CIRO CIRE Cheat Sheet: Nine-Element Final Review Cheat Sheet

Use the tables for a quick pre-exam check. Expand a topic’s notes for explanations, examples, and additional distinctions. For a coverage check, use the nine-element blueprint ; for worked decisions, use the Scenario Guide .

The first part is a compact reference. The application notes add context where a short rule can be misleading. Start with the topic you missed rather than reading both parts in sequence.

Regulatory map

Exam decision sequence

There is no universal hierarchy of professional-sounding actions. When several choices look plausible, resolve them in this order:

1. Identify the task: determine whether the question asks for a rule, calculation, classification, permitted action, breach, or next procedural step.
2. Fix the governing context: identify the actor, registration or approval scope, client and account category, product or market activity, and applicable rule set.
3. Test thresholds and exceptions: apply any definition, exemption, waiver, timing condition, or quantitative limit stated or necessarily implied by the facts.
4. Respect sequence and authority: distinguish what may happen now from what requires information, consent, approval, supervision, or a later event first.
5. Choose the narrowest complete response: select the choice that resolves the asked issue without adding an unsupported duty or skipping a required step.
6. Check the record consequence: documentation, disclosure, escalation, restriction, or refusal matters when the governing rule and facts call for it, not merely because the wording sounds prudent.

Core regulatory terms

Client relationship lifecycle

KYC, KYP, suitability, and conflicts

Suitability applicability check

Retail advisory, institutional, and order execution only (OEO) relationships have different requirements. OEO transaction-suitability exemptions do not erase account-appropriateness obligations or identity checks. Confirm the account and service model before using the retail recommendation checklist below. See CIRO’s retail KYC and suitability guidance .

Four-part decision model

For a retail advisory recommendation:

Account types and approvals

Discretion and authorization

Trading and market conduct

Order types

Margin, leverage, and short selling

Core margin formulas

Products and suitability flags

Registered and tax-advantaged accounts

Conflicts of interest

Communications, advertising, and client reporting

AML and suspicious activity

Complaints, investigations, and enforcement

Complaint handling and reporting are separate tasks

Source: current IDPC Rules, sections 3715, 3725–3726, and 3785–3786 .

ComSet reporting is a separate clock: reportable customer complaints have a 20-business-day reporting period; other reportable events have a five-business-day period. A service-only complaint without a potential rule violation is not automatically reportable. See CIRO’s ComSet guidance, FAQs 1 and 20 .

Supervision and compliance

High-yield fact-to-action distinctions

Common prohibited or tightly controlled conduct

Scenario patterns

Scenario 1: Unsuitable but client-directed order

Fast review checklist

Before exam day, be able to answer these without hesitation:

• Who regulates what: CIRO, securities commissions, CSA, FINTRAC, CIPF, OBSI.
• Difference between registration, CIRO approval, employment title, and account authority.
• Difference between KYC, KYP, suitability, and conflict management.
• When suitability applies, when it is tailored, and when OEO boundaries matter.
• How risk tolerance differs from risk capacity.
• Why disclosure does not cure an unsuitable recommendation.
• What makes discretionary trading improper.
• How to respond to complaints, errors, AML red flags, and suspected insider information.
• How best execution differs from lowest commission.
• Why margin, short selling, options, structured products, and exempt products require extra scrutiny.
• What CIPF does and does not protect.
• When documentation, supervision, escalation, and cooperation are actually required, and when one of those actions would be premature or outside the actor’s authority.

Application notes and worked distinctions

Use these notes when a compact table is not enough to explain a missed question. Follow the client category, account model, and requested action through the example; changing one of those facts can change the applicable obligation.

Regulatory Framework: Fast Distinctions

Who Does What?

Core Conduct Standard

CIRE has no universal verb shortcut. The same action can be correct in one fact pattern and incomplete or premature in another. Resolve the actor’s authority, the client or account category, the applicable obligation, and the timing before deciding whether to proceed, verify, disclose, escalate, supervise, document, or refuse.

Client-Focused Conduct Checklist

KYC: Know Your Client

High-Yield KYC Elements

KYP: Know Your Product

KYP is not just knowing a product name. It means understanding enough to assess whether the product is appropriate for clients generally and suitable for a specific client.

Product Review Checklist

Suitability: applying the relationship context

Suitability connects KYC, KYP, portfolio effects, and the proposed action. Apply the relationship check first.

Retail advisory review triggers

A recommendation, a material KYC change, or another applicable rule trigger calls for review using current facts. A changed client profile may change the recommendation; it does not mechanically require selling everything. Distinguish a transaction review from deciding whether the account or service remains appropriate.

Account Opening and Documentation

Account Opening Review Table

Trading Conduct and Order Handling

Core Trading Principles

Complaints and Dispute Handling

Recognizing a Complaint

A complaint may involve an allegation of:

• Unauthorized trading.
• Unsuitable recommendation.
• Misrepresentation.
• Missing disclosure.
• Poor service with financial harm.
• Fee or compensation dispute.
• Failure to follow instructions.
• Privacy breach.
• Conflict of interest.
• Account error.

