Try 90 free CIRO CFO questions across the exam domains, with answers and explanations, then continue in Securities Prep.
This free full-length CIRO CFO practice exam includes 90 original Securities Prep questions across the exam domains.
The questions are original Securities Prep practice questions aligned to the exam outline. They are not official exam questions and are not copied from any exam sponsor.
Count note: this page uses the full-length practice count maintained in the Mastery exam catalog. Some exam sponsors publish total questions, scored questions, duration, or unscored/pretest-item rules differently; always confirm exam-day rules with the sponsor.
| Item | Detail |
|---|---|
| Issuer | CIRO |
| Exam route | CIRO CFO |
| Official route name | CIRO Chief Financial Officer Exam |
| Full-length set on this page | 90 questions |
| Exam time | 180 minutes |
| Topic areas represented | 15 |
| Topic | Approximate official weight | Questions used |
|---|---|---|
| Element 1 — General Regulatory Framework | 4% | 4 |
| Element 2 — General Financial Requirements | 9% | 9 |
| Element 3 — Dealer Business Model | 5% | 5 |
| Element 4 — Offering and Distribution of Securities | 3% | 3 |
| Element 5 — Capital, Records, and Reporting | 10% | 10 |
| Element 6 — Corporate Governance and Ethics | 7% | 7 |
| Element 7 — Duties, Liabilities and Defences | 4% | 4 |
| Element 8 — Risk Management and Internal Controls | 7% | 7 |
| Element 9 — Inventory, Pricing, and Underwriting | 8% | 8 |
| Element 10 — Credit Risk and Client Accounts | 8% | 8 |
| Element 11 — Significant Areas of Risk | 4% | 4 |
| Element 12 — Operations and Settlements | 8% | 8 |
| Element 13 — Protection of Dealer and Client Assets | 5% | 5 |
| Element 14 — Other Capital Provisions | 5% | 5 |
| Element 15 — UDP Responsibilities | 3% | 3 |
Topic: Element 8 — Risk Management and Internal Controls
At year-end, an Investment Dealer’s external auditor expects to issue an unmodified opinion on the annual financial statements. In a separate written report to the board of directors, the auditor states that one treasury employee can add a new payee, release a wire from the client free-credit bank account, and perform the related bank reconciliation, with no evidence of independent review. No loss has been found. As CFO, what is the primary prudential red flag?
Best answer: C
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: The key red flag is the control weakness itself: one person can both move and reconcile client cash. The auditor may still give an unmodified opinion on the financial statements, but that does not mean internal controls are effective or that the safeguarding risk is minor.
This scenario tests the difference between the auditor’s opinion on the financial statements and the auditor’s communication about internal controls. An unmodified audit opinion means the financial statements are fairly presented in accordance with the applicable framework; it does not mean the auditor found the firm’s controls to be effective. Here, the auditor’s separate report identifies a serious segregation-of-duties failure over client cash, because the same person can set up a payee, release a wire, and reconcile the account.
That matters most because it creates a direct risk of unauthorized transfers or concealment of errors or fraud in a client asset area. The added audit work, possible cost increase, and follow-up reporting are consequences of the deficiency, not the primary prudential issue. The CFO should treat the auditor’s internal-control report as a governance and remediation trigger, not take comfort from the clean financial-statement opinion.
An unmodified financial-statement opinion does not override the auditor’s separate report that controls over client cash are ineffective.
Topic: Element 12 — Operations and Settlements
At 8:15 a.m. on month-end close, an Investment Dealer’s back-office exception report shows that a free-delivery transfer rejected by CDS after cutoff was posted to the firm’s stock record but did not leave the depository. The result is a 20,000-share difference in one client-held security, including 8,000 fully paid client shares. Operations expects the transfer to settle the next day and asks finance to proceed with the MFR package. As CFO, what is the best next step?
Best answer: C
What this tests: Element 12 — Operations and Settlements
Explanation: The exception affects client holdings, including fully paid securities, so the CFO should require immediate reconciliation and corrective action before the MFR is finalized. An expected next-day settlement is not a substitute for accurate books, client-asset protection, and proper assessment of any reporting impact.
For back-office oversight, the CFO should first ensure accurate books and records and protect client assets. Here, CDS rejected the free-delivery transfer, so the internal stock record does not match the depository, and part of the difference relates to fully paid client shares. The proper process is to have operations reconcile the reject, correct the erroneous posting or obtain temporary cover if needed, determine whether segregation or capital reporting is affected, and only then complete the MFR package.
Waiting for an expected next-day settlement is weak control practice because unresolved differences can misstate positions and regulatory reporting. Immediate board escalation may later be appropriate for a material or recurring issue, but not before the break is investigated and contained.
