Regulatory Compliance and Ethical Standards
The compliance framework
Compliance ensures adherence to laws, regulations, and internal standards. Know the components: regulatory mapping, policies and procedures, training, monitoring and testing, issue management, and regulatory change management. The compliance function is second line; it advises and challenges but does not replace business accountability. A frequent trap is assuming compliance with rules equals ethical conduct - conduct risk arises from behavior that is legal but harms customers or markets.
Key regulatory concepts
Understand prudential requirements (capital, liquidity, leverage, large exposures), conduct requirements (fair treatment, suitability, market conduct, conflicts of interest), and reporting obligations (timely, accurate, complete). Know that regulators expect a documented risk appetite, board oversight, and a speak-up culture. Traps: confusing a breach of internal policy with a regulatory breach (though both may be reportable); assuming a regulator's guidance is optional where it sets expectations; missing that late or inaccurate reporting is itself a violation.
Ethics and conduct
Ethical standards include integrity, fairness, transparency, confidentiality, and managing conflicts. Whistleblowing protections and escalation of unethical conduct are governance requirements. Questions often test the response to a conflict: disclose, recuse, or escalate - never simply proceed.
Worked example and rule of thumb
A sales team recommends a product unsuitable for a client's stated objectives but permitted by policy. The correct answer is not "policy allows it"; suitability and fair treatment obligations override internal permissiveness, and the conflict must be escalated. Rule of thumb: when rules and ethics diverge, apply the stricter standard and escalate - the exam rewards the answer that protects the client and the firm's integrity, and documents the decision.