Regulatory filings, notes, MD&A and the audit report
Regulators require listed companies to file standardized reports. The notes explain the numbers and policies, segment data show what drives results, management's commentary explains trends (mostly unaudited), and the audit report says whether the statements are fairly presented, with reasonable, not absolute, assurance.
On the exam
- Describe the importance of regulatory filings, financial statement notes and supplementary information, management’s commentary, and audit reports
Describe the importance of regulatory filings, the notes and supplementary information, management's commentary and audit reports. Expect to name the opinion that fits a description, say which document holds an item, tell what is audited, or apply the 10% and 75% segment tests.
How deeply to learn each part
- Know the idea
- Understand it in general. It frames other topics, but you will not calculate with it.
- Use it
- Understand it well enough to solve a question with it. Recognize when it applies.
- Memorize
- Learn it by heart. The exam will not give it to you.
You know this one. The full lesson is folded away. The takeaways, formulas and checkpoint below are your quick refresher, and the checkpoint is a fair test of whether you still do.
You tested strong here. The full lesson is folded away. The takeaways, formulas and checkpoint below are your quick refresher, and the checkpoint is a fair test of whether you still know it.
Who writes the rules and who makes companies file?
Standard setters write the accounting rules; regulators require the filings and enforce them. The two are different bodies, and the exam likes the confusion.
The International Accounting Standards Board (IASB) writes International Financial Reporting Standards (IFRS), and the Financial Accounting Standards Board (FASB) writes US generally accepted accounting principles (US GAAP). Securities regulators, such as the Securities and Exchange Commission in the United States, require listed companies to prepare reports under specified standards and to file them. IOSCO , the International Organization of Securities Commissions, is the club of securities regulators: its members oversee more than 95% of the world’s capital markets. It has no power of its own to enforce anything, yet because its members sign up to shared principles, rules look broadly alike from country to country. The principles serve three core objectives:
- protect investors;
- ensure markets are fair, efficient and transparent;
- reduce systemic risk (reduce, not eliminate).
- Standard setters Memorize write the accounting rules
- IASB IFRS
- FASB US GAAP
-
- Regulators Memorize require filings and enforce
- SEC United States; PCAOB oversees US auditors
- National regulators in each EU state the EU requires IFRS for listed groups' consolidated accounts
-
- Coordinating bodies Know the idea no direct regulatory authority
- IOSCO cooperation and common principles for securities regulators
- ESMA coordinates EU supervision
- European Securities Committee advises the European Commission
-
In Europe, each member state regulates its own markets, but since 2005 the EU has required IFRS for the consolidated accounts of listed companies. ESMA , the European Securities and Markets Authority, is the EU cross-border supervisor that coordinates national regulators, and the European Securities Committee advises the European Commission.
In the United States, three laws matter to a reader of reports. The 1933 Act requires registration when securities are first sold. The 1934 Act created the SEC and requires periodic reports. The Sarbanes–Oxley Act of 2002 set up the Public Company Accounting Oversight Board (PCAOB) as the auditors’ overseer, barred auditors from selling certain other services to the companies they audit, made senior executives sign off on the reports personally, and made management assess and report on internal control over financial reporting , with the auditor giving its own view.
Which SEC form holds what?
Pick the form by what you need and how fresh it must be. The annual and interim reports carry the numbers; the other forms carry events, votes and insider activity.
- Form 10-K is the annual report for US registrants, with audited statements, notes, risk factors and management’s discussion and analysis (MD&A). Form 20-F is the annual report for other non-US registrants, and Form 40-F for certain Canadian ones.
- Form 10-Q is the quarterly report for US companies, with unaudited statements and an MD&A. Many non-US companies file a semiannual Form 6-K instead.
- Form 8-K is the current report for material events: acquisitions or disposals, a change of auditor, management changes. Non-US filers use Form 6-K.
- The proxy statement (Form DEF 14A) goes to shareholders before a meeting. It covers proposals to be voted on, ownership by management and principal owners, director biographies and executive compensation.
- A registration statement is filed when a company sells new securities. It includes risk factors and recent audited statements, but not projections.
