Regulatory Framework and Conduct Standards for Institutional Business
The architecture of conduct regulation
Candidates must know the difference between prudential regulation (capital, liquidity, systemic stability) and conduct regulation (how firms treat clients and markets). Conduct standards for institutional business rest on a small number of principles: acting with integrity, due skill and care, treating clients fairly, managing conflicts, and cooperating openly with regulators. In the CIRO context, the core obligations flow from securities legislation, CIRO rules, and the universal market integrity rules governing trading conduct. Know the hierarchy: statute, then regulator rules, then firm policy, then desk procedure - a question asking which rule prevails is answered by the higher instrument.
Concepts you must be able to explain
Understand suitability versus appropriateness. Institutional clients may be permitted to waive certain suitability protections, but only where the client qualifies as an accredited or permitted client and the waiver is documented. Know the difference between an order executed on instruction and advice given proactively. Understand personal dealing and outside business activity restrictions, the prohibition on front-running, and the duty to escalate suspected misconduct.
Traps
Questions often test whether a client's consent cures a conflict. It does not cure a disclosure failure, and consent obtained without full disclosure is worthless. Another trap is assuming institutional clients receive no protections at all - market integrity rules protect the market itself regardless of client sophistication. Watch for the distinction between a rule breach and a policy breach; only the former is a regulatory matter.
Rule of thumb
When a scenario describes a conflict, ask three questions in order: was it disclosed, was it managed, and was it documented? If any answer is no, treat the conduct as non-compliant.