A known depository-to-stock-record break affecting fully paid client positions should be reconciled and contained before regulatory reporting proceeds.
Topic: Element 6 — Corporate Governance and Ethics
A CIRO investment dealer is redesigning oversight after a review found that capital and liquidity exceptions were discussed within management but reached the board too late. The CFO must recommend one reporting structure. If the decisive factor is independent challenge with direct board escalation, which option best reflects effective corporate governance?
Best answer: C
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: Effective corporate governance depends on independent oversight, direct information flow, and clear escalation. A board committee made up of independent directors that receives reports directly from control functions is the strongest response when prudential issues have been reaching the board too late.
The core governance issue is not meeting frequency alone; it is whether the board can exercise independent oversight without management filtering. When capital and liquidity exceptions are escalated late, the best structure is one that gives independent directors direct, regular access to the CFO and internal audit, plus a process to monitor remediation until it is complete.
A management committee, business-line involvement in escalation decisions, or annual-only reporting may all add information, but they do not match the governance strength of direct independent board oversight.
This structure provides timely, unfiltered reporting to independent directors and supports effective challenge and follow-up.
Topic: Element 8 — Risk Management and Internal Controls
The CFO of a CIRO-regulated investment dealer is reviewing the enterprise risk dashboard.
Exhibit:
| Area | Complexity / support / recent event | Current treatment |
|---|---|---|
| Agency equity desk | Low / Limited / Severity 1 same-day settlement break | Monthly KRI summary |
| Retail margin operations | Moderate / Material outsourced statements / Severity 2 statement delay | Weekly KRI review |
| OTC derivatives and collateral | High / Critical outsourced valuation and collateral support / Severity 4 mis-valuation causing RAC overstatement and client remediation | Weekly KRI review |
Firm policy: if an area has High complexity, Critical support dependence, or a Severity 4 event, the minimum response is daily monitoring, formal control remediation, prompt escalation to the CFO and UDP, and inclusion in the next board risk report.
Which action is most appropriate?
Best answer: A
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: The OTC derivatives and collateral area requires immediate enhanced treatment. The exhibit shows high business complexity, critical support dependence, and a Severity 4 event, and the policy says any one of those conditions triggers daily monitoring, remediation, prompt escalation, and board reporting.
Risk measurement, monitoring, control, and reporting should become more intensive as activities become more complex, as key support functions become more critical, and as incidents become more severe. In the exhibit, OTC derivatives and collateral is the only area that clearly crosses the firm’s enhanced-treatment threshold. It has high complexity, critical dependence on support activities, and a Severity 4 event that affected RAC and required client remediation. Under the stated policy, leaving that area on ordinary weekly monitoring would be inconsistent with the required response. The CFO should ensure the area is moved immediately to daily KRI monitoring, formal remediation tracking, prompt escalation to the CFO and UDP, and board reporting. Applying the same response to all areas would go beyond the exhibit, because the other areas do not meet the stated trigger.
That area meets the firm’s escalation trigger on all three dimensions, so weekly monitoring is no longer sufficient.
Topic: Element 7 — Duties, Liabilities and Defences
A CIRO investment dealer’s board is considering a dividend to its parent. The CFO presents:
Assume the reserve and dividend each reduce RAC dollar-for-dollar. As fiduciaries, what is the best board response?
Best answer: B
What this tests: Element 7 — Duties, Liabilities and Defences
Explanation: After the probable reserve is recorded, RAC drops from $12.0 million to $8.5 million. Paying the $4.0 million dividend would reduce RAC to $4.5 million, below the stated CIRO early-warning level, so fiduciaries should preserve the dealer’s capital rather than prioritize the parent.
The key concept is fiduciary duty: directors and executives must act honestly and in good faith with a view to the best interests of the corporation. Here, that means basing the decision on the dealer’s real prudential position, not the parent shareholder’s preference for a distribution.
Because $4.5 million is below the stated CIRO early-warning trigger, approving the dividend would weaken the firm’s capital position at a time when a probable loss already needs recognition. A fiduciary board should defer the distribution and require an actual capital plan or new capital before considering money out of the dealer. The closest distractor is the comfort-letter approach, but a non-binding promise does not replace present capital.
Recording the reserve and paying the dividend would reduce RAC to $4.5 million, so preserving capital better serves the dealer’s best interests than favouring the parent.
Topic: Element 5 — Capital, Records, and Reporting
The CFO of a CIRO investment dealer identifies a probable $1.8 million loss from an unresolved securities difference and records a reserve today. The board plans to pay a $500,000 dividend tomorrow.
