CISI Global Securities Operations common mistakes
CISI Global Securities Operations · Understand the traps and how to avoid them.
On settlement-cycle questions, the candidate answers with the trade date convention (T+1 or T+2) but never states which leg of the transaction the question is testing - trade date, intended settlement date, or actual settlement date - so the arithmetic lands on the wrong date when a question adds a holiday or a failed-trade extension.
Candidates memorise the headline cycle length for a market and then apply it mechanically. Questions in this exam deliberately shift the anchor: a trade agreed on Friday, a market holiday in the middle, or a partial fill that settles in two tranches. The candidate computes from the wrong starting point and the whole answer chain collapses.
What to do instead
Before calculating, write down three labelled dates on the scratchpad: trade date, intended settlement date, actual settlement date. Apply the market convention only to derive the intended date, then adjust explicitly for each named holiday or extension. Practise with worked examples that include a weekend plus one intervening holiday, and check the answer by counting business days forward from trade date one day at a time rather than adding the cycle number.
The candidate treats clearing and settlement as synonyms, so questions asking who bears counterparty risk between execution and settlement, or which entity novates the trade, are answered with the settlement agent or custodian rather than the central counterparty.
In everyday operational language the two words are used loosely. The exam separates them deliberately: clearing is the process of establishing obligations and managing counterparty risk, typically through novation to a CCP; settlement is the exchange of value and securities. Candidates who blur the terms misassign the risk-bearing entity and the timing of the guarantee.
What to do instead
Build a one-page map with three columns: stage (execution, clearing, settlement), entity involved (broker, CCP, CSD, custodian, agent), and risk extinguished or transferred at that stage. Recite it until the CCP's role in novation and the CSD's role in book-entry transfer are distinct in your mind. For every practice question, name the stage before choosing an entity.
On corporate action questions, the candidate picks the economically correct answer without checking the key dates - announcement, ex-date, record date, payment date - and without distinguishing mandatory from voluntary events or the elections available.
Candidates reason from what happens in practice to their own holdings and forget that the exam tests the entitlement mechanics. The ex-date and record date relationship differs by market, and voluntary events require a client instruction by a deadline. Candidates who skip the date grid choose an answer that is right in substance but wrong on entitlement.
What to do instead
For each corporate action question, draw a timeline and mark which date the question is anchored to, then determine entitlement from the record date and the trade-date position. Separately memorise which events are mandatory (cash dividend, stock split, merger consideration), which are mandatory with options (dividend with currency or scrip election), and which are voluntary (rights issue, tender offer, proxy vote). State the election deadline explicitly in your reasoning.
The candidate answers reconciliation and break-resolution questions by choosing the control that detects the break rather than the control that prevents it, or proposes a fix without identifying the root cause category - timing, price or rate, quantity, static data, or duplication.
Reconciliation questions read like risk questions, and candidates gravitate to the most sophisticated-sounding control. The exam rewards correct classification: a nostro break caused by a value-date mismatch is a timing item, not a fraud indicator. Candidates also skip the ageing and escalation dimension, so they miss that unresolved breaks must be escalated by value and age thresholds.
What to do instead
Adopt a fixed sequence for every break question: identify the account pair, classify the cause into one of the standard buckets, decide whether it self-corrects by value date, then select the escalation path. Learn the distinction between preventive controls (static data validation, trade enrichment, SSI checks) and detective controls (daily nostro and depot reconciliation, exception reports). When asked for a fix, always name the root-cause bucket first.
On AML and KYC questions, the candidate applies a generic 'identify the client and check sanctions' answer and omits the risk-based elements: beneficial ownership thresholds, politically exposed person screening, source of funds versus source of wealth, enhanced due diligence triggers, and ongoing monitoring.
Candidates compress AML into a single onboarding checkpoint. The exam tests the full lifecycle and the risk-based approach, including when simplified or enhanced measures apply and what triggers a refresh. Answers that stop at identification miss the ownership layering and the distinction between source of funds and source of wealth.
What to do instead
Learn four separate concepts and never merge them: identification and verification, beneficial ownership (and the ownership threshold applied in the relevant regime), source of funds versus source of wealth, and ongoing monitoring with periodic review. For each scenario, state the risk rating, the due diligence level it triggers, and the specific evidence required. Practise identifying who the beneficial owner is in a three-layer holding structure.
