing competitors have more sales, greater marketing, more specialized manufacturing and highly efficient distribution processes. CompoSecure may also face competition from new competitors that may enter its industry or specific product market. Such current or new competitors may develop technologies, processes or products that are better suited to succeed in the marketplace as a result of enhanced features and functionality at lower costs, particularly as technological sophistication of such competitors and the size of the market increase. These factors could lower CompoSecure’s average selling prices, reducing gross margins. If CompoSecure cannot sufficiently reduce its production costs or develop innovative technologies or products, CompoSecure may not be able to compete effectively in its product markets and maintain market share, which could adversely affect its business, financial condition and results of operations and adversely affect the CompoSecure Management Fee payable to us.

CompoSecure Holdings’ long-lived assets represent a significant portion of its total assets, and their full value may never be realized.

CompoSecure Holdings’ long-lived assets recorded as of December 31, 2024 were $28.9 million, representing approximately 11.1% of its total assets, of which CompoSecure Holdings has recorded plant, equipment and leasehold improvements of $23.4 million, as CompoSecure Holdings operations require significant investments in machinery and equipment.

CompoSecure Holdings reviews other long-lived assets for impairment on an as-needed basis and when circumstances, alterations or other events indicate that an asset group or carrying amount of an asset may not be recoverable. Examples of these other long-lived assets include intangible but identifiable assets and plant, equipment and leasehold improvements. Such write-downs of long-lived assets may result from a drop in future expected cash flows and worsening performance, among other factors. If CompoSecure Holdings must write-down long-lived assets, it records the appropriate charge, which may adversely affect its results of operations and may adversely affect the CompoSecure Management Fee payable to us.

CompoSecure’s failure to operate its business in compliance with the security standards of the payment card industry or other industry standards applicable to its customers, such as payment networks certification standards, could adversely affect its business.

Many of CompoSecure’s customers issue their cards on the payment networks that are subject to the security standards of the payment card industry or other standards and criteria relating to product specifications and supplier facility physical and logical security that CompoSecure must satisfy in order to be eligible to supply products and services to such customers. CompoSecure’s contractual arrangements with its customers may be terminated if CompoSecure fails to comply with these standards and criteria.

CompoSecure makes significant investments in its facilities in order to meet these industry standards, including investments required to satisfy changes adopted from time to time in industry standards. CompoSecure may become ineligible to provide products and services to its customers if CompoSecure is unable to continue to meet these standards. Many of the products CompoSecure produces and services CompoSecure provides are subject to certification with one or more of the payment networks. CompoSecure may lose the ability to produce cards for or provide services to banks issuing credit or debit cards on the payment networks if CompoSecure were to lose its certification from one or more of the payment networks or payment card industry certification for one or more of CompoSecure’s facilities. If CompoSecure is not able to produce cards for or provide services to any or all of the issuers issuing debit or credit cards on such payment networks, CompoSecure could lose a substantial number of its customers, which could have a material adverse effect on its business, financial condition and results of operations, and which could have a material adverse effect on the CompoSecure Management Fee payable to us.

As consumers and businesses spend less, CompoSecure’s business, operation outcomes and financial state may be adversely affected.

Companies that rely heavily on consumer and business spending are exposed to changing economic conditions and are impacted by changes in consumer confidence, consumer spending, discretionary income levels or consumer purchasing habits. A continuous decline in general economic conditions, particularly in the United States, or increases in interest rates, may reduce demand for CompoSecure’s products, which could negatively impact its sales. An economic downturn could cause credit card issuers to switch card programs to plastic cards, seek lower-priced metal hybrid card suppliers, reduce credit limits, close accounts and become more selective with respect to whom they issue credit cards. Such conditions and potential outcomes could adversely affect CompoSecure’s financial performance, business and results of operations, each of which could adversely affect the CompoSecure Management Fee payable to us.

Product liability and warranty claims and their associated costs may adversely affect CompoSecure’s business.

