What is Regulation S-K

Regulation S-K is the SEC's central rulebook for the narrative, non-financial parts of a public company filing. It shapes almost every prospectus, annual report, and proxy statement filed in the United States under the 1933 and 1934 Acts.

The regulation lives at 17 CFR Part 229 and covers dozens of line items, from the description of business in Item 101 to the exhibit list in Item 601. Miss one of them and a filing can sit in staff comments for weeks before it clears.

The Rulebook Behind Every 10-K

Regulation S-K tells public companies what to say, in words, about themselves. It does not tell them how to count. That distinction matters because it sets up a clean division of labor between narrative disclosure and accounting presentation, and it explains why S-K and its sister regulation, S-X, are almost always cited together.

Where It Lives in Federal Law

Regulation S-K is codified at 17 CFR Part 229. It sits under the Code of Federal Regulations for the Commodity and Securities Exchanges, and it applies to filings under both the Securities Act of 1933 and the Securities Exchange Act of 1934. The full title of Part 229 is long and bureaucratic, but the short version is that S-K is the standard instructions for filing forms under those two statutes.

What It Does Not Cover

S-K does not set the form and content of the financial statements themselves. That job belongs to Regulation S-X. If you are asking how a balance sheet should be laid out, which periods of comparative income statements are required, or how pro forma information under Article 11 should be presented, the answer is in S-X. If you are asking what the business description, the risk factors, or the MD&A should look like, the answer is in S-K.

A Short History of Regulation S-K

Before S-K existed, public companies faced two overlapping disclosure regimes, one under the Securities Act for registration statements and another under the Exchange Act for periodic reports. Companies often wrote the same information twice in slightly different shapes. The SEC spent most of the 1970s trying to fix that.

From Schedule A to an Integrated System

The original statutory disclosure requirements came from Schedule A of the Securities Act, which listed the specific items a registration statement had to include. Over decades the SEC layered specialized forms and guides on top of Schedule A. By the late 1970s there were dozens of guides and a tangle of disclosure requirements across different forms. The 1977 report of the Advisory Committee on Corporate Disclosure, chaired by former Commissioner A. A. Sommer, Jr., recommended a single integrated disclosure system. Regulation S-K was adopted that same year with a minimal opening scope, covering a description of business and a description of property.

The 1982 Reorganization

In March 1982, the SEC adopted the integrated disclosure system and reorganized S-K into the central repository for non-financial statement disclosure under both the Securities Act and the Exchange Act. The adopting release, Release No. 33-6383, was published in the Federal Register on March 16, 1982. After that date, most registration and reporting forms pointed to S-K for their substantive narrative requirements, which is still the architecture in use today.

The Items That Matter Most

S-K is organized into subparts, with items numbered to match the subpart. Subpart 100 covers the business, Subpart 200 covers securities, Subpart 300 covers financial information, Subpart 400 covers management and security holders, Subpart 500 covers registration and prospectus provisions, Subpart 600 covers exhibits, and further subparts cover industry-specific disclosures. A handful of items carry the most weight for the average public company.

Item 101, Description of Business

Item 101 is where a company describes what it does. Its most heavily used pieces are the general development of the business under 101(a), the narrative description under 101(c), and the scaled version for smaller reporting companies under 101(h). The item was amended significantly in 2020. The old rule prescribed a five-year lookback for the general development of the business, later reduced to three years for smaller reporting companies. The 2020 amendments replaced those fixed windows with a principles-based materiality standard and added human capital resources as a disclosure topic.

Item 103, Legal Proceedings

Item 103 requires disclosure of material pending legal proceedings, including the court, date instituted, principal parties, and the relief sought. It has a specific quantitative threshold for environmental proceedings where the government is a party. Before the 2020 amendments, the threshold was $100,000 in potential sanctions. The amendments raised the default threshold to $300,000 and gave registrants the option to pick a higher threshold up to the lesser of $1 million or 1% of current assets on a consolidated basis, as long as the choice is disclosed.

Item 105, Risk Factors

Item 105 requires a concise, plain-English discussion of the factors that make an investment speculative or risky. The 2020 amendments did three concrete things. They narrowed the standard from "most significant" to "material" risk factors. They required a summary of no more than two pages if the risk factor section runs longer than fifteen pages. They required risk factors to be organized under relevant headings, with generic risks pushed to the back of the section under a separate caption.

