When an initial public offering, up-listing, or annual reporting cycle is on the calendar, a code of conduct needs to be publishable, enforceable, and aligned with disclosure rules. Sarbanes-Oxley Act of 2002, Section 406 ties code-of-ethics expectations to public company disclosure and accountability for senior officers. If the code is vague, overbroad, or misaligned with how the company actually enforces standards, it can create avoidable Securities and Exchange Commission (SEC) reporting and governance friction. Law Laguna drafts and deploys codes with a documented waiver workflow, disclosure language, and implementation steps that leadership can operate and stand behind publicly.
Prevent listing and disclosure failures tied to your code
Codes of ethics and conduct sit at the intersection of governance, disclosure, and enforcement, and the rules do not stop at drafting. Item 406 of Regulation S-K defines what qualifies as a “code of ethics,” who it must cover, and how public availability must be handled. Changes and waivers can also trigger time-sensitive disclosure under Form 8-K, which creates pressure when the company has not defined who can approve a waiver and how it will be documented. NYSE Listed Company Manual and Nasdaq Listing Rules add a second layer of requirements, including website posting and enforcement concepts. We map the requirements first, then draft language that can be implemented consistently.
We reduce compliance drift by linking the code to a waiver and amendment workflow that matches the company’s approval authority. We align posting, annual report language, and exhibit strategy so disclosure is predictable. We draft with an eye toward enforceability internally and accurate public description externally.
-
Map obligations to Item 406 (Regulation S-K) so the code definition, coverage, and availability method are defensible.
-
Design waiver mechanics around Item 5.05 (Form 8-K), including a website alternative that can be operated on schedule.
-
Benchmark topic coverage and posting against NYSE Listed Company Manual Section 303A.10 or Nasdaq Rule 5610 / IM-5610.
A code is only useful if it is adopted, posted, trained, and enforced in a way that matches what it says. Law Laguna builds a governance-ready code package that can be maintained through audits, board oversight, and SEC reporting cycles.
Governance counsel for public and pre-public companies
Based in Laguna Beach with a Southern California focus for board-facing work and implementation support. Statewide remote counsel for California companies with SEC and exchange-facing requirements.
General Counsel
You need a code that satisfies Item 406 (Regulation S-K) without producing statements that later become hard to defend in Securities and Exchange Commission (SEC) disclosure. You also need a waiver definition and workflow that fits how your board and committees actually act, including how an “implicit waiver” is handled and recorded under Item 5.05 (Form 8-K).
-
Prepare code and disclosure language for an initial public offering timeline with a predictable exhibit and website posting plan.
-
Resolve board-level disagreement over who can approve a waiver and how the four business day disclosure clock is tracked.
-
Align public code statements with actual enforcement steps and investigation ownership to reduce inconsistencies.
Chief Compliance Officer
You need reporting channels, non-retaliation language, and enforcement provisions that meet Nasdaq Rule 5610 / IM-5610 expectations and remain operational for employees. You also need the code to define internal reporting, escalation tiers, and accountability so investigations and corrective actions are consistent and documented.
-
Implement hotline intake language and escalation tiers that match real staffing and oversight lines.
-
Integrate annual training and acknowledgement so coverage can be demonstrated during audits.
-
Convert legacy policy language into clear, objective standards with fair process language.
Corporate Secretary
You need a board-approved code that is posted and referenced correctly in the Form 10-K or proxy statement, including the method of public availability required by Item 406 (Regulation S-K). You also need a waiver process that routes approvals to the right board committee and produces a Regulation FD-compliant method of disclosure when required, including the website retention mechanics.
-
Build a calendarized process for amendments and waivers that avoids last-minute Item 5.05 (Form 8-K) scrambles.
-
Draft proxy and annual report references that match how the code is made publicly available.
-
Document committee charters and minutes to support waiver approvals and public disclosures.
General Counsel
You need a code that satisfies Item 406 (Regulation S-K) without producing statements that later become hard to defend in Securities and Exchange Commission (SEC) disclosure. You also need a waiver definition and workflow that fits how your board and committees actually act, including how an “implicit waiver” is handled and recorded under Item 5.05 (Form 8-K).
-
Prepare code and disclosure language for an initial public offering timeline with a predictable exhibit and website posting plan.
