Compliance "Best Practices"
News, Commentary and Resources Regarding Compliance for Registered Investment Advisers

Archive for the ‘Risk Assessment’ Category

January Compliance Training - Risk Assessment

Tuesday, February 23rd, 2010

THE FOLLOWING IS A REPRINT OF THE U.S. COMPLIANCE CONSULTANTS JANUARY 2010 COMPLIANCE TRAINING NEWSLETTER

The purpose of this compliance training material is to familiarize you with key issues regarding the risk assessment process.

……………………………………………….

Overview

Investment advisers are required to evaluate how their advisory activities, arrangements, affiliations, client base, service providers, conflicts of interest and other business factors may cause violations of the Investment Advisers Act.  The results of this risk assessment should serve as the basis for drafting and revising compliance policies and procedures that are designed to mitigate, manage and control each risk area in ways that reflect advisory firm’s resources and need for assurance that violations can be prevented or, if violations occur, that such violations will be detected promptly and corrected.

A risk assessment involves identifying and prioritizing issues pertaining to an investment adviser’s operations that may create risk to the interests of the advisory firm and/or its clients. Accordingly, investment advisors need to (1) identify areas of risk that may be part of their advisory firm’s everyday operations; (2) assess whether the controls in place managing or mitigating these risks are adequate; and (3) make modifications to their advisory firm’s compliance policies and procedures as necessary.

Types of Risk

An adviser should consider the following types of risk as potentially harmful to the interests of the advisory firm and its clients.

Operational Risk

Operational risk arises from the potential that inadequate information systems, operations systems, transaction processing will result in unforeseen losses.

Compliance Risk

Compliance risk arises from the possibility that a breach of internal policies or procedures, laws, rules, regulations or ethical standards may impact negatively or disrupt firm operations or condition.

Financial Risk

Financial risk is the risk that the advisory firm may be unable to meet its financial obligations.

Reputational Risk

Reputational risk arises from the potential that inappropriate associated persons or management actions or inactions may cause clients or potential clients to form a negative opinion of the advisory firm and/or its services.

Strategic Risk

Strategic risk arises from inadequate current and prospective business decisions or responsiveness that might harm the advisory firm’s financial condition or create conflicts among its clients.

Identifying Risks

The SEC has identified 12 specific areas of concern that should be examined:

  • Marketing/Performance
  • Form ADV/Disclosures
  • Invoices/Fees
  • IPO Offerings
  • Soft Dollars
  • Compensation
  • Objectives/Restrictions
  • Trade Ticket
  • Trade Execution
  • Non-Public Information
  • Personal/Proprietary Trading
  • Money/Securities to/from Broker/Custodian

Measuring the Risks

The adviser should measure the risks identified by considering the likelihood, impact and probability of a risk event in the absence of controls.

Likelihood

The possibility that a given event will occur.

Impact

The effect the event will have on clients or potential clients, disclosures, finances, reputation and regulatory obligations should it occur.

Probability

The anticipated frequency of a risk event given the regularity of the activity or process that is associated with the risk.

Prioritizing the Risks

Once the advisory firm has measured the inherent risks (e.g., the likelihood and impact in the absence of controls), the firm should prioritize the risks by addressing the areas that have the greatest exposure.

Managing the Risks

The advisory firm should develop a risk management matrix that maps the firm’s inventory of risks to specific compliance policies and procedures. The firm should periodically, but no less than annually, update the risk management matrix.

SEC CCOutreach National Seminar

Tuesday, December 22nd, 2009

The Securities and Exchange will hold its CCOutreach National Seminar on Jan. 26, 2010, at the SEC’s Washington D.C. headquarters, and will include panel discussions to analyze compliance issues being faced by investment advisers, mutual funds, and broker-dealers. This will mark the first time that the CCOutreach programs for investment advisers and for broker-dealers will be combined into one National Seminar, as the events were held separately in past years.

“We look forward to a constructive dialogue with CCOs of broker-dealer, mutual fund and investment advisory firms as we seek to achieve our common goal of investor-oriented compliance and oversight,” said SEC Chairman Mary Schapiro.

Panel discussion topics at the National Seminar for CCOs will include the challenges faced in turbulent markets, administering compliance and annual reviews, and oversight of the trading process. Panelists will include representatives from the SEC’s Division of Trading and Markets, Division of Investment Management, and Office of Compliance Inspections and Examinations as well as CCOs and representatives from the Financial Industry Regulatory Authority (FINRA).

The National Seminar agenda and registration information is available at: http://www.sec.gov/info/cco/ccons2010.htm.

Best Practice: Conduct a Risk Assessment

Saturday, December 5th, 2009

It is clear from the recent trend of SEC examinations that regulators are cracking down on investment advisors that developed their compliance programs without first conducting a thorough risk assessment. A risk assessment involves identifying and prioritizing issues pertaining to an investment advisor’s operations that may create risk to the interests of the advisory firm and/or its clients. Accordingly, investment advisors need to (1) identify areas of risk that may be part of their advisory firm’s everyday operations; (2) assess whether the controls in place managing or mitigating these risks are adequate; and (3) make modifications to their advisory firm’s compliance policies and procedures as necessary. According to information provided by the SEC through the CCOutreach program, areas that should be examined include:

  • Marketing/Performance;
  • Form ADV Disclosures;
  • Invoices/Fees;
  • IPO Offerings;
  • Soft Dollars/Kickbacks;
  • Compensation;
  • Trade Tickets;
  • Trade Execution;
  • Non-public Information; and
  • Personal and Proprietary Trading.

Investment Advisers should also incorporate risk assessment policies and procedures into their compliance manual. In addition to the required sections detailing the advisory firm’s policy and the person responsible for implementing and enforcing the policy, the risk assessment policies and procedures should at least cover the following areas:

  • Types of Risk
  • Identifying Risks
  • Measuring the Risks Identified
  • Prioritizing the Risks
  • Managing the Risks
  • Monitoring the Risks