Skip to main content

How to read MD&A like a forensic accountant

Most investors skim MD&A for the headline numbers and move on. Forensic readers — those who treat financial disclosures as a crime scene — approach it differently. They note what is said, what is not said, how often certain themes recur, the order in which items appear, and the tone and language management uses when discussing difficult topics. These readers often spot warning signals months or years before the market does. This is not paranoia; it is pattern recognition applied to financial disclosure.

Quick definition​

Forensic MD&A analysis is the practice of reading Management's Discussion and Analysis with intense scrutiny, looking for hidden signals, omissions, inconsistencies, and tonal shifts that suggest management may be obscuring, downplaying, or selectively framing unfavourable developments. Forensic analysts cross-reference MD&A claims against the audited statements, historical trends, and industry benchmarks, hunting for red flags that precede deterioration or fraud.

Key takeaways​

  • Read MD&A twice: first for content, second for tone and emphasis.
  • Note what management emphasises early in the discussion — this signals priorities and spin.
  • Spot euphemisms and careful language that masks unfavourable developments.
  • Compare MD&A claims to the audited statements; inconsistencies are red flags.
  • Track key metrics (margins, receivables, deferred revenue) across multiple years to spot inflection points.
  • Watch for vague explanations of material changes; specificity is a sign of confidence.
  • Assess whether management's narrative matches the underlying business reality.
  • Omissions — topics not discussed when they should be — are as telling as what is disclosed.

First read: Extract the narrative​

On your first pass through MD&A, extract the key claims:

  • What is the primary driver of revenue growth? (New customers, price increases, volume, acquisitions?)
  • Why did operating margins change? (Cost increases, operating leverage, one-time charges?)
  • How is liquidity? (Strong cash flow, reliance on debt, sufficient to fund operations?)
  • What accounting methods are used for high-impact items? (Revenue recognition policy, reserve methodologies, pension assumptions?)
  • What risks are flagged as material to financial results?

Write these down. You will return to them on your second read.

Second read: Question every claim​

On the second pass, adopt a skeptical lens. For each major claim in MD&A:

Claim: "Revenue grew 12% due to strong demand for our core product."

Questions to ask:

  • Did this revenue come from new customers or existing customers buying more?
  • Was growth organic or acquired?
  • If core product revenue grew 12%, what happened to other product lines? (If they declined, core product may not be the whole story.)
  • Did revenue quality deteriorate? (Are customers taking longer to pay? Did deferred revenue decline, suggesting weaker forward demand?)
  • Was this growth at the expense of margin? (Did the company cut prices to drive volume?)

Check the notes for revenue disaggregation (which products contributed), the accounts receivable aging (which shows payment timeliness), and deferred revenue trends (which proxy for future revenue quality).

Claim: "We maintained strong gross margins despite inflationary pressures."

Questions to ask:

  • Exactly what is the gross margin percentage? Did it actually change at all?
  • How is "strong" defined? Is it strong relative to competitors, or relative to the company's own history?
  • What inflationary pressures? If costs rose but margins held, what explains it? (Price increases? Product mix shift? Hedging?)
  • Is gross margin calculated consistently with prior years, or did accounting method change?

Check the gross margin calculation across the past three years, segment by segment. If gross margin held flat but revenue composition shifted toward lower-margin products, management's claim is misleading.

Technique 1: Compare MD&A across three years​

MD&A changes over time. What is discussed in Year 1, downplayed in Year 2, and absent in Year 3 often signals a developing problem.

Example: A software company's MD&A in Year 1 emphasises "churn management efforts." In Year 2, churn is not mentioned. In Year 3, the company quietly discloses that a key customer representing 8% of revenue was lost. The forensic reader, comparing the three MD&As, sees this coming: the disappearance of churn discussion in Year 2 was a signal that churn had worsened.

Action: Pull the past three years of MD&As and search for key words: "churn," "customer concentration," "pricing power," "gross margin," "competitive pressure," "integration," "restructuring." Track which topics gain emphasis and which fade. Fading usually precedes major disclosures.

Technique 2: Spot the order effect​

Management does not present topics randomly. Topics discussed early in MD&A are prioritised; unfavourable items are often buried later. Forensic readers note this sequencing.

Example: A retailer's MD&A opens with "strong e-commerce growth." Mid-way through, it mentions "store-based sales declined." By burying the store decline, management implicitly de-emphasises it. But if e-commerce growth is 10% and store decline is 15%, the mix shift creates a net decline overall — masked by the order of presentation.

Action: Rewrite the MD&A in a different order, with the most material changes (by magnitude, not management's preference) listed first. Does the story change?

Technique 3: Quantify vague statements​

When management uses qualitative language without numbers, forensic analysts add specificity by checking the statements.

MD&A says: "We realised strong operating leverage in our service segment."

What is strong? Add a percentage point to the margin and calculate. Did operating margin expand by 50 basis points? 200 basis points? The word "strong" is subjective; the financial statement is objective.

MD&A says: "We faced headwinds in the first half but saw recovery in the second half."

