I85PREP
⌘ K
CISI Global Financial Compliance study materials
CISI Global Financial Compliance study resources

CISI Global Financial Compliance practice questions

One question at a time. Build your CISI Global Financial Compliance understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Compliance and regulation in a global context

Under the UK regulatory framework, which body is responsible for the prudential regulation and supervision of banks, building societies and insurers?

  1. The Payment Systems Regulator
  2. The Financial Ombudsman Service
  3. The Financial Conduct Authority
  4. The Prudential Regulation Authority Correct answer.

Explanation

The Prudential Regulation Authority (PRA), part of the Bank of England, supervises the safety and soundness of banks, building societies, credit unions, insurers and major investment firms. Conduct and market behaviour are handled by the FCA under the twin-peaks model.

Question 2Compliance and regulation in a global context

A compliance officer is designing a firm's anti-money laundering framework. Which activity is a core element of the customer due diligence process under FATF Recommendations?

  1. Establishing the identity of the beneficial owner of a corporate client Correct answer.
  2. Reporting every transaction to the financial intelligence unit in real time
  3. Publishing the client's tax residency on the firm's public register
  4. Guaranteeing that a client will never be politically exposed

Explanation

FATF Recommendations require firms to identify the customer and the beneficial owner, understand the ownership and control structure, and assess the purpose and intended nature of the relationship. Identifying beneficial ownership is central to customer due diligence.

Question 3Compliance and regulation in a global context

Which organisation issues the Basel Core Principles for Effective Banking Supervision?

  1. The Basel Committee on Banking Supervision Correct answer.
  2. The Financial Action Task Force
  3. The International Association of Insurance Supervisors
  4. The International Organization of Securities Commissions

Explanation

The Basel Committee on Banking Supervision publishes the Core Principles for Effective Banking Supervision, which set out the framework for supervisory systems. IOSCO, IAIS and FATF cover securities, insurance and money laundering respectively.

Question 4Compliance and regulation in a global context

In the context of global financial compliance, what does the term 'extraterritorial application' of a regulation mean?

  1. International standards automatically override national legislation
  2. A national regulator can only enforce rules within its own borders
  3. A firm may choose which country's rules apply to its business by contract
  4. A regulator applies its rules to conduct occurring outside its home jurisdiction where a sufficient link exists Correct answer.

Explanation

Extraterritoriality refers to a jurisdiction applying its laws to persons or conduct abroad where there is a recognised connection, such as the use of its currency, markets or entities. Examples include US sanctions and certain anti-bribery rules.

Question 5Compliance and regulation in a global context

A compliance analyst is reviewing a suspicious transaction report process. Which principle underlies the tipping-off offence in money laundering legislation?

  1. A firm must not disclose to the client that a suspicious activity report has been made Correct answer.
  2. A firm must inform the client before submitting any report
  3. A firm must share reports with all group companies worldwide
  4. A firm must publish its reports on its website

Explanation

Tipping-off rules prohibit disclosing that a suspicious activity report has been made or that an investigation is under way, because such disclosure could prejudice the investigation. This protects the integrity of the reporting regime.

Question 6Compliance and regulation in a global context

Which of the following best describes the purpose of a 'fit and proper' assessment for individuals performing controlled functions at a regulated firm?

  1. To confirm the person has the honesty, competence and financial soundness to perform the role Correct answer.
  2. To confirm the person is a national of the regulator's home country
  3. To ensure the person's salary is benchmarked against peers
  4. To verify the person holds a university degree in finance

Explanation

Fit and proper assessments examine honesty and integrity, competence and capability, and financial soundness, so that only suitable individuals hold key roles. They do not depend on nationality or academic qualifications.

Question 7Compliance and regulation in a global context

What is the primary objective of the Markets in Financial Instruments Directive II (MiFID II) in the European Union?

  1. To standardise mortgage lending criteria
  2. To set minimum capital requirements for banks
  3. To regulate insurance contract wording
  4. To harmonise investor protection and market transparency rules across EU financial markets Correct answer.

Explanation

MiFID II harmonises conduct of business, best execution, transaction reporting and transparency requirements across EU investment firms and trading venues. Capital requirements and insurance and mortgage rules are governed by other regimes.