- Forms 3, 4 and 5 report holdings, changes and annual positions of insiders and owners of more than 10% of a class of equity. Form 144 gives notice of a proposed sale of restricted stock.
- Periodic Memorize on a schedule
- Annual: 10-K, 20-F, 40-F US, other non-US, certain Canadian registrants
- Interim: 10-Q (6-K) quarterly for US; semiannual 6-K for many non-US
-
- Event-driven Memorize when something happens
- 8-K (6-K for non-US) acquisitions, auditor changes, management changes
- DEF 14A proxy statement before shareholder meetings
- Registration statement when issuing new securities
-
- Ownership Know the idea insiders and large holders
- Forms 3, 4, 5 initial, changes, annual
- Form 144 proposed sale of restricted securities
-
The glossy annual report to shareholders is not an SEC requirement. It overlaps with the 10-K, but it is a presentation, while the 10-K is a legal document.
What do the notes and segment data add?
The notes to the financial statements are part of the audited statements and explain the numbers. They state the basis of preparation, the accounting policies, methods and estimates, and detail behind almost every line item. They also cover segments, acquisitions, debt and other commitments, financial instruments and their risks, legal proceedings, related-party transactions and subsequent events.
Policy choices matter because both IFRS and US GAAP allow some flexibility. Say one airline assumes its aircraft last 20 years and another assumes 30: the second books a smaller expense each year for the same jet and looks more profitable. Only the notes reveal the assumption, so the analyst reads them before comparing.
An operating segment earns revenue and incurs expenses, is regularly reviewed by senior management, and has its own financial information. A segment becomes a reportable segment when it passes a size test, and the coverage test makes sure the reported segments explain most of the business.
If the reportable segments cover less than 75% of the total, the company adds segments (largest first) until they do. The remaining segments go into an “all other segments” line. A single customer worth 10% or more of revenue must be disclosed, though not named.
A customer worth 300 of 2,400 revenue is 12.5%, so it must be disclosed. Try other numbers: the exam asks this from every side.
A company has revenue of 2,400.00. One customer accounts for 300.00 of it. The customer's share of revenue is closest to:
300.00 ÷ 2,400.00 = 12.50%
Share of the total12.50%
- 300÷2400=0.125, so 12.50%
- 300ENTER2400÷0.125
ENTER enter (on the HP, puts the number on the stack)
What does management’s commentary add, and can you trust it?
It is the best starting point for understanding the numbers and the outlook, but it is management’s view. Management’s discussion and analysis (also called management commentary or the operating and financial review) is generally unaudited, apart from excerpts of the financial statements.
In the United States the SEC sets what an MD&A must cover. Expect to recognize the headings: trends, events and uncertainties that bear on liquidity, capital resources and results; how inflation and price changes hit the business; off-balance-sheet arrangements and contractual commitments; and the critical accounting policies where management makes subjective calls. Outside the United States, the IASB’s practice statement on management commentary is guidance, not a rule. It names five elements: the nature of the business, objectives and strategies, significant resources, risks and relationships, results, and critical performance measures.
Its forward-looking items, such as planned capital spending, new stores or divestitures, are useful for forecasting. Treat it as one input, not an independent opinion.
How far can you trust the audit report?
As far as reasonable assurance goes. The audit report is an independent accounting firm’s written opinion on whether the audited statements fairly present financial position, performance and cash flows under a stated set of standards. Auditors test samples, not every transaction, and many figures rest on estimates. So the opinion gives reasonable assurance : the statements are very probably free of material misstatement, but nobody promises they are exact.
