11filers, current period
8the period before
0controls it touches
0frameworks
Regulatory Investigation in 10-K and 10-Q filings, by month.
The phrase was already in use in the first month we hold, so this shows how it has moved since rather than when it began.
Companies disclosing it
11
wrote this into a filing with the SEC
What it obligates
0
controls across 0 frameworks whose text speaks to it
Employers hiring for it
503
open US roles name it, and the ones below are hiring now
The long view, in 8-K filings
An 8-K is filed within four business days of an event, so this counts filings made because something happened.
Every month since 2008. The last point is the current month and is still
filling, so it always looks lower than it will be.
2008
peak 101 in March 2021
2026
Who disclosed it
From SEC full-text search over 8-K filings. Every row links to the filing itself.
| Company | Form | Filed | |
|---|
| Blue Owl Credit Income Corp. | 8-K | 2026-09-15 | filing |
| Sixth Street Lending Partners | 8-K | 2026-09-21 | filing |
| CDW Corp CDW | 8-K | 2026-09-15 | filing |
| nVent Electric plc NVT | 8-K | 2026-09-16 | filing |
| EXPAND ENERGY Corp EXE | 8-K | 2026-09-16 | filing |
| PBF Energy Inc. PBF | 8-K | 2026-09-17 | filing |
| PBF Holding Co LLC | 8-K | 2026-09-17 | filing |
| AXON ENTERPRISE, INC. AXON | 8-K | 2026-09-21 | filing |
| Beta Bionics, Inc. BBNX | 8-K | 2026-09-17 | filing |
The full search on EDGAR
Who is hiring for it
A sample of the open roles naming this phrase. An employer paying a salary
against something is the least ambiguous demand signal there is, and every row links to the
posting so the claim can be checked rather than believed. The total above is the whole US
market; these are the ones we hold the posting for.
| Role | Posted |
|---|
| Senior Compliance Risk Manager - Securities Compliance MERCURY SYSTEMS INC · San Francisco, CA, New York, NY, Portland, OR, or Remote within United States | 2026-09-15 |
| Director, Senior Corporate Counsel, France Revolution Medicines, Inc. · Paris, France | 2026-08-10 |
| Director, Senior Corporate Counsel, Italy Revolution Medicines, Inc. · Remote (Italy) | 2026-08-10 |
| Director, Senior Corporate Counsel, Spain Revolution Medicines, Inc. · Madrid, Spain | 2026-08-10 |
| Director, Senior Corporate Counsel, UKI Revolution Medicines, Inc. · London, England, United Kingdom | 2026-08-10 |
| Director, Senior Corporate Counsel, Germany Revolution Medicines, Inc. · München, Bavaria, Germany | 2026-08-04 |
| Litigation Counsel Carvana Receivables Depositor LLC · Tempe, AZ | 2026-07-30 |
| Analyst, Legal (Regulatory Response) Carvana Receivables Depositor LLC · Tempe, AZ | 2026-07-30 |
| Litigation Paralegal Roblox Corp · San Mateo, CA, United States | 2026-07-27 |
How it actually arrives
An 8-K's meaning is in its item number, not its text. These are the items the filings
containing this phrase were filed under. The first group is something that happened to the
company. The second is the phrase turning up in the ordinary course of reporting, most often in
an earnings release, which is a very different thing and is usually the larger number.
| Filed because something happened |
Companies |
|---|
| Other material event Item 8.01 | 824 |
| Director or officer departure Item 5.02 | 222 |
| Change of accountant Item 4.01 | 15 |
| Delisting or listing rule failure Item 3.01 | 11 |
| Bankruptcy or receivership Item 1.03 | 1 |
| Mentioned in routine reporting |
Companies |
|---|
| Financial statements and exhibits Item 9.01 | 1340 |
| Entry into a material agreement Item 1.01 | 1103 |
| Regulation FD disclosure Item 7.01 | 281 |
| Completion of an acquisition Item 2.01 | 71 |
| Results of operations, the earnings release Item 2.02 | 33 |
| Shareholder vote Item 5.07 | 15 |
This is why a headline count on its own overstates the case.
Where the routine number dominates, the phrase is being tracked as language rather than as
events.
Which industries file it
Companies grouped by the industry classification on their own filing. A count, not a
survey.
| Industry | | Companies |
|---|
| Chemicals and pharmaceuticals | | 186 |
| Holding and investment offices | | 179 |
| Banking | | 153 |
| Software and IT services | | 110 |
| Mining and extraction | | 69 |
| Electronics and electrical equipment | | 62 |
| Instruments and medical devices | | 60 |
| Not classified | | 54 |
| Industrial machinery | | 46 |
| Services and entertainment | | 43 |
What it obligates
No control in the corpus names this term directly. Recorded rather than filled with a guess.
ISO 37001:2016 Anti-bribery Management System Evidence & Implementation Kit
39 controls sit behind ISO 37001:2016, and this is the documentation set for them: an adopt-ready artifact per control, and the evidence an auditor asks for against each.