-
Resolve board-level disagreement over who can approve a waiver and how the four business day disclosure clock is tracked.
-
Align public code statements with actual enforcement steps and investigation ownership to reduce inconsistencies.
Chief Compliance Officer
You need reporting channels, non-retaliation language, and enforcement provisions that meet Nasdaq Rule 5610 / IM-5610 expectations and remain operational for employees. You also need the code to define internal reporting, escalation tiers, and accountability so investigations and corrective actions are consistent and documented.
-
Implement hotline intake language and escalation tiers that match real staffing and oversight lines.
-
Integrate annual training and acknowledgement so coverage can be demonstrated during audits.
-
Convert legacy policy language into clear, objective standards with fair process language.
Corporate Secretary
You need a board-approved code that is posted and referenced correctly in the Form 10-K or proxy statement, including the method of public availability required by Item 406 (Regulation S-K). You also need a waiver process that routes approvals to the right board committee and produces a Regulation FD-compliant method of disclosure when required, including the website retention mechanics.
-
Build a calendarized process for amendments and waivers that avoids last-minute Item 5.05 (Form 8-K) scrambles.
-
Draft proxy and annual report references that match how the code is made publicly available.
-
Document committee charters and minutes to support waiver approvals and public disclosures.
The Exchange-Ready Code Package
Law Laguna provides end-to-end code drafting, governance workflow design, and SEC and exchange alignment. The deliverable is a code and disclosure package that can be adopted, posted, trained, and maintained.
SEC and Exchange Alignment
-
SEC/Exchange Coverage Mapping (SEC Item 406 + NYSE 303A.10 or Nasdaq Rule 5610 alignment). We map the company’s current code and practices to Item 406 of Regulation S-K and the applicable exchange standard. We produce a coverage matrix so the board and compliance owners can see what is included, what is missing, and what must be documented.
-
Drafting or Re-Drafting a Code of Ethics & Conduct (single integrated code or dual-code approach). We draft a single code or a dual-code approach that satisfies Sarbanes-Oxley Act of 2002, Section 406 and exchange expectations. The drafting emphasis is on clear standards, operational reporting paths, and language that can be enforced consistently.
-
Public Availability & Disclosure Package (Form 10-K / proxy statement language, exhibit filing strategy, website posting protocol, “free copy on request” option). We prepare the exact disclosure language that aligns with Item 406 of Regulation S-K, including whether the code is filed as an exhibit, posted on the website with the web address disclosed, or provided on request. We also document the internal posting protocol so the public availability method remains true over time.
-
Training & Rollout Toolkit (annual training outline + onboarding/induction training inserts, acknowledgement language and administration ownership). We provide training outlines and acknowledgement language that match the code’s commitments and reporting channels. We also assign administrative ownership so training, certifications, and recordkeeping have a clear home.
Waivers, Amendments, and Disclosure Mechanics
-
Waiver & Amendment Governance Workflow (board/committee approval path, disclosure mechanics, drafting “waiver” definitions consistent with SEC guidance). We define “waiver” and route approvals through the right governance body so action and documentation are consistent. The workflow is drafted to match Item 5.05 of Form 8-K timing expectations and the exchange’s four business day public disclosure concepts.
-
Public Availability & Disclosure Package (Form 10-K / proxy statement language, exhibit filing strategy, website posting protocol, “free copy on request” option). We align disclosure language with the chosen availability method and with any website alternative used for waiver disclosure. We also structure the disclosures so they can be repeated accurately in annual reporting cycles.
-
SEC/Exchange Coverage Mapping (SEC Item 406 + NYSE 303A.10 or Nasdaq Rule 5610 alignment). We confirm the waiver and amendment provisions match NYSE Listed Company Manual Section 303A.10 or Nasdaq Rule 5610 requirements for board or committee approval. We also confirm that the code’s coverage of senior officers is consistent with Item 406(a) of Regulation S-K.
-
Drafting or Re-Drafting a Code of Ethics & Conduct (single integrated code or dual-code approach). We draft waiver and amendment clauses to avoid ambiguity around material departures and “implicit waiver” concepts. The goal is to make the disclosure trigger and the approval trigger easy to identify and administer.
