The Suitability Supervisor Who Approved Everything
Corvus Wealth Partners is a CIRO member firm with 42 registered representatives. Compliance officer Priya Raman runs a monthly review of new account documentation. Over six months she notices a pattern: one branch, led by branch manager Dale Okonkwo, has an approval rate of 99.2% for leveraged-strategy recommendations to clients over 70, versus a firm-wide rate of 71%. Dale is the designated supervisor for that branch and personally signs off on suitability. Two client complaints in the period alleged unsuitable recommendations; both were resolved with small goodwill credits and no supervisory review was triggered. Priya's sample of 30 files finds 11 missing risk-tolerance documentation and 6 where the client's stated time horizon (under 2 years) conflicts with the recommended product (5-year lock-up). Dale responds that his clients 'know what they want' and that the missing forms are administrative. The firm's written supervisory procedures require two-level sign-off for leveraged products but the second signature is consistently Dale's own.
1. Diagnose the control failures and explain why the 'administrative' characterization is wrong.
Read the worked answer
The pattern is a supervisory control failure, not a paperwork issue. Four distinct failures interact:
- Independence failure. Two-level sign-off exists to create a second, independent judgment. Where the second signature is the same person, the control provides zero incremental assurance-it is a formality that manufactures the appearance of review. This is the most serious defect because it silently disables a designed safeguard.
- Statistical anomaly as a red flag. A 99.2% approval rate against a 71% firm baseline, concentrated in one branch and one demographic, is exactly the kind of outlier a compliance system should escalate automatically. The absence of escalation suggests monitoring thresholds are not calibrated to detect supervisory drift.
- Complaint triage failure. Two complaints alleging unsuitable recommendations were closed with goodwill credits without triggering supervisory review. Complaint data is a primary risk indicator; treating complaints as customer-service events rather than risk signals is a systemic weakness.
- Documentation gaps. 11 of 30 files missing risk tolerance and 6 with a direct horizon/product mismatch are not administrative. Risk tolerance is the input to the suitability determination; without it, the recommendation cannot be shown to be suitable. The 6 horizon mismatches are substantive-a 5-year lock-up for a client with a sub-2-year horizon is a potential suitability breach on its face.
Why 'administrative' is wrong: Documentation is the evidence of the advice. If the file cannot demonstrate suitability, the firm cannot discharge its obligation, regardless of what the client says verbally. 'Clients know what they want' is not a supervisory standard; the firm's obligation is to assess suitability, not to defer to client assertion, particularly for elderly clients in leveraged strategies where capacity to absorb loss is a live concern.
2. Design the remediation Priya should recommend, including how to handle Dale and the affected clients.
Read the worked answer
Remediation should address the control, the supervisor, and the clients separately.
Control-level:
- Immediately reassign second-level sign-off for Dale's branch to a supervisor outside the branch, and audit all leveraged approvals signed by Dale as second signature.
- Recalibrate monitoring: set branch-level approval-rate thresholds that trigger automatic review, and add an age-plus-product concentration flag.
- Rebuild complaint triage so allegations of unsuitable recommendation route to compliance, not to goodwill credits, with a documented disposition.
Supervisor-level:
- Open a formal supervisory review of Dale. The pattern-self-approval, outlier rates, complaint suppression-warrants considering whether his designated supervisor status should be suspended pending outcome.
- Distinguish between a training gap and a conduct issue. The self-signature pattern persisted across the period and he defended it, which points toward conduct rather than ignorance. Document the distinction; it drives the disciplinary response.
Client-level:
- Review all 6 horizon-mismatch files and the 11 missing-documentation files for actual suitability, not just form completion. Where the product is unsuitable, consider remediation including unwinding where feasible and client contact.
- For elderly clients in leveraged strategies, conduct enhanced outreach to confirm understanding of risk.
Escalation: Priya should report to the board or a board committee, because the failure involves a branch manager and the firm's own procedures were not followed. Self-identification and prompt remediation are mitigating; concealment or slow-walking would aggravate.