Assumptions for this question:
Before the reserve, RAC was $6.4 million and total margin required was $120 million. What is the correct result?
Best answer: C
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: Recording the reserve reduces RAC from $6.4 million to $4.6 million. Because 5% of the $120 million margin requirement is $6.0 million, the firm meets the stated level 1 early warning test. That triggers prompt CIRO notification and filing, and the dividend cannot proceed without CIRO consent.
Early warning is meant to catch capital stress before a firm reaches a capital deficiency. In this scenario, the CFO must reflect the probable loss immediately by booking the reserve, because prudential capital has to incorporate known deterioration when identified.
\[ \begin{aligned} \text{RAC after reserve} &= 6.4 - 1.8 = 4.6 \text{ million} \\ 5\% \text{ of margin required} &= 0.05 \times 120 = 6.0 \text{ million} \end{aligned} \]Since RAC of $4.6 million is below the stated $6.0 million threshold but is not negative, the firm falls into level 1 early warning, not level 2. Under the assumptions given, that means the dealer must promptly notify CIRO, file the required early warning report, and avoid paying the planned dividend unless CIRO consents. Positive RAC avoids level 2, but it does not avoid early warning.
After the reserve, RAC is $4.6 million, below the $6.0 million level 1 threshold but still positive, so early warning reporting and dividend restrictions apply.
Topic: Element 10 — Credit Risk and Client Accounts
At month-end, an Investment Dealer has coded a corporate margin account as guaranteed by its parent company and has excluded a $420,000 margin deficiency from its capital calculation. During the CFO’s Form 1 review, internal audit reports that the file contains only an email of comfort and an unsigned draft guarantee; there is no executed guarantee, no approval of the guarantor under the firm’s credit policy, and no evidence the coding was independently reviewed. Form 1 is due tomorrow. What is the best CFO response?
Best answer: D
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: Guarantee-based margin relief requires an enforceable guarantee and complete supporting documentation under the firm’s control process. Because the file lacks an executed guarantee, credit approval, and coding review, the CFO should treat the account as unguaranteed in the current Form 1 filing and remediate afterward.
For a guaranteed account, the dealer cannot base margin treatment on informal support or group affiliation alone. The guarantee must be legally effective, properly documented, approved under the firm’s credit or risk process, and accurately reflected in books and records before it can support reduced margin or capital treatment. Here, the account was coded as guaranteed, but the file has only an email of comfort and an unsigned draft, so the guarantee is not yet usable for prudential purposes. The CFO should immediately reverse the guaranteed coding, recalculate the account on a stand-alone basis, and ensure the current Form 1 reflects the resulting deficiency. Remediation can proceed in parallel by obtaining the executed guarantee, completing required review and approval, and then restoring the coding if the file becomes complete. Financial strength, relationship status, or later disclosure does not cure a missing enforceable guarantee for the current filing.
Without an executed, properly approved guarantee, the firm cannot rely on guarantor support for margin or current prudential reporting.
Topic: Element 6 — Corporate Governance and Ethics
The dealer’s valuation policy requires independent market prices when available, with any exception documented and escalated to the CFO. At month-end, using the independent bid on a thinly traded bond position would reduce RAC and trigger board reporting. The head of trading tells the controller to use a higher non-binding quote from another dealer and to keep the exception out of the pricing memo until after the MFR is filed. The CFO learns of this before filing. What is the primary prudential red flag?
Best answer: C
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: The main issue is an ethics-based control failure, not normal market or funding stress. A senior executive is trying to bypass independent pricing and conceal the exception until after filing, creating a risk of overstated RAC and misleading regulatory reporting.
Ethics and integrity matter most when commercial pressure appears around capital or reporting. In this scenario, the trading head is not merely disputing a difficult valuation; he is directing staff to ignore the required independent price, substitute a higher non-binding quote, and hide the exception until after the MFR is filed. That is management override of a key prudential control and a direct risk that the firm files capital results that are stronger than the facts support.
Illiquidity and funding effects may exist, but they are downstream from the integrity failure.
Replacing the independent bid with a higher non-binding quote and hiding the exception is a management override aimed at misstating regulatory capital.
Topic: Element 3 — Dealer Business Model
A retail client’s self-directed non-registered account is coded as a cash account. For the past week, it has carried a $1.2 million unpaid debit, and no margin agreement is on file. The same client also has $800,000 of free-credit cash in a TFSA at the firm, internal audit has already cited undocumented extensions of client credit, and the dealer is close to an early-warning trigger. What is the best CFO response?
Best answer: A
What this tests: Element 3 — Dealer Business Model
Explanation: The key issue is account type. A cash account should not be used for an ongoing extension of client credit; if the firm will finance positions, it needs a properly documented margin account and related controls. The audit finding and early-warning pressure make immediate remediation the best decision.