Enforcement and Reporting Infrastructure
-
Enforcement & Reporting Design (internal reporting paths, hotline language, non-retaliation statement, escalation tiers). We draft reporting pathways that satisfy Item 406(b) of Regulation S-K, including prompt internal reporting to specified personnel. We also incorporate protection for reporters and fair process concepts aligned with Nasdaq IM-5610.
-
Training & Rollout Toolkit (annual training outline + onboarding/induction training inserts, acknowledgement language and administration ownership). We connect training content directly to how reports are received, escalated, and resolved. This reduces the gap between written standards and actual operational controls.
-
Waiver & Amendment Governance Workflow (board/committee approval path, disclosure mechanics, drafting “waiver” definitions consistent with SEC guidance). We define escalation and exception-handling so management does not treat waivers as informal accommodations. The workflow supports prompt documentation and consistent board or committee oversight.
-
SEC/Exchange Coverage Mapping (SEC Item 406 + NYSE 303A.10 or Nasdaq Rule 5610 alignment). We test the enforcement section against exchange expectations, including objective standards and consistent enforcement. The result is a code that is easier to administer and easier to explain during diligence.
Rollout, Maintenance, and Governance Cadence
-
Training & Rollout Toolkit (annual training outline + onboarding/induction training inserts, acknowledgement language and administration ownership). We provide onboarding inserts, annual training structure, and acknowledgement language that can be administered at scale. We also define who owns updates and how changes are communicated.
-
Public Availability & Disclosure Package (Form 10-K / proxy statement language, exhibit filing strategy, website posting protocol, “free copy on request” option). We set up a maintenance checklist for website posting and annual report references so availability stays accurate. We also coordinate an exhibit filing strategy when that method is used.
-
Drafting or Re-Drafting a Code of Ethics & Conduct (single integrated code or dual-code approach). We draft in a way that supports periodic updates without breaking disclosure consistency. This includes structuring sections so changes can be tracked and approved cleanly.
-
Enforcement & Reporting Design (internal reporting paths, hotline language, non-retaliation statement, escalation tiers). We build escalation tiers and reporting metrics that leadership can review on a recurring cadence. This supports accountability for adherence, a core element of Item 406(b) of Regulation S-K.
Waivers under Item 5.05 of Form 8-K, definitions and disclosure clocks
A “waiver” for a covered senior officer is not just a formal written exemption, it can include approval of a material departure from the code’s provisions, including an implicit waiver created by a failure to act within a reasonable time. Item 5.05 of Form 8-K requires disclosure of amendments and waivers for the principal executive officer, principal financial officer, principal accounting officer or controller, and persons performing similar functions. The compliance risk is operational, if the code does not define waiver authority and documentation, the company can miss timing expectations and create inconsistent records. The drafting goal is to make the trigger, the approver, and the disclosure method objective and repeatable.
California companies often run waiver decisions through board and committee processes that are also managing employment and operational issues. We align internal approval paths with exchange expectations while keeping the code and training usable for California workforces. For companies with California headquarters and remote operations, we build a centralized recordkeeping process that supports consistent enforcement and audit readiness.
-
Define “waiver” to capture material departures and implicit waiver concepts, then tie the definition to a single intake and escalation channel.
-
Identify covered senior officers under Item 406(a) of Regulation S-K, then restrict waiver authority to the board or a specified committee for those roles.
-
Select a disclosure method for waivers that aligns with Item 5.05(c) of Form 8-K, including the website-posting alternative and the 12-month retention requirement.
-
Draft a four business day workflow that begins at the time of approval, not at the time the waiver is noticed by the team.
-
Coordinate exchange-specific public disclosure methods, including Regulation FD-compliant method options, with the company’s Form 8-K practice when applicable.
-
Maintain a waiver register and supporting minutes so disclosures and annual reporting references remain consistent across cycles.
Law Laguna aligns waiver drafting, governance approvals, and disclosure mechanics so the code operates as a controlled compliance system, not a document alone.