The nature of CompoSecure’s products is highly complex. As a result, CompoSecure cannot guarantee that defects will not occur from time to time. CompoSecure may incur extensive costs as a result of these defects and any resulting claims. For example, product recalls, writing down defective inventory, replacing defective items, lost sales or profits, and third-party claims can all give rise to costs incurred by CompoSecure. CompoSecure may also face liability for judgments and/or damages in connection with product liability and warranty claims. Damage to CompoSecure’s reputation could occur if defective products are sold into the marketplace, which could result in further lost sales and profits. To the extent that CompoSecure relies on purchase orders to govern its commercial relationships with its customers, CompoSecure may not have specifically negotiated the allocation of risk for product liability obligations. Instead, CompoSecure typically relies on warranties and limitations of liability included in its standard forms of order acceptance, invoice and other contract documents with its customers. Similarly, CompoSecure obtains products and services from suppliers, some of which also use purchase order documents which may include limitations on product liability obligations with respect to their products and services. As a result, CompoSecure may bear all or a significant portion of any product liability obligations rather than transferring this risk to its customers. CompoSecure’s reputation would be harmed and there could be a material adverse effect on its business, financial condition and results of operations if any of these risks materialize, each of which could have a material adverse effect on the CompoSecure Management Fee payable to us.

If tariffs and other restrictions on imported goods are imposed or increased by the U.S. government, CompoSecure’s revenue and operations may be materially and adversely affected.

A portion of the raw materials used by CompoSecure to manufacture its products are obtained, directly or indirectly, from companies located outside of the United States. There is currently significant uncertainty about the future relationship between the

U.S. and various other countries with respect to trade policies and tariffs. Recently, tariffs have been imposed on imports from certain countries outside of the United States. For example, the Trump administration has instituted substantial changes to U.S. foreign trade policy with respect to China and other countries, including a significant increase in tariffs on goods imported into the U.S., and has signaled possibly imposing further restrictions on international trade. As a result, further trade restrictions and/or tariffs may be forthcoming. Certain international trade agreements may also be at risk, as the current U.S. administration has voiced some opposition in respect thereof. These factors may stagnate the economy, impact relationships with and access to suppliers, increase the costs of certain raw materials CompoSecure purchases, and/or materially and adversely affect CompoSecure’s business, financial condition and results of operations. These and future tariffs, as well as any other global trade developments, bring with them uncertainty. CompoSecure cannot predict future changes to imports covered by tariffs or which countries will be included or excluded from such tariffs. The reactions of other countries and resulting actions on the United States and similarly situated companies could negatively impact CompoSecure’s business, financial condition and results of operations. The realization of each of these risks could negatively impact the CompoSecure Management Fee payable to us.

CompoSecure’s international sales subject CompoSecure to additional risks that can adversely affect its business, operating results and financial condition.

During each of 2024 and 2023, CompoSecure derived 18% of its revenue from sales to customers located outside the U.S. CompoSecure’s ability to convince customers to expand their use of CompoSecure’s products or renew their agreements with CompoSecure are directly correlated to CompoSecure’s direct engagement with such customers. To the extent that CompoSecure is unable to engage with non-U.S. customers effectively, it may be unable to grow sales to international customers to the same degree it has experienced in the past.

CompoSecure’s international operations subject it to a variety of risks and challenges, including:

For example, in response to the rapidly developing conflict between Russia and Ukraine, the United States has imposed and may further impose, and other countries may additionally impose, broad sanctions or other restrictive actions against governmental and other entities in Russia. CompoSecure presently produces metal credit cards for a distributor that distributes such cards for resale by a Russian-based bank. While the existing sanctions do not currently prohibit the production and sale of CompoSecure’s metal credit cards to this customer, additional sanctions may be imposed in the future that could prevent CompoSecure from selling to this customer or other customers in the affected regions. Additionally, further escalation of geopolitical tensions could have a broader impact that extends into other markets where CompoSecure does business. Any of these risks could adversely affect CompoSecure’s international sales, reduce its international revenues or increase its operating costs, adversely affecting its business, financial condition and operating results, and each of which could adversely affect the CompoSecure Management Fee payable to us.