Question 8Compliance and regulation in a global context

Under the General Data Protection Regulation (GDPR), which principle requires that personal data be collected for specified, explicit and legitimate purposes and not further processed in an incompatible manner?

  1. Storage limitation
  2. Accuracy
  3. Data minimisation
  4. Purpose limitation Correct answer.

Explanation

Purpose limitation means data must be collected for specified, explicit and legitimate purposes and not used for incompatible purposes. Data minimisation concerns the amount of data, storage limitation concerns retention periods, and accuracy concerns correctness.

Question 9Compliance and regulation in a global context

A bank discovers that a client has been structuring cash deposits just below the reporting threshold to avoid triggering a currency transaction report. Which compliance action is most appropriate?

  1. Reduce the client's fees as compensation for the inconvenience
  2. Ignore the pattern because no single deposit exceeded the threshold
  3. Report the client to the local tax office instead of the financial intelligence unit
  4. File a suspicious activity report and consider whether to continue the relationship Correct answer.

Explanation

Structuring to evade reporting thresholds is a classic red flag for money laundering and must be escalated through a suspicious activity report. The firm should also review the relationship in light of the risk.

Question 10Compliance and regulation in a global context

A compliance team is mapping the three lines of defence model. Which group is best described as the second line?

  1. Front-office sales staff who own the client relationship
  2. A risk and compliance function independent of the business units Correct answer.
  3. An external auditor engaged by the board
  4. The internal audit function reporting to the audit committee

Explanation

The second line comprises risk management and compliance functions that set frameworks and monitor the first line. Front-office staff are the first line, and internal audit is the third line.

Question 11Compliance and regulation in a global context

A firm wishes to rely on the 'reverse solicitation' concept when a client established outside the EU approaches it. What does reverse solicitation generally mean?

  1. The firm actively markets into the client's country but labels it as solicited
  2. The client signs a waiver of all regulatory protections
  3. The client initiates the service at its own exclusive initiative, so the firm's marketing restrictions may not apply Correct answer.
  4. The firm outsources its compliance obligations to the client

Explanation

Reverse solicitation describes a situation where the client, on its own exclusive initiative, requests a service, rather than the firm marketing into the jurisdiction. It is narrowly construed and does not permit disguised active marketing.

Question 12Compliance and regulation in a global context

A compliance officer is assessing a client's source of funds. Which situation should prompt enhanced due diligence?

  1. The client is a long-standing salaried employee with a stable account history
  2. The client is a politically exposed person with complex offshore structures Correct answer.
  3. The client provides a certified passport and payslip
  4. The client's transactions are consistent with a documented salary

Explanation

Politically exposed persons and complex offshore structures present higher money laundering risk and require enhanced due diligence, including senior management approval and closer monitoring. Routine low-risk clients do not automatically trigger enhanced measures.

Question 13Compliance and regulation in a global context

Under the UK Senior Managers and Certification Regime, what is the purpose of the Certification Regime?

  1. To cap the remuneration of senior managers
  2. To require firms to obtain a licence for each individual from the regulator
  3. To require all employees to hold a professional qualification
  4. To require firms to certify annually that certain employees are fit and proper for their roles Correct answer.

Explanation

The Certification Regime requires firms themselves to assess and certify annually that material risk takers and other specified staff are fit and proper, without direct regulator approval. It complements the Senior Managers Regime.

Question 14Compliance and regulation in a global context

A firm is considering a merger with another regulated entity. Which compliance consideration is most relevant to the notification of the transaction to the regulator?

  1. Whether the merged firm will retain the same office address
  2. Whether the merger will change the firm's trading name
  3. Whether the merger will reduce the firm's marketing budget
  4. Whether the change of control requires prior regulatory approval before completion Correct answer.

Explanation

Changes of control in regulated firms generally require prior notification and approval, and completing without approval can be a criminal or regulatory breach. Marketing budgets, office addresses and trading names are not the trigger for approval.

Question 15Compliance and regulation in a global context

Which of the following best describes the role of the Financial Stability Board (FSB) in the global regulatory framework?

  1. It sets interest rates for member economies
  2. It directly supervises individual banks in member countries
  3. It coordinates international standard-setting and monitors risks to the global financial system Correct answer.
  4. It adjudicates disputes between retail customers and banks

Explanation

The FSB coordinates national authorities and international standard setters and monitors vulnerabilities in the global financial system. It does not supervise individual institutions or set monetary policy.