California Regulatory Compliance
California companies that are listed, preparing to list, or operating with public-company style governance often need a code that satisfies Securities and Exchange Commission (SEC) disclosure rules and exchange standards at the same time. Sarbanes-Oxley Act of 2002, Section 406 and Item 406 of Regulation S-K define what qualifies as a code of ethics, which senior officers must be covered, and how the company must make the code publicly available through a Form 10-K, an exhibit filing, a website posting with a disclosed address, or a free copy on request. Amendments and waivers for covered senior officers can trigger Item 5.05 of Form 8-K, including a website-posting alternative with retention expectations. For New York Stock Exchange (NYSE) listed issuers, NYSE Listed Company Manual Section 303A.10 requires adoption and website posting for directors, officers, and employees, and Section 303A.12 ties governance compliance to annual chief executive officer certification and prompt notice of noncompliance. For Nasdaq-listed issuers, Nasdaq Rule 5610 requires a code applicable to directors, officers, and employees, and Nasdaq IM-5610 expects enforcement provisions, including protection for reporters and fair process. Law Laguna integrates these sources into a single drafting and implementation plan that can be executed in California operations and reflected accurately in public disclosures.
Flexible Legal Counsel
Board-Calendar Advisory
-
Set a quarterly governance cadence that tracks code updates, training, and waiver reporting against Form 10-K and proxy timelines.
-
Draft board and committee resolutions, minutes templates, and approval paths to support exchange expectations for waiver approvals.
-
Coordinate annual disclosure language so Item 406 (Regulation S-K) availability statements remain accurate after policy updates.
Fixed-Scope Code Build
-
Map gaps to Item 406 (Regulation S-K) and NYSE Listed Company Manual Section 303A.10 or Nasdaq Rule 5610 / IM-5610 requirements.
-
Deliver a board-ready code with waiver definitions, reporting channels, and enforcement provisions that can be administered.
-
Provide rollout materials, including acknowledgement language and training outlines, with clear ownership for administration.
Disclosure and Waiver Readiness Sprint
-
Review recent amendments and potential waivers, then test disclosure triggers under Item 5.05 (Form 8-K).
-
Implement a website-posting protocol when using Item 5.05(c) of Form 8-K alternatives, including retention tracking.
-
Prepare draft Form 8-K language or alternative public disclosure scripts that align with exchange timing concepts.
Engagement begins with a document and workflow review, then a requirements map against SEC and exchange standards. We then draft, implement, and set maintenance controls so the code remains accurate and enforceable through reporting cycles.
California Corporate Governance Network
Build an integrated compliance framework around your code
Codes of Conduct & Ethics Policies FAQs
What does Item 406 of Regulation S-K require for a code of ethics?
Yes, Item 406 of Regulation S-K requires disclosure about whether a company has adopted a “code of ethics” covering the principal executive officer, principal financial officer, principal accounting officer or controller, and persons performing similar functions, and it defines qualifying standards such as conflicts handling, accurate public disclosure, and compliance accountability. Operationally, it controls who is covered, what topics must be addressed, and how internal reporting and accountability are structured. The hidden risk is treating the code as a values statement while omitting required elements like prompt internal reporting to specified personnel and accountability for adherence. Law Laguna maps your code to Item 406(a) and Item 406(b) and drafts language that can be administered and described consistently in filings.
What is the SEC definition of a “code of ethics” under Item 406(b)?
Yes, Item 406(b) of Regulation S-K defines a “code of ethics” as written standards reasonably designed to prevent wrongdoing and promote honest and ethical conduct, complete and accurate disclosure in Securities and Exchange Commission (SEC) reports and other public communications, compliance with laws, prompt internal reporting to specified personnel, and accountability. Operationally, it controls drafting specificity, reporting channels, escalation paths, and the company’s ability to enforce standards consistently. The hidden risk is publishing a code that lacks a practical internal reporting pathway or accountability mechanism, which can undermine both governance and disclosure consistency. Law Laguna drafts codes that satisfy the Item 406(b) elements and connect them to implementable reporting and enforcement workflows.
How do we make a code of ethics publicly available under Item 406?
Yes, Item 406 of Regulation S-K allows public availability by filing the code as an exhibit to a Form 10-K or Form 20-F, posting it on the company website and disclosing the website address in the Form 10-K or Form 20-F, or disclosing that a free copy will be provided on request with instructions. Operationally, it controls posting ownership, version control, and how annual report language stays accurate after updates. The hidden risk is changing the website location or document version without updating the Form 10-K language, which can create inconsistent public statements. Law Laguna sets the availability method, drafts the exact Form 10-K or Form 20-F disclosure language, and implements a posting protocol.
