BuzzFeed Inc

Evaluation of Disclosure Controls and Procedures

Disclosure controls and procedures are designed to ensure that information required to be disclosed by us in our reports under the Securities Exchange Act of 1934, as amended ( the “Exchange Act”), is recorded, processed, summarized and reported within the time periods specified in the rules and forms of the U.S. Securities and Exchange Commission, and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

In connection with the audit of our consolidated financial statements as of, and for the year ended, December 31, 2023, 2022 and 2021, we identified material weaknesses in our internal control over financial reporting, which remain unremediated. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. The material weaknesses identified in our internal control over financial reporting related to: (i) a lack of formalized internal controls and segregation of duties surrounding our financial statement close process, and (ii) a lack of formalized information technology (“IT”) general controls in the area of change management and logical security controls over financial IT systems. The remediation of these deficiencies has required, and will continue to require, a significant amount of time and resources from management and other personnel.

(i) A Lack of Formalized Internal Controls and Segregation of Duties Surrounding our Financial Statement Close Process:

During 2023 and continuing into 2024, with the oversight of the audit committee of our board of directors, we began implementing remediation plans and enhanced controls within the financial statement close process, including documentation improvements for certain higher risk and material balance sheet reconciliation schedules and supporting financial calculations and analyses. However, certain business process controls were not designed, or did not operate at the appropriate level of precision, to prevent or detect a material misstatement, and conflicts with respect to segregation of duties were identified across our end-to-end financial statement close process. Our management will continue to implement remediation plans to define control procedures, enhance documentation, and enforce segregation of duties to ensure controls are adequately designed and operate sufficiently including, but not limited to: enhancing certain higher risk balance sheet reconciliation schedules, completeness and accuracy, and related review procedures; enhancing review procedures with respect to financial results and supporting financial calculations; designing processes and controls to adequately segregate job responsibilities; redesigning workflow approval routing and security permissions; and reducing reliance on manual controls.

(ii) A Lack of Formalized Information Technology General Controls in the Area of Change Management and Logical Security Controls Over Financial Information Technology Systems:

During 2023 and continuing into 2024, our management began implementing remediation plans to address certain control deficiencies around system development and change management and IT security, including formalizing the processes and controls around security administration and implementing user access reviews for certain key financial systems. However, we did not have sufficient resources with technical expertise to centralize certain IT functions and to provide adequate IT oversight over financial systems.

Our management intends to revisit its IT sustainment plan to further support and provide appropriate oversight over key financial systems, and intends to implement remediation plans, including, but not limited to: centralizing the change management and security administration function; implementing policies and procedures with respect to change management, system development, and application-level security; documenting test procedures and approvals relating to changes made to production; maintaining separate development, test, and production environments; formalizing controls around security administration; and implementing real-time monitoring.

The material weaknesses will not be considered remediated until the applicable controls operate for a sufficient period of time, and we have concluded, through testing, that the newly implemented and enhanced controls are operating effectively. Our management will continue to monitor the effectiveness of our remediation plans in 2024 and will make the changes we determine to be appropriate.

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) of the Exchange Act) as of the end of the period covered by this report. In making this evaluation, management considered the material weakness in our internal control over financial reporting described above. Based upon that evaluation, our Chief Executive Officer and Chief Financial Officer concluded that, as of September 30, 2024, the period covered in this report, our disclosure controls and procedures were not effective.

Notwithstanding the assessment that our disclosure controls and procedures are not effective, we believe that we have performed sufficient supplementary procedures to ensure that the condensed consolidated financial statements contained in this filing fairly present our financial position, results of operations and cash flows for the reporting periods covered herein in all material respects.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) of the Exchange Act) during the quarter ended September 30, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.