Reading Company Risk from Public Disclosures: A Practical Primer

Every U.S. public company's annual report includes a section on what could go wrong. Read carefully, it is one of the most useful public sources on company risk. Read carelessly, it looks like a long list of everything imaginable. This primer explains how to tell the difference.

How the Risk Factors section is structured

The rule behind the section is Regulation S-K Item 105 (opens in a new tab). Among its requirements:

The discussion appears under the caption "Risk Factors" and is organized logically under relevant headings, with each risk factor under a subcaption that describes the risk.
Companies must explain concisely how each risk affects the company or the securities offered.
Generic risks that could apply to any company are discouraged. If included, they go at the end under "General Risk Factors."
If the section is longer than 15 pages, the company must include a bulleted or numbered summary of no more than two pages at the front of the document.

Several of these requirements came from the SEC's 2020 amendments, Modernization of Regulation S-K Items 101, 103, and 105 (opens in a new tab), which became effective on November 9, 2020. The stated aim was to improve readability, discourage repetition and reduce disclosure of information that is not material.

Three habits that make risk disclosures useful

1. Read the headings first

Because Item 105 requires headings and subcaptions, the headings work as a table of contents for management's view of risk. Read them in order before reading the detail. Company-specific risks usually come before the "General Risk Factors" group.

2. Compare year over year

A single year's risk factors show what is disclosed. Comparing consecutive annual reports shows what changed: risks that were added, removed, reworded or moved.

AI analysis (labeled): A newly added, company-specific risk factor is often more informative than the length of the whole section. That is an interpretive heuristic, not a rule. Wording can change for legal or editorial reasons unrelated to any change in the underlying risk.

3. Cross-check against MD&A and the notes

Risk factors describe what could happen. Two other parts of the annual report help show what has happened:

MD&A (Item 7). Under Item 303 (opens in a new tab), management describes known trends or uncertainties that have had, or are reasonably likely to have, a material impact on revenues or income.
Notes to the financial statements. The SEC's Beginners' Guide to Financial Statements (opens in a new tab) stresses that the footnotes are "packed with information," including the company's significant accounting policies.

When a risk named in Item 1A also shows up in MD&A or the notes, you have more than one disclosed source for the same theme.

What risk disclosures cannot tell you

Likelihood or timing. Disclosing a risk is not a prediction that it will occur.
Magnitude. Most risk factors are qualitative. Do not turn them into numbers they do not contain.
Investment conclusions. Risk disclosures inform research. They are not recommendations, and Global Barry does not turn them into buy or sell signals.

A short workflow

Pull the two most recent 10-Ks from EDGAR company search (opens in a new tab).
List the Item 1A headings from each and mark additions, removals and rewordings.
For each change, look for related discussion in Item 7 and the notes.
Record each finding as FACT (disclosed, with citation), ANALYSIS (your interpretation, labeled) or UNKNOWN.