Q3 2020 Earnings Call Transcript

Published:

  • Operator:
    Good day, ladies and gentlemen. And welcome to CynergisTek's 2020 Third Quarter Earnings Conference Call. Today's conference is being recorded. Joining us today from the company includes Mr. Caleb Barlow, President and Chief Executive Officer; and Mr. Paul Anthony, Chief Financial Officer. Before we begin the formal presentation, I'd like to remind everyone that some statements made on the call and webcast including those regarding future financial results and industry prospects, among others, are forward-looking and may be subject to a number of risks and uncertainties that could cause actual results to differ materially from those described in the conference call. Certain of these risks and uncertainties are or will be described in greater detail in the company's SEC filings. CynergisTek is under no obligation and expressly disclaims any such obligation to update or alter its forward-looking statements whether a result of new information, future events or otherwise.
  • Caleb Barlow:
    Good afternoon, everyone. A little breaking news to start the call today; early today, for the second year in a row, Black Book Market Research has awarded CynergisTek as the top Cybersecurity Consultants for assessment audit, strategy and implementation in the healthcare industry. This is an award well, we're really proud of. As an independent survey from 705 healthcare providers, we don't pay for placement, and frankly did not even know it was coming until we saw the press release this morning. And 2020 has been a bit of a crazy year for everyone. But to get this type of recognition from the industry and from our clients, further demonstrates that our strategy is working. We've worked aggressively to add new capabilities to deal with a changing threat landscape, including compromise assessment, security validation, and we've been on the front lines helping clients address these recent ransomware attacks. With all of that it's a real honor to continue to get recognized by our clients in the industry in a really tough year like this. Beating out to major players including Clearwater, Booz Allen, KPMG UI, IBM fortifies a host of others. So I wanted to make sure I mentioned this before we get into the details of the quarter. Now, towards the end of Q3 and into the beginning of the fourth quarter, we started to see signs of market recovery. This has shown itself in a number of ways. First, we're seeing clients, particularly those that have a more mature security posture, realizing that the pandemic, the move to work from home, the rapid deployment of telemedicine and new expectations for interoperability have created new vulnerabilities in their security posture. Concluding these trends are not temporary, has created an increased willingness to enter into long term contracts with a focus on shoring up your defenses in this new world. This was highlighted in our two recent releases with Valley Health and Fairview Health, both new logos to the CynergisTek family. These customers were interested in the combination of our core managed services, along with our strategy to go beyond just security assessments and into the validation of security controls. We also saw some recent renewals with long standing customers that included the addition of some of these new services, increasing their commitment to security. Second, we saw progress in our efforts to diversify beyond our base, which is primarily made up of healthcare providers and into the broader industry of healthcare. A good example of this is the recent managed services signing with a large state Department of Public Health in the West Coast. Now as you can imagine, health departments across the US are front and center in the effort to track infections and manage contact traces. As such, they're generating volumes of information and must be properly assessed, protected and secured. All in healthcare all organization and our consultants are ideally suited for this mission. I also want to mention our recent traction with , a CynergisTek own brand that focuses on offensive security testing outside of our traditional healthcare market. One of our strategic imperatives last year was to rebuilding upscaler penetration testing team, is now our offensive security team has new people and when we do offerings, which has allowed us to win consulting contracts in one of the nation's largest media companies, and a well known consumer electronics company, Logitech.
  • Paul Anthony:
    Thanks, Caleb. As Caleb mentioned, we're still seeing an impact from COVID during the quarter, and as a result of its impact on healthcare providers. Again, this impact was primarily felt in a reduction in our pre sold revenue, which dropped from $19 million to $16 million, primarily due to one larger managed services customer that had significant budget issues. This contract will turn at the end of this year give us some time to respond. We made significant strides towards this response with a better than expected Q3 bookings. Although, still below historical levels; it's an improvement from Q2, and we see positive signs going forward in the macro environment, which we will continue to take steps to keep you updated as things progress. Additionally, we continue to react to the impact from Covid by reducing expenses, and focusing on opportunities to reduce further. This was a key driver to our improved margins gross and operating margins in Q3 when compared to the first half of this year. As we highlighted in Q2, we took steps to significantly reduce operating expenses with both permanent and temporary measures that have reduced our cash burn to around $300 per month at these revenue levels. Couple other reminders, we received the $2.8 million under the Paycheck Protection Program and expect the majority of the loan will be forgiven. And we're also expecting tax relief as a result of the CARES Act, which will we carry back available losses from this year to the extent possible, which we think at this point will exceed $1 million. In addition, the Board just approved an aftermarket equity program that will allow the company from time to time to issue up to a total of $5 million of shares of the company's common stock to the public at the company's discretion. The funds raised will be used for ongoing operations and growth initiatives. Outlined in our standard financial disclosures, revenue decreased by $0.3 million to $4.5 million due to lower revenue for managed services, which reduced $0.4 million to $2.7 million due to the impact of some customers canceling or delaying renewals, and reduction in net new customers due to COVID.
