Analyst Dojo
Lesson 3 of 4 11–14% of the exam

Regulatory filings, notes, MD&A and the audit report

Regulators require listed companies to file standardized reports. The notes explain the numbers and policies, segment data show what drives results, management's commentary explains trends (mostly unaudited), and the audit report says whether the statements are fairly presented, with reasonable, not absolute, assurance.

8 min cram, 36 min full read. Based on the 2027 CFA® Program Level I curriculum, Financial Statement Analysis, Learning Module 1. Also part of the 2026 curriculum, so it applies to the November 2026 exam too.

Tailor this to you: take the self-assessment

On the exam

  • Describe the importance of regulatory filings, financial statement notes and supplementary information, management’s commentary, and audit reports

Describe the importance of regulatory filings, the notes and supplementary information, management's commentary and audit reports. Expect to name the opinion that fits a description, say which document holds an item, tell what is audited, or apply the 10% and 75% segment tests.

How deeply to learn each part
Know the idea
Understand it in general. It frames other topics, but you will not calculate with it.
Use it
Understand it well enough to solve a question with it. Recognize when it applies.
Memorize
Learn it by heart. The exam will not give it to you.

You know this one. The full lesson is folded away. The takeaways, formulas and checkpoint below are your quick refresher, and the checkpoint is a fair test of whether you still do.

You tested strong here. The full lesson is folded away. The takeaways, formulas and checkpoint below are your quick refresher, and the checkpoint is a fair test of whether you still know it.

Cram mode: the one-screen version of this lesson. Switch to Full for the explanations, worked examples and interactives.

Who writes the rules and who makes companies file?

Standard setters write the accounting rules; regulators require the filings and enforce them. The two are different bodies, and the exam likes the confusion.

The International Accounting Standards Board (IASB) writes International Financial Reporting Standards (IFRS), and the Financial Accounting Standards Board (FASB) writes US generally accepted accounting principles (US GAAP). Securities regulators, such as the Securities and Exchange Commission in the United States, require listed companies to prepare reports under specified standards and to file them. IOSCO , the International Organization of Securities Commissions, is the club of securities regulators: its members oversee more than 95% of the world’s capital markets. It has no power of its own to enforce anything, yet because its members sign up to shared principles, rules look broadly alike from country to country. The principles serve three core objectives:

  1. protect investors;
  2. ensure markets are fair, efficient and transparent;
  3. reduce systemic risk (reduce, not eliminate).
Who writes the rules, who enforces them, who coordinates
Financial reporting oversightsetters write, regulators enforce, coordinators align
  • Standard setters Memorize write the accounting rules
    • IASB IFRS
    • FASB US GAAP
  • Regulators Memorize require filings and enforce
    • SEC United States; PCAOB oversees US auditors
    • National regulators in each EU state the EU requires IFRS for listed groups' consolidated accounts
  • Coordinating bodies Know the idea no direct regulatory authority
    • IOSCO cooperation and common principles for securities regulators
    • ESMA coordinates EU supervision
    • European Securities Committee advises the European Commission

In Europe, each member state regulates its own markets, but since 2005 the EU has required IFRS for the consolidated accounts of listed companies. ESMA , the European Securities and Markets Authority, is the EU cross-border supervisor that coordinates national regulators, and the European Securities Committee advises the European Commission.

In the United States, three laws matter to a reader of reports. The 1933 Act requires registration when securities are first sold. The 1934 Act created the SEC and requires periodic reports. The Sarbanes–Oxley Act of 2002 set up the Public Company Accounting Oversight Board (PCAOB) as the auditors’ overseer, barred auditors from selling certain other services to the companies they audit, made senior executives sign off on the reports personally, and made management assess and report on internal control over financial reporting , with the auditor giving its own view.

Which SEC form holds what?

Pick the form by what you need and how fresh it must be. The annual and interim reports carry the numbers; the other forms carry events, votes and insider activity.