Memorize
Choose the opinion from what the auditor found:
| Opinion | What it says | Signal |
|---|---|---|
| Unqualified opinion (unmodified, clean) | Fairly presented in accordance with the standards (“true and fair view” internationally) | The one analysts want to see |
| Qualified opinion | Fairly presented except for a scope limitation or an exception to standards, explained in the report | “except for” |
| Adverse opinion | Materially departs from standards; not fairly presented | “do not present fairly” |
| Disclaimer of opinion | The auditor cannot issue an opinion, for example from a scope limitation | “do not express an opinion” |
- Unqualified (unmodified, clean) Memorize fairly presented; "true and fair view"
- Modified opinions Memorize something is wrong or missing
- Qualified fair, except for a scope limitation or a departure from standards
- Adverse materially departs from standards; not fairly presented
- Disclaimer of opinion auditor cannot form an opinion
-
For listed companies the report also describes the basis for the opinion and discusses key audit matters (international) or critical audit matters (United States): areas of higher misstatement risk or significant management judgment, such as revenue recognition estimates or impairment tests. They are a guide to where judgment lives, not a list of what matters most to investors. In the United States the auditor also opines on internal control, in a separate report or an added paragraph.
Exam tip ”Except for” means qualified. “Not fairly presented” means adverse. “No opinion” means disclaimer.
Pair opinions with wording, then match information needs to documents.
- Audited Memorize covered by the opinion
- Financial statements including the statement of cash flows
- Notes policies, estimates, debt, leases, segments, related parties
-
- Generally unaudited Memorize management's own view
- Management commentary (MD&A) trends, liquidity, outlook, critical accounting policies
- Interim statements in the 10-Q
-
- Other filings Use it not part of the audit
- Proxy statement executive pay, owners, directors, votes
- 8-K material events
-
Go deeper Segment details and the profit test
For each reportable segment, the notes give revenue (external and from other segments), a measure of profit or loss, assets and liabilities if reviewed by senior management, interest revenue and expense, depreciation and amortization, other non-cash expenses, income tax and the share of equity-method profit. A reconciliation ties the segment totals to the consolidated statements. For the profit test, the absolute value of a segment’s profit or loss is compared with the greater of the combined profit of all profitable segments and the absolute combined loss of all loss-making ones. Segment definitions need judgment and companies change them, which can break comparisons over time.
Go deeper Audit committees and the other reports
Listed companies are often required to have an independent audit committee on the board overseeing the audit. International auditing standards come from the International Auditing and Assurance Standards Board (IAASB); in the United States, the PCAOB sets standards for public companies. Neither the audit nor the internal control report can catch everything, so the analyst still questions the numbers.
Memorize this
MemorizeSetters, regulators and IOSCO
| Body | Role |
|---|---|
| IASB / FASB | Write IFRS / US GAAP (setters, not regulators) |
| SEC (US), national regulators (EU) | Require filings and enforce |
| PCAOB | Oversees US public-company auditors (Sarbanes–Oxley, 2002) |
| IOSCO | Not a regulator itself; members regulate over 95% of the world's capital markets |
| ESMA / European Securities Committee | Coordinates EU supervision / advises the Commission |
Memory hook IOSCO's three objectives: Protect investors, keep markets Fair, efficient and transparent, Reduce (not eliminate) systemic risk. P-F-R.
Know it cold Setters write the rules, regulators enforce them. Since 2005 the EU requires IFRS for consolidated accounts of listed companies.
MemorizeSEC forms
| Form | What it is |
|---|---|
| 10-K / 20-F / 40-F | Annual: US / other non-US / certain Canadian registrants |
| 10-Q (6-K) | Interim: quarterly for US, usually semiannual 6-K for non-US; unaudited |
| 8-K (6-K) | Material events: acquisitions, disposals, auditor and management changes |
| DEF 14A | Proxy statement: votes, executive pay, owners, directors |
| Registration statement | New securities: risk factors, audited statements, no projections |
| Forms 3, 4, 5, 144 | Insider ownership, changes, annual report, restricted-stock sales |
Memory hook Q is for quarter, F is for foreign. The 8-K is a bulletin about one event. DEF 14A is the voting pack.
Know it cold The annual report to shareholders is not an SEC requirement; the 10-K is.
MemorizeSegment tests
| Test | Threshold |
|---|---|
| Reportable segment | 10% or more of combined revenue, profit (absolute value) or assets |
| Coverage | Reportable segments must reach 75% of external revenue; add segments until they do |
| Major customer | 10% or more of revenue: disclose the fact, not the name |
Memory hook Ten to be seen, seventy-five to be covered: 10% gets a segment in, 75% decides how many you need.