Question 16Compliance and regulation in a global context

A compliance manager is reviewing a firm's conflicts of interest policy. Which measure is a recognised way to manage a conflict?

  1. Concealing the conflict to avoid alarming the client
  2. Disclosing the conflict to the client and segregating the teams involved Correct answer.
  3. Allowing the conflicted employee to set their own controls
  4. Removing the client's right to complain

Explanation

Conflicts can be managed by segregation of duties, information barriers, disclosure and, where necessary, declining the business. Concealment and removing client rights are prohibited.

Question 17Compliance and regulation in a global context

Under the EU Market Abuse Regulation, what is the purpose of the disclosure of inside information requirement for issuers?

  1. To require issuers to disclose their employees' salaries
  2. To ensure the market is informed as soon as possible of inside information that directly concerns the issuer Correct answer.
  3. To require issuers to publish all internal board minutes
  4. To allow issuers to delay disclosure indefinitely for commercial reasons

Explanation

Issuers must disclose inside information directly concerning them as soon as possible, subject to limited delayed disclosure conditions where confidentiality is protected and the public is not misled. Indefinite delay is not permitted.

Question 18Compliance and regulation in a global context

A firm operates in several jurisdictions and is designing a sanctions screening programme. Which approach best reflects a risk-based global sanctions framework?

  1. Screen customers and transactions against applicable lists, with higher scrutiny for high-risk jurisdictions Correct answer.
  2. Screen only new customers at onboarding and never thereafter
  3. Screen only transactions above a fixed global threshold regardless of jurisdiction
  4. Rely solely on the customer's self-declaration of sanctions status

Explanation

Sanctions screening should apply across the customer lifecycle and be calibrated to risk, including jurisdiction, sector and transaction type. Threshold-only or onboarding-only approaches leave significant exposure.

Question 19Compliance and regulation in a global context

Which of the following is a key requirement of the OECD Anti-Bribery Convention for signatory countries?

  1. To require bribery to be reported only to the company's board
  2. To criminalise the bribery of foreign public officials in international business transactions Correct answer.
  3. To exempt state-owned enterprises from anti-bribery rules
  4. To legalise facilitation payments in all signatories

Explanation

The OECD Anti-Bribery Convention requires parties to criminalise bribery of foreign public officials and to take measures on liability, jurisdiction and international cooperation. Facilitation payments are not legalised by the convention.

Question 20Compliance and regulation in a global context

A compliance analyst is reviewing a firm's outsourcing arrangement with a cloud provider. Which regulatory concern is most central?

  1. Ensuring the provider's office is in the same city as the firm
  2. Ensuring the provider uses the same branding as the firm
  3. Ensuring the firm retains accountability and can exit the arrangement without disruption Correct answer.
  4. Ensuring the provider's staff are paid above market rates

Explanation

Outsourcing does not transfer regulatory responsibility; firms must manage concentration risk, ensure access and audit rights, and maintain exit plans. Branding, location and pay are not the central regulatory concerns.

Question 21Compliance and regulation in a global context

A firm's compliance monitoring plan finds repeated late trade reporting. Which action best reflects a proportionate compliance response?

  1. Suppress the findings to avoid regulatory scrutiny
  2. Wait for the regulator to identify the issue before acting
  3. Discipline the compliance analyst who found the issue
  4. Investigate the root cause, remediate the process and escalate findings to governance Correct answer.

Explanation

A proportionate response is to investigate causes, remediate controls and escalate through governance, demonstrating a culture of compliance. Suppression, blaming the reporter or waiting for the regulator are inappropriate.

Question 22Compliance and regulation in a global context

Which statement best describes the concept of 'proportionality' in financial regulation?

  1. Rules and supervisory intensity should be calibrated to the size, complexity and risk profile of the firm Correct answer.
  2. All firms must comply with identical detailed rules regardless of size
  3. Regulators should apply the strictest possible rules to every firm
  4. Smaller firms are exempt from all conduct rules

Explanation

Proportionality allows rules and supervision to be tailored to the nature, scale and complexity of a firm's activities, so that burdens are commensurate with risk. It does not exempt firms from core obligations.

Question 23Compliance and regulation in a global context

A global bank is subject to both US sanctions and EU sanctions that conflict on a particular transaction. What is the most appropriate compliance approach?

