115filers, current period
79the period before
5controls it touches
4frameworks
The long view
Filings containing this phrase, every month since 2008. The last
point is the current month and is still filling, so it always looks lower than it will be.
2008
peak 100 in February 2024
2026
Share this finding
The card carries the whole thing, so it makes sense to somebody who never clicks through.
That is the point of it.
Who disclosed it
From SEC full-text search over 8-K filings. Every row links to the filing itself.
| Company | Form | Filed | |
|---|
| TANDEM DIABETES CARE INC TNDM | 8-K | 2026-05-15 | filing |
| WHIRLPOOL CORP /DE/ | 8-K | 2026-06-01 | filing |
| Golub Capital Direct Lending Unlevered Corp | 8-K | 2026-05-08 | filing |
| Golub Capital BDC 4, Inc. | 8-K | 2026-05-07 | filing |
| GOLUB CAPITAL DIRECT LENDING CORP | 8-K | 2026-05-14 | filing |
| REGIS CORP RGS | 8-K | 2026-05-13 | filing |
| Miluna Acquisition Corp | 8-K | 2026-04-27 | filing |
| GOLUB CAPITAL BDC, Inc. GBDC | 8-K | 2026-05-04 | filing |
| Exzeo Group, Inc. XZO | 10-Q/A | 2026-05-15 | filing |
| OCULUS INC. OVTZ | 10-Q | 2026-05-12 | filing |
| Meta Platforms, Inc. META | 10-Q | 2026-04-30 | filing |
| USANA HEALTH SCIENCES INC USNA | 10-Q | 2026-05-12 | filing |
The full search on EDGAR
Which industries file it
Companies grouped by the industry classification on their own filing. A count, not a
survey.
| Industry | | Companies |
|---|
| Not classified | | 44 |
| Chemicals and pharmaceuticals | | 19 |
| Software and IT services | | 16 |
| Electronics and electrical equipment | | 5 |
| Securities and investment | | 4 |
| Instruments and medical devices | | 4 |
| Banking | | 3 |
| Insurance | | 2 |
| Health services | | 2 |
| Hotels and personal services | | 2 |
What it obligates
Our corpus holds 5 controls across
4 frameworks whose text speaks to this. Not a judgement:
these controls say so, and each is one lookup from its source document. Ordered by how much each
framework has to say about it, so the one that will cost you the most work is first. Every name
opens that framework in the corpus.
What an auditor will ask you to produce
The artefacts named on those controls, most frequently cited first.
- Role inventory + RACI
- Module compliance + remediation
- Supervisory dialogue records
- compliance assessment reports
- regulatory inventory
- corrective action plans
- external audit certificates
- Privacy framework policy
How it usually fails
Recorded when each control was verified against its source. This is where programmes
that think they are covered turn out not to be.
- Roles undefined
- Module compliance gaps
- Supervisory engagement weak
- compliance assessed only against home jurisdiction
- corrective actions not tracked to closure
- no independent assurance
Where this comes from
The left half is public record: SEC full-text search over 8-K filings, counted across a
14 day window against the equivalent window before it. You can check
every row.
The right half is ours: 723 frameworks and
20,473 controls, 531 of those frameworks verified against
their source documents, with the auditor evidence and common failure modes recorded control by
control. Controls appear here because their own text names this term.
Today's edition ·
How programmes fail ·
The obligation index