  • Operator:
    Our first question is from
  • UnidentifiedAnalyst:
    Good afternoon, gentlemen. You just mentioned that the sales trends were striking in end of Q3. To what extent do you think this is reflecting the more publicized incident? So you described cyber incidents.
  • CalebBarlow:
    Well, there are two components to this, Jeff, right. I mean, one is that we significantly retooled our sales team go- to-market and now have a much more robust and reliable pipeline than we had a year ago. So I'll call that the basic blocking and tackling. The second piece of this is that while in the midst of COVID, especially kind of in February, March, April-ish when we were all really locked down, and everyone's trying to figure out what jam was up. We use that opportunity to retool; we switch to an agile management methodology. Our team met every single day and we continue to today. And we use that time to bring forward several new offerings such as compromise assessments and partnership with Awake Security, security validation assessments, review and run books.
  • UnidentifiedAnalyst:
    Okay. There's been a lot of press in the last a couple weeks or so about rapidly increasing outbreaks of COVID in the United States. And I'm wondering if that's concerning you about another phase to shutdown small lab, which adversely affects your business? Or do you think hospitals and other health systems are better set up now to weathering it not affect you as much as you might otherwise have thought?
  • CalebBarlow:
    Well, I think there's two dynamics here, right. So, first of all, at least at the moment online back in kind of February, March, hospitals are still seeing elected patients, right. So elective surgeries are continuing; they're not completely shut down just to handle COVID surge. And I think we've in a lot of ways hospitals have found ways to get through this. Now, that is not true in all areas of the country, there are some places that are being severely impacted. And that does seem to go in waves. What has also happened in this is procurement departments, I think have started to figure out that the answer isn't that you can shut everything off; they're going to need certain capabilities. And we've started to see that to return, I wouldn't say completely normal, because we're not face to face with clients. But we are processing deals, things are a little slower than anyone would like because you can't go meet with a client. But if we look at this, I don't think we're going to see the same impact. Now, the second factor in this is that these recent ransomware incidents, this is a little bit different than anything we've ever seen on US soil before. Up to this point, generally speaking, attacks on US soil, involve people stealing data maybe shutting something down with a denial of service attack for a few hours that they take out a website, and stealing a whole lot of data and intellectual property. But in those in all of those attacks, we've seen of late people were not directly impacted in a way that could potentially harm them from a life safety perspective. This is different. This is a change in adversarial intent, where bad guys are knowingly targeting large hospital systems with the express intent to find their electronic healthcare records, lock them up and prevent the hospital from seeing patients. That is what we call a kinetic impact. And it's devastating, right? But it also represents a significant escalation in that adversarial intent, but what it means to the hospital system, and I tamper my comment here by saying I don't want to sound alarmist, but the simple reality is all these hospitals in the last few weeks have realized that if they don't move to shore up their defenses, it's going to be hard to remain open. And that's the difference in this. It's very analogous, frankly, to wearing a mask is that kind of the analogy of the day, you might not get ransomware if you don't invest in your security defenses, but if you do, the impact can be pretty devastating.
  • UnidentifiedAnalyst:
    Yes, it runs a lot of urgency to the issue.
  • CalebBarlow:
    That's right.
  • UnidentifiedAnalyst:
    Okay, I have a couple of questions for Paul. I think it was two quarters ago, you had mentioned the possibility of reaching mid to high 40s on gross margin by the end of the year. It's obviously been delayed or deferred, but I'm wondering if you still see the business as eventually being able to achieve that goal.
  • PaulAnthony:
    We've definitely been impacted in the short term, Jeff, on that. So we do not anticipate that we'll get there this year. But at least from our perspective, we can get there. It's going to take getting back to growth, and getting back to that $5 million to $5.5 million run rate, which is kind of that critical revenue level for us. So as we get back to there, that's why I think we'll have the ability to get back in those 40 plus margin ranges.
  • UnidentifiedAnalyst:
    Okay, and with respect to those $5 million worth of shares once it was referred to what's the size of the earlier arrangement you had, I think, with a large institutional owner, where you've already issued some warrants, and they were --
  • PaulAnthony:
    We'll put that on hold for now. Yes, we'll put that on hold as we work through the ATM. So that, then we'll revisit the need for that if necessary based on the results of the ATM.
  • UnidentifiedAnalyst:
    Okay, and lastly, you have a couple million dollars back on the balance sheet for the Backbone earnout. Where do you think your stand at this with respect to that?
  • PaulAnthony:
    At least in the initial year did not hit the year one earnout. And so we're still working and evaluating their ability and opportunity to hit years two and three. And so that's kind of the status of there right now. We just closed books for October, which is the month in which it ended the first year. So we're still working through and evaluating our next steps there.
  • Operator:
    We'll take our next question from Avi Fisher with Long Cast Advisors.
