What is a material weakness?
A flaw in a company's financial-reporting controls serious enough that a material error might not be caught. It does not mean the numbers are wrong.
A material weakness is a deficiency in a company’s internal control over financial reporting severe enough that a material misstatement might not be prevented or detected on a timely basis.
Note what that says. Not “the numbers are wrong.” It says the machinery that is supposed to catch wrong numbers cannot be relied on.
The severity ladder
Three tiers, and the distinction matters:
| Level | Meaning |
|---|---|
| Control deficiency | Something is not working as designed. Not separately disclosed. |
| Significant deficiency | Less severe than material, but important enough to report to the audit committee. Not necessarily public. |
| Material weakness | Must be disclosed publicly, and management must conclude that internal control over financial reporting is not effective. |
Only the third gets a public filing. When you see one, a threshold has been crossed.
Where it appears
Item 9A, Controls and Procedures, in the 10-K. You will find management’s conclusion on effectiveness, a description of the weakness, and a remediation plan. For larger filers, the auditor separately attests to internal controls and may disagree with management.
Companies also disclose newly-identified weaknesses on an 8-K under Item 4.02 when previously-issued financials can no longer be relied upon.
Why it is worth tracking
Because it frequently precedes a restatement. The sequence that recurs:
- A material weakness is disclosed in Item 9A
- Remediation is described as underway
- Months later, an 8-K Item 4.02 says prior financials should not be relied upon
Not every weakness leads there — many are genuinely remediated and the story ends. But the disclosure tells you the company’s own controls could not guarantee the numbers, which is worth knowing before the market finds out whether they were.
The bullish version
A material weakness remediated, with the auditor concurring that controls are now effective, is a real positive and almost nobody writes about it. A company that found its own problem, disclosed it, fixed it, and got signed off has demonstrated something about its management.
That is a filing story too, and it points the other way.
How to find them
EDGAR full-text search — “material weakness” in 10-K filings
Elsewhere
The US regime is the strictest, because Sarbanes-Oxley Section 404 requires the explicit management assessment and, for accelerated filers, an auditor attestation. Canada’s NI 52-109 requires certification of controls without the same audit requirement. The UK has historically had no direct equivalent, though reforms in this area have been repeatedly proposed.
This is one of the few places where the three markets genuinely differ in substance, not just vocabulary.