5.3 SEC Disclosures and MD&A

Key Takeaways

  • MD&A is a required narrative section of Form 10-K (Item 7) focusing on liquidity, capital resources, results of operations, and critical accounting estimates.
  • SOX Section 302 requires CEOs and CFOs to personally certify the accuracy of financial reports and the design/effectiveness of disclosure controls.
  • SOX Section 404(a) requires management to report on the effectiveness of internal control over financial reporting (ICFR) annually.
  • SOX Section 404(b) requires an auditor's attestation on ICFR for Large Accelerated and Accelerated filers; Non-Accelerated filers are exempt.
  • Footnote disclosures under Regulation S-X must detail related party transactions, segment reporting, and the fair value hierarchy.
Last updated: July 2026

SEC Disclosures and MD&A

In addition to the primary financial statements, the SEC requires extensive disclosures to provide qualitative context and ensure administrative accountability. These disclosures include narrative discussions of financial performance and assessments of the control environment that governs financial reporting.

Management's Discussion and Analysis (MD&A)

Item 7 of Form 10-K and Item 2 of Form 10-Q require a narrative section known as the Management's Discussion and Analysis of Financial Condition and Results of Operations (MD&A). The purpose of MD&A is to provide investors with a narrative overview of the company's financial condition and operating performance from the perspective of management. It focuses on several key areas:

  • Liquidity: Management must discuss its ability to generate cash to meet both short-term and long-term operating demands and capital commitments. This includes identifying any known trends, commitments, or uncertainties that are reasonably likely to result in material changes in liquidity.
  • Capital Resources: A discussion of material commitments for capital expenditures, the general purpose of these commitments, and the anticipated source of funds. Off-balance sheet arrangements and obligations (such as variable interest entities) must also be disclosed.
  • Results of Operations: An analysis of revenue and expense changes year-over-year, including explanations for major fluctuations and the impact of inflation, interest rates, or changes in sales volume on net sales. It must also disclose any unusual or infrequent events that materially affected income.
  • Critical Accounting Estimates: Disclosures regarding accounting policies that require management to make highly subjective or complex judgments about matters that are inherently uncertain. Examples include the allowance for credit losses, asset impairments, goodwill valuation, and pension obligations.

Safe Harbor Rules: Since MD&A often contains forward-looking statements (estimates, projections, and plans), the Private Securities Litigation Reform Act of 1995 provides a 'safe harbor' that protects companies from liability in private lawsuits, provided that the forward-looking statements are accompanied by meaningful cautionary language identifying factors that could cause actual results to differ materially.

Sarbanes-Oxley (SOX) Act Compliance

The Sarbanes-Oxley Act of 2002 introduced sweeping reforms to improve corporate governance and internal control reporting for public companies. Two sections are of paramount importance for financial reporting:

  1. Section 302 (Corporate Responsibility for Financial Reports): Requires the Chief Executive Officer (CEO) and Chief Financial Officer (CFO) to personally certify in each quarterly and annual report that:
    • They have reviewed the report.
    • The report does not contain untrue statements of material facts or omit material facts.
    • The financial statements fairly present the company's financial condition.
    • They are responsible for establishing and maintaining internal controls, and have evaluated their effectiveness within 90 days of the filing.
  2. Section 404 (Management Assessment of Internal Controls):
    • Section 404(a): Requires management to report annually on its responsibility for establishing and maintaining an adequate internal control over financial reporting (ICFR) structure and to provide management's assessment of the effectiveness of ICFR as of year-end.
    • Section 404(b): Requires the company's independent auditor to issue an attestation report on the effectiveness of the company's ICFR. Under current regulations (established under the Dodd-Frank Act), Non-Accelerated Filers and Smaller Reporting Companies are exempt from Section 404(b). Large Accelerated and Accelerated Filers must obtain this annual audit attestation report, which is published within Item 9A of Form 10-K.

Footnote Disclosure Requirements

Regulation S-X requires detailed disclosures in the footnotes to the financial statements. On the FAR exam, three disclosures are highly tested:

  • Related Party Transactions (ASC 850): Companies must disclose transactions with related parties (e.g., officers, directors, major shareholders, and affiliates). The footnotes must detail the nature of the relationship, a description of the transactions, the dollar amount of transactions, and any balances due to or from related parties. Related party transactions cannot be presumed to be conducted at arm's-length.
  • Segment Reporting (ASC 280 & ASU 2023-07): Public companies must disclose financial and descriptive information about their operating segments. Segments are determined based on the 'management approach'—meaning segments are defined by how the Chief Operating Decision Maker (CODM) organizes the business internally to allocate resources and assess performance. Key segment disclosures include segment revenues, profit or loss, assets, and capital expenditures.
  • Fair Value Measurements (ASC 820): Public issuers must disclose the methods and inputs used to measure assets and liabilities at fair value. Inputs are classified into a three-level hierarchy: Level 1 (quoted prices in active markets for identical assets/liabilities), Level 2 (observable inputs other than Level 1, such as quoted prices for similar assets in active markets or interest rates), and Level 3 (unobservable inputs based on management's own assumptions about market participant assumptions).

Worked Example: Accruing and Disclosing a Loss Contingency (ASC 450)

Under US GAAP, a loss contingency is accrued and recorded in the financial statements if it is both probable (likely to occur) and reasonably estimable. If a loss is only 'reasonably possible' or if the amount cannot be estimated, it is only disclosed in the footnotes.

Suppose a company is sued for patent infringement in November 2025. As of December 31, 2025, legal counsel advises that it is probable the company will lose the lawsuit, and the loss is estimated to range between $100,000 and $300,000, with no single amount in the range being a better estimate than any other. Under US GAAP (ASC 450), the company must accrue the minimum amount in the range ($100,000). (Contrast this with IFRS, which requires the midpoint of the range).

Adjusting Journal Entry for Accrual

Date: 12/31/2025
Legal Loss Expense                      $100,000 (Dr.)
   Estimated Litigation Liability          $100,000 (Cr.)

Required Footnote Disclosure

In the notes to the 2025 financial statements, the company must disclose the nature of the lawsuit, the $100,000 accrued liability, and the additional exposure to loss of $200,000 (the maximum range of $300,000 less the $100,000 minimum accrued) as a reasonably possible additional loss that has not been recognized in the financial statements.

Test Your Knowledge

Which of the following items is NOT a required focus area within the Management's Discussion and Analysis (MD&A) section of Form 10-K?

A
B
C
D
Test Your Knowledge

Under Section 404 of the Sarbanes-Oxley Act, which category of SEC filer is exempt from the requirement to obtain an independent auditor's attestation report on the effectiveness of internal control over financial reporting (ICFR)?

A
B
C
D
Test Your Knowledge

A public company enters into a material transaction with an entity owned by the spouse of the company's CEO. Under ASC 850 and SEC disclosure rules, which of the following is required?

A
B
C
D
Test Your Knowledge

A company is sued for patent infringement before its fiscal year-end. As of the balance sheet date, legal counsel believes a loss is probable, and the range of loss is estimated to be between $200,000 and $600,000, with no single amount in the range being a better estimate than any other. Under US GAAP (ASC 450), what amount should be accrued, and what must be disclosed in the footnotes?

A
B
C
D