CompoSecure relies on licensing arrangements in production and other fields, and actions taken by any of its licensing partners could have a material adverse effect on its business.

Some of CompoSecure’s products integrate third-party technologies that CompoSecure licenses or otherwise obtains the right to use. CompoSecure has entered into licensing agreements that provide access to technology owned by third parties. The terms of CompoSecure’s licensing arrangements vary. These different terms could have a negative impact on CompoSecure’s performance to the extent new or existing licensees demand a greater proportion of royalty revenues under CompoSecure’s licensing arrangements. Additionally, such third parties may not continue to renew their licenses with CompoSecure on similar terms or at all, which could negatively impact CompoSecure’s net sales. If CompoSecure is unable to continue to successfully renew these agreements, it may lose its access to certain technologies relied upon to develop certain of its products. The loss of access to those technologies, if not replaced with internally developed or other licensed technology, could have a material adverse effect on CompoSecure’s business and results of operations and could have a material adverse effect on the CompoSecure Management Fee payable to us.

The adoption of new tax legislation could affect CompoSecure’s financial performance.

CompoSecure is subject to income and other taxes in the United States. CompoSecure’s effective tax rate in the future could be adversely affected by changes in tax laws. More generally, it is possible that U.S. federal income or other tax laws or the interpretation of tax laws will change. It is difficult to predict whether and when there will be tax law changes having a material adverse effect on CompoSecure’s business, financial condition, results of operations and cash flows, which could have a material adverse effect on the CompoSecure Management Fee payable to us.

Pandemics or a resurgence of a pandemic may adversely affect CompoSecure’s business, financial condition, liquidity or results of operations.

The COVID-19 pandemic negatively impacted certain aspects of CompoSecure’s business and operations. The resurgence of the COVID-19 pandemic, or a future pandemic or health epidemic, could adversely affect CompoSecure’s business, financial condition, liquidity or results of operations, and the CompoSecure Management Fee payable to us. These adverse effects include, but are not limited to, the potential adverse effects on the global economy, CompoSecure’s manufacturing processes, including its supply chain, or on its employees. The ultimate impact will depend on the severity and duration of the pandemic and actions taken by governmental authorities and other third parties in response, each of which is uncertain and difficult to predict.

Risks Related to Other Managed Companies

Our managed companies may be subject to a number of inherent risks.

We expect that our results will be highly dependent on our ability to negotiate satisfactory management agreements with, and generate management fees from, additional companies that are diversified by sector, industry and geography. These managed companies and their respective businesses will involve a number of significant risks, including that the companies we seek to enter into management agreements with may be:

Any of the foregoing could have material adverse impacts on our management fees and negatively impact our financial condition and results of operations.

Economic recessions or downturns could impair our managed companies and harm our operating results.

The current macroeconomic environment is characterized by labor shortages, high interest rates, persistent inflation, foreign currency exchange volatility, volatility in global capital markets and growing recession risk. We expect that the risks associated with our and our future managed companies’ businesses will be more severe during periods of economic slowdown or recession. Such managed companies may be susceptible to economic slowdowns or recessions. Economic slowdowns or recessions could lead to worse than expected performance at our managed companies, which could result in decreases in the performance- based fees we expect to be paid pursuant to our management agreements. These events could harm our operating results.

Changes in the laws or regulations governing the businesses of our managed companies and any failure by us or our managed companies to comply with these laws or regulations, could negatively affect the profitability of our operations or of our managed companies.

