NISM Series III-A (Compliance) common mistakes
NISM Series III-A (Compliance) · Understand the traps and how to avoid them.
Treating the exam as a general Indian securities-law paper and answering from broad SEBI Act knowledge, instead of restricting answers to the duties of the specific intermediary named in the question (stockbroker, depository participant, merchant banker, underwriter, portfolio manager).
Candidates come from a compliance background where SEBI regulations blur together, and the question stem's intermediary type is skimmed rather than used to select the governing regulation.
What to do instead
Before answering, underline the intermediary named in the stem and recall the regulation that governs it (e.g., stockbrokers and clearing members under the SEBI (Stock Brokers) Regulations, 2022; DPs under the SEBI (Depositories and Participants) Regulations, 2018). Reject any option that is true in general but imposed on a different intermediary.
Mixing up the compliance role with the internal audit or risk-management role, and choosing answers that make the compliance officer responsible for executing trades, approving credit limits, or setting business strategy.
In practice these functions overlap in small intermediaries, and candidates answer from their own firm's informal arrangement rather than the regulatory separation of duties.
What to do instead
Memorise the compliance officer's core mandate: monitoring, surveillance, reporting to the board, liaison with SEBI, and independent oversight. Any option that gives the compliance officer an operational or revenue line is wrong, because independence is the whole point.
Confusing the compliance officer's reporting line and escalation duties, for example choosing that the compliance officer reports to the head of sales or only to the CEO, or that a serious breach is reported to the exchange rather than to SEBI/the board as required.
Organisational-chart questions look trivial, so candidates answer quickly from intuition and pick the most familiar reporting line.
What to do instead
Learn the standard architecture: the compliance officer reports to the board (or a board committee), has direct access to the board, and must escalate specified violations to SEBI. Practise distinguishing internal escalation from regulatory reporting.
Applying KYC and client-onboarding rules as a one-time event, and selecting options that say due diligence is complete once the account is opened or that periodic re-KYC is optional.
Candidates treat KYC as a documentation checklist learned from account-opening forms, missing the ongoing-monitoring and periodic-update obligations that the exam tests.
What to do instead
Frame KYC as a lifecycle: initial identification, risk categorisation, ongoing monitoring, periodic updation, and re-KYC on trigger events. When an option says 'only at onboarding', treat it as a distractor.
Treating record-keeping as a vague 'maintain proper records' duty, and failing to recall that specific records must be preserved for a defined period and made available to SEBI on demand.
Retention periods are pure memorisation with no logic to derive them, so candidates skip them and then guess between plausible numbers.
What to do instead
Build a small table of retention periods by record type (client records, order and trade records, complaints, financial records) and revise it repeatedly. Anchor each number to the regulation that prescribes it rather than trying to remember a single universal period.
Confusing client-level and proprietary dealings, for example choosing that client funds may be used for the intermediary's own purposes or that client and own securities may be pooled without segregation.
Segregation rules sound like good practice rather than hard law, so candidates pick the option that seems commercially convenient.
What to do instead
Treat segregation of client funds and securities as an absolute rule with no exceptions for convenience. Any option permitting commingling, use of client funds for the firm's obligations, or a shortfall covered by another client's assets is wrong.
Mishandling conflict-of-interest and Chinese-wall questions by choosing the option that merely discloses the conflict, when the regulation requires avoidance, segregation of functions, or refusal of the mandate.
Candidates generalise from disclosure-based regimes in other markets and assume disclosure always cures a conflict.
What to do instead
For each conflict scenario, ask what the rule demands: avoidance, functional separation, prior approval, or disclosure. Where the regulation prohibits the arrangement outright, disclosure is not a defence; learn the specific prohibitions rather than a single disclosure principle.
Getting grievance-redressal mechanics wrong: the route a client complaint takes, the role of the intermediary's grievance cell, and when a matter escalates to the exchange, ODR, or SEBI SCORES.
The complaint journey is procedural and rarely encountered by candidates who have not worked a complaints desk, so they invent a plausible sequence.
What to do instead
Map the escalation ladder end to end: internal complaint register and resolution timeline, then exchange or ODR, then SCORES. Learn the timelines attached to each step and which body has authority at each stage.
Answering code-of-conduct questions by picking the most ethical-sounding option rather than the specific standard the regulation imposes, for example treating 'act in the client's best interest' as sufficient without the associated disclosure and fair-dealing obligations.
Code-of-conduct items are written in plain language, which tempts candidates to answer from general ethics and ignore the precise duty being tested.
What to do instead
Learn the code of conduct as a list of enumerated duties with their practical implications (fairness, disclosure of conflicts, no misleading claims, confidentiality). Practise matching each scenario to the exact clause rather than to a general moral judgement.
Ignoring the penalty and enforcement layer, and choosing the correct violation but the wrong consequence, such as confusing a warning, a monetary penalty, suspension of registration, and cancellation of registration.
Candidates focus on the primary obligation and treat consequences as an afterthought, so they cannot rank severity or match the sanction to the breach.
What to do instead
For each major obligation, note the corresponding enforcement outcome and who imposes it. Learn the escalation from warning to penalty to suspension to cancellation, and check whether the question asks about the breach, the sanction, or the appeal route.