Know it cold "10% or more" includes exactly 10%. The 75% test can pull in segments below 10%.
MemorizeMD&A and the notes
| Item | Contents |
|---|---|
| US MD&A | Trends and events, liquidity and capital resources, results, effects of inflation, off-balance-sheet and contractual commitments, critical accounting policies |
| IASB management commentary | Nature of the business, objectives and strategies, resources, risks and relationships, results, critical performance measures (guidance only) |
| Notes | Policies and estimates, line-item detail, segments, acquisitions, debt and commitments, financial instruments, legal proceedings, related parties, subsequent events |
Memory hook IASB five elements tell a story in order: what we are, where we are going, what we have, how we did, how we keep score.
Know it cold Notes are audited. MD&A is generally unaudited and is management's view.
MemorizeAudit opinions and assurance
| Opinion | Signal phrase |
|---|---|
| Unqualified | Fairly presented, "true and fair view" |
| Qualified | "except for": a scope limit or an exception |
| Adverse | Not fairly presented; material departure |
| Disclaimer | "We do not express an opinion" |
Memory hook Four degrees: clean, clean-except, not clean, cannot say. Qualified = except; adverse = against; disclaimer = declines.
Know it cold An audit gives reasonable, never absolute, assurance. Key audit matters (international) and critical audit matters (US) flag judgment areas, not the most important items for investors.
- Standard setters Memorize write the accounting rules
- IASB IFRS
- FASB US GAAP
-
- Regulators Memorize require filings and enforce
- SEC United States; PCAOB oversees US auditors
- National regulators in each EU state the EU requires IFRS for listed groups' consolidated accounts
-
- Coordinating bodies Know the idea no direct regulatory authority
- IOSCO cooperation and common principles for securities regulators
- ESMA coordinates EU supervision
- European Securities Committee advises the European Commission
-
- Periodic Memorize on a schedule
- Annual: 10-K, 20-F, 40-F US, other non-US, certain Canadian registrants
- Interim: 10-Q (6-K) quarterly for US; semiannual 6-K for many non-US
-
- Event-driven Memorize when something happens
- 8-K (6-K for non-US) acquisitions, auditor changes, management changes
- DEF 14A proxy statement before shareholder meetings
- Registration statement when issuing new securities
-
- Ownership Know the idea insiders and large holders
- Forms 3, 4, 5 initial, changes, annual
- Form 144 proposed sale of restricted securities
-
- Unqualified (unmodified, clean) Memorize fairly presented; "true and fair view"
- Modified opinions Memorize something is wrong or missing
- Qualified fair, except for a scope limitation or a departure from standards
- Adverse materially departs from standards; not fairly presented
- Disclaimer of opinion auditor cannot form an opinion
-
- Audited Memorize covered by the opinion
- Financial statements including the statement of cash flows
- Notes policies, estimates, debt, leases, segments, related parties
-
- Generally unaudited Memorize management's own view
- Management commentary (MD&A) trends, liquidity, outlook, critical accounting policies
- Interim statements in the 10-Q
-
- Other filings Use it not part of the audit
- Proxy statement executive pay, owners, directors, votes
- 8-K material events
-
Quick example
A segment has revenue of 180 out of combined segment revenue of 1,500. 180 ÷ 1,500 = 12%, at or above 10%, so it is reportable on the revenue test.
- 180÷1500= 0.12
- 180ENTER1500÷ 0.12
ENTER enter (on the HP, puts the number on the stack)
Quick example
Three segments pass the 10% test with external revenue of 280, 220 and 150, out of total revenue of 800. (280 + 220 + 150) ÷ 800 = 81.25%, so no more segments are needed.
- 280+220+150=÷800= 0.8125
- 280ENTER220+150+800÷ 0.8125
ENTER enter (on the HP, puts the number on the stack)
How it is asked
-
Opinion from the wording
The statements are fairly presented "except for" the effects of one departure from standards. The opinion is…
"Except for" is qualified. "Not fairly presented" is adverse; "unable to form an opinion" is a disclaimer.