Questions: Did the company really recover, or did it simply slow its decline? Check quarterly segment data in the notes. If Q1 revenue was <$100M, Q2 was <$95M, Q3 was <$92M, and Q4 was <$90M, the company did not "recover" — it declined every quarter. Management is framing a consistent deterioration as a turnaround.

Technique 4: Decompose margin and growth claims​

When management claims improved profitability, forensic analysts decompose the claim into its components: gross margin, operating expense ratio, and operating leverage.

Example MD&A claim: "Operating income grew 18% despite only 6% revenue growth, reflecting our improved operational efficiency."

Forensic decomposition:

  • Revenue grew 6%.
  • Cost of goods sold declined 2% (absolute dollars), so gross profit grew 10%. Did gross margin expand? Check the calculation.
  • Operating expenses grew 5%, slower than revenue (a sign of operating leverage).
  • Operating income grew 18%.

The story checks out if the calculations hold. But if gross margin actually contracted (COGS rose faster than revenue), the 18% operating income growth came from cutting SG&A, not improved efficiency. Forensic analysts verify the decomposition in the statements.

Technique 5: Watch for "one-time" or "non-recurring" items​

Management loves to exclude charges from "core" profitability by labelling them non-recurring. Forensic analysts track whether "non-recurring" items recur.

Example: A company reports "adjusted EBITDA" excluding restructuring charges. Year 1 has a $5M restructuring charge. Year 2 has a $3M impairment charge. Year 3 has a $7M severance charge. Every year has a different "non-recurring" item. Over three years, $15M in charges have been excluded from management's narrative of profitability.

Action: Track all items management excludes from non-GAAP metrics across three years. If they recur with regularity, they are not non-recurring — they are part of the business model.

Technique 6: Read the accounting policies section twice​

The critical accounting policies section is where management discloses the judgements that most impact financial results. Forensic analysts read this section very carefully.

Key signals:

  • Aggressive revenue recognition policies. If a company recognises revenue at shipment but allows 180-day returns, it is front-loading revenue. Check if deferred revenue is falling.
  • High pension assumptions. A company using a 7% expected return on pension assets when long-term bond yields are 4% is being optimistic. Forensic analysts calculate the pension liability impact if return assumptions are lowered.
  • Large allowances for doubtful accounts. A company that maintains a 1.5% allowance on receivables when industry average is 0.5% is either conservative or seeing credit deterioration. Check historical receivable aging.
  • Goodwill and intangible assets. A company that has not impaired goodwill in 10 years, despite acquisitions that underperformed, may not be testing fairly. Check for impairment charges in peers' statements.

Technique 7: Cross-check MD&A against external benchmarks​

Forensic analysts do not read MD&A in a vacuum. They compare management's claims to:

  • Competitor MD&As. If Competitor A's MD&A says the market is growing 4% and your company's MD&A says 8%, one is exaggerating or one has captured market share. Check industry data.
  • Analyst consensus. If sell-side analysts expected 10% revenue growth and the company grew 6%, the MD&A explanation better be convincing.
  • Historical company trends. If a company historically grew revenue 12% annually and suddenly claims to have "achieved strong 6% growth in a challenging environment," verify whether the environment actually changed or the company is lowering expectations.
  • Public competitor data. If your company's gross margin declined to 35% and a public competitor maintained 42%, ask why the gap exists and whether it is sustainable.

Technique 8: Assess tone and language carefully​

Forensic analysts read MD&A the way a detective reads a witness statement, attuned to shifts in confidence, defensiveness, and candour.

Red-flag language patterns:

  • Passive voice overuse. "Expenses were increased" (instead of "we increased expenses") distances management from the decision.
  • Blame-shifting. "Market headwinds" or "macroeconomic conditions" appear when the company underperforms. Forensic readers ask: did peers also face these headwinds? If not, it is a company-specific problem, not an external excuse.
  • Vague proxies. "We remain committed to profitability" (instead of "operating margin will expand to 20% by 2024") signals uncertainty.
  • Sudden emphasis of non-core items. If MD&A suddenly emphasises a small business unit that was never mentioned before, ask why. Is management reshaping the narrative to obscure weak core results?

Real-world case: Applying forensic techniques​

Consider a B2B SaaS company's MD&A for the year ending December 2022:

Management's narrative: "We achieved record revenue of $500M, a 22% increase year-over-year. Despite investments in product development and sales expansion, non-GAAP operating margin remained robust at 28%. Our dollar-based net revenue retention reached 102%, indicating strong customer expansion. Cash from operations totalled $120M, funding aggressive infrastructure investments and maintaining a strong balance sheet."

Forensic analysis:

  1. Verify each claim in the statements.

    • Revenue grew 22%? Check the audited income statement. Yes, $410M to $500M.
    • Non-GAAP operating margin 28%? Pull the reconciliation. Non-GAAP operating income is $140M. Verify the add-backs (stock compensation, depreciation, etc.). Do they seem reasonable or aggressive?
    • NRR 102%? This should be disclosed in the MD&A or notes. Verify the calculation using customer expansion data and churn data.
    • Operating cash flow $120M? Check Item 8, cash flow statement. Yes. But what about capex? If capex was $80M, free cash flow is only $40M — less impressive than the $120M operating cash flow number suggests.