  • Form 10-K is the annual report for US registrants, with audited statements, notes, risk factors and management’s discussion and analysis (MD&A). Form 20-F is the annual report for other non-US registrants, and Form 40-F for certain Canadian ones.
  • Form 10-Q is the quarterly report for US companies, with unaudited statements and an MD&A. Many non-US companies file a semiannual Form 6-K instead.
  • Form 8-K is the current report for material events: acquisitions or disposals, a change of auditor, management changes. Non-US filers use Form 6-K.
  • The proxy statement (Form DEF 14A) goes to shareholders before a meeting. It covers proposals to be voted on, ownership by management and principal owners, director biographies and executive compensation.
  • A registration statement is filed when a company sells new securities. It includes risk factors and recent audited statements, but not projections.
  • Forms 3, 4 and 5 report holdings, changes and annual positions of insiders and owners of more than 10% of a class of equity. Form 144 gives notice of a proposed sale of restricted stock.
SEC forms an analyst opens
SEC filingschoose by what you need and how fresh it is
  • Periodic Memorize on a schedule
    • Annual: 10-K, 20-F, 40-F US, other non-US, certain Canadian registrants
    • Interim: 10-Q (6-K) quarterly for US; semiannual 6-K for many non-US
  • Event-driven Memorize when something happens
    • 8-K (6-K for non-US) acquisitions, auditor changes, management changes
    • DEF 14A proxy statement before shareholder meetings
    • Registration statement when issuing new securities
  • Ownership Know the idea insiders and large holders
    • Forms 3, 4, 5 initial, changes, annual
    • Form 144 proposed sale of restricted securities

The glossy annual report to shareholders is not an SEC requirement. It overlaps with the 10-K, but it is a presentation, while the 10-K is a legal document.

What do the notes and segment data add?

The notes to the financial statements are part of the audited statements and explain the numbers. They state the basis of preparation, the accounting policies, methods and estimates, and detail behind almost every line item. They also cover segments, acquisitions, debt and other commitments, financial instruments and their risks, legal proceedings, related-party transactions and subsequent events.

Policy choices matter because both IFRS and US GAAP allow some flexibility. Say one airline assumes its aircraft last 20 years and another assumes 30: the second books a smaller expense each year for the same jet and looks more profitable. Only the notes reveal the assumption, so the analyst reads them before comparing.

An operating segment earns revenue and incurs expenses, is regularly reviewed by senior management, and has its own financial information. A segment becomes a reportable segment when it passes a size test, and the coverage test makes sure the reported segments explain most of the business.

Segment and customer share test Use it
s=ST≥10%s = \frac{S}{T} \ge 10\%
Reportable-segment coverage test Use it
external revenue of reportable segmentstotal revenue≥75%\frac{\text{external revenue of reportable segments}}{\text{total revenue}} \ge 75\%

If the reportable segments cover less than 75% of the total, the company adds segments (largest first) until they do. The remaining segments go into an “all other segments” line. A single customer worth 10% or more of revenue must be disclosed, though not named.

A customer worth 300 of 2,400 revenue is 12.5%, so it must be disclosed. Try other numbers: the exam asks this from every side.

Rearrange itThe 10% test: find the share, the amount or the total
The question asks for
A company has revenue of 2,400.00. One customer accounts for 300.00 of it. The customer's share of revenue is closest to:

300.00 ÷ 2,400.00 = 12.50%

Share of the total12.50%

On your calculator
  1. 300÷2400=0.125, so 12.50%
  1. 300ENTER2400÷0.125

ENTER enter (on the HP, puts the number on the stack)

What does management’s commentary add, and can you trust it?

It is the best starting point for understanding the numbers and the outlook, but it is management’s view. Management’s discussion and analysis (also called management commentary or the operating and financial review) is generally unaudited, apart from excerpts of the financial statements.