  1. Escalate for legal analysis and consider whether the transaction can lawfully proceed under both regimes Correct answer.
  2. Ignore both regimes and rely on internal policy
  3. Proceed with the transaction because one regime permits it
  4. Ask the client to decide which regime to follow

Explanation

Where sanctions regimes conflict, firms must obtain legal analysis, document the reasoning and consider blocking statutes, licences or declining the business. Proceeding because one regime permits it ignores the other regime's exposure.

Question 24Compliance and regulation in a global context

A compliance function identifies that a senior trader has been sharing confidential order information with an external contact. Which combination of regulatory issues is most directly engaged?

  1. Market abuse and confidentiality obligations Correct answer.
  2. Insurance conduct and claims handling
  3. Payment services and e-money
  4. Consumer credit and mortgage regulation

Explanation

Sharing confidential order information can constitute market abuse, such as insider dealing or unlawful disclosure, and breaches duties of confidentiality. The other areas are unrelated to trading conduct.

Question 25Compliance and regulation in a global context

A regulator is assessing whether a firm's governance is effective. Which indicator most strongly suggests a weak compliance culture?

  1. Remediation plans have clear owners and deadlines
  2. Compliance has direct access to the board
  3. Compliance findings are consistently downgraded and rarely escalated to the board Correct answer.
  4. The board receives regular compliance reports

Explanation

Downgrading findings and failing to escalate them indicates a culture where compliance is subordinated to commercial pressure. Regular reporting, board access and clear remediation ownership are positive indicators.

Question 26Compliance and regulation in a global context

Which body issues the international standards on combating money laundering and terrorist financing that most national regimes are assessed against?

  1. The World Trade Organization
  2. The Basel Committee on Banking Supervision
  3. The International Organization of Securities Commissions
  4. The Financial Action Task Force Correct answer.

Explanation

The Financial Action Task Force is the intergovernmental body that sets the FATF Recommendations, the global benchmark for anti-money laundering and counter-terrorist financing regimes. National supervisors are assessed against these Recommendations through mutual evaluations, and many jurisdictions transpose them into local rules.

Question 27Compliance and regulation in a global context

A compliance officer is asked to explain why a firm must apply a risk-based approach to customer due diligence. Which statement best captures the regulatory rationale?

  1. All customers must receive identical checks so that no group is disadvantaged
  2. Enhanced checks are applied only to politically exposed persons and no other customer type
  3. Checks are calibrated to the assessed money laundering and terrorist financing risk so resources focus where risk is highest Correct answer.
  4. Due diligence is performed only when a transaction exceeds a fixed reporting threshold

Explanation

The risk-based approach requires firms to assess the money laundering and terrorist financing risk of each relationship and apply measures proportionate to that risk. This lets firms concentrate enhanced measures on higher-risk situations while applying simplified measures where risk is demonstrably lower. It is a core principle of the FATF Recommendations and of most national AML regimes.

Question 28Compliance and regulation in a global context

Which statement best describes the purpose of the Wolfsberg Group?

  1. It publishes guidance on financial crime risk management for the private banking and correspondent banking sectors Correct answer.
  2. It sets binding capital requirements for globally systemic banks
  3. It grants banking licences to institutions operating across borders
  4. It resolves disputes between banks and their retail customers

Explanation

The Wolfsberg Group is an association of global banks that issues non-binding guidance, such as correspondent banking due diligence and anti-bribery principles, to strengthen financial crime controls. Its standards are not law but are widely referenced by firms and supervisors when designing controls.

Question 29Compliance and regulation in a global context

A firm wants to rely on a third party to carry out customer due diligence in a jurisdiction where this is permitted. Which condition is normally required for such reliance?

  1. The third party must be a subsidiary of the firm in the same jurisdiction
  2. The third party must be a government agency rather than a commercial entity
  3. The firm retains ultimate responsibility for compliance and must obtain the due diligence information without delay Correct answer.
  4. The customer must consent in writing to the arrangement

Explanation

Where reliance on a third party is permitted, the regulated firm remains responsible for meeting its due diligence obligations and must be able to obtain the underlying information promptly. Regulators typically also require that the third party is itself regulated and subject to equivalent AML supervision. Responsibility cannot be delegated away.

Question 30Compliance and regulation in a global context

What is the main function of the Basel Committee on Banking Supervision?