Any future managed companies will be subject to changing rules and regulations of federal and state governments, as well as the stock exchanges on which their equity securities are listed. These entities, including the Public Company Accounting Oversight Board, the SEC, the New York Stock Exchange and the Nasdaq Stock Market LLC have issued a significant number of new and increasingly complex requirements and regulations over the course of the last several years and continue to develop additional regulations. In particular, changes in the laws or regulations or the interpretations of the laws and regulations that apply to future managed companies could significantly affect their operations and their cost of doing business. Our managed companies will also be subject to federal, state and local laws and regulations and will be subject to judicial and administrative decisions that affect their operations, and could be subject to additional governmental actions such as tariffs. If these laws, regulations or decisions change, our managed companies may have to incur significant expenses in order to comply, or they might have to restrict their respective operations, in each case which may impact their financial condition and results of operations, which could adversely impact the management fees that we expect to receive in the future.

In addition, if our managed companies do not comply with applicable laws, regulations and decisions, they or we could become subject to civil fines and criminal penalties, any of which could have a material adverse effect upon our business, financial condition and results of operations.

We and our managed companies may experience cyber security incidents and are subject to cyber security risks.

We, and the respective businesses of any future additional managed companies will, rely on secure information technology systems for data processing, storage and reporting. These information technology systems may in the past have been, and may in the future be subject to, cyber-attacks, even if such companies design, implement and maintain effective security and controls. Cyber-attacks include, but are not limited to, gaining unauthorized access to digital systems (e.g., through “hacking,” malicious software

coding, social engineering or “phishing” attempts) for purposes of misappropriating assets or sensitive information, corrupting data or causing operational disruption. Cyber-attacks may also be carried out in a manner that does not require gaining unauthorized access, such as causing denial-of-service attacks on websites (i.e., efforts to make network services unavailable to intended users). Employees of ours and these managed companies may have been and may continue to be the target of fraudulent calls, emails and other forms of activities. Network, system, application and data breaches could result in operational disruptions or information misappropriation, which could have a material adverse effect on our and our managed companies’ respective businesses, results of operations and financial conditions.

Cyber security failures or breaches by other service providers (including, but not limited to, accountants, custodians, transfer agents and administrators) also have the ability to cause disruptions and impact business operations, potentially resulting in financial losses, impediments to trading, the inability of stockholders to transact business, violations of applicable privacy and other laws, regulatory fines, penalties, reputational damage, reimbursement or other compensation costs or additional compliance costs. In addition, substantial costs may be incurred in order to prevent any cyber incidents in the future. We cannot control the cyber security plans and systems put in place by our service providers and may not fully control the implementation and oversight of the security plans and systems of our managed companies. Even where such plans and systems exist, there are inherent limitations in such plans and systems including the possibility that certain risks have not been identified. We and our managed companies could be negatively impacted as a result. The costs related to cyber or other security threats or disruptions may not be fully insured or indemnified by other means. In addition, cyber-security has become a top priority for regulators around the world, and some jurisdictions have enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal data. If we or our managed companies fail to comply with the relevant laws and regulations, we or they could suffer financial losses, a disruption of operations in our or their respective businesses, liability to investors, regulatory intervention or reputational damage.

We may become involved in litigation, arbitration and governmental proceedings, including those stemming from third-party conduct beyond our control.

Our managed companies are and in the future may be, and we may in the future be, involved in or threatened with legal, arbitration and governmental proceedings or investigations from time to time in the ordinary course of business, including disputes with employees, competitors, customers, suppliers, competition authorities, regulators and other authorities, purported whistle-blowers or regulatory agencies concerning allegations of, among other things, breaches of contract, intellectual property infringement, logistics or manufacturing related topics, quality regulations, environmental, health and safety or employment issues, termination of business relationships or alleged or suspected violations of applicable laws in various jurisdictions. The outcome of potential future legal, arbitration and governmental proceedings is difficult to predict, and excessive verdicts do occur. If such proceedings are determined adversely to us or to our managed companies, we may be required to change our business practices or we may incur fines, penalties or monetary losses, some of which may be significant or could disrupt the operation of our business, and the financial performance of our managed companies may be adversely impacted, which may reduce our management fees. Exposure to litigation or other government action, whether directed at us, our customers, suppliers or managed companies, or our or their respective business partners, could also result in the distraction of management resources and adversely affect our reputation, which could have a material adverse effect on our business results, cash flows, financial condition or prospects. Additionally, we and our managed companies may be subject to investigations and extensive regulation by government agencies around the world. As a result, we expect that we may have interactions with government agencies on an ongoing basis. Criminal charges and substantial fines or civil penalties, as well as limitations on our ability to conduct business in applicable jurisdictions, could result from government investigations.