In the United States the SEC sets what an MD&A must cover. Expect to recognize the headings: trends, events and uncertainties that bear on liquidity, capital resources and results; how inflation and price changes hit the business; off-balance-sheet arrangements and contractual commitments; and the critical accounting policies where management makes subjective calls. Outside the United States, the IASB’s practice statement on management commentary is guidance, not a rule. It names five elements: the nature of the business, objectives and strategies, significant resources, risks and relationships, results, and critical performance measures.

Its forward-looking items, such as planned capital spending, new stores or divestitures, are useful for forecasting. Treat it as one input, not an independent opinion.

How far can you trust the audit report?

As far as reasonable assurance goes. The audit report is an independent accounting firm’s written opinion on whether the audited statements fairly present financial position, performance and cash flows under a stated set of standards. Auditors test samples, not every transaction, and many figures rest on estimates. So the opinion gives reasonable assurance : the statements are very probably free of material misstatement, but nobody promises they are exact.

Memorize

Choose the opinion from what the auditor found:

OpinionWhat it saysSignal
Unqualified opinion (unmodified, clean)Fairly presented in accordance with the standards (“true and fair view” internationally)The one analysts want to see
Qualified opinion Fairly presented except for a scope limitation or an exception to standards, explained in the report“except for”
Adverse opinion Materially departs from standards; not fairly presented“do not present fairly”
Disclaimer of opinion The auditor cannot issue an opinion, for example from a scope limitation“do not express an opinion”
Four audit opinions
Audit opinionthe auditor's view on fair presentation
  • Unqualified (unmodified, clean) Memorize fairly presented; "true and fair view"
  • Modified opinions Memorize something is wrong or missing
    • Qualified fair, except for a scope limitation or a departure from standards
    • Adverse materially departs from standards; not fairly presented
    • Disclaimer of opinion auditor cannot form an opinion

For listed companies the report also describes the basis for the opinion and discusses key audit matters (international) or critical audit matters (United States): areas of higher misstatement risk or significant management judgment, such as revenue recognition estimates or impairment tests. They are a guide to where judgment lives, not a list of what matters most to investors. In the United States the auditor also opines on internal control, in a separate report or an added paragraph.

Exam tip ”Except for” means qualified. “Not fairly presented” means adverse. “No opinion” means disclaimer.

Pair opinions with wording, then match information needs to documents.

Loading the interactive
Which page holds what, and is it audited?
The annual report packageaudited core, then supporting material
  • Audited Memorize covered by the opinion
    • Financial statements including the statement of cash flows
    • Notes policies, estimates, debt, leases, segments, related parties
  • Generally unaudited Memorize management's own view
    • Management commentary (MD&A) trends, liquidity, outlook, critical accounting policies
    • Interim statements in the 10-Q
  • Other filings Use it not part of the audit
    • Proxy statement executive pay, owners, directors, votes
    • 8-K material events
Go deeper Segment details and the profit test

For each reportable segment, the notes give revenue (external and from other segments), a measure of profit or loss, assets and liabilities if reviewed by senior management, interest revenue and expense, depreciation and amortization, other non-cash expenses, income tax and the share of equity-method profit. A reconciliation ties the segment totals to the consolidated statements. For the profit test, the absolute value of a segment’s profit or loss is compared with the greater of the combined profit of all profitable segments and the absolute combined loss of all loss-making ones. Segment definitions need judgment and companies change them, which can break comparisons over time.

Go deeper Audit committees and the other reports

Listed companies are often required to have an independent audit committee on the board overseeing the audit. International auditing standards come from the International Auditing and Assurance Standards Board (IAASB); in the United States, the PCAOB sets standards for public companies. Neither the audit nor the internal control report can catch everything, so the analyst still questions the numbers.

