Legacy systems in a 10-K are an invitation

When a company names its old systems in a 10-K, it's telling you exactly where it hurts. In writing. Signed by the CEO and CFO.

Most sellers never read that far. They skim the business summary and the revenue line and stop. But the risk factors and the management discussion are where companies admit what's broken. And legacy technology shows up there more than you'd think.

Why companies put it in writing

A 10-K is a legal document. Companies have to disclose material risks to investors. If an old system could cause an outage, a data breach, a compliance failure or a missed growth target, the lawyers want it named.

So you'll see language like "our reliance on legacy systems," "aging technology infrastructure," "systems that are difficult to maintain," or "we are in the process of replacing our core platforms." Sometimes it's a single line. Sometimes it's a full paragraph with a timeline and a budget.

Either way, leadership has admitted the problem in front of the board and the market. That's not something they'll walk back. They now have to show progress.

Where to look in the filing

Start with the risk factors. Search for words like legacy, aging, outdated, modernize, replace, migrate, end of life, technical debt. You'll find the admission fast if it's there.

Then read the management discussion and analysis. This is where companies talk about what they're spending on and why. Look for capital spending on technology, multi-year system programs and any mention of costs tied to old platforms.

Check the quarterly 10-Qs that follow. They'll show whether the program started, slowed down or ran into trouble. A 10-Q that mentions delays or higher costs on a system replacement is an even stronger signal. The guide to buying signals shows how this kind of business pressure ranks against the rest.

What makes it an invitation

A company that names a legacy system as a risk has three problems at once. They have to fix it. They have to fix it without breaking the business that runs on it. And they usually don't have enough people who know both the old system and the new one.

That last problem is where services firms come in. Internal teams are stretched keeping the old system alive. They don't have room to design and run its replacement too. Outside help fills the gap.

And there's a clock. Once a risk is disclosed, the board will ask about it every quarter. Leaders want a partner who can show progress fast.

Who to reach

The CIO or CTO owns the systems and usually the replacement program. They're the natural economic buyer or champion. If the risk is tied to finance or operations systems, the CFO or COO may have a big say.

Look for the program leader too. Big modernization efforts usually have a named VP or director. Job posts often reveal who they report to and what the program covers.

And find the technical lead who knows the old system. They'll tell you where the real problems are, and they'll often be the ones pushing for help.

An example opener

Say an insurer's 10-K lists its policy administration system as a risk, noting it's decades old and hard to maintain, and the company plans to replace it over the next few years.

Your 10-K calls out the policy admin system as a risk, with a replacement planned over the next few years. My guess is the harder problem is running the old platform as the new one gets built, with a shrinking group of people who know how the old one works. Is that where it hurts, or is it somewhere else?

Stack it with other signals

A legacy mention on its own is a strong start. Stacked with other signals, it's an account to work this month.

Look for job posts asking for skills in the old platform. That means they're losing people who know it. Look for a new CIO in the first 90 days. Look for margin pressure in the same filing, since cost and technology problems often travel together.

Then reach out during the planning stage of the program. The best time is right after the filing, before the partners are picked. Read the filing first. The company already told you what it needs.