How do I read the Risk Factors section of a 10-K?

What the section is

Risk Factors, found in Item 1A of a 10-K (and updated in 10-Qs when material changes occur), is where a company discloses the significant risks that could cause actual results to differ from expectations. The SEC now asks companies to keep this section focused and, for longer sets of risks, to include a summary. Companies write it defensively, so it tends to be comprehensive — the challenge is separating meaningful signal from legal boilerplate.

How to separate signal from boilerplate

Generic risks — "economic conditions may affect demand," "we face competition," "cybersecurity incidents could harm us" — appear in almost every filing and carry little information. The valuable content is company-specific and concrete: dependence on a single large customer, a pending lawsuit with a named counterparty, reliance on one supplier or manufacturing site, exposure to a specific regulation, or heavy debt maturing on a specific date.

Order can be meaningful. Many companies list risks roughly by importance, so the risks near the top often reflect what management worries about most.

The most powerful technique: year-over-year comparison

The single most useful way to read Risk Factors is to compare this year's section to last year's. A newly added risk factor signals something changed — a new competitor, a regulatory threat, a customer concentration that just emerged, or litigation that just arose. Conversely, a risk that was removed may indicate a resolved concern. Because companies rarely add risk language casually (it can invite scrutiny), new additions deserve close attention.