Memorize this

MemorizeSetters, regulators and IOSCO

BodyRole
IASB / FASBWrite IFRS / US GAAP (setters, not regulators)
SEC (US), national regulators (EU)Require filings and enforce
PCAOBOversees US public-company auditors (Sarbanes–Oxley, 2002)
IOSCONot a regulator itself; members regulate over 95% of the world's capital markets
ESMA / European Securities CommitteeCoordinates EU supervision / advises the Commission

Memory hook IOSCO's three objectives: Protect investors, keep markets Fair, efficient and transparent, Reduce (not eliminate) systemic risk. P-F-R.

Know it cold Setters write the rules, regulators enforce them. Since 2005 the EU requires IFRS for consolidated accounts of listed companies.

MemorizeSEC forms

FormWhat it is
10-K / 20-F / 40-FAnnual: US / other non-US / certain Canadian registrants
10-Q (6-K)Interim: quarterly for US, usually semiannual 6-K for non-US; unaudited
8-K (6-K)Material events: acquisitions, disposals, auditor and management changes
DEF 14AProxy statement: votes, executive pay, owners, directors
Registration statementNew securities: risk factors, audited statements, no projections
Forms 3, 4, 5, 144Insider ownership, changes, annual report, restricted-stock sales

Memory hook Q is for quarter, F is for foreign. The 8-K is a bulletin about one event. DEF 14A is the voting pack.

Know it cold The annual report to shareholders is not an SEC requirement; the 10-K is.

MemorizeSegment tests

TestThreshold
Reportable segment10% or more of combined revenue, profit (absolute value) or assets
CoverageReportable segments must reach 75% of external revenue; add segments until they do
Major customer10% or more of revenue: disclose the fact, not the name

Memory hook Ten to be seen, seventy-five to be covered: 10% gets a segment in, 75% decides how many you need.

Know it cold "10% or more" includes exactly 10%. The 75% test can pull in segments below 10%.

MemorizeMD&A and the notes

ItemContents
US MD&ATrends and events, liquidity and capital resources, results, effects of inflation, off-balance-sheet and contractual commitments, critical accounting policies
IASB management commentaryNature of the business, objectives and strategies, resources, risks and relationships, results, critical performance measures (guidance only)
NotesPolicies and estimates, line-item detail, segments, acquisitions, debt and commitments, financial instruments, legal proceedings, related parties, subsequent events

Memory hook IASB five elements tell a story in order: what we are, where we are going, what we have, how we did, how we keep score.

Know it cold Notes are audited. MD&A is generally unaudited and is management's view.

MemorizeAudit opinions and assurance

OpinionSignal phrase
UnqualifiedFairly presented, "true and fair view"
Qualified"except for": a scope limit or an exception
AdverseNot fairly presented; material departure
Disclaimer"We do not express an opinion"

Memory hook Four degrees: clean, clean-except, not clean, cannot say. Qualified = except; adverse = against; disclaimer = declines.

Know it cold An audit gives reasonable, never absolute, assurance. Key audit matters (international) and critical audit matters (US) flag judgment areas, not the most important items for investors.