Item 303, Management's Discussion and Analysis

Item 303 is the MD&A. It requires management to discuss results of operations, liquidity, capital resources, and known trends or uncertainties reasonably expected to affect performance. The MD&A is the narrative counterpart to the audited numbers and is often the most heavily negotiated section of a 10-K between the legal team, the finance team, and outside counsel.

Item 402, Executive Compensation

Item 402 is the rulebook for executive pay disclosure. It defines the Summary Compensation Table, the Compensation Discussion and Analysis, and the director compensation tables that appear in proxy statements. In 2022, the SEC added Item 402(v), the Pay Versus Performance rule, which requires a table relating executive compensation actually paid to financial performance over five fiscal years, with a reduced three-year schedule for smaller reporting companies. Compliance started with proxy and information statements for fiscal years ending on or after December 16, 2022, which for calendar-year filers meant the 2023 proxy season.

Item 106, Cybersecurity

Item 106 is the newest headline item. Added in July 2023 as part of the cybersecurity disclosure rules, it requires annual disclosure of the company's processes for assessing, identifying, and managing material cybersecurity risks, along with the board's oversight of those risks and management's role. The item sits alongside a companion Form 8-K trigger for material cybersecurity incidents. Item 106 disclosure began with annual reports for fiscal years ending on or after December 15, 2023.

Where Regulation S-K Shows Up in Filings

The same S-K items appear across many different forms. A company registering its first offering on Form S-1 pulls in Items 101, 103, 105, 303, 402, 601, and others. The same company's annual report on Form 10-K references the same items again, with updates. Form 10-Q relies on a smaller subset, mainly MD&A and a material-changes update to risk factors. Form 8-K pulls in narrative items when a reportable event happens. Proxy statements on Schedule 14A pull in Item 402 heavily, alongside governance items from Subpart 400.

This reuse is the point of the integrated disclosure system. A drafter writes an S-K item once per period and the various forms cross-reference it, rather than re-drafting the same business description in three different places for three different filings.

Regulation S-K vs Regulation S-X

These two regulations are partners, not competitors. S-K handles the words. S-X handles the financial statements. If the question is "what are the audited balance sheets, income statements, cash flow statements, and required footnotes going to look like," that is S-X. If the question is "how does the company describe its business, its risks, its legal disputes, its pay philosophy, and its forward-looking trends," that is S-K.

In a Form 10-K, S-X governs the audited financial statements and footnotes. S-K governs the MD&A, risk factors, business description, and executive compensation disclosures in the proxy statement that is incorporated by reference. Mixing them up is a common junior-drafter mistake that outside counsel will redline on first pass.

Recent Amendments Worth Knowing

S-K has been actively amended over the last several years after going roughly three decades without a serious modernization of its headline business and risk disclosures.

The August 26, 2020 amendments overhauled Items 101, 103, and 105. They replaced prescriptive timelines and lists with principles-based standards, added human capital as a required disclosure topic, raised the environmental proceedings threshold, and imposed the two-page risk factor summary for sections longer than fifteen pages. The amendments became effective on November 9, 2020.

The August 25, 2022 amendments added Item 402(v) for Pay Versus Performance, a long-delayed Dodd-Frank mandate. The rule required a new table linking executive compensation actually paid to total shareholder return, peer group TSR, net income, and a company-selected financial measure, accompanied by narrative or graphical explanation.

The July 26, 2023 amendments added Item 106 for cybersecurity, with companion changes to Form 8-K that require current reporting of material cybersecurity incidents within four business days of a materiality determination. Smaller reporting companies got an extended runway for the Form 8-K piece, with compliance starting June 15, 2024.

What This Means for Filers

Regulation S-K is not glamorous reading, but it is the grammar of public company disclosure. Get it right and a filing looks clean, defensible, and consistent with what investors expect. Get it wrong and a registration sits in staff comment purgatory while the deal team watches the calendar.

The practical work for filers is disciplined and specific. Track amendments when the SEC adopts them. Map each S-K item to the sections of each form where it appears. Keep a current checklist for the annual report that covers every triggered item. When a new rule drops, update the disclosure controls first and the templates second. That is how a company turns hundreds of pages of federal regulation into a filing that a reader can actually follow.