  2. Decompose growth.

    • Is 22% growth organic or acquired? If the company acquired a $50M revenue business, organic growth would be only 15% — a material difference.
    • Revenue recognition method: Did management change the timing of revenue recognition to front-load bookings?

  3. Check margin quality.

    • Management emphasises non-GAAP margins, not GAAP. Pull the reconciliation. If GAAP operating margin is 8% while non-GAAP is 28%, $120M of costs were excluded. That is 24% of revenue. Are these costs truly non-recurring?
    • Has stock-based compensation accelerated? If SBC grew from $30M to $50M year-over-year, the margin improvement is illusory.

  4. Assess customer quality.

    • NRR of 102% sounds strong, but is it healthy? If the company has 500 customers, an NRR of 102% means customer expansion is minimal (it is concentrated in a few large accounts). Forensic readers request a customer concentration disclosure. If the top 10 customers represent 40% of revenue, the high NRR may be reliant on a handful of large deals.

  5. Check capital allocation.

    • The company spent $80M on capex ("aggressive infrastructure investments"). Is this maintainence capex or growth capex? If 80% is maintenance, the company is not actually investing aggressively; it is maintaining a capital-intensive legacy system.
    • The balance sheet is said to be "strong." Check the debt level and covenant status. Strong might mean $0 debt, or it might mean $500M debt with $200M equity (leverage of 2.5x). Vastly different.

  6. Look for omissions.

    • Is customer churn discussed? If not, why not? For a SaaS company, churn is a critical metric.
    • Is market saturation mentioned? If the company is in a mature market, how will it sustain 22% growth?
    • Are wage inflation or hiring challenges mentioned? In 2022, many SaaS companies faced salary pressure. If this company omits the topic, either it faced no pressure (unlikely) or management is downplaying a risk.

Common MD&A forensic red flags​

  1. Increasing verbosity in problem areas. When a problem emerges, management often responds with longer, more detailed explanations. Many paragraphs discussing one minor item is a signal that management is trying to justify or obscure something.

  2. New terminology or metrics. If management suddenly introduces a new "adjusted" or "pro forma" metric, forensic readers are sceptical. Why the new metric? Does it hide something the old metric revealed?

  3. Timing shifts. "We achieved strong Q4 results" when Q4 is the company's strongest quarter anyway is meaningless. Forensic readers ask about underperforming quarters.

  4. Comparison period shifts. A company might compare this year to a particularly bad prior year, making growth look better. Forensic analysts compare to two- and three-year averages to see the true trend.

  5. Contingent liabilities hidden in the footnotes. If MD&A does not discuss a pending lawsuit but a large contingent liability is disclosed in Item 8's notes, the omission is a red flag.

  6. Unresolved SEC comments. If the 10-K notes "unresolved SEC staff comments" (Item 1B), the MD&A should address what those comments concern. If it does not, management may be downplaying them.

FAQ​

How much time should I spend reading MD&A forensically?​

For a company you own or are considering buying, 45 minutes to 1 hour is reasonable. Read it quickly once, then slowly and sceptically a second time, cross-referencing with the statements.

Should I read MD&A before or after the financial statements?​

Read MD&A first for context, then the statements to verify. Then return to MD&A to question specific claims.

Can I rely on MD&A to understand the business?​

MD&A is management's interpretation, not objective fact. Use it as a starting point, then verify against the statements, industry data, and analyst reports.

How do I know if MD&A is misleading?​

If MD&A makes a claim that is not supported by the audited statements (e.g., "margins improved" when the statements show margins contracted), it is misleading. The SEC has enforcement authority over MD&A accuracy.

What if I find a red flag in MD&A?​

Do not panic. A single red flag is not conclusive evidence of trouble. Accumulate red flags. If you spot five or six across different areas (margins, customer concentration, cash flow quality, accounting changes), the risk is material.

  • Item 7: Management's Discussion and Analysis (MD&A) — The section you are analysing.
  • Item 8: Financial Statements and Supplementary Data — The objective baseline for MD&A verification.
  • Non-GAAP metrics and reconciliation tables — Often discussed in MD&A and requiring forensic scrutiny.
  • Accounting policy changes and estimates — Disclosed in the critical accounting policies section of MD&A.
  • Item 1A: Risk Factors — Complements MD&A by discussing risks management may downplay.

Summary​

Reading MD&A like a forensic analyst means reading it twice: first for content, second for tone, emphasis, and omissions. Forensic analysts compare MD&A claims to the audited statements, external benchmarks, and the company's own historical narrative. They spot euphemisms, trace the roots of margin changes, track whether "non-recurring" items recur, and note what topics management avoids. This approach is not paranoia; it is pattern recognition. Many accounting frauds or financial deteriorations leave traces in MD&A months or years before they become obvious. Disciplined forensic reading catches them.

Next​

Item 7A: Quantitative and qualitative market risk