Prohibited and High-Risk Conduct

Conduct to Recognize Immediately

Privacy, Confidentiality, and Records

Privacy Decision Rule

Client information should be used only for legitimate business purposes, shared only with authorized persons, protected from unauthorized access, and retained/disposed of under firm policy.

Common Privacy Scenarios

Vulnerable Clients and Trusted Contact Concepts

Client protection scenarios often involve seniors, cognitive decline, undue influence, or suspicious third-party involvement.

Red Flags

• Sudden change in investment objectives or risk tolerance.
• New person speaking for the client.
• Uncharacteristic withdrawals.
• Client appears confused about transactions.
• Pressure from family member, caregiver, or new acquaintance.
• Client cannot explain purpose of transfer.
• Instructions conflict with long-standing plan.
• Client becomes fearful or secretive.

Professional Response

• Slow down the transaction if permitted and appropriate.
• Ask clarifying questions respectfully.
• Verify authority.
• Follow firm procedures for vulnerable client concerns.
• Escalate to supervisor/compliance.
• Document observations and steps taken.
• Use trusted contact processes where applicable and authorized.

Margin, Leverage, and Borrowing to Invest

Leverage is frequently tested because it magnifies both suitability and disclosure obligations.

Leverage Suitability Questions

Margin Trap

A client with high risk tolerance but low income, short time horizon, and limited net worth may still be unsuitable for leverage. Risk capacity can override risk appetite.

Products: Fast Risk Review

The exam may test product risk through suitability, disclosure, and KYP rather than through product trivia.

Ethics and Professional Judgment

Ethical Decision Path

This is a review path for a retail advisory recommendation, not a universal trading workflow.

    flowchart TD
	    A["Proposed retail advisory recommendation"] --> B{"Authority and required client facts established?"}
	    B -- "No" --> C["Resolve missing authority or information"]
	    B -- "Yes" --> D{"Product understood and action suitable?"}
	    D -- "No or unclear" --> E["Reassess the proposal before recommending"]
	    D -- "Yes" --> F{"Material conflict identified?"}
	    F -- "No" --> G["Complete required approval, records, and communication"]
	    F -- "Yes" --> H{"Can it be addressed in the client's best interest?"}
	    H -- "No" --> I["Avoid the conflict; do not proceed with this proposal"]
	    H -- "Yes" --> J["Apply effective controls and required disclosure"]
	    J --> G
	    classDef default fill:#e5edfa,stroke:#6685b5,color:#173353
	    linkStyle default stroke:#6685b5

Common CIRE Candidate Mistakes

Distinguishing Close Answer Choices

Do not rank choices by tone or by the number of compliance terms they contain. Credible CIRE alternatives can all sound professional. Compare them using:

1. The requested task: fact, rule, calculation, classification, breach, or next step.
2. The governing actor and authority: client, Approved Person, dealer, supervisor, CIRO, securities regulator, marketplace, or another body.
3. The decisive category: prospect or client, retail or institutional, advisory or order execution only, recommendation or client-directed order.
4. Timing and sequence: what has already occurred, what must occur first, and what can happen only after a trigger or approval.
5. Scope: whether the response answers the precise issue without inventing facts or unnecessary procedures.
6. Evidence: which record, instruction, disclosure, approval, or market fact supports the decision when evidence is required.

The same professional action can be right or wrong

Rapid Review: If You Have 30 Minutes

10-Minute Conduct Review

Focus on:

• KYC must be complete, current, and meaningful.
• KYP requires understanding product risks, costs, liquidity, and complexity.
• Suitability must connect client facts to the recommendation.
• Conflicts require identification, control/avoidance, disclosure, and documentation.
• Client consent does not authorize misconduct.

10-Minute Scenario Review

Practice spotting:

• Unauthorized trading.
• Discretionary trading without approval.
• Misleading communications.
• Complaint mishandling.
• Third-party authority problems.
• Vulnerable client red flags.
• Leverage unsuitability.
• Concentration risk.
• Product complexity mismatch.
• Privacy breaches.

10-Minute Question-Bank Review

Use original practice questions to test:

• “What should the representative do next?”
• “Which fact is most important?”
• “Which action is prohibited?”
• “Which disclosure or approval is required?”
• “Which recommendation is most suitable?”
• “Which issue must be escalated?”

Review why each alternative fails on the stated facts, then change one fact and ask whether it could become appropriate.

Quick Tables for Last-Day Memorization

KYC vs. KYP vs. Suitability

Final Practice Plan

After this Cheat Sheet, move into independent companion practice:

1. Start with topic drills on KYC, KYP, suitability, conflicts, and complaint handling.
2. Use original practice questions that force you to choose the best next action in realistic scenarios.
3. Review detailed explanations, especially for wrong answer choices.
4. Build a short error log of rules you confuse.
5. Finish with mixed question bank sets and mock exams to test timing and judgment.

Your next step: practise scenario-based questions until you can identify the controlling fact, governing obligation, authorized actor, and required sequence without guessing from the wording of the choices.

Put the review into practice