Costs and Benefits of Compliance
This domain tests whether you can explain the business case for compliance without pretending that compliance is free or that cost alone justifies cutting controls.
Costs
Direct costs include compliance staff, systems, training, external advice, reporting, and record keeping. Indirect costs include slower onboarding, opportunity cost, and management time. These are real and should be managed through proportionate controls.
Benefits
Benefits include protecting the licence, avoiding penalties and remediation costs, reducing fraud and misconduct losses, improving access to counterparties and markets, and preserving reputation with customers and regulators. Good compliance can also improve data quality and decision-making.
Proportionality
Proportionality means matching control intensity to risk. It does not mean ignoring a rule because it is expensive. A firm may automate low-risk checks and apply enhanced manual review to high-risk cases.
Worked example
A firm compares manual transaction monitoring with an automated system. The automation costs more upfront but reduces alert backlog, missed alerts, and overtime. The compliance officer presents the cost, expected risk reduction, and implementation risk to the board. Reasoning: the decision should be evidence-based and documented, not framed as 'compliance says spend money'.
Traps that cost marks
- Treating compliance purely as a cost centre.
- Cutting compliance during stress without a risk assessment.
- Claiming a benefit without linking it to a risk or obligation.
- Ignoring the cost of poor compliance: penalties, remediation, and lost business.