How to Read a 10-K: Structure, MD&A, and Red Flags

Learning how to read a 10-K comes down to knowing which five sections carry the weight and which patterns inside them tell you to slow down. The filing is long, but it follows the same skeleton every year at every public company, so once you can navigate one, you can navigate any of them. The sections that actually decide whether you understand a business are Item 1 (Business), Item 1A (Risk Factors), Item 7 (Management’s Discussion and Analysis), Item 8 (Financial Statements), and Item 9A (Internal Controls). Everything else is either supporting detail or lives in the proxy statement.

Where to Pull the Filing

Every 10-K is filed with the Securities and Exchange Commission and posted for free on EDGAR, the SEC’s public filing database.¹ Search by company name, ticker, or CIK number — the permanent numeric identifier EDGAR assigns to each filer that stays put even if the company rebrands.² Filter by form type “10-K” to strip out the other filings, and the most recent one sits at the top. Most companies also post the same document under Investor Relations on their own site.

The Four-Part Skeleton

Before opening a 10-K, know what sits where. Every filing organizes into four parts with numbered items:³

Part I (Items 1–4): the business, risk factors, unresolved SEC staff comments, cybersecurity, properties, legal proceedings, mine safety.
Part II (Items 5–9C): stock performance, MD&A, audited financial statements, internal controls, disagreements with accountants.
Part III (Items 10–14): directors, executive compensation, stock ownership, related-party transactions, accounting fees.
Part IV (Items 15–16): exhibits, financial statement schedules, optional summary.

You don’t have to read cover to cover, and you shouldn’t. Start with the five items named above and pull threads from the rest only when something in those five points you there.

Item 1: What the Company Actually Does

Item 1 is the plain-English description of the business — its products and services, revenue sources, competitive position, subsidiaries, and the industries it operates in.⁴ In heavily regulated industries like banking, energy, and pharmaceuticals, this is also where you learn which specific laws shape the cost structure: environmental rules, licensing requirements, import restrictions. Read this section to figure out whether the company’s competitive advantage rests on patents, brand, distribution, or regulatory barriers that keep rivals out. If you can’t summarize how the company makes money after finishing Item 1, keep rereading before moving on.

Item 1A: Risk Factors, and How to Filter Them

Item 1A is management’s catalog of what could go wrong. SEC rules require these risks to be specific to the company rather than generic boilerplate, and any risk factor section longer than 15 pages must open with a bulleted summary.³

Two techniques make this section useful. First, compare against last year’s 10-K and note which risks are new — those signal what management has recently started worrying about, whether it’s a supply chain problem, a regulatory shift, or changing customer behavior. Second, weigh specificity. A risk factor naming a pending lawsuit with dollar amounts attached tells you something. A warning that “general economic conditions may affect results” is legal padding meant to head off shareholder suits. The skill is separating operational concerns from throat-clearing.

Item 7: The MD&A

Item 7, Management’s Discussion and Analysis, is where executives explain in their own words why the financial results look the way they do.⁴ If the income statement is the “what,” the MD&A is the “why.” SEC rules require it to cover three areas: liquidity and capital resources, results of operations, and critical accounting estimates.⁵

Liquidity

The liquidity discussion tells you whether the company can pay its bills over the next 12 months and beyond. Management has to describe known cash requirements — debt payments, lease commitments, pension contributions — and explain how it plans to fund them through operating cash flow, credit facilities, or new stock or debt issuance.⁵ When you see fresh discussion of new borrowing facilities or plans to raise equity, it usually means existing cash flow isn’t covering the plan.

Results of Operations

This subsection walks through year-over-year changes in revenue, cost of goods sold, operating expenses, and net income. If revenue jumped 20%, management must say whether that came from selling more units, raising prices, or an acquisition. SEC rules require companies to describe “material changes from period-to-period” in both quantitative and qualitative terms.⁵ When large positive and negative moves inside a single line cancel each other out, management still has to break them apart rather than point to the flat total. This is where one-time events masquerading as organic growth get exposed.

