Form 10-K annual report

ScreenSEC › SEC Workflows › Form 10-K annual report·step 1

Complete the Filing & Registrant Identity fields. Each value is validated against the schema before the next step unlocks.

• Domain entity ID (required)

  entityId

  The organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.

ScreenSEC › SEC Workflows › Form 10-K annual report·step 2

Complete the Filer Classification & Period fields. Each value is validated against the schema before the next step unlocks.

• Fiscal year end date (ISO 8601) (required)

  fiscalYearEnd

  Enter fiscal year end date (iso 8601).

• Filer status (required)

  filerStatus

  Enter filer status.

• Public float (USD)optional

  publicFloatUsd

  Enter public float (usd).

ScreenSEC › SEC Workflows › Form 10-K annual report·step 3

Complete the Part I & Part II Core Operational Items fields. Each value is validated against the schema before the next step unlocks.

• Item 1. Business includedoptional

  item1Business

  Enter item 1. business included.

• Item 1A. Risk Factors includedoptional

  item1aRiskFactors

  Enter item 1a. risk factors included.

• Item 1C. Cybersecurity includedoptional

  item1cCybersecurity

  Enter item 1c. cybersecurity included.

• Item 7. MD&A includedoptional

  item7MDandA

  Enter item 7. md&a included.

• Item 8. Financial Statements includedoptional

  item8FinancialStatements

  Enter item 8. financial statements included.

• Item 9A. Controls and Procedures includedoptional

  item9aControlsAndProcedures

  Enter item 9a. controls and procedures included.

ScreenSEC › SEC Workflows › Form 10-K annual report·step 4

Complete the SOX Certifications & ICFR Attestation fields. Each value is validated against the schema before the next step unlocks.

• Exhibit 31 (SOX 302) attachedoptional

  sox302CertificationsAttached

  Enter exhibit 31 (sox 302) attached.

• Auditor ICFR attestation (404b) includedoptional

  sox404bAttestationIncluded

  Enter auditor icfr attestation (404b) included.

ScreenSEC › SEC Workflows › Form 10-K annual report·step 5

Complete the Part III Governance & Proxy Reference fields. Each value is validated against the schema before the next step unlocks.

• Part III (Items 10-14) incorporated by reference from Proxy Statement (DEF 14A)optional

  part3IncorporatedFromProxy

  Enter part iii (items 10-14) incorporated by reference from proxy statement (def 14a).

• DEF 14A Proxy filing deadline (120 days from FYE per General Instruction G.3)optional

  proxyFilingDeadline

  Enter def 14a proxy filing deadline (120 days from fye per general instruction g.3).

ScreenSEC › SEC Workflows › Form 10-K annual report·step 6

Complete the Composed Sub-Disclosures fields. Each value is validated against the schema before the next step unlocks.

• Item 1C Cybersecurity Detailed Record › Domain Entity ID (required)

  item1cDetails.entityId

  The organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.

• Item 9A Controls and Procedures Detailed Record › Domain Entity ID (required)

  item9aDetails.entityId

  The organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.

• Item 1C Cybersecurity Detailed Record › Fiscal Year Covered (required)

  item1cDetails.fiscalYear

  Four-digit fiscal year of the Form 10-K report (e.g., 2026).

• Item 9A Controls and Procedures Detailed Record › Fiscal Year Reported (required)

  item9aDetails.fiscalYear

  Four-digit fiscal year of the annual report (e.g., 2026).

• Item 1C Cybersecurity Detailed Record › Fiscal Year End Date (required)

  item1cDetails.fiscalYearEnd

  Ending date of the reported fiscal year.

• Item 9A Controls and Procedures Detailed Record › Fiscal Year End Date (required)

  item9aDetails.fiscalYearEnd

  Closing date of the fiscal year evaluated.

• Item 1C Cybersecurity Detailed Record › Cybersecurity Risk Management Processes (required)

  item1cDetails.riskAssessmentProcessSummary

  Item 106(b)(1) detailed process description for identifying and managing cyber risks.

• Item 9A Controls and Procedures Detailed Record › DCP Effectiveness Conclusion (required)

  item9aDetails.dcpEffectiveness

  Management evaluation of disclosure controls and procedures effectiveness as of fiscal year end.

• Item 1C Cybersecurity Detailed Record › Integrated into Enterprise Risk Management (ERM) (required)

  item1cDetails.integratedIntoEnterpriseRisk

  Whether cyber risk processes are formally integrated into company-wide ERM frameworks.

• Item 9A Controls and Procedures Detailed Record › DCP Evaluation Summary (required)

  item9aDetails.dcpEvaluationSummary

  Discussion of the evaluation of disclosure controls pursuant to Exchange Act Rule 13a-15(b).

• Item 1C Cybersecurity Detailed Record › ERM Integration Mechanismsoptional

  item1cDetails.enterpriseRiskIntegrationDetails

  Mechanisms by which cyber risk assessments inform corporate risk tolerance and mitigation.

• Item 9A Controls and Procedures Detailed Record › Internal Control Framework Used (required)

  item9aDetails.icfrFramework

  Criteria framework used to evaluate ICFR (e.g. COSO 2013 Internal Control - Integrated Framework).

• Item 1C Cybersecurity Detailed Record › Engages External Assessors / Consultants (required)

  item1cDetails.engagesThirdPartyAssessors

  Whether external auditors, penetration testers, or cyber consultants are engaged.

• Item 9A Controls and Procedures Detailed Record › Management ICFR Assessment (required)

  item9aDetails.icfrEffectiveness

  Management conclusion on internal control over financial reporting effectiveness.

• Item 1C Cybersecurity Detailed Record › Third-Party Engagement Scopeoptional

  item1cDetails.thirdPartyAssessorsDescription

  Scope and cadence of third-party cyber audits and security posture assessments.

