How to Read a 10-K: Financial Statements, Audit, and Red Flags

A 10-K is the annual report every U.S. public company files with the Securities and Exchange Commission, and learning how to read a 10-K means working through it in the order the SEC lays it out: what the business does, what could go wrong, how management explains the year, the audited financial statements with their footnotes, the auditor’s own report, and the governance and pay information in the back. Do that, and you’ll understand the company better than most people who own its stock. The document follows a rigid federal format, which is what makes it useful: once you know the structure, you can compare any two companies on the same footing.¹ It’s not the same as the glossy annual report shareholders receive in the mail. Some companies use their 10-K as their annual report, but many mailed annual reports are shorter publications that leave out significant detail.²

Where to Get the Filing

Every 10-K filed since 1993 is free to read on EDGAR, the SEC’s public database. Go to the full-text search tool, type the company name, ticker, or CIK number, and filter by form type. Selecting “10-K” screens out quarterly reports (10-Qs), 8-K event filings, and other documents you don’t need.³ EDGAR requires no account and no fee.⁴

Most companies also post their filings on the investor relations page of their website, usually under “SEC Filings” or “Financial Information.” Confirm you’re opening the 10-K and not a 10-Q, which covers only a single quarter, or an 8-K, which announces specific events like mergers, executive departures, or debt defaults.⁵ Only the 10-K gives you the full twelve-month picture.

Deadlines vary by company size. The biggest companies must file within 60 days of fiscal year-end; mid-sized companies get 75 days; smaller ones get 90.⁶ For a December 31 fiscal year-end, that puts filings between late February and late March. A company that needs more time can file a Form 12b-25 for a 15-day extension, and that request itself is public on EDGAR. Seeing one tells you the company had trouble closing its books on time.

Part I: What the Company Actually Does

Skipping Part I to jump to the financials is one of the more common mistakes. The numbers make sense only when you understand the business behind them.

Business and Properties

Item 1 describes how the company makes money: main products or services, markets, competitors, and meaningful subsidiaries.² Item 2 covers physical assets, from manufacturing plants and offices to warehouses and distribution centers. Together they answer what the company does and where it does it.

Risk Factors

Item 1A is where the company lays out what could go wrong. The SEC requires this section to describe the specific risks that make an investment speculative, and any generic risk that could apply to any business must be pushed to the end under a separate “General Risk Factors” heading.⁷ The useful material is the company-specific risks at the top: concentration in a single customer, pending regulatory changes, supply chain vulnerabilities, foreign currency exposure. If Item 1A reads like boilerplate copied from another filing, that itself tells you how seriously management treats disclosure.

Legal Proceedings

Item 3 covers pending lawsuits, regulatory actions, and government investigations that are material. Routine litigation doesn’t have to appear, but the threshold is tied to size: claims are considered immaterial only if they fall below 10 percent of current assets. Environmental cases and proceedings where a government agency is a party face stricter rules, with some thresholds as low as $300,000.⁸

Cybersecurity

Item 1C, added in late 2023, requires companies to describe their cybersecurity risk management strategy, how the board and management oversee cyber threats, and any material cybersecurity incidents during the year.⁹ The section is short but worth reading, especially for companies handling sensitive customer data or operating critical infrastructure. A vague answer here, given how specific the SEC expects companies to be, is itself information.

Unresolved Staff Comments

When SEC staff review a filing and send comment letters, the company must respond. If the comments remain unresolved for more than 180 days before fiscal year-end, accelerated and large accelerated filers must disclose the substance of the disagreement in Item 1B.¹⁰ An empty Item 1B is normal. Anything appearing there means the SEC’s own reviewers flagged something the company hasn’t resolved.

Management’s Discussion and Analysis

Item 7, formally “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” is often the most readable part of the whole filing. Executives explain in their own words what happened and why.² If revenue grew 12 percent, this section tells you whether the growth was organic, acquisition-driven, or the result of a favorable exchange rate. If administrative costs jumped, you’ll learn whether the driver was hiring, legal settlements, or a one-time restructuring charge.

The section also covers liquidity and capital resources: the company’s ability to generate cash for its short-term obligations, its credit facilities and debt covenants, and how management plans to fund future investment or handle maturing debt. The SEC requires disclosure of known trends or uncertainties that could materially affect future results, so this is where management has to be candid about headwinds rather than only celebrating wins.²

Non-GAAP Numbers

Companies often supplement standard accounting figures with adjusted ones: adjusted EBITDA, non-GAAP earnings, free cash flow. These can help you see the ongoing business, or they can dress up weak results. SEC Regulation G requires any company using a non-GAAP measure to also present the closest comparable figure calculated under standard accounting rules and to provide a numerical reconciliation showing exactly what was excluded.¹¹ When a non-GAAP number looks dramatically better than its GAAP counterpart, find the reconciliation and see what was backed out. Recurring expenses labeled as “one-time adjustments” year after year are a classic warning sign.