Adjusted Numbers and Non-GAAP Measures

Many companies show adjusted figures in the MD&A — Adjusted EBITDA, Adjusted EPS, and similar metrics that strip out costs management considers non-recurring. Under Regulation G, any non-GAAP measure has to appear next to the closest comparable GAAP figure, with a quantitative reconciliation showing exactly what was added or removed.⁶ Read the reconciliation, not just the adjusted number. Stock-based compensation, restructuring charges, and acquisition costs are common exclusions, and they’re all real expenses. If the same categories get excluded every year, they’re recurring costs, and the adjusted metric is flattering.

Item 8: Financial Statements, Footnotes, and the Auditor’s Report

Item 8 is the numerical core. Three statements work together:

The balance sheet: a snapshot on a specific date of what the company owns (assets), what it owes (liabilities), and what belongs to shareholders (equity).
The income statement: revenue earned and expenses incurred across the fiscal year, ending with net income or loss.
The cash flow statement: actual cash moving through operations, investing, and financing.

The cash flow statement is the one that catches things the income statement obscures. A company can post strong net income while burning cash if it’s booking revenue it hasn’t collected or stretching supplier payments. Comparing net income to operating cash flow across several years is the fastest gauge of earnings quality you have.

The Footnotes

Following the three statements are dozens of pages of notes, and they contain detail that appears nowhere else in the filing. Long-term debt with maturity dates, interest rates, and covenants. Pension obligations. Revenue recognition policies. Lease commitments.⁷ When a company changes an accounting policy or makes a significant estimate — the useful life of an asset, the probability of losing a lawsuit — the reasoning shows up here. If you only read one part of Item 8 closely, make it the notes.

The Auditor’s Opinion

An outside accounting firm reviews the statements and issues an opinion on whether they fairly represent the company’s financial position under Generally Accepted Accounting Principles.⁷ There are four kinds:

Unqualified, or “clean”: the statements are fairly presented in all material respects. This is what you want to see.
Qualified: the statements are mostly reliable, but the auditor found issues affecting a limited area.
Adverse: material misstatements are pervasive enough that the auditor won’t endorse the statements. Serious red flag.
Disclaimer: the auditor couldn’t obtain enough evidence to form any opinion at all.

Anything other than a clean opinion is a reason to dig deeper before trusting the numbers. Also watch for going-concern language, which means the auditor has substantial doubt the company can keep operating over the next 12 months.

Item 9A: Internal Controls and the Officer Certifications

Item 9A is where management reports on whether its internal controls are effective at preventing material errors or fraud in the financial statements.⁸ At large accelerated filers, the outside auditor also independently tests and attests to management’s assessment under Section 404(b) of the Sarbanes-Oxley Act.³

Two terms recur. A “significant deficiency” is a control weakness worth flagging to those overseeing financial reporting but not severe enough to undermine the statements overall. A “material weakness” is more serious: there’s a reasonable chance that a significant error wouldn’t be caught in time.⁹ When a company discloses a material weakness, treat the financial statements with extra care until you see evidence it’s been fixed.

The exhibits section (Item 15) carries two certifications the CEO and CFO have to sign personally. Section 302 of Sarbanes-Oxley requires both officers to certify the statements contain no material misstatements and that internal controls are adequate. Section 906 requires them to certify under criminal penalty that the report fully complies with the Securities Exchange Act and fairly presents the company’s financial condition. An officer who knowingly certifies a noncompliant report faces up to $1 million in fines and 10 years in prison; willful certification raises the ceiling to $5 million and 20 years.¹⁰ The point of noting this while reading: the signatures at the back of the document carry personal criminal exposure, not just a corporate signoff.

Part III Usually Lives in the Proxy

Part III covers executive pay, director backgrounds, insider stock ownership, related-party transactions, and accounting fees. Most companies don’t write this into the 10-K itself. Instead, they incorporate it by reference from the proxy statement, filed separately before the annual shareholder meeting, so long as the proxy is filed within 120 days after the fiscal year ends.³ If Part III says “incorporated by reference,” pull up the company’s DEF 14A on EDGAR. That’s where you find CEO pay, the performance targets behind bonuses, insider buying and selling, and any financial dealings between the company and board members or their relatives.