The candidate confuses the roles in the post-trade chain - executing broker, clearing member, global custodian, local custodian or sub-custodian, and CSD - and answers 'the custodian' for any question about who holds assets, who settles, or who safekeeps in the local market.
In a domestic market one firm often performs several roles, so the distinctions feel artificial. In cross-border questions the exam deliberately separates the global custodian's client-facing role from the sub-custodian's local settlement membership and the CSD's record-keeping. Candidates who collapse the chain cannot answer questions on liability, market entry, or asset safety.
What to do instead
Draw the chain for two contrasting markets and label each entity's function, regulatory status, and liability to the client. Note where assets are held in omnibus versus segregated accounts and who is responsible if a sub-custodian fails. For each practice question, ask 'which link in the chain is being asked about?' before selecting an entity, and be able to explain why the global custodian remains liable to the client for sub-custodian performance.
On foreign exchange and cash management questions, the candidate ignores value dating, cut-off times, and the distinction between the trade date and the value date of an FX transaction, producing an answer that is arithmetically right but settles on the wrong day or misses the funding consequence.
FX in securities operations is usually incidental - funding a purchase or repatriating sale proceeds - so candidates treat it as simple multiplication. The exam tests spot versus forward value dates, the two-day convention in major pairs, cut-off times for same-day funding, and the cost of a failed funding instruction. Candidates also overlook the difference between the bank's rate and the rate applied to the client.
What to do instead
For every FX question, write the trade date, the value date derived from the convention for that currency pair, and the funding deadline. Learn the standard spot conventions for the major pairs and the currencies with a same-day or next-day convention. Practise calculating the base currency amount needed to fund a foreign currency purchase including the spread, and identify which party bears the cost of a late funding instruction.
The candidate answers operational risk questions by naming a control without linking it to the risk event, the likelihood and impact assessment, or the residual risk after the control - and cannot distinguish a key risk indicator from a key control indicator.
Operational risk frameworks are taught as lists, and candidates reproduce the list rather than applying the framework. The exam presents a scenario and asks for the appropriate response in the risk cycle: identify, assess, control, monitor, report. Candidates who skip the assessment step choose monitoring tools when the question asks for mitigation, or vice versa.
What to do instead
Learn the risk cycle as a sequence and, for each scenario, state where in the cycle the question sits. Be able to define a risk event, a control, a residual risk, a key risk indicator (a metric that signals rising exposure, such as failed trades per thousand) and a key control indicator (a metric that signals control effectiveness, such as reconciliation completion rate). Practise writing a short risk statement in the form cause–event–consequence.
On technology and resilience questions, the candidate treats business continuity and operational resilience as the same thing, and answers with backup sites and recovery time objectives when the question is about important business services, impact tolerances, and severe-but-plausible scenarios.
The terminology has shifted in regulation, and candidates rely on older continuity language. The exam tests the resilience framing: identify important business services, set impact tolerances, test against severe but plausible scenarios, and map dependencies including third parties. Candidates who answer with recovery objectives alone miss the service-based and outcome-based orientation.
What to do instead
Learn the resilience sequence explicitly: identify important business services, map the people, process, technology, facilities and third-party dependencies, set impact tolerances, test severe but plausible scenarios, and learn from the tests. Keep business continuity (recovering the firm's operations) distinct from resilience (continuing to deliver the service to the market within tolerance). Be ready to name a third-party concentration risk in the securities chain, such as reliance on a single market infrastructure provider.
The candidate answers trade confirmation and affirmation questions without distinguishing the two processes or the parties involved, and cannot explain the role of central matching, the meaning of an unaffirmed trade, or the point at which a trade becomes economically binding.
Confirmation and affirmation happen close together and both concern agreeing trade details, so candidates merge them. The exam separates them: confirmation is the exchange and agreement of trade details between counterparties, while affirmation is the buyer's or seller's acknowledgement of the details allocated to it, often through a central matching utility. Candidates who merge the terms misidentify who does what and when the trade is matched.
What to do instead
Write a definition for each and a sentence on who performs it and what artefact results. Learn the difference between a trade that is confirmed but not affirmed and one that is matched centrally, and the operational consequences of each. For each scenario, identify whether the question is about agreeing economics (confirmation) or acknowledging allocation (affirmation), and note the timing relative to the settlement cycle.