CISI UK Financial Regulation common mistakes
CISI UK Financial Regulation · Understand the traps and how to avoid them.
Treating the FCA's statutory objectives as interchangeable with the PRA's, and answering 'financial stability' questions with consumer-protection language (or vice versa).
Candidates revise 'the regulators' as one block and memorise a single list of objectives, so they cannot separate the FCA's three operational objectives (consumer protection, integrity, competition) from the PRA's general objective of promoting the safety and soundness of PRA-authorised firms, plus its insurance-specific objective.
What to do instead
Build a two-column table: FCA objectives and PRA objectives, and for each objective write one concrete example of a rule or activity it drives (e.g. competition objective -> market study powers; safety and soundness -> capital and liquidity requirements). Before answering, ask 'which regulator does this body do?' and eliminate options that only make sense for the other one.
Confusing the roles of the FCA, PRA, and Bank of England committees, and placing macroprudential or resolution functions in the wrong body.
The UK's regulatory architecture has several bodies with overlapping-sounding names (FPC, PRC, MPC, PRA board), and candidates skim the structure chapter, so they map functions onto bodies by guesswork.
What to do instead
Draw the institutional map from memory weekly: within the Bank of England, the FPC does macroprudential analysis and direction, the MPC sets monetary policy, and the PRC oversees the PRA. Then write a one-line function beside each. Practise matching questions by function keyword ('systemic risk', 'interest rates', 'firm-specific prudential supervision') to the correct body.
Answering 'who authorises/regulates this firm' by sector label rather than by whether the activity is a specified regulated activity and whether the firm is dual-regulated.
Candidates learn sectors (banks, insurers, advisers) in isolation and do not apply the two-limb test (specified activity + carried on by way of business in the UK), so they misclassify firms such as insurers or large investment firms as FCA-only.
What to do instead
For every practice scenario, run the same checklist: is the activity listed in the Regulated Activities Order; is it by way of business in the UK; is there an exclusion; then is the firm a PRA-authorised person (deposit-taking, insurance) or not. Practise on edge cases such as insurance mediation, mortgage advice, and arranging versus advising.
Mixing up the threshold conditions and the Principles for Businesses, or giving a threshold-condition answer where the question asks about ongoing conduct obligations.
Both are lists of high-level obligations and both are 'about being fit and proper', so candidates treat them as one topic and pick whichever list they remember first.
What to do instead
Separate them by timing and purpose: threshold conditions are the gateway for authorisation and must be met on an ongoing basis; the Principles are conduct rules applying to regulated business. Memorise the threshold conditions by name (location of offices, effective supervision, appropriate resources, suitability, business model) and the Principles by number and theme, then check what the question stem is actually testing.
Applying Consumer Duty outcomes as if they replaced the existing conduct rules, or answering that Consumer Duty only applies to retail-facing product design.
Consumer Duty is new relative to older material candidates may have seen, and it is easy to treat it as a standalone topic rather than as an overarching standard that sits alongside (and raises) existing obligations across the customer journey.
What to do instead
Learn the four outcomes (products and services, price and value, consumer understanding, consumer support) and, for each, write one example of the behaviour it demands. Then note explicitly that Consumer Duty does not disapply the Principles, the conduct rules, or financial-promotion rules; it sets a higher standard across the whole lifecycle, including for closed products.
Confusing the different financial-promotion routes and answering 'fair, clear and not misleading' as if it were the only requirement, missing that a communication must also be communicated or approved by an authorised person.
Candidates memorise the s.21 restriction as a single sentence and then treat the exemptions and approval routes as afterthoughts, so they cannot answer questions about who may approve, or about the scope of the restriction.
What to do instead
Map the routes explicitly: made by an authorised person, approved by an authorised person, or covered by an exemption (e.g. certain high-net-worth or sophisticated-investor communications, or overseas communicators). For each route, note who carries responsibility and what records are needed. Then apply the fair, clear and not misleading test as a separate overlay on top of the permission question.
Treating anti-money-laundering as a single 'report suspicious activity' step and missing customer due diligence timing, enhanced due diligence triggers, and the difference between internal reporting and reporting to the NCA.
Candidates learn the acronyms (CDD, EDD, SAR) without the procedural sequence, so they answer questions about when checks must happen or who receives the report by intuition rather than by the framework.
What to do instead
Write the process as a timeline: identification and verification before the relationship is established (with limited exceptions), ongoing monitoring, enhanced measures for higher-risk situations such as PEPs and correspondent relationships, internal suspicious activity report to the nominated officer, then disclosure to the NCA with the appropriate consent. Test yourself on 'what happens next' scenarios rather than definitions.
Confusing insider dealing, market manipulation, and market abuse more broadly, and misidentifying which behaviour falls within the civil market abuse regime versus the criminal offence.
The three categories overlap in everyday language, and candidates learn definitions without the statutory architecture, so they cannot tell whether a scenario is a criminal offence, a civil market abuse breach, or both.
What to do instead
Build a matrix of the behaviours (insider dealing, improper disclosure, manipulation, misleading behaviour) against the regimes (criminal offences and the civil market abuse regime), and note that the same conduct can engage both. For each, write the key element that must be proved (e.g. inside information, the effect on the market) and practise classifying short scenarios.
Treating the Code of Conduct and the Senior Managers and Certification Regime as interchangeable, and answering 'fit and proper' questions with the wrong set of individual obligations.
Both concern individual behaviour and both use fitness language, so candidates collapse them and cannot distinguish conduct rules for all staff from senior-manager responsibilities and certification requirements.
What to do instead
Separate by population and mechanism: the Code of Conduct sets individual conduct rules for employees of authorised firms; the SM&CR imposes senior-manager responsibilities and prescribed responsibilities on senior managers, certification of material-risk-takers, and fitness and propriety assessments. For each, note who it covers and who enforces it, and practise questions that name a role and ask which obligation attaches.
Answering ethics questions with the commercially convenient option, or with 'disclose and continue', instead of applying the conflict-of-interest hierarchy and the duty to act in the client's best interests.
Ethics questions are written as realistic dilemmas, and candidates default to what a firm might pragmatically do rather than to the standard the rules require, so they pick disclosure where avoidance or management is expected, or miss that personal account dealing needs pre-clearance.
What to do instead
Learn the conflict hierarchy: avoid, then manage with controls, then disclose as a last resort. For personal account dealing, know that pre-clearance and restrictions apply. Practise dilemma questions by writing the rule that governs before looking at the options, then eliminate any option that puts the firm's interest ahead of the client's or treats disclosure as a substitute for controls.