Quick Answer
A FINRA member broker-dealer needs a supervisory system reasonably designed to achieve compliance, written supervisory procedures (WSPs), designated supervisors, communications review, and required office inspections. Office type sets the inspection minimum; risk can require more frequent review. Supervision must remain independent.
The Uniform Securities Act's post-registration duties (books, records, reports) cover what a firm keeps. FINRA's supervision rule covers who watches the firm's own people. This is the broker-dealer's core supervisory obligation and one of the most heavily tested topics in this unit.
What Must a Firm's Supervisory System Do?
Every FINRA member broker-dealer must establish and maintain a supervisory system reasonably designed to achieve compliance with securities laws, regulations, and FINRA rules.
- The system must be reasonably designed. Perfection is not required, but the firm needs meaningful, working procedures
- Final responsibility for proper supervision rests with the member firm, not with any one supervisor
- The obligation covers every associated person and every type of business the firm conducts
- Core elements include:
- Written supervisory procedures (WSPs)
- A registered principal assigned to each type of business
- Registration and designation of each qualifying office location
- A qualified supervisor assigned to each registered person
- An annual compliance meeting or interview with each registered representative and principal
Exam Tip: Gotchas
"Reasonably designed" is not "guaranteed to work." A single missed violation does not by itself prove the supervisory system failed; the exam tests whether the firm had a sensible system in place and followed it, not whether every bad outcome was prevented.
What Do Written Supervisory Procedures (WSPs) Need to Cover?
FINRA guidance says WSPs should describe four things. This is guidance on what good procedures contain, not a fixed list the rule itself mandates:
- The individual(s) responsible for supervision
- The supervisory steps and reviews to be performed
- The frequency of those reviews
- How those reviews will be documented
The supervision rule itself requires WSPs to address:
| Area | Requirement |
|---|---|
| Investment banking and securities business | Principal review of transactions, evidenced in writing |
| Correspondence and internal communications | Review of incoming and outgoing written and electronic correspondence, and internal communications, by a registered principal |
| Customer complaints | Procedures to capture, acknowledge, and respond to all written (including electronic) customer complaints |
| Supervisory personnel | A record of who is designated as supervisory personnel and when, kept at least 3 years (first 2 years easily accessible) |
WSPs must be amended promptly to reflect changes in applicable securities laws, regulations, and FINRA rules, and as changes occur in the firm's supervisory system, and a copy must be kept at each Office of Supervisory Jurisdiction (OSJ) and at each other location where supervisory activities occur.
Exam Tip: Gotchas
A supervisor generally cannot supervise their own activities or report to (or have pay/employment decided by) someone they supervise. Supervision must remain independent.
Who Has to Supervise Each Line of Business?
- BDs must designate appropriately registered principals with authority to supervise each type of business conducted
- A principal supervising a particular line of business must hold the matching registration for that business
- Each registered person must be assigned to a specific supervisor responsible for that person's activities
Which Locations Get the Closest Oversight?
A firm's supervisory obligation reaches every location where its associated persons conduct business. FINRA sets inspection requirements by office type:
| Office type | Inspection requirement |
|---|---|
| OSJ or branch supervising non-branch locations | At least annually, on a calendar-year basis |
| Other branch office | At least every three years; risk may require more frequent inspections |
| Non-branch location | A documented, firm-set regular periodic schedule; the general presumption is at least every three years, with documented factors supporting a longer cycle |
The annual firmwide business review is separate from these location-inspection schedules. Risk assessment may require closer oversight; it does not remove the mandatory inspection minimums.
What Must Every Inspection Achieve?
- Locations where associated persons conduct business remain subject to inspection; low risk alone does not create an exemption
- The schedule must meet the office-type requirements above. Risk assessment considers business complexity, volume, and headcount and may require more frequent inspection
- Every inspection must be reasonably designed to detect and prevent violations
- Inspection results must be documented in writing and the report kept as part of the firm's records
How Must Firms Review Correspondence and Communications?
- Firms must have procedures for reviewing incoming and outgoing correspondence (written and electronic) with the public relating to investment banking or securities business
- The review must be performed by a registered principal. A principal may delegate certain review tasks to an unregistered person, but the principal stays ultimately responsible for the review getting done
- Firms must also review internal communications to identify those whose subject matter requires review under FINRA rules and federal securities laws
- Electronic correspondence, such as email, is written correspondence and gets the same review as paper
- Social media splits by content type. Static content needs a registered principal's approval before use. Unscripted interactive posts are excepted from prior approval only if the firm supervises and reviews them the same way as correspondence
What Should You Check on Exam Day?
- A supervisory system must be reasonably designed, with WSPs, designated principals, and correspondence review; perfection is not required
- OSJs and supervisory branches need annual inspections; other branches need inspection at least every three years; non-branch schedules are risk-based and documented. Supervision must be independent
- FINRA guidance says WSPs should describe who supervises, the steps and reviews, how often they occur, and how they are documented
- The firm bears final responsibility for supervision; individual supervisors do not absorb that responsibility away from the firm