Summary
When I review a client's disclosure, I read it the way I was trained to read at the Commission: not as the company's advocate, but as a skeptical examiner who does not yet know whether to believe it. Here is what that reading looks for.
Key points
- The staff reads every document against every other. Inconsistency is the first flag.
- A risk factor that describes as possible something that has already happened is itself misleading. Re-read every risk factor each period.
- Boilerplate tells investors nothing. MD&A must explain why results changed, not merely that they did.
- The test: if the company fails, will this filing read as an honest account of what management knew?
When I review a client's disclosure, I read it the way I was trained to read at the Commission: not as the company's advocate, but as a skeptical examiner who does not yet know whether to believe it. Here is what that reading looks for.
Consistency Across Documents
The staff does not read your 10-K in isolation. It reads it against your prior 10-K, your 10-Qs, your 8-Ks, your press releases, your website, your investor presentations, and, increasingly, your executives' public statements. The first question is whether the company's story is consistent.
If a press release describes a "strategic partnership" and the 8-K describes a non-binding letter of intent, the staff will notice. If management's discussion describes revenue growth driven by a new product line and the segment data does not show it, the staff will notice. If risk factors warn that the company "may" face a problem that the company has already experienced, the staff will notice that most of all.
The Hypothetical Risk That Has Already Happened
This is one of the most common and most avoidable disclosure failures. A risk factor says that the company could lose a significant customer, could face supply interruptions, or could become subject to regulatory action. In fact, the company has already lost the customer, already faced the interruption, or already received the regulatory letter.
Framing a present fact as a future possibility is a misleading statement. Risk factors must be updated when the risk materializes. The fix is procedural: every time a periodic report is prepared, someone should read each risk factor and ask whether it is still hypothetical.
Boilerplate
Generic risk factors are a warning sign in themselves. A disclosure that says "we operate in a heavily regulated industry and changes in law could adversely affect our business" tells an investor almost nothing, and in industries the SEC watches closely, it is often insufficient. The staff expects disclosure that explains specific risks as they apply to this company: which regulations, which operations, and what happens if they change. Chapter 14 returns to this in detail for cannabis, artificial intelligence, and digital asset companies.
Management's Discussion and Analysis
MD&A is where the staff expects management to explain the numbers in its own words: what drove results, what trends and uncertainties are reasonably likely to affect the future, and how liquidity will be managed. It is also where companies most often say too little. A table of changes with a sentence restating each change is not analysis. The staff frequently asks companies to explain why something happened, not merely that it happened, and to quantify the factors they identify.
Related Parties and Control
The staff pays close attention to who controls the company and who transacts with it. Loans from officers, leases with entities owned by directors, consulting arrangements with family members, and shares issued to insiders at low prices all require clear disclosure. In smaller companies these relationships are common and often legitimate. Undisclosed, they look like self-dealing.
Going Concern and Liquidity
If the auditor has raised substantial doubt about the company's ability to continue as a going concern, the disclosure must say so plainly and explain management's plans. A company that highlights its growth prospects in the forepart of a filing and buries its going concern language in the notes has created a tension that the staff will ask about.
The Test I Apply
After reading a filing, I ask one question: if the company fails, or the stock falls sharply, or an investor sues, will this document read as an honest account of what management knew when it was written? If the answer is yes, the filing has done its job, whatever happens to the business. If the answer is uncertain, the filing is not finished.
Frequently asked questions
What is the first thing the SEC staff looks for in a filing?
The staff reads every document against every other. Inconsistency is the first flag.
Can a risk factor itself be misleading?
A risk factor that describes as possible something that has already happened is itself misleading. Re-read every risk factor each period.
What does the SEC expect from MD&A?
Boilerplate tells investors nothing. MD&A must explain why results changed, not merely that they did.
How can a company test whether its filing is honest?
The test: if the company fails, will this filing read as an honest account of what management knew?
This is general information, not legal advice.
Continue with the book
From the appendices
Download the working tools
Three printable checklists drawn directly from Fred’s manuscript, with definitions from the book’s glossary.