A 10-K looks intimidating: 80 to 150 pages, legal boilerplate, footnotes on footnotes, and a font size that seems designed to discourage reading. Here's the thing — you don't need to read all of it, and most of what actually matters follows a predictable order. This is that order.

1. Start with Risk Factors, not the financials

It sounds backwards, but Item 1A — Risk Factors — is where a company is legally required to disclose what could go wrong: competition, regulation, customer concentration, supply chain dependency, pending litigation, cybersecurity exposure. Companies don't write this section to scare you; they write it because securities law requires disclosure of "material" risks, and the definition of material has teeth.

Read the first ten items closely, then skim the rest. The first few are usually ordered by how seriously the company's own lawyers rank them — a company that lists "dependence on a single supplier" as risk #2 is telling you something real about how fragile its supply chain is, whether or not the stock price reflects that yet.

2. Skim the MD&A before the numbers

Item 7 — Management's Discussion and Analysis — is management's own narrative explanation of the numbers you're about to see. This is the part most beginners skip straight past to get to the financial statements, which is backwards: MD&A tells you why revenue moved the way it did, in management's own words, before you look at the raw figures.

Two things to watch for here specifically: how management explains a bad quarter (do they own it, or reach for external excuses like "macroeconomic headwinds" every single time?), and whether the explanation for growth matches what you'd expect. If revenue grew 15% and MD&A attributes all of it to a one-time contract or a currency tailwind, that's a very different story than 15% organic growth across the core business.

3. The three statements, in the order they connect

The income statement, balance sheet, and cash flow statement aren't three separate stories — they're one story told three times, from three different angles. Read them in this order:

• Income statement — did the company make money this year, and from what? Look at revenue growth first, then gross margin (how much it costs to produce what it sells), then how much of that trickles down to net income.
• Balance sheet — what does it own, what does it owe, and what's left over for shareholders? This is a snapshot at a single point in time, not a flow — that distinction trips up a lot of beginners.
• Cash flow statement — did the profit on paper actually turn into cash in the bank? This is arguably the hardest statement to fake convincingly, which is exactly why professional analysts weight it so heavily.

4. Check segment reporting if the company has more than one business line

If a company reports in multiple segments (a conglomerate, a diversified tech company, a bank with retail and investment arms), the consolidated numbers can hide a lot. A company with flat overall revenue might have one segment growing 30% and another shrinking 20% — the total tells you almost nothing about which direction the business is actually heading. Segment reporting, usually a note near the back of the financials, breaks this apart by revenue, operating income, and sometimes assets per segment.

5. Read the notes — that's where things hide

The notes section is dense, but it's where companies disclose the details that don't fit cleanly into a single line item: how revenue is recognized (subscription vs. one-time sale, which changes how "growth" should be interpreted), stock-based compensation (a real cost that doesn't show up as a cash outflow), debt maturity schedules (how much comes due, and when), leases, pending litigation with dollar exposure estimates, and related-party transactions. If a number on the face of the statement looks unusually good, the explanation is often a few pages away in the notes — that's not an accident, it's how the disclosure rules are structured.

6. Check the auditor's opinion

Buried near the financials is a short, formulaic auditor's report. A "clean" (unqualified) opinion means the auditor believes the statements are fairly presented according to GAAP — that's the expected, boring outcome, and it's what you'll see in the overwhelming majority of 10-Ks. A "going concern" note means the auditor has substantial doubt the company survives another 12 months as a going concern. Anything other than clean and unqualified is worth stopping and reading twice, slowly.

What to skip on a first pass

Executive compensation tables (Item 11), most of the legal boilerplate in the early items, and the bulk of the "Properties" section (Item 2) rarely change your read on a company's financial health. They matter for specific questions (governance concerns, real estate exposure) but aren't where the signal is for a general first read. Come back to them if a specific question sends you looking.

10-K vs. 10-Q: when to read which

A 10-K is the full annual filing — audited, detailed, with the complete Risk Factors and MD&A sections. A 10-Q is the quarterly update — unaudited, lighter on narrative, but faster to get. If you're doing a first deep read on a company, start with the most recent 10-K for the full picture, then layer in the 10-Qs since to see what's changed in-year. Don't skip straight to quarterly filings for a company you don't already understand — the 10-Q assumes you've already read the annual context and won't repeat the risk disclosures or accounting policy notes in full.

One practical detail: quarterly figures are not always directly comparable to annual figures divided by four. Seasonal businesses (retail around the holidays, for instance) can have a single quarter that dwarfs the other three — always check whether a company's revenue is seasonal before reading a strong or weak quarter as a trend.

A red-flags checklist

None of these automatically mean a company is in trouble, but each is worth a closer look if you spot it:

• Revenue growing while operating cash flow shrinks or goes negative
• A sudden, unexplained change in revenue recognition policy
• Frequent auditor changes, or a new auditor right before a weak filing
• Related-party transactions that make up a meaningful share of revenue or expenses
• Debt maturities concentrated heavily in the next 12–24 months
• Risk Factors language that gets noticeably more specific or urgent year over year
• Non-GAAP metrics used prominently in press releases that diverge significantly from GAAP figures in the actual filing

A practical reading order, summarized

1. Risk Factors (Item 1A) — what could go wrong, in the company's own words
2. MD&A (Item 7) — management's narrative on what actually happened
3. Income statement, then balance sheet, then cash flow statement, in that order
4. Segment reporting, if the company has more than one business line
5. Notes on revenue recognition, stock comp, and debt — especially if a number looked "too good"
6. Auditor's opinion — confirm it's clean before trusting anything above

Where to actually find one

Every 10-K is public and free on SEC EDGAR (sec.gov/edgar) — no account, no paywall. Search by ticker or company name, filter by form type "10-K", and you'll get every annual filing the company has ever made, going back years. The catch is that EDGAR gives you the filing as a raw HTML or XBRL document with no normalization across companies — one company's "Total Revenue" line item might be tagged differently in the underlying XBRL data than another's "Net Sales" line, even though they mean the same thing. That's a fine tradeoff if you're reading one company closely, and a real obstacle if you're trying to pull the same metric across ten companies at once.