  1. To prosecute individuals for market abuse across member states
  2. To set accounting standards for listed companies
  3. To develop prudential standards for banks and promote supervisory cooperation Correct answer.
  4. To operate deposit guarantee schemes for retail savers

Explanation

The Basel Committee develops prudential standards such as the Basel framework on capital, liquidity and governance, and it provides a forum for supervisory cooperation. It has no enforcement powers itself; implementation occurs through national regulators.

Question 31Compliance and regulation in a global context

A compliance team is reviewing a cross-border payment that appears designed to obscure the origin of funds through several intermediary accounts. Which control is most directly aimed at detecting this pattern?

  1. Review of the firm's outsourcing register
  2. Transaction monitoring with cross-border and layering typologies Correct answer.
  3. Annual appraisal of relationship managers
  4. Periodic review of the firm's marketing materials

Explanation

Layering through multiple intermediary accounts is a recognised money laundering typology, and transaction monitoring scenarios are designed to flag such patterns. Effective monitoring uses risk-based rules and thresholds covering cross-border flows. The other controls address unrelated governance areas.

Question 32Compliance and regulation in a global context

Which statement best describes the role of a national competent authority in the authorisation of an investment firm?

  1. It delegates all authorisation decisions to the firm's external auditor
  2. It guarantees the firm's future profitability
  3. It acts as the firm's legal adviser during the application
  4. It assesses whether the firm meets threshold conditions such as capital, governance and fitness of controllers before granting permission Correct answer.

Explanation

Authorisation is a supervisory gateway: the regulator checks that the applicant satisfies threshold conditions on capital adequacy, governance, suitability of management and controllers, and business conduct before permitting regulated activity. Ongoing supervision then tests continued compliance.

Question 33Compliance and regulation in a global context

A compliance analyst is drafting a suspicious activity report. Which element is essential to the report's usefulness to the financial intelligence unit?

  1. A request that the customer be informed of the report
  2. A clear description of the activity, the parties involved and the reason it is suspicious Correct answer.
  3. A promise that the firm will compensate any losses caused by the report
  4. The personal opinion of the analyst on the customer's character

Explanation

A suspicious activity report should give the financial intelligence unit enough factual detail to investigate: who is involved, what transactions occurred and why the activity departs from expected behaviour. The analyst's reasoning links the facts to a recognised typology. Tipping off the customer is prohibited.

Question 34Compliance and regulation in a global context

Under the EU Anti-Money Laundering Directives, which category of persons is subject to enhanced due diligence because of the political exposure they hold or have held?

  1. Customers who hold more than one bank account
  2. Employees of the firm's correspondent banks
  3. Politically exposed persons and their close associates and family members Correct answer.
  4. All customers resident outside the EU

Explanation

Politically exposed persons, together with their family members and known close associates, present higher corruption risk and therefore attract enhanced due diligence. The obligation continues for a period after the person leaves public office, reflecting continuing risk.

Question 35Compliance and regulation in a global context

A firm is considering whether to treat a customer as high risk because the customer is based in a country identified by the FATF as having strategic deficiencies. What is the most appropriate compliance response?

  1. Apply enhanced due diligence and consider whether to file a suspicious activity report or decline the relationship Correct answer.
  2. Treat the customer as low risk because the country has signed the FATF Recommendations
  3. Apply simplified due diligence to reduce onboarding delays
  4. Ignore the listing because the customer has a long-standing relationship with the firm

Explanation

Jurisdictions on the FATF's call-for-action list present elevated money laundering and terrorist financing risk, so firms should apply enhanced measures, including scrutiny of source of funds and senior management sign-off. The relationship may need to be declined or exited if the risk cannot be managed.

Question 36Compliance and regulation in a global context

Which statement best describes the purpose of the Foreign Corrupt Practices Act in the United States?

  1. It sets consumer credit disclosure requirements
  2. It prohibits bribery of foreign officials by covered persons and requires accurate books and records Correct answer.
  3. It regulates the capital adequacy of US banks
  4. It governs the listing of foreign securities on US exchanges

Explanation

The FCPA has anti-bribery provisions that prohibit corrupt payments to foreign officials by US persons and certain foreign entities with a US nexus, and accounting provisions requiring accurate books and records and internal controls. Enforcement is shared between the Department of Justice and the SEC.

