Supervisory System Framework

Every new account opened, every change made to an account, and every transaction entered in an account ultimately depends on a named person's review and approval. Function 2.4 tests the framework that makes those approvals binding, and it tests which person each rule names.

The rule framework sits on three pillars:

• The supervision rule: the supervisory system itself
• The supervisory-control rule: testing that the supervisory system works
• The MSRB municipal supervision rule: the municipal-securities analog

This section covers the core supervision framework that every Series 6 firm builds on.

What are the core supervisory system requirements?

Each member firm must establish and maintain a system to supervise the activities of each associated person. That system must be reasonably designed to achieve compliance with applicable securities laws, SEC regulations, and FINRA rules.

At a minimum, the system must include:

• Written supervisory procedures (WSPs): reasonably designed for the firm's business
• Designation of registered principals: with authority to carry out supervisory responsibilities for each type of business conducted
• Registration and designation of each qualifying office as a branch office or an Office of Supervisory Jurisdiction (OSJ): OSJs are offices where high-oversight functions like final approval of new accounts occur
• Assignment of each registered representative and principal to an appropriately registered supervisor
• An annual compliance interview or meeting for each registered representative and registered principal, covering compliance matters relevant to their activities
• Reasonable efforts to confirm that supervisors are qualified, by experience or training, for their assigned responsibilities

The WSPs also hold a record of the names of everyone designated as a supervisor and the dates each designation was effective (see the next section).

Think of it this way: the supervision rule is not a single checklist. It is an entire supervisory architecture with written procedures, named supervisors, one or more OSJs where final approvals happen, an annual compliance interview or meeting for each rep, and a paper trail documenting who supervised whom and when.

Exam Tip: Gotchas

• An OSJ is where high-oversight functions happen, including final approval of new accounts. For a Series 6 rep, the key point is that a new account gets its final principal approval at an OSJ.
• The annual compliance interview or meeting is not a performance review. It covers compliance matters relevant to the rep's or principal's activities, not how well they are performing their job. It may be held individually or collectively, in person or by other means such as a webcast, as long as each person attends the whole session and can ask questions.

What must written supervisory procedures (WSPs) cover?

WSPs are the written playbook for how supervision actually happens at the firm.

WSPs must be reasonably designed to supervise:

• The activities of associated persons
• The types of businesses the firm engages in

WSPs must address four questions for every supervisory activity:

• Who: the specific named individuals or positions performing the review
• What: the supervisory activities those persons will perform
• Frequency: how often the review occurs
• Documentation: how the review is evidenced in writing (paper or electronic)

WSPs must also cover the supervision of supervisory personnel itself. Supervisors have to be supervised too.

The WSPs must set out the firm's supervisory system. They must include:

• The titles, registration status, and locations of the required supervisory personnel, and each supervisor's responsibilities as they relate to the firm's types of business and the applicable laws and rules
• A record of the names of everyone designated as a supervisor and the dates each designation was effective. The firm keeps it at least three years, with the first two years in an easily accessible place
• Procedures that bar a supervisor from supervising their own activities, and from reporting to, or having pay or continued employment set by, a person they supervise. If the firm's size or the supervisor's position makes that impossible, the firm documents the factors it used and how the arrangement otherwise meets the supervisory-system requirements
• Procedures reasonably designed to keep conflicts of interest from compromising supervision

The firm must amend WSPs as needed when:

• The business changes
• Rules change
• Supervisory-control testing identifies gaps

Exam Tip: Gotchas

• A named backup for every temporary absence is not a required WSP element. The rule's list of required contents does not include one. That silence does not let supervision lapse: final responsibility for proper supervision rests with the member.
• WSPs are not boilerplate. They must be reasonably designed for the firm's actual business. A WSP that ignores a line of business the firm actually conducts (for example, variable annuity replacements without procedures tailored to the variable-annuity sales-practice rule) fails the supervision rule even if it looks comprehensive on paper.

Who may be designated as a supervising principal?

A principal is an associated person registered in a principal capacity who has been delegated supervisory authority by the firm.

For a Series 6 firm (investment company and variable contracts business), the principals who may supervise this business include:

• General Securities Principal (Series 24): broad authority across the firm
• Investment Company and Variable Contracts Products Principal (Series 26): authority over investment-company and variable-contracts business (the Series 6 product universe)

Firms may also designate supervisors who are not themselves principals for specific day-to-day functions. But final approval authority rests with the registered principal.

Firms may delegate specific supervisory functions to non-registered persons, but the designated principal remains responsible for the performance of those reviews.

Exam Tip: Gotchas

• Supervisor and principal are not interchangeable, but neither is every approval a principal's. A supervisor can conduct day-to-day oversight and delegated reviews. Account name or designation changes, advertising, and correspondence review must be signed by a registered principal with the appropriate license. The general new-account acceptance record is different: the account-information rule names a partner, officer, or manager.

What is an Office of Supervisory Jurisdiction (OSJ)?

An office is an OSJ if any one or more of these functions takes place there:

• Order execution or market making
• Structuring public offerings
• Maintaining custody of customer funds or securities
• Final acceptance (approval) of new accounts
• Review and endorsement of customer orders
• Final approval of retail communications
• Supervising the activities of other branch offices

Each OSJ has a designated on-site principal, with regular and routine physical presence, responsible for these high-oversight functions.

How Often Must a Branch Be Inspected?

Two more rules go with the cycle:

• Inspector independence. The inspection generally may not be performed by someone assigned to that office, or by someone who reports to a person assigned to that office. The rule targets self-review
• Unannounced inspections are required where a risk-based analysis warrants them, for example after red flags, prior findings, or complaints

What are the most tested supervisory framework concepts?

Exam Tip: Gotchas

• The supervision rule is the supervisory SYSTEM rule. It is not a single procedure; it is the entire framework (WSPs, designated principals, Offices of Supervisory Jurisdiction, the annual compliance interview or meeting, qualified supervisors).
• WSPs must be reasonably designed for the firm's actual business. Generic WSPs do not satisfy the rule.
• A new account's final approval happens at an OSJ. Know that an OSJ is the office where new accounts, retail communications, and advertising get final principal approval.
• Principal approval is not the same as supervisor approval. Statutorily required written approvals require a registered principal; supervisors may conduct delegated day-to-day oversight but not final written approval.

What Should You Check on Exam Day?

• Can you list the four questions every written supervisory procedure must address: who, what, how often, and how it is documented?
• Do you know which two principal licenses may supervise a Series 6 firm's investment-company and variable-contracts business: Series 24 and Series 26?
• Can you name at least three functions that make an office an Office of Supervisory Jurisdiction, such as final approval of new accounts or custody of customer funds?
• Do you know the branch inspection cycle (annually for an OSJ or supervising branch, every three years otherwise) and why the inspector cannot be assigned to, or report into, that office?
• Can you spot an item that is NOT a required minimum component, such as independent certification of the procedures by an outside consultant?