The 10-K: How the Annual Report Is Organised

Scope. This article describes what the Form 10-K is, how it is organised, and what each part is for. It does not tell a reader what to conclude from any section. Jurisdiction: United States federal filings, checked 14 August 2026 and re-confirmed at publication QA on 18 August 2026. The 10-K is a creation of the Securities Exchange Act of 1934 and exists only in the US regime; non-US markets have annual reporting requirements that differ in content, ordering and timing, and foreign private issuers filing with the SEC generally use different forms.

That distinction is the most useful thing to establish first. The glossy report is a communication; the 10-K is a filing, made under rules that specify what must be in it, in what order, with liability attaching to what it says.

The order is fixed by regulation, which is what makes the document usable. Every 10-K from every filer follows the same sequence of numbered items, so a reader who learns the structure once can navigate any of them — and can also tell immediately when something expected is missing.

The four parts

Part I — the business and its risks. Item 1 describes what the company does: its products and services, subsidiaries, markets, competition, regulation and, since 2020, its human capital. Item 1A is the risk factors, which companies generally present in order of significance. Item 1C is cybersecurity, covering the company's processes for assessing and managing risks from cybersecurity threats and the board's oversight of them. Items 2 and 3 cover properties and legal proceedings.

Part II — the financial performance. This is where most of the substance sits. Item 7 is management's discussion and analysis: the company's own account of its results and financial condition. Item 7A covers market-risk exposures. Item 8 is the audited financial statements and the accompanying notes, which is the part the rest of Group IV is about. Item 9A covers internal control over financial reporting.

Part III — the people and the oversight. Directors, executive officers, executive compensation, security ownership and related-party transactions. Much of Part III is frequently not in the 10-K at all — filers are permitted to incorporate it by reference from the proxy statement, which is typically filed a month or two later, and most do.

Part IV — exhibits. Item 15 lists the financial statement schedules and the exhibits: bylaws, material contracts, subsidiary lists, credit agreements, certifications. The exhibit list is the least-read part of the document and the only place where the actual text of a company's contractual obligations can be found.

A structural change that catches out even good sources, and it is why this pillar dates its filing descriptions. Item 6 of Part II required five years of selected financial data until the SEC eliminated that requirement in Release 33-10890, effective 10 February 2021 and fully effective 9 August 2021. Item 6 now appears in filings as reserved. The same release also removed the contractual obligations table from management's discussion and analysis, folding that material into a principles-based discussion of liquidity and capital resources instead. Material describing Item 6 as a five-year data table stayed in circulation well after the change, which is exactly the failure mode this pillar guards against: an article on filings that carries no date and no rule citation cannot be checked and cannot be maintained. The practical consequence for a reader: a multi-year comparison now has to be built from several filings rather than lifted from one table.

Where the reading effort actually goes

The parts are not of equal density and pretending otherwise wastes the reader's time. Item 1 and Item 1A establish what the company is and what it says could go wrong. Item 7 is management's narrative — the most readable section and, for the reason set out in the article on a repeatable research process, the one worth reading after forming a view rather than before. Item 8 carries the statements and their notes, which is the bulk of the verifiable content.

The risk factors deserve a specific caution. They are drafted by lawyers to establish that a risk was disclosed, which makes them comprehensive rather than discriminating: a list that includes every conceivable adversity does not tell a reader which ones the company considers likely. The useful reading of risk factors is comparative, not absolute — what changed since last year's filing, what was added, what was dropped, and what moved up the list. A newly added risk factor is a company telling a reader something it did not previously think it needed to say.

Timing, and why it matters

Filing deadlines depend on the company's filer status, running from 60 days after the fiscal year end for the largest filers out to 90 days for the smallest. The practical consequence is that the 10-K arrives well after the results it describes were first announced. A company typically issues an earnings release and holds a call weeks before the 10-K is filed, so by the time the complete document appears, the headline figures are old news and the incremental content is everything the release did not contain: the notes, the risk-factor changes, the internal-control disclosure and the exhibits.

That gap is the whole argument for reading the filing rather than the coverage of it. The coverage was written against the release. The filing contains what the release left out.