What triggers disclosure under Item 5.05 of Form 8-K for code waivers?
Yes, Item 5.05 of Form 8-K is triggered by an amendment to, or waiver from, the company’s code of ethics for covered senior officers, including the principal executive officer, principal financial officer, principal accounting officer or controller, and similar-function roles, and it can include implicit waivers. Operationally, it controls how waivers are defined, who approves them, when the clock starts, and which disclosure path is used. The hidden risk is allowing informal exceptions that are not documented, then discovering later that a waiver occurred without a timely disclosure decision. Law Laguna defines waiver clearly, designs the approval pathway, and prepares disclosure mechanics that track Item 5.05 timing and content expectations.
Can a company use a website posting instead of filing an Item 5.05 Form 8-K for a waiver?
It depends, Item 5.05(c) of Form 8-K provides a website-posting alternative for certain code amendments or waivers, with mechanics that include retaining the disclosure on the website for at least 12 months and referencing the website disclosure in the next annual report, involving assets like website postings, annual report language, and internal waiver documentation. Operationally, it controls who posts, how long it remains accessible, and how the annual report notice is drafted. The hidden risk is failing the retention or notice mechanics, which can negate the benefit of the alternative disclosure route. Law Laguna implements the website protocol, retention tracking, and annual report references that match Item 5.05(c).
What must a NYSE-listed company include in its code under Section 303A.10?
Yes, NYSE Listed Company Manual Section 303A.10 requires a code of business conduct and ethics applicable to directors, officers, and employees, with core topic expectations such as conflicts of interest, corporate opportunities, confidentiality, fair dealing, protection and proper use of company assets, and compliance with laws, rules, and regulations. Operationally, it controls both topic coverage and website posting, and it requires the proxy statement or Form 10-K to disclose availability and the website address. The hidden risk is treating the NYSE topics as optional guidance while missing website posting and disclosure linkages that are part of the standard. Law Laguna aligns drafting, posting, and annual disclosure language to Section 303A.10 and related governance practices.
What does Nasdaq Rule 5610 and IM-5610 require for enforcement provisions?
Yes, Nasdaq Rule 5610 requires a code of conduct applicable to directors, officers, and employees that satisfies Sarbanes-Oxley Act of 2002, Section 406, and Nasdaq IM-5610 expects enforcement provisions addressing prompt and consistent enforcement, protection for persons who report questionable behavior, clear and objective standards, and a fair process to determine whether a violation occurred, covering assets like reporting channels, investigation governance, and disciplinary pathways. Operationally, it controls how allegations are received, escalated, investigated, and resolved, and how retaliation is prohibited. The hidden risk is publishing a code with aspirational language but no defined enforcement mechanics, which invites inconsistent treatment across cases. Law Laguna drafts enforceable provisions and designs reporting and escalation workflows that align with Rule 5610 and IM-5610.
How should foreign private issuers handle code disclosure in Form 20-F and related updates?
Yes, foreign private issuers generally address code availability and certain changes through Form 20-F, and they may use Form 6-K as an earlier or optional channel, involving assets like the code document, website posting, and annual report disclosure language. Operationally, it controls which annual report statements are made about availability, how the website address is presented, and how changes and waivers are communicated to the market. The hidden risk is assuming domestic issuer Form 8-K patterns apply without aligning to the issuer’s Form 20-F framework and internal governance approvals. Law Laguna builds a foreign private issuer-aligned disclosure package, including website availability mechanics and governance workflows that support consistent reporting.
Stop code and waiver disclosures from slipping deadlines
When the code is not mapped to Item 406 of Regulation S-K and the waiver workflow is not aligned to Item 5.05 of Form 8-K, disclosure decisions become reactive and documentation becomes uneven. Exchange posting requirements and enforcement expectations add additional steps that can be missed if ownership is unclear. Inconsistent public statements about standards and enforcement can also create avoidable scrutiny in later review cycles.
We start with a targeted review of your existing code, waiver practices, and disclosure language, then deliver a coverage map against Securities and Exchange Commission (SEC) and exchange standards. Next, we draft the code and supporting disclosure and rollout tools, and we set a maintenance workflow that your team can operate.