Investing in our securities involves a high degree of risk and is highly speculative.

An investment in our securities may not be suitable for someone with a low risk tolerance. The market price and liquidity of the market for our securities may be significantly affected by numerous factors, some of which are beyond our control and may not be directly related to our operating performance. These factors include:

Certain provisions in our certificate of incorporation, bylaws and Delaware law may discourage takeovers and limit the power of our stockholders.

Section 203 of the Delaware General Corporation Law, or the DGCL, prohibits a publicly held Delaware corporation from engaging in a business combination with an interested stockholder, generally a person, individually or together with any other interested stockholder, who owns or within the last three years has owned 15% of our voting stock, unless the business combination is approved in a prescribed manner. We have elected to opt out of Section 203 of the DGCL. However, our certificate of incorporation contains a provision that is of similar effect, except that it will exempt from its scope Investor, any direct or indirect transferee of Investor, any of their respective affiliates, any person managed by any member of Investor pursuant a management agreement or similar agreement, any successor of any of the foregoing persons or any “group”, or any member of any such “group”, to which such persons are a party under Rule 13d-5 of the Exchange Act, as described in the description of our common stock, which is filed as an exhibit to this Annual Report.

Any provision of our certificate of incorporation, our bylaws or Delaware law that has the effect of delaying or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of common stock and could also affect the price that some investors are willing to pay for our common stock. See the description of our common stock, which is filed as an exhibit to this Annual Report.

Our certificate of incorporation provides that certain courts in the State of Delaware or the federal district courts of the United States are the sole and exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or employees.

Our certificate of incorporation provides that, unless we consent in writing to the selection of an alternative forum, the Court of Chancery located within the State of Delaware is the sole and exclusive forum for any derivative action or proceeding brought on our behalf, any action asserting a claim of breach of a fiduciary duty owed by any current or former director, officer, employee, agent or stockholder to us or our stockholders, any action asserting a claim arising pursuant to the DGCL, our certificate of incorporation or our bylaws, or any action asserting a claim governed by the internal affairs doctrine. However, if the Court of Chancery within the State of Delaware lacks jurisdiction over such action, the action may be brought in another court of the State of Delaware or, if no court of the State of Delaware has jurisdiction, then in the United States District Court for the District of Delaware. Additionally, our certificate of incorporation states that the foregoing provision will not apply to claims arising under the Securities Act. Unless we consent in writing to the selection of an alternative forum, the federal district courts of the United States of America shall be the exclusive forum for the resolution of any complaint asserting a cause of action arising under the Securities Act. The exclusive forum provisions will be applicable to the fullest extent permitted by applicable law, subject to certain exceptions. Section 27 of the Exchange Act creates exclusive federal jurisdiction over all suits brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. As a result, the exclusive forum provisions will not apply to suits brought to enforce any duty or liability created by the Exchange Act or any other claim for which the federal courts have exclusive jurisdiction. There is, however, uncertainty as to whether a court would enforce the exclusive forum provisions, and investors cannot waive compliance with the federal securities laws and the rules and regulations thereunder. Furthermore, Section 22 of the Securities Act creates concurrent jurisdiction for state and federal courts over all suits brought to enforce any duty or liability created by the Securities Act or the rules and regulations thereunder.