Question 37Compliance and regulation in a global context

A firm's compliance function reports to the board but has no independent budget and its head can be overruled by the front office on control decisions. Which conclusion is most defensible?

  1. Independence is unnecessary where the firm has an internal audit function
  2. The compliance function lacks the independence and authority expected of an effective second line Correct answer.
  3. The arrangement is acceptable because a reporting line to the board exists
  4. The arrangement is acceptable provided the front office documents its overrides

Explanation

Effective compliance requires independence, adequate resources and authority to challenge business decisions without being overruled by revenue-generating functions. A reporting line alone does not cure a lack of budget control or the ability of the front office to override control decisions. Supervisors treat such features as indicators of a weak control environment.

Question 38Compliance and regulation in a global context

Which international body develops the Principles for Financial Market Infrastructures, covering payment systems, central securities depositories and central counterparties?

  1. The Committee on Payments and Market Infrastructures and IOSCO Correct answer.
  2. The Financial Action Task Force
  3. The International Accounting Standards Board
  4. The World Bank

Explanation

The Principles for Financial Market Infrastructures were issued jointly by the Committee on Payments and Market Infrastructures and IOSCO. They set standards for the robustness and risk management of systems that clear, settle or record payments and securities.

Question 39Compliance and regulation in a global context

A firm outsources a critical function to a third-party provider in another country. Which regulatory expectation is most relevant to the outsourcing arrangement?

  1. The firm must ensure continued oversight, access to records and exit arrangements Correct answer.
  2. The provider must be owned by the firm
  3. The firm can transfer its regulatory responsibilities to the provider
  4. The arrangement removes the need for the firm to notify its regulator

Explanation

Outsourcing does not transfer regulatory responsibility: the firm remains accountable and must maintain oversight, contractual rights to information and audit, business continuity and a viable exit plan. Many regimes also require notification of material outsourcing to the regulator.

Question 40Compliance and regulation in a global context

Which statement best explains why regulators require firms to maintain a conflicts of interest policy?

  1. To identify and manage conflicts so that clients are not unfairly disadvantaged Correct answer.
  2. To eliminate all commercial risk from the firm's activities
  3. To ensure that all clients receive identical products
  4. To prevent employees from holding any personal investments

Explanation

A conflicts policy requires firms to identify circumstances where the firm's or an employee's interest may conflict with a client's and to manage them through measures such as disclosure, information barriers or declining business. The aim is fair treatment of clients, not the elimination of risk or personal investment.

Question 41The regulatory environment and the compliance function

Within a firm's compliance function, which activity best describes the 'second line of defence' role?

  1. Independently overseeing and advising on the controls operated by the business Correct answer.
  2. Setting the firm's commercial strategy and approving product pricing
  3. Conducting the external audit of the annual financial statements
  4. Performing daily reconciliations of client money accounts

Explanation

The three-lines-of-defence model places the business (first line) as owner of risk and controls, compliance and risk functions (second line) as independent oversight and advice, and internal audit (third line) as independent assurance. The compliance function therefore monitors and challenges first-line activity rather than executing it. External audit is outside the firm's defence model entirely.

Question 42The regulatory environment and the compliance function

A compliance officer reports to the head of the business division whose sales practices she monitors. Which structural weakness does this create?

  1. It transfers regulatory liability to the divisional head
  2. It removes the need for a compliance monitoring plan
  3. It reduces the independence of the compliance function Correct answer.
  4. It increases the compliance function's access to trading data

Explanation

Independence is a core attribute of an effective compliance function: reporting lines should avoid placing compliance under the direct control of the business it oversees. Reporting to the monitored divisional head creates a conflict of interest and may discourage escalation of breaches. Regulatory responsibility remains with the firm and its senior managers regardless of reporting lines.

Question 43The regulatory environment and the compliance function

Which statement best captures the purpose of a firm's compliance risk assessment?

  1. To document the personal tax position of senior managers
  2. To rank business activities by the likelihood and impact of regulatory breach Correct answer.
  3. To calculate the firm's regulatory capital requirement
  4. To replace the firm's internal audit programme

Explanation

A compliance risk assessment identifies the firm's activities and evaluates each against the likelihood and impact of breaching applicable rules, so that monitoring and resources can be prioritised. It is a planning and prioritisation tool, not a capital calculation. It complements rather than replaces internal audit.

