The Capital Shortfall Nobody Reported
A dealer member's CFO prepares the monthly financial report. Risk-adjusted capital has fallen to 5.8% of the minimum required, down from 8.2% two months earlier, driven by an unhedged equity position in a proprietary trading book and a $4.2M receivable from an affiliate that is now 95 days past due. The CFO believes the position will recover within 60 days and decides to wait for next month's report before notifying the board risk committee. The CEO is aware and agrees. The CCO learns of the shortfall on a Friday afternoon from a junior analyst who is uncomfortable with the silence. The dealer's internal policy requires notification to the regulator 'promptly upon becoming aware' of a capital deficiency, and the board risk committee meets in 19 days.
1. What are the CCO's obligations, and what should happen before Monday morning?
Read the worked answer
The CCO cannot wait for the board cycle. A capital deficiency below the regulatory minimum is a reportable condition, and the internal policy's 'promptly upon becoming aware' standard is triggered by knowledge, not by the CFO's hope of recovery. The CCO's own awareness - through the analyst - starts the clock.
Before Monday: (1) Verify the numbers independently with the analyst and finance; do not act on a single verbal report, but do not let verification become delay. (2) Document the timeline of who knew what and when, including the CFO's and CEO's decision to defer. (3) Escalate in writing to the CEO and the board risk committee chair, stating the deficiency, the policy obligation, and the CCO's recommendation to notify the regulator immediately. (4) If the CEO continues to defer, the CCO escalates to the board chair or audit committee and, where the obligation is regulatory, notifies the regulator directly. A CCO's duty runs to the regulator and the board, not to the CEO's optimism.
The CCO should also flag the 95-day affiliate receivable as a related-party exposure that may itself require disclosure and may be impairing capital. 'It will recover' is a forecast, not a control.
2. The CEO argues that notifying the regulator could trigger a loss of confidence and a run. How should the CCO weigh that argument, and what should the notification contain?
Read the worked answer
The CCO should acknowledge the concern is real but explain that it is not the CCO's to trade against a regulatory obligation. Concealment converts a manageable capital problem into an enforcement problem, and regulators consistently treat late disclosure more harshly than the underlying deficiency. The correct move is to notify early and pair it with a credible remediation plan, which is what preserves confidence.
The notification should state: the current risk-adjusted capital ratio and the shortfall against the minimum; the drivers (unhedged equity position, affiliate receivable aging); the remediation plan with dates and owners (hedge or reduce the position, collect or write down the receivable, capital injection if needed); the governance steps taken (board notification, escalation); and a single point of contact. It should be factual, not defensive, and it should commit to a follow-up schedule.
The CCO should also ensure the board risk committee is convened early rather than at the scheduled meeting - a 19-day wait is not defensible when the deficiency is known. Finally, the CCO should assess whether the CEO's and CFO's decision to defer is itself a conduct matter requiring escalation to the board.