Any person or entity purchasing or otherwise acquiring any interest in shares of our capital stock will be deemed to have notice of and, to the fullest extent permitted by law, to have consented to the provisions of our certificate of incorporation described above. The choice of forum provision may result in increased costs for investors to bring a claim. Further, the choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers, other employees or stockholders, which may discourage such lawsuits against us and our directors, officers, other employees or stockholders. However, the enforceability of similar forum provisions in other companies’ certificates of incorporation has been challenged in legal proceedings. If a court were to find the exclusive choice of forum provision contained in our certificate of

incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions.

Our certificate of incorporation contains a provision renouncing our interest and expectancy in certain corporate opportunities that may prevent us from receiving the benefit of certain corporate opportunities.

Under our certificate of incorporation, neither Investor nor any of its affiliates, officers, directors, employees, agents, stockholders, members or partners will have any duty to refrain from engaging, directly or indirectly, in the same business activities, similar business activities or lines of business in which we or our managed companies operate. In addition, our certificate of incorporation provides that, to the fullest extent permitted by law, no officer or director of ours who is also an officer, director, employee, agent, stockholder, member, partner or affiliate of Investor or their respective affiliates will be liable to us or our stockholders for breach of any fiduciary duty by reason of the fact that any such individual directs a corporate opportunity to Investor or their respective affiliates, instead of to us, or does not communicate information regarding a corporate opportunity to us that the officer, director, employee, agent, stockholder, member, partner or affiliate has directed to Investor or their respective affiliates. For example, certain directors of our Company who also serve as an officer, director, employee, agent, stockholder, member, partner or affiliate of Investor or its affiliates may pursue certain acquisitions or other opportunities that may be complementary to our business or the businesses of CompoSecure Holdings or our other managed companies from timeto time and, as a result, such acquisition or other opportunities may not be available to us. These potential conflicts of interest could have a material adverse effect on our business, financial condition, results of operations or prospects if attractive corporate opportunities are allocated by Investor to itself or its affiliates instead of to us. A description of our obligations related to corporate opportunities under our certificate of incorporation are more fully described in the description of our common stock, which is filed as an exhibit to this Annual Report.

We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to emerging growth companies will make shares of our common stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act, and we are eligible to take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not “emerging growth companies,” including, but not limited to, not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, and exemptions from the requirements of holding a non-binding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. We plan to take advantage of some or all of the reduced regulatory and reporting requirements that will be available to us as long as we qualify as an emerging growth company.

We could remain an “emerging growth company” for up to five years from the date of the consummation of the Spin-Off, or until the earliest of: (i) the last day of the first fiscal year in which our annual gross revenues exceed $1.235 billion; (ii) the date that we become a “large accelerated filer” as defined in Rule 12b-2 under the Securities Exchange Act of 1934, as amended, which would occur if the market value of our common stock that is held by non-affiliates exceeds $700.0 million as of the last business day of our most recently completed second fiscal quarter; or (iii) the date on which we have issued more than $1.0 billion in non- convertible debt during the preceding three-year period. We cannot predict if investors will find our common stock less attractive because we will rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile. We may take advantage of these reporting exemptions until we are no longer an emerging growth company.

We could incur substantial additional costs and experience temporary business interruptions, such costs may increase when we cease to be an emerging growth company, and we may not be adequately prepared to meet the requirements of an independent, publicly traded company on a timely or cost-effective basis.

We have been implementing information technology and other infrastructure to support certain of our business functions necessary to perform our management functions and those of CompoSecure Holdings and other potential managed companies, including accounting and financial reporting, human resources and personnel, legal and compliance, insurance, and communications. We may incur substantially higher costs than currently anticipated. If we are unable to transition effectively, we may incur temporary interruptions in business operations. Any delay in implementing, or operational interruptions suffered while implementing, our new information technology infrastructure could disrupt our business and have a material adverse effect on our results of operations.