Forward-Looking Statements: What the Safe Harbor Covers

Projections, planned product launches, expected cost savings, and other forward-looking statements appear throughout the MD&A and risk factors. The Private Securities Litigation Reform Act of 1995 provides a safe harbor that generally shields companies from suits over predictions that don’t come true, on two conditions: the statement is identified as forward-looking, and meaningful cautionary language accompanies it explaining what could cause actual results to differ.¹¹

The safe harbor has limits worth knowing. It doesn’t cover GAAP financial statements, statements in IPO registration filings, or statements connected to tender offers, and it disappears entirely for a company convicted of securities fraud or subject to an SEC antifraud order within the prior three years.¹¹ Treat projections as management’s best case, and read the cautionary language that follows them. It often contains more useful information than the projections themselves.

When to Expect the Filing

Filing deadlines depend on the company’s public float — the total market value of shares held outside management and other affiliates. Each filer category gets a different window after fiscal year-end:¹²

Large accelerated filers (public float of $700 million or more): 60 days.³
Accelerated filers ($75 million to under $700 million): 75 days.
Non-accelerated filers (below $75 million): 90 days.

For a December 31 fiscal year, that means late February, mid-March, and late March. A company that can’t meet its deadline can file Form 12b-25 (also called NT 10-K) for an automatic 15-calendar-day extension. One late filing is rarely a crisis. Repeated extensions, or filings that arrive right at the extended deadline year after year, often point to internal problems worth checking.

Red Flags Worth Watching For

Once the structure feels familiar, the real value in reading a 10-K is spotting what management would prefer you skim past.

Material weakness disclosures in Item 9A. Management or its auditor is telling you the accounting controls have a gap large enough that a significant error might slip through.
Anything other than a clean auditor opinion, or going-concern language. Change how much weight you put on the numbers until you understand what triggered it.
Changes in auditors, disclosed in Item 9. A blank Item 9 is normal. Content is not — the section will describe any disagreements between the company and the former auditor.
Unresolved SEC staff comments in Item 1B. When SEC review staff has open questions that have gone unanswered for more than 180 days, the company has to say so.
A widening gap between net income and operating cash flow. Earnings grow, cash doesn’t. That pattern often means aggressive revenue recognition rather than real business momentum.
Non-GAAP adjustments that keep growing. If the spread between GAAP earnings and the company’s preferred adjusted metric widens every year, the “adjustments” are probably recurring costs.

None of these automatically means the company is a bad investment. Each is a reason to slow down, pull the surrounding footnotes, and read carefully before committing money.

1
U.S. Securities and Exchange Commission. About EDGAR
2
U.S. Securities and Exchange Commission. Understand and Utilize EDGAR CIK and CIK Confirmation Code (CCC)
3
U.S. Securities and Exchange Commission. Form 10-K
4
SEC.gov. Investor Bulletin: How to Read a 10-K
5
eCFR. 17 CFR 229.303 – (Item 303) Management’s Discussion and Analysis of Financial Condition and Results of Operations
6
eCFR. Part 244 Regulation G
7
eCFR. 17 CFR Part 210 – Article 8 Financial Statements of Smaller Reporting Companies
8
U.S. Securities and Exchange Commission. Management’s Report on Internal Control Over Financial Reporting and Certification of Disclosure in Exchange Act Periodic Reports
9
SEC.gov. Final Rule: Definition of the Term Significant Deficiency
10
Office of the Law Revision Counsel. 18 U.S. Code 1350 – Failure of Corporate Officers to Certify Financial Reports
11
Office of the Law Revision Counsel. 15 U.S. Code 78u-5 – Application of Safe Harbor for Forward-Looking Statements
12
U.S. Securities and Exchange Commission. SEC Filer Status and Reporting Status