CISI Global Financial Compliance study plan

Map the FATF 40 Recommendations to the three stages of money laundering and identify at least six red flags for each stage

Explain the difference between bribery and corruption under the UK Bribery Act 2010 and the FCPA, including the 'adequate procedures' defence

List the core market abuse offences (insider dealing, market manipulation, unlawful disclosure) and the statutory defences available

Describe the role of the compliance function in detecting and reporting suspicious activity, including the SAR/STR process

Apply a risk-based approach to customer due diligence by classifying five hypothetical clients into low, medium and high risk with justification

Outline the steps for investigating a suspected breach, from identification to root-cause analysis and remediation

Distinguish between a breach, an error and a near miss, and explain the escalation route for each

Draft a breach register entry for a simulated market abuse incident, including remedial actions and lessons learned

Compare the regulatory architecture of at least three jurisdictions (e.g., UK FCA, US SEC, EU ESMA) in terms of objectives, powers and accountability

Explain the compliance function's responsibilities in governance, including the three lines of defence model and the role of the compliance officer

Describe how international standards (Basel, IOSCO, FATF) are transposed into national regulation

Identify the key components of a compliance monitoring programme and how it differs from an audit

Explain the conduct risk framework and how it applies to product design, sales and post-sales treatment

Apply the suitability and appropriateness tests to three client scenarios, documenting the rationale

Describe disclosure requirements for costs, charges and conflicts of interest under MiFID II and equivalent regimes

Outline the compliance function's role in reviewing financial promotions and marketing materials

Analyse how mis-selling scandals have shaped conduct regulation, identifying at least three recurring failure themes

Design a complaints-handling process that meets regulatory expectations for timeliness, fairness and record-keeping

Explain the concept of treating customers fairly and how it is evidenced through management information

Assess the compliance implications of vulnerable customers and the duty of care

Build a compliance risk assessment matrix for a fictional firm, scoring inherent risk, control effectiveness and residual risk

Explain how to design and test key controls, including sampling methodology and evidence standards

Describe the regulatory reporting obligations for breaches and the thresholds for notification

Outline the process for managing regulatory change and updating policies and procedures

Explain the extraterritorial reach of key regimes (UK Bribery Act, FCPA, GDPR) and how firms manage cross-border compliance

Describe the role of supervisory colleges and memoranda of understanding in cross-border supervision

Identify the compliance implications of outsourcing and third-party risk management

Summarise the principles of good governance for compliance, including independence, resourcing and reporting lines

Synthesise all domains by completing two full mock exams under timed conditions, scoring at least 75%

Review incorrect answers and produce a personalised list of weak areas with page references

Revisit the highest-weight domains (3, 4, 5) and confirm understanding of key definitions and thresholds

Create a final one-page 'cheat sheet' of essential facts, figures and regulatory names