lev-os Managing Broker Dealer Compliance
Structures ongoing broker-dealer compliance monitoring across supervisory procedures, representative registration, regulatory reporting, and examination readiness under FINRA and SEC requirements.
When To Use
- Standing up or overhauling a BD compliance program after a new registration, merger, or deficiency letter
- Conducting periodic (quarterly/annual) compliance reviews of Written Supervisory Procedures (WSPs)
- Preparing for or responding to a FINRA cycle examination or SEC risk-based examination
- Onboarding or terminating registered representatives and updating Form U4/U5 filings
- Monitoring trading activity for suitability, best execution, and Reg BI obligations
- Reviewing books-and-records obligations under SEC Rules 17a-3 and 17a-4
- Evaluating branch office supervision and OSJ (Office of Supervisory Jurisdiction) designations
Inputs To Gather
- Firm CRD number and current Form BD registration details
- Current WSPs — the firm's written supervisory procedures manual and any amendments
- Organizational chart — supervisory hierarchy, designated principals, OSJ locations
- Registration roster — all registered representatives with license types (Series 7, 63, 65, 66, etc.), CE status, and outside business activity (OBA) disclosures
- FINRA examination history — prior exam letters, deficiency findings, and remediation status
- Exception reports — trade blotter, suitability reviews, email surveillance logs, gift/entertainment logs, political contribution records [VERIFY: scope depends on firm's business lines]
- Customer complaint log — written complaints, arbitration claims, and 4530 event filings
- Regulatory filing calendar — FOCUS report schedule, SIPC assessment dates, annual compliance meeting deadline
- AML/BSA program documents — CIP procedures, SAR filing history, independent AML test results
Workflow
Map the regulatory framework
- Identify all applicable FINRA rules (e.g., Rules 3110, 3120, 3310), SEC regulations, and state-level requirements based on the firm's lines of business (retail, institutional, municipal, variable products)
- Confirm SRO membership obligations and any restricted-activity conditions on Form BD [VERIFY: state-specific registration requirements]
Audit supervisory structure
- Review the WSP manual section-by-section against current FINRA rule map; flag gaps where procedures are missing or outdated
- Verify each supervisory designation: confirm that designated principals hold appropriate licenses (Series 24, 27, 53, etc.) and that OSJ branch offices have on-site supervision
- Assess delegation chains — ensure no single principal is over-extended across too many registered reps or branch locations
Review registration and licensing
- Reconcile the rep roster against CRD records; flag lapsed registrations, overdue CE windows, and incomplete Form U4 amendments (disclosure events must be reported within 30 days)
- Audit OBA and private securities transaction (PST) disclosures for completeness
- Confirm Form U5 filings for terminated reps were filed within 30 days with accurate reason-for-termination codes
Evaluate ongoing surveillance
- Review exception-report workflows: who generates them, who reviews, what the escalation path is, and how resolutions are documented
- Assess trade surveillance for suitability (Reg BI for retail, fiduciary for IA-affiliated), excessive trading/churning, unauthorized trading, and best execution
- Check email/electronic communications surveillance — confirm review frequency, lexicon adequacy, and escalation handling
- Review gift, entertainment, and political contribution monitoring against FINRA Rule 3220 and MSRB Rule G-37 [VERIFY: if municipal business applies]
Assess books-and-records compliance
- Confirm retention schedules meet SEC Rule 17a-4 requirements (e.g., 6-year retention for blotters, 3-year for correspondence)
- Verify WORM (Write Once, Read Many) storage compliance for electronic records
- Check that customer account records, order tickets, confirmations, and account statements are complete and accessible
Evaluate AML program
- Confirm the AML Compliance Officer designation is current and reported on FINRA's contact system
- Review CIP procedures, SAR filing timeliness, and CTR thresholds
- Verify that the independent AML test was conducted within the required cycle [VERIFY: annual vs. risk-based frequency per firm's risk profile]
Compile compliance report
- Summarize findings by risk category: high (immediate remediation), medium (next-quarter action), low (monitor)
- Map each finding to the specific rule or regulation implicated
- Draft remediation recommendations with responsible parties and target dates
- Prepare examination-readiness scorecard for management and board review
Output
The deliverable is a BD Compliance Management Report containing:
- Executive summary — overall compliance posture, critical findings count, and trend vs. prior review
- Supervisory structure assessment — WSP gap analysis, principal coverage adequacy, OSJ compliance
- Registration and licensing status — rep roster reconciliation, CE compliance rates, U4/U5 filing audit
- Surveillance effectiveness review — exception-report metrics, trade review coverage, communication surveillance stats
- Books-and-records audit — retention compliance, storage format verification, accessibility confirmation
- AML program evaluation — CIP/SAR/CTR compliance, independent test findings
- Regulatory filing tracker — upcoming FOCUS, SIPC, Rule 3120 (annual CEO certification), and Rule 3130 (CCO annual report) deadlines
- Remediation plan — prioritized action items with owners, deadlines, and escalation triggers
- Examination readiness score — red/yellow/green by compliance category
Quality Checks
- Every finding cites a specific FINRA rule, SEC regulation, or state requirement — no generic "compliance gap" entries
- WSP review covers all business lines the firm actually conducts, not just a template checklist
- Registration data is cross-referenced against live CRD/IARD records, not just internal spreadsheets
- Remediation items have named owners and concrete deadlines, not "TBD" placeholders
- AML independent test results are from the most recent cycle and performed by a qualified party
- [VERIFY] markers are placed on all jurisdiction-dependent items (state registration, municipal rules, variable-product-specific requirements)
- Report distinguishes between regulatory requirements (must-do) and best-practice recommendations (should-do)
- No finding is left without a recommended remediation path or explicit risk-acceptance notation