Question 44The regulatory environment and the compliance function

Under the UK Senior Managers and Certification Regime, which document sets out the responsibilities of a senior manager and supports their accountability?

  1. The firm's order execution policy
  2. The annual report and accounts
  3. The statement of responsibilities Correct answer.
  4. The client agreement

Explanation

The SM&CR requires each senior manager to have a statement of responsibilities describing the aspects of the firm's affairs for which they are responsible. This supports the duty of responsibility and the ability of regulators to hold individuals to account. Client agreements and execution policies serve different, client-facing purposes.

Question 45The regulatory environment and the compliance function

Which of the following is the most appropriate first step when a compliance officer identifies a potential breach of a regulatory rule?

  1. Wait until the next annual compliance review
  2. Publish the finding on the firm's website
  3. Immediately terminate the employment of the responsible individual
  4. Escalate through the firm's breach-reporting process and assess the impact Correct answer.

Explanation

Effective compliance requires prompt escalation of potential breaches through defined internal channels so that the facts, cause and impact can be assessed and remediation planned. Disciplinary or regulatory notification decisions follow that assessment. Delay or public disclosure would be inappropriate.

Question 46The regulatory environment and the compliance function

What is the primary function of a compliance manual within a regulated firm?

  1. To serve as the firm's statutory financial statements
  2. To set out the firm's policies and procedures for meeting its regulatory obligations Correct answer.
  3. To list the personal shareholdings of all employees
  4. To record the market prices of the firm's traded instruments

Explanation

A compliance manual consolidates the policies and procedures that translate regulatory requirements into day-to-day practice for staff. It provides a reference for conduct expectations and supports training and monitoring. It is not a pricing record, a financial statement or a personal holdings register.

Question 47The regulatory environment and the compliance function

A firm's compliance monitoring programme should primarily be designed to:

  1. maximise the firm's short-term trading profits
  2. replace the need for staff training
  3. test whether controls are operating effectively against identified regulatory risks Correct answer.
  4. determine the firm's credit rating

Explanation

Compliance monitoring is a risk-based programme of reviews that tests whether first-line controls are working and whether regulatory requirements are being met. Its findings feed remediation and reporting to senior management. It does not generate profit, substitute for training or set credit ratings.

Question 48The regulatory environment and the compliance function

Which body is typically responsible for setting a firm's overall risk appetite and overseeing the compliance framework at board level?

  1. The external custodian bank
  2. The firm's marketing department
  3. The board of directors, often through its risk or audit committee Correct answer.
  4. The individual sales desk

Explanation

Ultimate responsibility for the firm's risk appetite and governance framework rests with the board, which frequently delegates detailed oversight to a risk or audit committee. The compliance function supports and reports to this governance layer. Operational desks, custodians and marketing do not set board-level risk appetite.

Question 49The regulatory environment and the compliance function

A regulator requires a firm to appoint a person responsible for ensuring compliance with local conduct rules. Which arrangement best satisfies the principle of regulatory accountability?

  1. Assigning the role informally to a junior analyst without notifying the regulator
  2. Rotating the role monthly among all staff to share the burden
  3. Formally designating a named individual with defined responsibilities and adequate authority Correct answer.
  4. Outsourcing all compliance decisions to an unregulated third party

Explanation

Regulatory accountability is best met by a formal, named allocation of responsibility with the authority and resources to discharge it, and by notifying the regulator where required. Informal, outsourced or rotating arrangements dilute accountability and may not satisfy the regulator. Designation also supports individual accountability regimes.

Question 50The regulatory environment and the compliance function

Which characteristic most distinguishes a 'rules-based' approach from a 'principles-based' approach to regulation?

  1. Rules-based regulation relies on detailed prescriptive requirements, while principles-based regulation relies on high-level outcomes Correct answer.
  2. Principles-based regulation removes the need for any supervisory oversight
  3. Rules-based regulation never involves any written requirements
  4. Rules-based regulation applies only to retail clients

Explanation

Rules-based regimes specify detailed, prescriptive requirements that firms must follow, whereas principles-based regimes set high-level outcomes and expect firms to apply judgement. Most modern regimes combine both. Principles-based regulation still requires supervision and enforcement, and neither approach is confined to retail clients.