See what is in it, $249
The same set every buyer of this kit receives. Nothing here is produced on request.
39If you already run ISO 37001:2016, that is the 39 controls behind this disclosure, already evidenced.
51And ISO 9001:2015 is not a separate programme. 51 of its controls are the same controls. If it is on next year's plan, that part of it is already done.
47And ISO 37301:2021 is not a separate programme. 47 of its controls are the same controls. If it is on next year's plan, that part of it is already done.
45And ISO 22000:2018 is not a separate programme. 45 of its controls are the same controls. If it is on next year's plan, that part of it is already done.
Run as two programmes
90 controls
ISO 37001:2016 and ISO 9001:2015 scoped separately, each with its own
evidence, its own owner and its own budget line. This is how almost everybody does it.
Run once, counted twice
51 already done
51 of ISO 9001:2015's controls are controls you evidenced for
ISO 37001:2016. Same artefacts, same owner, no second effort. The mapping is the
only reason anybody knows.
Regulatory Investigation in 10-K and 10-Q filings, by month.
The phrase was already in use in the first month we hold, so this shows how it has moved since rather than when it began.
What this actually means
- Why now
- 11 public companies wrote this into an 8-K in the last seven days, 38% more than the seven before. That is not sentiment or a survey. It is a count of companies choosing to put a phrase into a document they are legally accountable for.
- Who already cares
- 503 open US roles name this work today, which suggests increased attention to it beyond what any filing says. A job advertisement clears a budget holder and a filing clears legal, so the two answer to different people. We have not measured which moves first, only that both are moving.
- What comes into scope
- Once the phrase is on the record it maps to obligations within ISO 37001:2016, ISO 37001, US Foreign Corrupt Practices Act (FCPA). 83 controls behind those, and the difference between asserting them and evidencing them is the whole of the work.
- Who is quietly ahead
- Anyone already running ISO 37001:2016 has done 51 of the controls that carry ISO 9001:2015 too. Same evidence, second standard. Most organisations run those as two programmes with two budgets because nobody told them the mapping existed.
- Who is exposed
- 38 companies disclosed this for the first time in the last ninety days, out of 1347 in total. A first mention is a company deciding it can no longer not say it. Whoever has not yet is either genuinely unaffected or has not looked, and nothing here distinguishes the two.
What this obligates
The instruments in our corpus that govern this disclosure, and how many controls sit
behind each. This is not a filing count. It is what applies once a company has written the
phrase down.
3 frameworks, 83 controls between them.
ISO 37001:2016 holds 41 controls. They appear again inside
99 other frameworks in our corpus; the 10 strongest are shown. Thickness and
size both carry the number of controls shared, so work done once counts in every framework on
this diagram.
What closing it also moves
The same controls appear in other frameworks through mappings held in our corpus. Work
done here is already progress there. This is the part that is not in EDGAR and not in any public
dataset: it comes from mappings built and verified by hand, control by control.
ISO 9001:201551
ISO 37301:202147
ISO 22000:201845
ISO 27701:201941
ISO 22301:201935
ISO/IEC 42001:202335
ISO 14001:201533
ISO 45001:201832
Counted as controls reached through cross-framework mappings. It measures
overlap of work, not compliance with the named framework.
Run as two programmes
90 controls
ISO 37001:2016 and ISO 9001:2015 scoped separately, each with its own
evidence, its own owner and its own budget line. This is how almost everybody does it.
Run once, counted twice
51 already done
51 of ISO 9001:2015's controls are controls you evidenced for
ISO 37001:2016. Same artefacts, same owner, no second effort. The mapping is the
only reason anybody knows.
39If you already run ISO 37001:2016, that is the 39 controls behind this disclosure, already evidenced.
51And ISO 9001:2015 is not a separate programme. 51 of its controls are the same controls. If it is on next year's plan, that part of it is already done.
47And ISO 37301:2021 is not a separate programme. 47 of its controls are the same controls. If it is on next year's plan, that part of it is already done.
45And ISO 22000:2018 is not a separate programme. 45 of its controls are the same controls. If it is on next year's plan, that part of it is already done.
Tell me when Regulatory Investigation files something new
One email when a public company newly discloses this, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.
Where this comes from
The left half is public record: SEC full-text search over 8-K filings, counted across a
7 day window against the equivalent window before it. You can check
every row.
The right half is ours: 723 frameworks and
20,473 controls, 531 of those frameworks verified against
their source documents, with the auditor evidence and common failure modes recorded control by
control. Controls appear here because their own text names this term.
Cite this
The Art of Service Signals. Regulatory Investigation corporate disclosure activity: 11 filers against 8 in the prior period, in 8-K filings over seven days against the seven before. Accessed 23 September 2026. https://signals.theartofservice.com/t/regulatory-investigation/
Free to use with attribution, no permission needed. The chart downloads as an SVG
with the source printed on it. If you cite it we would like to know, but you do not need to
ask.
Today's edition ·
How programmes fail ·
The obligation index