CPI AEROSTRUCTURES INC

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures, as of the end of the period covered by this Annual Report on Form 10-K. Based on such evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that as of such date, our disclosure controls and procedures were effective to provide reasonable assurance that information we are required todisclose inreports that we file or submit under the Exchange Act is (1) recorded, processed, summarized, and reported within the time periods specified in the Securities and Exchange Commission's (SEC) rules and forms and (2) accumulated and communicated to our management, including our CEO and CFO, as appropriate to allow timely decisions regarding required disclosures.

Management’s Annual Report on Internal Control over Financial Reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting, as defined in Exchange Act Rules 13a-15(f) and 15d-15(f), is a process designed by, or under the supervision of, our principal executive and principal financial officers and effected by our board of directors, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. GAAP and includes those policies and procedures that:

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Management conducted an evaluation of the effectiveness of internal control over financial reporting based on criteria established inInternal Control- Integrated Framework(2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”). Based on this evaluation, management concluded that the Company’s internal control over financial reporting was effective at the reasonable assurance level as of December 31, 2024.

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim consolidated financial statements will not be prevented or detected on a timely basis.

In connection with management’s evaluation of the Company’s internal control over financial reporting described above, management identified a material weakness in its internal controls for the twelve months ended December 31, 2023 relating to the inadequate review, assessment of and reporting of the Company’s temporary differences between book and taxable income. The Company remediated the aforementioned material weakness. The Company’s remediation included (a) we replaced the Company's outside tax accounting and tax return preparer with a new firm (the “Tax Accounting Firm”); (b) we retained the Tax Accounting Firm (i) to prepare the Company’s income tax accounting and disclosures for the year ended December 31, 2024 and (ii) to review the income tax accounting and disclosures prepared by the predecessor firm for the quarter ended March 31, 2024 prior to the filing of the Form 10-Q for the quarter ended March 31, 2024; (c) we updated our financial risk assessment to reflect tax accounting as a high risk area, and (d) we adopted a tax accounting review checklist provided by our Sarbanes-Oxley consulting firm for use by CPI’s finance management in reviewing the quarterly and annual work of the Tax Accounting Firm, beginning with the tax accounting for the quarter ended June 30, 2024 and continuing through the year ended December 31, 2024.

Conclusion

As described above, under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of our disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) as of December 31, 2024 management believes that the consolidated financial statements and related financial information included in this Annual Report on Form 10-K fairly present in all material respects our financial position, results of operations and cash flows as of and for the dates presented, and for the periods ended on such dates, in conformity with U.S. GAAP.

CPI is a non-accelerated filer for 2024. As such, CPI is not subject to the requirement to have an auditor attestation report on internal control over financial reporting in the 10-K filed in 2025 for 2024.

Changes in Internal Control Over Financial Reporting

Other than as disclosed above, there were no changes in our internal control over financial reporting during the quarter ended December 31, 2024 that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Disclosure Pursuant to SEC Order Dated June 20, 2024

As mandated by the SEC in its Order Instituting Cease-and-Desist Proceedings Pursuant to Section 21C of the Securities Exchange Act of 1934, dated June 20, 2024 (Release No. 34-100389) (the “SEC Order”), and as previously disclosed in the Company’s Current Report on Form 8-K filed with the SEC on June 21, 2024, the Company undertook, among other things, to fully remediate its material weaknesses in ICFR and have effective ICFR and disclosure controls and procedures (“DCP”) by December 31, 2024 and to publicly disclose, concurrent with the filing of this Annual Report on Form 10-K, whether, in management’s opinion, the Company has fully remediated its material weaknesses in ICFR and has effective ICFR and DCP.

In compliance with the SEC Order, management confirms that, as of December 31, 2024, in its opinion, the Company has fully remediated its material weaknesses in ICFR and that the Company’s ICFR and DCP were effective as of that date.