-
Which document holds it
Where would an analyst find executive compensation? The auditor's resignation? Debt maturities?
Pay: proxy statement. Resignation: 8-K. Debt maturities: notes. Management's outlook: MD&A.
-
Is it audited?
Which is least likely to be covered by the audit opinion?
The notes and statements are covered; MD&A generally is not.
-
How many segments?
External revenues of 300, 250, 90, 85, 80, 70, 65 and 60 (total 1,000). Minimum number reported separately?
10% first: only 300 and 250 pass (55%). Add the largest of the rest until 75%: 64%, 72.5%, then 80.5%, so 5. Trap: 2, which skips the 75% test.
Exam traps
- Qualified versus adverse. "Except for" is qualified; "not fairly presented" is adverse.
- Thinking MD&A is audited. It is management's view and generally unaudited, unlike the notes.
- Thinking an unqualified opinion guarantees accurate numbers. Assurance is reasonable, never absolute.
- Confusing standard setters (IASB, FASB) with regulators (SEC, ESMA).
- Stopping at the 10% test. If reportable segments cover under 75% of external revenue, add more.
- Treating key audit matters as a ranking of what matters most to investors. They flag audit risk and judgment.
Checkpoint
3 exam-style questions. About 90 seconds each.
1An auditor could not obtain enough evidence about the inventory of one subsidiary. The issue is material but confined to that balance, and the rest of the statements are fairly presented. The auditor will most likely issue:
2An analyst wants to know how a firm's executives are paid and who its principal shareholders are. The most appropriate document is the:
3A company reports seven operating segments, all revenue from external customers: 350, 250, 100, 90, 80, 70 and 60 (total 1,000). Using only the revenue tests, the minimum number of segments it must report separately is:
Key takeaways
- Standard setters write the rules; regulators require and enforce filing.
- Notes are audited and explain the numbers; MD&A is management's mostly unaudited view.
- Reportable segment: 10% or more of revenue, profit or assets; reportable segments must cover 75% of external revenue.
- Opinions: unqualified, qualified (except for), adverse (not fair), disclaimer (no opinion).
- Assurance is reasonable, not absolute.
Quick example
A segment has revenue of 180 out of combined segment revenue of 1,500. 180 ÷ 1,500 = 12%, at or above 10%, so it is reportable on the revenue test.
- 180÷1500= 0.12
- 180ENTER1500÷ 0.12
ENTER enter (on the HP, puts the number on the stack)
Quick example
Three segments pass the 10% test with external revenue of 280, 220 and 150, out of total revenue of 800. (280 + 220 + 150) ÷ 800 = 81.25%, so no more segments are needed.
- 280+220+150=÷800= 0.8125
- 280ENTER220+150+800÷ 0.8125
ENTER enter (on the HP, puts the number on the stack)
All Financial Statement Analysis formulas, every lesson
Practice exam-style questions on Introduction to Financial Statement Analysis
Questions about this lesson?
Where this comes back
- Financial Reporting Quality Financial Statement Analysis
- Analyzing Balance Sheets Financial Statement Analysis
Questions candidates ask
What is the difference between a qualified and an adverse audit opinion?
A qualified opinion says the statements are fairly presented except for a stated scope limitation or departure from standards. An adverse opinion says they materially depart from the standards and are not fairly presented. Qualified is a limited problem; adverse is a pervasive one.
Is MD&A audited?
Generally no. Apart from excerpts of the financial statements, management's discussion and analysis is unaudited and reflects management's view. The notes to the financial statements are audited. A few jurisdictions, such as Germany, audit the management report.
What is the difference between key audit matters and critical audit matters?
Key audit matters appear in reports under international auditing standards; critical audit matters appear in US reports under the PCAOB. Both flag areas of higher misstatement risk or heavy judgment. Neither is necessarily what matters most to investors.
What is the 10% rule for segment reporting?
An operating segment must be reported separately if it is 10% or more of the combined segments' revenue, profit (absolute value) or assets. If reportable segments cover under 75% of external revenue, more segments are added until they reach 75%.
Spotted an error? Tell us and we will fix it.