Forward-Looking Statements

The MD&A usually includes projections. Federal law gives companies a “safe harbor” for forward-looking statements: investors generally cannot sue over a prediction that doesn’t come true as long as the company flagged the statement as forward-looking and included meaningful cautionary language. Watch for signal phrases like “we expect,” “we anticipate,” and “we believe,” which mark projections rather than facts. The real value isn’t in the predictions but in the cautionary factors listed alongside them, which often reveal management’s biggest worries more honestly than the surrounding narrative.

The Financial Statements

Item 8 contains the audited financial statements, the footnotes, and the independent auditor’s report. Everything here is prepared under Generally Accepted Accounting Principles and reviewed by an outside accounting firm.

Balance Sheet

The consolidated balance sheet shows what the company owns (assets), what it owes (liabilities), and what’s left for shareholders (equity) as of the last day of the fiscal year. Assets equal liabilities plus equity. Federal regulations require audited balance sheets for the two most recent fiscal years so you can see how the picture changed.¹² Pay attention to how much of the asset side is goodwill or other intangibles. A company that grew through acquisitions can carry billions in goodwill that may need to be written down if those acquisitions underperform.

Income Statement

The consolidated income statement starts with total revenue and works down through cost of goods sold, operating expenses, interest, and taxes to reach net income or loss. Regulations require three years of comparative data, enough history to spot trends.¹² Revenue can grow while a company heads toward trouble if margins are compressing, so tracking the ratios between revenue and each expense line across all three years matters more than any single number.

Cash Flow Statement

The consolidated statement of cash flows splits cash movements into three buckets: operating (running the business), investing (buying or selling equipment, acquisitions, securities), and financing (issuing stock, borrowing, paying dividends). This is where paper profits meet reality. A company reporting healthy net income while burning cash from operations is funding itself through debt or asset sales, and that isn’t sustainable. A company with modest earnings but strong operating cash flow is often in better shape than the income statement suggests.

Footnotes

The notes to the financial statements are often longer than the statements themselves, and they carry information you cannot find anywhere else. They spell out the accounting methods used for revenue recognition, inventory, and depreciation. They break down debt schedules, lease obligations, pension liabilities, and contingencies from pending litigation. If a $50 million liability sits on the balance sheet, the notes tell you whether it’s a legal settlement reserve, a long-term lease, or deferred revenue. Skipping the footnotes leaves the rest of the document half-informed.

Subsequent Events

The footnotes also cover events that occurred after fiscal year-end but before the filing date. Auditing standards require companies to disclose post-year-end developments that materially affect the financial picture, such as a completed acquisition, a major litigation settlement, or a catastrophic loss.¹³ Some events require adjusting the statements themselves; others require only disclosure. Either way, this note tells you what changed between year-end and the filing date.

The Auditor’s Report

The independent auditor’s report sits inside Item 8, alongside the statements it covers. It’s a formal statement from an outside accounting firm that has examined the books. The usual result is an “unqualified opinion,” meaning the auditor concluded the statements fairly present the company’s position under standard accounting rules.² A qualified or adverse opinion means the auditor found problems significant enough to flag. Either one calls for immediate further reading.

Critical Audit Matters

Since 2019, auditors have been required to identify “critical audit matters” in their report: the areas of the audit that involved the most challenging, subjective, or complex judgment. For each one, the auditor describes why the matter was significant and how the audit team addressed it.¹⁴ Revenue recognition, goodwill impairment testing, and tax contingency estimates are common entries. This section tells you where the auditor spent the most time and where the numbers are most sensitive to management’s assumptions.

Going Concern

If the auditor has substantial doubt the company can survive the next twelve months, the report must say so. Auditors weigh factors like recurring operating losses, negative cash flow, loan defaults, loss of a major customer, or an inability to meet obligations as they come due.¹⁵ A going concern paragraph doesn’t mean the company will fail, but it means the auditor thinks the risk is real. Treat it as a serious signal before committing any capital.

CEO/CFO Certifications and Internal Controls

The Sarbanes-Oxley Act of 2002 adds two accountability layers. The CEO and CFO must personally certify that the 10-K is accurate and complete, filed as Exhibits 31 and 32.² For larger companies, the outside auditor must also separately evaluate whether internal controls over financial reporting are effective, checking not just the final numbers but the systems producing them.¹⁶ Smaller reporting companies with annual revenue under $100 million are exempt from the auditor attestation, so the absence of an internal controls opinion in a small-company 10-K is expected, not suspicious.

