CIRO Director and Executive key terms

An individual whose registration or approval has been granted by a regulator, allowing them to perform specified functions for a regulated firm under conditions set by that regulator.

A structured evaluation of a person's honesty, integrity, competence, financial soundness, and relevant history used to decide whether they may hold a regulated role.

A firm or individual that holds current registration with a regulator and is therefore subject to its rules, supervision, and disciplinary authority.

A body that writes and enforces rules for its own members under delegated authority from government, combining industry governance with public-interest oversight.

Power granted by statute or a regulator to another body to make rules, conduct reviews, or impose sanctions within defined limits and subject to oversight.

The duty of a regulator to protect investors and market integrity, which may override the narrower interests of its members when the two conflict.

A trading venue that has met statutory recognition criteria, including fair access, transparent rules, and adequate systems and surveillance.

The authority to adopt binding requirements through a defined process that typically includes public consultation, board approval, and regulatory or ministerial review.

An obligation to publish proposed rule changes and invite comment for a set period before adoption, with reasons given for the final decision.

Analysis of the costs and benefits a proposed rule imposes on firms and markets, used to justify proportionality and to identify less intrusive alternatives.

The principle that regulatory requirements and sanctions should be no more restrictive or severe than needed to achieve the stated objective.

A broad prohibition on conduct that harms market integrity or investor confidence, applied even where no narrower rule specifically addresses the behavior.

The expected level of behavior for registrants, typically framed as acting fairly, honestly, and in good faith with clients and markets.

A legal obligation to act solely in another party's best interest, placing the duty of loyalty and disclosure above the adviser's own interests.

Assessment of whether a recommended product or strategy matches a client's objectives, risk tolerance, time horizon, and financial circumstances before the recommendation is made.

The process of collecting and updating information about a client's identity, finances, objectives, and risk profile to support suitable recommendations and detect suspicious activity.

A requirement to verify a client's identity using reliable, independent documents or data before opening an account or carrying out certain transactions.

The obligation to report transactions or attempted transactions that give rise to a reasonable belief of money laundering, fraud, or other unlawful activity to the designated authority.

A requirement to create and retain specified books, records, and communications for a set period so that regulators and auditors can reconstruct conduct and decisions.

The governing body elected by owners or members that sets strategy, appoints and oversees senior management, and is accountable for the firm's compliance and risk culture.

The obligation to act with the diligence, skill, and judgment that a reasonably prudent person would exercise in comparable circumstances.

The obligation to act honestly and in the organization's best interest, placing that interest ahead of personal advantage or third-party pressures.

A deferential standard under which courts uphold board decisions made in good faith, on an informed basis, and without conflicting interest.

A board member with no material relationship to the firm or its management that could interfere with objective judgment, often required in minimum numbers.

The practice of obtaining adequate information, advice, and time for deliberation before approving significant matters, documented to show the basis for the decision.

A board committee, composed largely of independent directors, that oversees financial reporting, internal controls, and the relationship with external auditors.

The senior executive responsible for the compliance program, with authority, independence, and direct access to the board or its committee.

A situation where a personal, financial, or other interest could improperly influence judgment, requiring disclosure, avoidance, or management.

Written rules requiring disclosure of interests, recusal from affected decisions, and registers or controls that prevent improper influence.

Limits and approval requirements for accepting or giving benefits that could create a sense of obligation or appear to influence business decisions.

Disclosing material non-public information to someone who is not entitled to receive it, which may breach confidence and market-abuse rules even without trading.

Trading or recommending trades in securities while aware of material non-public information, or doing so through a person who owes a duty of confidence.

Information not generally available that a reasonable investor would consider important in deciding whether to buy, sell, or hold a security.

The integrated set of policies, training, monitoring, testing, and reporting designed to prevent, detect, and remediate breaches of legal and regulatory obligations.

Periodic, risk-based examination of controls and transactions to confirm that policies operate as intended and to identify gaps before regulators do.

An independent function that evaluates the effectiveness of governance, risk management, and controls and reports findings to the audit committee.

A governance structure separating operational management, an independent risk and compliance function, and internal audit, each with distinct responsibilities for controls.

A board-approved articulation of the types and levels of risk the organization is willing to accept in pursuing its strategy, with limits and escalation triggers.

A firm-wide process for identifying, assessing, monitoring, and reporting risks across business lines so that aggregate exposure remains within approved limits.

The policies, procedures, and system safeguards that provide reasonable assurance of reliable reporting, effective operations, and compliance with applicable requirements.

A weakness in design or operation of a control such that it cannot prevent or detect errors or non-compliance on a timely basis, requiring remediation and reporting.

A documented schedule assigning responsibility and deadlines for correcting an identified deficiency, with follow-up testing to confirm the fix is effective.

Legal and policy safeguards that shield people who report suspected wrongdoing in good faith from retaliation, dismissal, or other detrimental treatment.

A range of penalties scaled to the seriousness of the misconduct, from caution and conditions up to suspension, fines, and permanent prohibition.

An independent adjudicative body that hears allegations of misconduct, makes findings on the balance of probabilities, and imposes sanctions.

A formal directive requiring a firm or individual to cease conduct, pay a penalty, or take specified remedial steps, often with ongoing reporting obligations.

A negotiated resolution in which the respondent accepts findings or conditions in exchange for ending proceedings, usually including admissions or agreed sanctions.

The condition in which prices reflect available information, participants are treated fairly, and manipulation or abuse is deterred and detected.

The regulatory goal of ensuring investors receive fair treatment, adequate disclosure, and suitable advice, and are protected from fraud and misconduct.

The organized documentation a registrant must maintain, including orders, client instructions, and communications, to evidence compliance and support supervision.

A condition of belonging to a self-regulatory organization requiring adherence to its rules, cooperation with reviews, and payment of fees and assessments.