  • AviFisher:
    Hey, Paul, I can -- I had a quick question. I already looked at the Q. And the performance obligations were $15.6 million, 88% you recognize over 24 months. So that infers that sequentially over last quarter and the prior quarter, we have a little more visibility at least sequentially. I wondered if you could just disclose given the strength that you've seen where those performance obligations would be today. Thank you.
  • PaulAnthony:
    Avi, I'm not sure if I completely understand your question. I may have you, maybe.
  • AviFisher:
    Yes, sure. So you disclose the performance obligations, which are forward long-term contracts, correct?
  • PaulAnthony:
    Yes.
  • AviFisher:
    And at the end of the quarter, 9/30, you had $15.6 million. And I wondered if you could disclose, maybe you can maybe don't have the number available. But if you could disclose, given the strength you've seen, you started out to strengthen your sales pipeline, sales where that would be today.
  • PaulAnthony:
    Oh, yes, I can't give; I can't provide that number right now. That's a number we don't traditionally provide at this point. So we don't get into the booking numbers at this point, Avi.
  • AviFisher:
    Okay. Could you at least disclose if it's up from where it was at the end of the quarter?
  • PaulAnthony:
    It is up since the end of the quarter. I can tell you that.
  • Operator:
    We'll go next to William Bremer with Vanquish Capital.
  • WilliamBremer:
    Hi, gentlemen, good evening. So adding on to Avi's last question how's your visibility look at right now? I mean, we had unprecedented events that occurred this quarter. Seems as though you guys have announced two major wins, I would assume the sales cycle now given what has occurred and what has just been articulated is quicker than ever in this field. So how quickly and your team close a contract with a new entity?
  • PaulAnthony:
    Well, that is all over the map right now. And it's all over the map because in a lot of ways procurement departments have a new set of muscles that we haven't historically seen, Bill. In some systems, you have just a very draconian, all costs are under control. Everything's got to go through multiple levels of approval. I mean, I'll give you an example that recent release on the Public Health Department of the West Coast, that's a deal that, took, that deal took quarter after quarter after quarter, we saw that deal defer because of COVID, and various hoops, and then finally got it done all in a week type of thing. There are other situations, especially with what's happened over the last couple weeks, where we'll close a deal in two days. It's a really good question. And I guess my long winded answer to that is it hasn't stabilized right now. And it's all over the map, just depending on what's going on and the temperature. What I will say is interesting to see is that we do see in many cases, the incidents over the last couple of weeks are causing some clients to go forward and ask for emergency budget requests, and also go forward asking to reinvestigate wherever they were in there, kind of prospecting on 2021 budgets. Now I would say the one thing I can kind of say overall is larger deals still take longer, as you can imagine, anything that's public still takes longer because often times you have to take it out to bid. But we're definitely seeing cases where some of the new services were able to get in the door with a new logo in a matter of a week or two. And that's really encouraging because those are new growth opportunities for us.
  • WilliamBremer:
    No, I agree with that completely. And as I look at your run rate, right now, let's just take this last quarter, $4.5 million; Paul just articulated that $5 million, $5.5 million depending upon the mix, of course, it's very interesting. I don't see it that far away from that threshold. And I was just wondering given my first question on visibility. And what you and your sales team headed up by Shane is -- are seen maybe quick, quicker turn business, is it processed? Do you have an idea of when we possibly can get there? How close are we to that? It seems as though we're quite close, am I mistaken?
  • CalebBarlow:
    Go ahead, Paul.
  • PaulAnthony:
    I'll just say it's a little early to tell -- a point you unfortunately that large customer that we lost for the managed services was kind of that one hit us as we mentioned. And so we've got to make up that ground. So I think you're right, from the perspective that we're seeing the growth, we're seeing new opportunities, we did have -- we do have some ground to make up though, as in bundle that all in with kind of the overall COVID impact. We've got to recover from some of the things that we took the hits on in Q2 and Q3 here. But as it relates to net new logos, and renewals and growth in the business, we're seeing it, it's just where you got to dig out of that hole we have because of again, primarily this one large customer that had budget issues.
  • CalebBarlow:
    I think that's exactly what I was going to kind of comment on. I mean, the frustrating thing sitting in our seat right now is you can see the opportunity we're grabbing at it. It's just we have to make up for that loss ground that we experienced earlier this year. And all it took was one or two customers with convenience clauses and it's really an interesting situation where these are not cases where we lost the competition. These are cases where a client literally just decided that they could no longer afford to pay for security provisions. And that's a really tough thing to digest. That being said, I'm hopeful that also when budgets start to turn around here, we may see some of those clients return.
  • WilliamBremer:
    Okay, gentlemen, I just think that the end market has changed here. And your sales cycle is probably quicker than ever and agreed on the budget side, but the sales cycle and given the material events that have occurred for top tier and when the top entities in the country changes the landscape. And I wish you all the best. I think we will get that. Thanks.
  • Operator:
    And ladies and gentlemen, this will conclude today's question-and-answer session and today's conference. We appreciate your participation. You may now disconnect.