In addition, we are directly subject to reporting and other obligations under the Exchange Act. The Exchange Act requires that we file annual, quarterly and current reports with respect to our business and financial condition. Under the Sarbanes-Oxley Act, we are required to maintain effective disclosure controls and procedures and to conduct annual management assessments of the effectiveness of our internal control over financial reporting (subject to a transition period for newly-public companies), and once we cease to be an emerging growth company, a report by our independent registered public accounting firm on the effectiveness of internal control over financial reporting. To comply with these requirements, we may need to upgrade our systems and those of CompoSecure Holdings and our other managed companies, implement additional financial and management controls, reporting systems and procedures and hire additional accounting and finance staff. These reporting and other obligations may place significant demands on management, administrative and operational resources, including accounting systems and resources. If we are unable to upgrade such financial and management controls, reporting systems, information technology systems and procedures in a timely and effective fashion, our ability to comply with financial reporting requirements and other rules that apply to reporting companies under the Exchange Act could be impaired, and we may be unable to conclude that our internal control over financial reporting is effective. If we are not able to comply with the requirements of the Sarbanes-Oxley Act in a timely manner, or if we or, when applicable, our independent registered public accounting firm identify deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of shares of our common stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Moreover, we cannot be certain that these measures will ensure that we implement and maintain adequate controls over our financial processes and reporting in the future. Even if we were to conclude, and when applicable our auditors were to concur, that our internal control over financial reporting provided reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. GAAP, because of its inherent limitations, internal control over financial reporting might not prevent or detect fraud or misstatements. This, in turn, could have an adverse impact on trading prices for shares of our common stock and could adversely affect our ability to access the capital markets.

Our stock price may fluctuate significantly.

Prior to the Spin-Off, there was no public market for our common stock. We cannot guarantee that an active trading market for our common stock will be sustained in the future. The lack of an active market may make it more difficult for stockholders to sell our shares and could lead to our share price being depressed or volatile.

We cannot predict the prices at which our common stock may trade in the future. We have a limited public float, and the market price of our common stock may fluctuate widely depending on many factors, some of which may be beyond our control. See also “Risks Related to Our Spin-Off from CompoSecure — The Spin-Off was taxable and holders of CompoSecure common stock will recognize taxable income, and the resulting tax liability to holders of CompoSecure common stock may exceed the amount of cash received in the Spin-Off in lieu of fractional shares.”

Furthermore, our business profile and market capitalization may not fit the investment objectives of some CompoSecure stockholders and, as a result, these CompoSecure stockholders may sell their shares of our common stock in the future. Low trading volume for our stock, which may occur if an active trading market does not develop, among other reasons, would amplify the effect of the above factors on our stock price volatility. Should the market price of our shares drop significantly, stockholders may institute securities class action lawsuits against us. A lawsuit against us could cause us to incur substantial costs and could divert the time and attention of our management and other resources.

Substantial sales of our common stock may occur in the future, which could cause our stock price to decline or be volatile.

CompoSecure stockholders other than our affiliates, including Resolute Compo Holdings LLC, that received shares of our common stock in the Spin-Off may sell those shares immediately in the public market. The sales of significant amounts of our common stock or the perception in the market that such sales might occur may decrease the market price of our common stock.

We may be unable to achieve the full strategic and financial benefits expected to result from the Spin-Off, or such benefits may be delayed or not occur at all, for a variety of reasons, including that compliance with the requirements of being an independent, publicly traded company will require significant amounts of our management’s time and effort, which may divert management’s attention from managing the affairs of our managed companies and operating and growing our business. If we fail to achieve some or all of the benefits that we expect to achieve as an independent company, or do not achieve them in the time we expect, our business, financial condition, cash flows and results of operations could be adversely affected.

We or CompoSecure may fail to perform under various transaction agreements that were executed as part of the separation.

In connection with the separation, and prior to the Spin-Off, we entered into various transaction agreements with CompoSecure and CompoSecure Holdings related to the Spin-Off. We will rely on CompoSecure or CompoSecure Holdings, as applicable, to satisfy its respective performance obligations under these agreements. If we, CompoSecure or CompoSecure Holdings are unable to satisfy our or its respective obligations under these agreements, including indemnification obligations, our business, results of operations, cash flows and financial condition could be adversely affected.