Business Risk
The ways a business itself can get hurt, where companies disclose their risks, and how to size a risk with a company's own numbers instead of just listing it.
The short version
Business risk is the chance that something specific to a company hurts its results: losing a big customer, a supplier problem, a factory shutdown, a new competitor, a lawsuit, or a change in the rules. Companies list their most significant risks in the Risk Factors section of their annual report, and SEC rules ask them to describe any dependence on key customers or products. Listing a risk isn't enough. Sizing it with the company's own numbers shows how much damage it could do, and fixed costs and debt can make the damage bigger.
By the end of this lesson, you'll be able to
- Name the main kinds of business risk
- Find where companies disclose their risks, and read that section usefully
- Size a risk, such as losing a major customer, using a company's own numbers
Why this matters
Every business can be hurt. Some risks hit the whole market at once, which Part 5 covers. This lesson is about risks specific to one company. Knowing them helps you judge what could go wrong and, just as important, how badly.
The main kinds of business risk
- Customers. Depending on a few big customers. One retail chain buys 30% of STU Corp's products.
- Suppliers and inputs. A key supplier failing or raising prices. One supplier provides most of STU Corp's filter material.
- Operations. A fire, flood, or breakdown at a critical site. STU Corp makes everything in one factory.
- Competition and change. Rivals, new technology, or shifting tastes. STU Corp's connector patent expires in three years, and refrigerators with built-in filters are a substitute.
- Legal and regulatory. Lawsuits, product recalls, or new rules.
- People. Relying heavily on a few key leaders or skills.
- Financial. Debt and fixed costs, which don't shrink when sales do and so magnify any of the risks above.
Where companies disclose risks
A company's annual report has a section called Risk Factors. It lists the most significant risks that apply to the company or its securities, generally in order of importance. It focuses on the risks themselves, not on what the company is doing about them.1 The Business section adds more: where it matters, SEC rules ask companies to describe any dependence on key products, services, or customers, the sources and availability of raw materials, and how long their important patents and licenses last.2
Risk Factors sections can be long, and some of it is generic. Two habits make them more useful. Look for what's specific to this company rather than true of every company. And compare this year's list with last year's: a new risk, or a risk that moved up the list, can tell you what management is worried about.
The rest of this lesson is for members
Still to come in this lesson: Sizing a risk, the key takeaways, and 2 quiz questions with explanations.
Membership opens every lesson in the curriculum, the capstone projects, the interactive tools, and the members-only channels in the Hyperion Entities Discord. The first lesson of every module stays free.
Go deeper
- Company, Sector, Market, and Liquidity RiskPart 5: Building a Portfolio
- Debt, Covenants, and Credit RatingsCorporate Finance (depth track)
- Reading a Real 10-K, Section by Section coming soonResearch Workshop (depth track)
Notes and sources
- U.S. Securities and Exchange Commission, Office of Investor Education and Advocacy. Investor Bulletin: How to Read a 10-K. Checked 2026-10-11. Back to text
- Legal Information Institute, Cornell Law School. 17 CFR 229.101 (Item 101 of Regulation S-K): Description of business. Checked 2026-09-30. Back to text