Part III: Governance and Pay

Part III covers Items 10 through 14: directors, executive pay, ownership, related-party transactions, and accountant fees. Most companies don’t put this information in the 10-K itself. They incorporate it by reference from the proxy statement, a separate document filed before the annual shareholders’ meeting. The 10-K contains a note pointing you to the proxy.⁹ The proxy must be filed within 120 days of fiscal year-end; if it’s late, Part III has to appear in the 10-K or an amendment.

Whether you read them in the 10-K or the proxy, focus on:

Executive compensation (Item 11): tables showing salary, bonus, stock and option awards, and total pay for the CEO, CFO, and three other highest-paid executives. This is where you learn whether the people running the company are paid in ways that align with your interests as a shareholder.
Directors and corporate governance (Item 10): biographies, committee assignments, and whether the company has adopted a code of ethics for senior financial officers.
Ownership by insiders and large shareholders (Item 12): how much stock directors, officers, and any outside holder with more than five percent of a class of shares actually owns.
Related-party transactions (Item 13): any business deals between the company and its officers, directors, or major shareholders. Arm’s-length pricing is one thing; a sweetheart deal with the CEO’s brother-in-law is another.
Accountant fees (Item 14): what the company paid its auditor for audit work, tax services, and other consulting. If non-audit fees dwarf the audit fee, auditor independence becomes a fair question.

Red Flags Worth Watching

Knowing the structure gets you halfway. Knowing where trouble hides gets you the rest of the way.

Accounts receivable growing faster than revenue. If revenue is up 8 percent but receivables jumped 25 percent, the company may be booking sales it hasn’t collected or stretching payment terms to hit targets. Compare the growth rates every year.

Recurring “one-time” charges. Restructuring costs and special charges that appear in the non-GAAP reconciliation every year aren’t one-time events. They’re part of the cost of running the business, and stripping them out year after year inflates adjusted results.

Auditor changes without a clear reason. Item 9A covers changes in the accounting firm. Some switches are routine, but a change that coincides with a restatement, a late filing, or a disagreement disclosed in the 8-K announcing the change should raise immediate concern.

A widening gap between net income and operating cash flow. Over time these should move in roughly the same direction. When reported earnings climb while cash flow stagnates or declines, the profits may reflect aggressive accounting estimates rather than actual business performance.

Related-party transactions buried in the footnotes. Item 3 and Part III require disclosure, but details often show up in the footnotes as well. A material insider transaction that wasn’t spotlighted in the governance section deserves scrutiny.

Vague risk factors paired with specific subsequent events. When Item 1A describes a risk in generic terms (“we face competitive pressures”) but the footnotes disclose that the company lost its largest customer the week after year-end, the risk factor was drafted to check a box rather than inform investors.

When a Filing Doesn’t Show Up

A missed 10-K sets off a chain of consequences worth recognizing when you see it. On the exchange side, Nasdaq requires a company that fails to file a periodic report to submit a compliance plan within 60 days of receiving a deficiency notice, and total grace periods are capped by rule. A company that ultimately cannot file its financials loses its listing.¹⁷ On the SEC side, filing failures can bring enforcement actions and civil penalties.¹⁸ A company that receives a deficiency notice has to disclose it within four business days, so if you’re tracking a company and see that 8-K, you’re learning about the problem almost as soon as regulators do.

1
U.S. Securities and Exchange Commission. Exchange Act Reporting and Registration
2
SEC.gov. Investor Bulletin: How to Read a 10-K
3
U.S. Securities and Exchange Commission. Using EDGAR to Research Investments
4
U.S. Securities and Exchange Commission. About EDGAR
5
Investor.gov. Form 8-K
6
eCFR. 17 CFR 240.12b-2 – Definitions
7
eCFR. 17 CFR 229.105 – Item 105 Risk Factors
8
eCFR. 17 CFR 229.103 – Item 103 Legal Proceedings
9
U.S. Securities and Exchange Commission. Form 10-K
10
U.S. Securities and Exchange Commission. Financial Reporting Manual – Topic 1
11
eCFR. 17 CFR Part 244 – Regulation G
12
eCFR. 17 CFR Part 210 – General Instructions as to Financial Statements
13
PCAOB. AS 2801: Subsequent Events
14
PCAOB. AS 3101: The Auditor’s Report on an Audit of Financial Statements When the Auditor Expresses an Unqualified Opinion
15
PCAOB. AS 2415: Consideration of an Entity’s Ability to Continue as a Going Concern
16
AICPA & CIMA. Sarbanes-Oxley Act Section 404(b)
17
The Nasdaq Stock Market. Nasdaq Rulebook – 5800 Series: Failure to Meet Listing Standards
18
U.S. Securities and Exchange Commission. SEC Charges Eight Companies for Failure to Disclose Complete Information on Form NT