Who writes the rules, who enforces them, who coordinates
Financial reporting oversightsetters write, regulators enforce, coordinators align
  • Standard setters Memorize write the accounting rules
    • IASB IFRS
    • FASB US GAAP
  • Regulators Memorize require filings and enforce
    • SEC United States; PCAOB oversees US auditors
    • National regulators in each EU state the EU requires IFRS for listed groups' consolidated accounts
  • Coordinating bodies Know the idea no direct regulatory authority
    • IOSCO cooperation and common principles for securities regulators
    • ESMA coordinates EU supervision
    • European Securities Committee advises the European Commission
SEC forms an analyst opens
SEC filingschoose by what you need and how fresh it is
  • Periodic Memorize on a schedule
    • Annual: 10-K, 20-F, 40-F US, other non-US, certain Canadian registrants
    • Interim: 10-Q (6-K) quarterly for US; semiannual 6-K for many non-US
  • Event-driven Memorize when something happens
    • 8-K (6-K for non-US) acquisitions, auditor changes, management changes
    • DEF 14A proxy statement before shareholder meetings
    • Registration statement when issuing new securities
  • Ownership Know the idea insiders and large holders
    • Forms 3, 4, 5 initial, changes, annual
    • Form 144 proposed sale of restricted securities
Four audit opinions
Audit opinionthe auditor's view on fair presentation
  • Unqualified (unmodified, clean) Memorize fairly presented; "true and fair view"
  • Modified opinions Memorize something is wrong or missing
    • Qualified fair, except for a scope limitation or a departure from standards
    • Adverse materially departs from standards; not fairly presented
    • Disclaimer of opinion auditor cannot form an opinion
Which page holds what, and is it audited?
The annual report packageaudited core, then supporting material
  • Audited Memorize covered by the opinion
    • Financial statements including the statement of cash flows
    • Notes policies, estimates, debt, leases, segments, related parties
  • Generally unaudited Memorize management's own view
    • Management commentary (MD&A) trends, liquidity, outlook, critical accounting policies
    • Interim statements in the 10-Q
  • Other filings Use it not part of the audit
    • Proxy statement executive pay, owners, directors, votes
    • 8-K material events
Segment and customer share test Use it
s=ST≥10%s = \frac{S}{T} \ge 10\%
Quick example

A segment has revenue of 180 out of combined segment revenue of 1,500. 180 ÷ 1,500 = 12%, at or above 10%, so it is reportable on the revenue test.

On your calculator
  1. 180÷1500= 0.12
  1. 180ENTER1500÷ 0.12

ENTER enter (on the HP, puts the number on the stack)

Reportable-segment coverage test Use it
external revenue of reportable segmentstotal revenue≥75%\frac{\text{external revenue of reportable segments}}{\text{total revenue}} \ge 75\%
Quick example

Three segments pass the 10% test with external revenue of 280, 220 and 150, out of total revenue of 800. (280 + 220 + 150) ÷ 800 = 81.25%, so no more segments are needed.

On your calculator
  1. 280+220+150=÷800= 0.8125
  1. 280ENTER220+150+800÷ 0.8125

ENTER enter (on the HP, puts the number on the stack)

How it is asked

  1. Opinion from the wording

    The statements are fairly presented "except for" the effects of one departure from standards. The opinion is…

    "Except for" is qualified. "Not fairly presented" is adverse; "unable to form an opinion" is a disclaimer.

  2. Which document holds it

    Where would an analyst find executive compensation? The auditor's resignation? Debt maturities?

    Pay: proxy statement. Resignation: 8-K. Debt maturities: notes. Management's outlook: MD&A.

  3. Is it audited?

    Which is least likely to be covered by the audit opinion?

    The notes and statements are covered; MD&A generally is not.

  4. How many segments?

    External revenues of 300, 250, 90, 85, 80, 70, 65 and 60 (total 1,000). Minimum number reported separately?

    10% first: only 300 and 250 pass (55%). Add the largest of the rest until 75%: 64%, 72.5%, then 80.5%, so 5. Trap: 2, which skips the 75% test.

Exam traps

  • Qualified versus adverse. "Except for" is qualified; "not fairly presented" is adverse.
  • Thinking MD&A is audited. It is management's view and generally unaudited, unlike the notes.
  • Thinking an unqualified opinion guarantees accurate numbers. Assurance is reasonable, never absolute.
  • Confusing standard setters (IASB, FASB) with regulators (SEC, ESMA).
  • Stopping at the 10% test. If reportable segments cover under 75% of external revenue, add more.
  • Treating key audit matters as a ranking of what matters most to investors. They flag audit risk and judgment.

Checkpoint

3 exam-style questions. About 90 seconds each.

