Supervisory System Framework

Every new account opened, every change made to an account, and every transaction entered in an account ultimately depends on a named person's review and approval. Function 2.4 tests the framework that makes those approvals binding, and it tests which person each rule names.

The rule framework sits on three pillars:

• The supervision rule: the supervisory system itself
• The supervisory-control rule: testing that the supervisory system works
• The MSRB municipal supervision rule: the municipal-securities analog

This section covers the core supervision framework that every Series 6 firm builds on.

What are the core supervisory system requirements?

Each member firm must establish and maintain a system to supervise the activities of each associated person. That system must be reasonably designed to achieve compliance with applicable securities laws, SEC regulations, and FINRA rules.

At a minimum, the system must include:

• Written supervisory procedures (WSPs): reasonably designed for the firm's business
• Designation of registered principals: with authority to carry out supervisory responsibilities for each type of business conducted
• Designation of one or more Offices of Supervisory Jurisdiction (OSJ): offices where high-oversight functions like final approval of new accounts occur
• Assignment of each registered representative and principal to an appropriately registered supervisor
• Annual review of each registered representative's activities
• Recordkeeping of the names of all associated persons designated as supervisors and the dates the designation was effective

Think of it this way: the supervision rule is not a single checklist. It is an entire supervisory architecture with written procedures, named supervisors, one or more OSJs where final approvals happen, an annual review of each rep, and a paper trail documenting who supervised whom and when.

Exam Tip: Gotchas

• An OSJ is where high-oversight functions happen, including final approval of new accounts. For a Series 6 rep, the key point is that a new account gets its final principal approval at an OSJ.

What must written supervisory procedures (WSPs) cover?

WSPs are the written playbook for how supervision actually happens at the firm.

WSPs must be reasonably designed to supervise:

• The activities of associated persons
• The types of businesses the firm engages in

WSPs must address four questions for every supervisory activity:

• Who: the specific named individuals or positions performing the review
• What: the supervisory activities those persons will perform
• Frequency: how often the review occurs
• Documentation: how the review is evidenced in writing (paper or electronic)

WSPs must also cover the supervision of supervisory personnel itself. Supervisors have to be supervised too.

The firm must amend WSPs as needed when:

• The business changes
• Rules change
• Supervisory-control testing identifies gaps

Exam Tip: Gotchas

• WSPs are not boilerplate. They must be reasonably designed for the firm's actual business. A WSP that ignores a line of business the firm actually conducts (for example, variable annuity replacements without procedures tailored to the variable-annuity sales-practice rule) fails the supervision rule even if it looks comprehensive on paper.

Who may be designated as a supervising principal?

A principal is an associated person registered in a principal capacity who has been delegated supervisory authority by the firm.

For a Series 6 firm (investment company and variable contracts business), the principals who may supervise this business include:

• General Securities Principal (Series 24): broad authority across the firm
• Investment Company and Variable Contracts Products Principal (Series 26): authority over investment-company and variable-contracts business (the Series 6 product universe)

Firms may also designate supervisors who are not themselves principals for specific day-to-day functions. But final approval authority rests with the registered principal.

Firms may delegate specific supervisory functions to non-registered persons, but the designated principal remains responsible for the performance of those reviews.

Exam Tip: Gotchas

• Supervisor and principal are not interchangeable, but neither is every approval a principal's. A supervisor can conduct day-to-day oversight and delegated reviews. Account name or designation changes, advertising, and correspondence review must be signed by a registered principal with the appropriate license. The general new-account acceptance record is different: the account-information rule names a partner, officer, or manager.

What is an Office of Supervisory Jurisdiction (OSJ)?

An office is an OSJ if any one or more of these functions takes place there:

• Order execution or market making
• Structuring public offerings
• Maintaining custody of customer funds or securities
• Final acceptance (approval) of new accounts
• Review and endorsement of customer orders
• Final approval of retail communications
• Supervising the activities of other branch offices

Each OSJ has a designated on-site principal, with regular and routine physical presence, responsible for these high-oversight functions.

How Often Must a Branch Be Inspected?

Two more rules go with the cycle:

• Inspector independence. The inspection generally may not be performed by someone assigned to that office, or by someone who reports to a person assigned to that office. The rule targets self-review
• Unannounced inspections are required where a risk-based analysis warrants them, for example after red flags, prior findings, or complaints

What are the most tested supervisory framework concepts?

Exam Tip: Gotchas

• The supervision rule is the supervisory SYSTEM rule. It is not a single procedure; it is the entire framework (WSPs, designated principals, Offices of Supervisory Jurisdiction, annual review of reps, recordkeeping).
• WSPs must be reasonably designed for the firm's actual business. Generic WSPs do not satisfy the rule.
• A new account's final approval happens at an OSJ. Know that an OSJ is the office where new accounts, retail communications, and advertising get final principal approval.
• Principal approval is not the same as supervisor approval. Statutorily required written approvals require a registered principal; supervisors may conduct delegated day-to-day oversight but not final written approval.

What Should You Check on Exam Day?

• Can you list the four questions every written supervisory procedure must address: who, what, how often, and how it is documented?
• Do you know which two principal licenses may supervise a Series 6 firm's investment-company and variable-contracts business: Series 24 and Series 26?
• Can you name at least three functions that make an office an Office of Supervisory Jurisdiction, such as final approval of new accounts or custody of customer funds?
• Do you know the branch inspection cycle: at least annually for an OSJ or supervising branch, at least every three years for any other branch?
• Can you explain why an inspection generally cannot be performed by someone assigned to, or reporting into, the office being inspected?