• Item 9A Controls and Procedures Detailed Record › Material Weaknesses Identifiedoptional

  item9aDetails.hasMaterialWeaknesses

  Check if one or more material weaknesses were identified as of the evaluation date.

• Item 1C Cybersecurity Detailed Record › Third-Party Service Provider Risk Oversight (required)

  item1cDetails.thirdPartyVendorRiskProcesses

  Item 106(b)(1)(iii) oversight of supply chain and third-party software/service risks.

• Item 9A Controls and Procedures Detailed Record › Description of Identified Material Weaknessesoptional

  item9aDetails.materialWeaknessesDescription

  Detailed explanation of any material weaknesses identified, affected accounts, and controls.

• Item 1C Cybersecurity Detailed Record › Material Impacts from Previous Incidents (required)

  item1cDetails.previousIncidentsMaterialImpact

  Whether prior incidents or threats have materially affected operations or finances.

• Item 9A Controls and Procedures Detailed Record › Management Remediation Initiativesoptional

  item9aDetails.remediationPlan

  Planned or ongoing remediation actions to cure identified internal control deficiencies.

• Item 1C Cybersecurity Detailed Record › Material Impact and Reasonably Likely Effects Analysisoptional

  item1cDetails.materialImpactAnalysis

  Detailed explanation of historical impacts and reasonably likely future business impacts.

• Item 9A Controls and Procedures Detailed Record › Auditor Attestation Required (Accelerated Filer)optional

  item9aDetails.isAuditorAttestationRequired

  Whether registrant is subject to Section 404(b) independent auditor attestation on ICFR.

• Item 1C Cybersecurity Detailed Record › Responsible Board Committee / Body (required)

  item1cDetails.boardOversightBody

  Board committee with delegated authority for cybersecurity threat oversight.

• Item 9A Controls and Procedures Detailed Record › Independent Registered Public Accounting Firmoptional

  item9aDetails.auditorFirmName

  Firm issuing the audit opinion on financial statements and ICFR.

• Item 1C Cybersecurity Detailed Record › Board Briefing Cadence (required)

  item1cDetails.boardReportingCadence

  Frequency of routine cybersecurity risk briefings to the designated board committee.

• Item 9A Controls and Procedures Detailed Record › Auditor Opinion on ICFR (PCAOB AS 2201) (required)

  item9aDetails.auditorOpinion

  Audit report conclusion on management ICFR assessment.

• Item 1C Cybersecurity Detailed Recordoptional

  item1cDetails

  Enter item 1c cybersecurity detailed record.

• Item 1C Cybersecurity Detailed Record › Board Oversight and Information Flow Processes (required)

  item1cDetails.boardOversightProcessesSummary

  Processes by which the board or committee stays informed of emerging material risks.

• Item 9A Controls and Procedures Detailed Record › Auditor Attestation Report Dateoptional

  item9aDetails.auditorAttestationDate

  Enter auditor attestation report date.

• Item 1C Cybersecurity Detailed Record › Designated CISO or Equivalent Executive (required)

  item1cDetails.designatedChiefInformationSecurityOfficer

  Whether the registrant maintains a dedicated Chief Information Security Officer.

• Item 9A Controls and Procedures Detailed Recordoptional

  item9aDetails

  Enter item 9a controls and procedures detailed record.

• Item 9A Controls and Procedures Detailed Record › Material Changes in ICFR During Q4optional

  item9aDetails.hasQ4MaterialChanges

  Whether any change occurred during the fourth quarter that materially affected ICFR.

• Item 1C Cybersecurity Detailed Record › Principal Cyber Executive Title (required)

  item1cDetails.cisoPositionTitle

  Official title of executive leader responsible for cyber risk management.e.g. Chief Information Security Officer & VP of Information Assurance

• Item 9A Controls and Procedures Detailed Record › Description of Q4 ICFR Changesoptional

  item9aDetails.q4MaterialChangesDescription

  Nature of material changes implemented in the fourth quarter.

• Item 1C Cybersecurity Detailed Record › Management Cybersecurity Committee (required)

  item1cDetails.managementCommitteeResponsible

  Operational executive committee overseeing cyber posture and incident response.e.g. Enterprise Cyber Risk Steering Committee

• Item 9A Controls and Procedures Detailed Record › Principal Executive Officer (CEO) (required)

  item9aDetails.ceoName

  Enter principal executive officer (ceo).

• Item 1C Cybersecurity Detailed Record › Management Cyber Qualifications & Expertise (required)

  item1cDetails.managementExpertiseSummary

  Item 106(c)(2)(i) relevant expertise, degrees, certifications, and operational background.

• Item 9A Controls and Procedures Detailed Record › Principal Financial Officer (CFO) (required)

  item9aDetails.cfoName

  Enter principal financial officer (cfo).

• Item 1C Cybersecurity Detailed Record › Prevention, Detection & Mitigation Monitoring Processes (required)

  item1cDetails.incidentMonitoringProcesses

  Item 106(c)(2)(ii) processes by which management monitors prevention and incident response.

• Item 1C Cybersecurity Detailed Record › CISO Operational Sign-off (required)

  item1cDetails.cisoApproved

  CISO affirmation of technical accuracy and factual completeness.

• Item 1C Cybersecurity Detailed Record › General Counsel Disclosure Sign-off (required)

  item1cDetails.generalCounselApproved

  Legal counsel clearance under Regulation S-K Item 106 disclosure standards.

• Item 1C Cybersecurity Detailed Record › Audit Committee Governance Review Completed (required)

  item1cDetails.auditCommitteeReviewed

  Affirmation that Audit Committee reviewed disclosure prior to 10-K filing.