  1. 1An auditor could not obtain enough evidence about the inventory of one subsidiary. The issue is material but confined to that balance, and the rest of the statements are fairly presented. The auditor will most likely issue:

  2. 2An analyst wants to know how a firm's executives are paid and who its principal shareholders are. The most appropriate document is the:

  3. 3A company reports seven operating segments, all revenue from external customers: 350, 250, 100, 90, 80, 70 and 60 (total 1,000). Using only the revenue tests, the minimum number of segments it must report separately is:

Key takeaways

  • Standard setters write the rules; regulators require and enforce filing.
  • Notes are audited and explain the numbers; MD&A is management's mostly unaudited view.
  • Reportable segment: 10% or more of revenue, profit or assets; reportable segments must cover 75% of external revenue.
  • Opinions: unqualified, qualified (except for), adverse (not fair), disclaimer (no opinion).
  • Assurance is reasonable, not absolute.
Segment and customer share test Use it
s=ST≥10%s = \frac{S}{T} \ge 10\%
Quick example

A segment has revenue of 180 out of combined segment revenue of 1,500. 180 ÷ 1,500 = 12%, at or above 10%, so it is reportable on the revenue test.

On your calculator
  1. 180÷1500= 0.12
  1. 180ENTER1500÷ 0.12

ENTER enter (on the HP, puts the number on the stack)

Reportable-segment coverage test Use it
external revenue of reportable segmentstotal revenue≥75%\frac{\text{external revenue of reportable segments}}{\text{total revenue}} \ge 75\%
Quick example

Three segments pass the 10% test with external revenue of 280, 220 and 150, out of total revenue of 800. (280 + 220 + 150) ÷ 800 = 81.25%, so no more segments are needed.

On your calculator
  1. 280+220+150=÷800= 0.8125
  1. 280ENTER220+150+800÷ 0.8125

ENTER enter (on the HP, puts the number on the stack)

All Financial Statement Analysis formulas, every lesson

Practice exam-style questions on Introduction to Financial Statement Analysis

Questions about this lesson?

Where this comes back

Questions candidates ask

What is the difference between a qualified and an adverse audit opinion?

A qualified opinion says the statements are fairly presented except for a stated scope limitation or departure from standards. An adverse opinion says they materially depart from the standards and are not fairly presented. Qualified is a limited problem; adverse is a pervasive one.

Is MD&A audited?

Generally no. Apart from excerpts of the financial statements, management's discussion and analysis is unaudited and reflects management's view. The notes to the financial statements are audited. A few jurisdictions, such as Germany, audit the management report.

What is the difference between key audit matters and critical audit matters?

Key audit matters appear in reports under international auditing standards; critical audit matters appear in US reports under the PCAOB. Both flag areas of higher misstatement risk or heavy judgment. Neither is necessarily what matters most to investors.

What is the 10% rule for segment reporting?

An operating segment must be reported separately if it is 10% or more of the combined segments' revenue, profit (absolute value) or assets. If reportable segments cover under 75% of external revenue, more segments are added until they reach 75%.

Spotted an error? Tell us and we will fix it.

  1. What financial statement analysis is for
  2. The six-step financial statement analysis framework
  3. Regulatory filings, notes, MD&A and the audit report
  4. IFRS vs US GAAP, new standards and other information sources

Ask Sensei Listen instead

Questions on Regulatory filings, notes, MD&A and the audit report

Learn with Sensei, out loud The voice tutor, in early access

Sensei teaches the lesson aloud and stops when you interrupt: "wait, why is the geometric mean lower?" It answers with the lesson's own example, then quizzes you by voice. Every account can try Sensei on one module, with one voice question.

USD 149 a month founding price (regular USD 199), kept for as long as you stay subscribed. Everything in Plus included.

In active development and improving every day. Send feedback · Plans and pricing

Analyst Dojo Plus

Your free review list holds 10 items.

Plus keeps everything you save, for USD 19 a month. To make room on the free plan, remove something from your review list.

See Plus

Lessons, checkpoints and the lesson questions in practice stay free. Compare plans