PLBY Group Inc

Evaluation of Disclosure Controls and Procedures

Our management, with the participation and supervision of our Chief Executive Officer and our Chief Financial Officer, have evaluated our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended) as of the end of the period covered by this Quarterly Report on Form 10-Q. Based on that evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that, as of the end of the period covered by this Quarterly Report on Form 10-Q, our disclosure controls and procedures were not effective due to the material weaknesses in our internal control over financial reporting described below. However, after giving full consideration to such material weaknesses, and the additional analyses and other procedures that we performed to ensure that our condensed consolidated financial statements included in this Quarterly Report on Form 10-Q were prepared in accordance with GAAP, our management has concluded that our condensed consolidated financial statements present fairly, in all material respects, our financial position, results of operations and cash flows for the periods disclosed in conformity with GAAP.

Management has determined that the Company had the following material weaknesses in its internal control over financial reporting:

Control Environment, Risk Assessment, and Monitoring

We did not maintain appropriately designed entity-level controls impacting the control environment, risk assessment procedures, and effective monitoring controls to prevent or detect material misstatements to the consolidated financial statements. These deficiencies were attributed to: (i) lack of structure and responsibility, insufficient number of qualified resources and inadequate oversight and accountability over the performance of controls, (ii) ineffective identification and assessment of risks impacting internal control over financial reporting, and (iii) ineffective evaluation and determination as to whether the components of internal control were present and functioning.

Control Activities and Information and Communication

These material weaknesses contributed to the following additional material weaknesses within certain business processes and the information technology environment:

•We did not fully design, implement and monitor general information technology controls in the areas of program change management, user access, and segregation of duties for systems supporting substantially all of the Company’s internal control processes. Accordingly, the Company did not have effective automated process-level controls, and manual controls that are dependent upon the information derived from the IT systems are also determined to be ineffective.

•We did not design and implement, and retain appropriate documentation of formal accounting policies, procedures and controls across substantially all of the Company’s business processes to achieve timely, complete, accurate financial accounting, reporting, and disclosures. Additionally, we did not design and implement controls at the corporate level at a sufficient level of precision to provide for the appropriate level of oversight of business process activities and related controls.

•We did not appropriately design and implement management review controls at a sufficient level of precision around complex accounting areas and disclosure including asset impairments, revenue contracts, income tax, stock-based compensation and lease accounting.

•We did not appropriately design and implement controls over the existence, accuracy, completeness, valuation and cutoff of inventory.

Although these material weaknesses did not result in any material misstatement of our consolidated financial statements for the periods presented, they could lead to a material misstatement of account balances or disclosures. Accordingly, management has concluded that these control deficiencies constitute material weaknesses.

Remediation Efforts

We continue to work on designing and implementing effective internal controls measures to improve our internal control over financial reporting and remediate the material weaknesses. Our internal control remediation efforts include the following:

•We hired additional qualified resources to oversee risk assessment procedures and remedial actions over internal controls.

•We are in the process of reassessing and formalizing the design of certain accounting and information technology policies relating to controls with respect to systems security and change management.

•We engaged an outside firm to assist management with (i) reviewing our current processes, procedures, and systems and assessing the design of controls to identify opportunities to enhance the design of controls that would address relevant risks identified by management, and (ii) enhancing and implementing protocols to retain sufficient documentary evidence of opera ting effectiveness of such controls.

In addition to implementing and refining the above activities, we expect to engage in additional remediation activities in coming fiscal years, including:

•Continuing to enhance and formalize our accounting, business operations, and information technology policies, procedures, and controls to achieve complete, accurate, and timely financial accounting, reporting and disclosures.

•Establishing effective general controls over our accounting and operating systems to ensure that our automated process level controls and information produced and maintained in our IT systems is relevant and reliable.

•Designing and implementing controls that address the completeness and accuracy of underlying data used in the performance of controls over accounting transactions and disclosures.

•Enhancing policies and procedures to retain adequate documentary evidence for certain management review controls over certain business processes including precision of review and evidence of review procedures performed to demonstrate effective operation of such controls.

•Developing monitoring controls and protocols that will allow us to timely assess the design and the operating effectiveness of controls over financial reporting and make necessary changes to the design of controls, if any.

While these actions and planned actions are subject to ongoing management evaluation and will require validation and testing of the design and operating effectiveness of internal controls over a sustained period of financial reporting cycles, we are committed to the continuous improvement of our internal control over financial reporting and will continue to diligently review our internal control over financial reporting.

Changes in Internal Control over Financial Reporting

As described above, we are in the process of implementing changes to our internal control over financial reporting to remediate the material weaknesses described herein. There have been no changes in our internal control over financial reporting during the quarter ended September 30, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations on Effectiveness of Controls and Procedures

The effectiveness of any system of internal control over financial reporting, including ours, is subject to inherent limitations, including the exercise of judgment in designing, implementing, operating, and evaluating the controls and procedures, and the inability to eliminate misconduct completely. Accordingly, any system of internal control over financial reporting, including ours, no matter how well designed and operated, can only provide reasonable, not absolute assurances. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. We intend to continue to monitor and upgrade our internal controls as necessary or appropriate for our business, but there can be no assurance that such improvements will be sufficient to provide us with effective internal control over financial reporting.