In this scenario, the decisive fact is that the exposure sits in a cash account with no margin agreement. That means the dealer is effectively providing undocumented credit, which creates prudential and control risk, especially when the firm is already close to early warning and audit has flagged the practice. The CFO should require the cash-account debit to be settled promptly and allow any future financing only after the client is opened and documented as a margin account under the firm’s credit and margin controls. Cash in a TFSA is not a substitute for proper account type, documentation, or margin treatment, and moving the amount to another ledger bucket does not remove the exposure. Profitability or senior approval also does not override the requirements tied to the account type. The key takeaway is that credit capacity follows the account structure, not the overall client relationship.
A cash account should not carry ongoing financed debits, so any continued credit requires proper margin-account documentation and controls.
Topic: Element 9 — Inventory, Pricing, and Underwriting
An Investment Dealer has excess RAC of $1.3 million above its minimum. Two business days before filing its monthly Form 1, the CFO learns that for the past 6 weeks a booking rule mapped non-rated structured notes to the inventory margin category for investment-grade debt. Using the correct category would increase today’s margin requirement by $850,000 and would have reduced the prior month-end RAC by $600,000; the finance team has not yet determined whether the error is limited to one inventory code or all non-rated notes. What is the single best CFO response?
Best answer: B
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: The best response is to treat the margin error as both a current capital issue and a potential reporting/control issue. A positive RAC buffer today does not remove the need to book the correction promptly, determine the error’s full scope, and assess whether prior regulatory reporting and internal escalation are required.
Inventory margin errors are assessed by more than whether the firm still shows excess capital today. The CFO should consider the immediate RAC impact, whether a prior filed capital position was misstated, whether the cause suggests a broader control failure, and whether prompt internal and regulatory escalation is needed. Here, the wrong margin category was used for 6 weeks, today’s required margin is understated, and the prior month-end RAC would also have been lower. That means this is not just a prospective clean-up item. The prudent response is to book the corrected charge now, perform a targeted root-cause and population review of all positions using the same mapping logic, and determine whether the prior Form 1 needs amendment and escalation. Remaining above minimum capital is relevant, but it is not the deciding factor.
Known under-margin should be recognized at once, and the mapping error may have misstated both current RAC and the prior filing across a broader population.
Topic: Element 10 — Credit Risk and Client Accounts
The CFO of a CIRO Investment Dealer reviews the daily credit report. A single institutional client’s margin account has a $18 million debit balance secured mainly by one thinly traded issuer; after a 25% two-day price drop, the account now shows a $2.4 million house-margin deficiency and 45% one-name collateral concentration. The firm’s RAC remains positive, but the buffer is now only slightly above the firm’s internal early-warning level. The dealer’s written credit policy requires same-day escalation to the UDP and credit committee for any deficiency over $1 million or any concentration-limit breach, and no further credit may be extended until cured. What is the single best CFO response?
Best answer: A
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: The account has already breached both the dealer’s margin and concentration standards, and the written policy requires same-day escalation. Best practice is to stop further credit, require an immediate cure, and escalate promptly rather than rely on remaining firm capital.
Credit risk management best practices focus first on containing the specific exposure that has deteriorated. Here, the client account has a material margin deficiency, concentrated collateral, and a sharp decline in a thinly traded name, which increases the risk that the firm cannot exit cleanly if the position worsens. The dealer’s own policy also makes the required action clear: same-day escalation and no additional credit until the breach is cured.
A sound CFO response is to:
Positive RAC is relevant, but it is a backstop, not a reason to delay account-level credit controls.
This response contains the exposure immediately and follows the dealer’s mandatory escalation and no-new-credit policy.
Topic: Element 12 — Operations and Settlements
An Investment Dealer plans to outsource daily settlement processing, client cash reconciliations, and related books and records to an unaffiliated provider in another country before quarter-end. The dealer’s RAC is only $1.2 million above its internal minimum, unresolved settlement breaks have risen for two weeks, and the next Form 1 filing falls during the proposed transition. Internal audit found that the draft agreement lacks dealer and CIRO access rights, allows unrestricted subcontracting, and does not require tested business continuity; the provider has not yet delivered an independent controls assurance report. What is the single best decision for the CFO?
Best answer: D
What this tests: Element 12 — Operations and Settlements
Explanation: The CFO should pause the outsourcing project. An Investment Dealer may outsource operational activities, but it remains responsible for books and records, regulatory access, business continuity, and control over settlement and reconciliation risks, especially when capital headroom is thin and reporting deadlines are near.
The core concept is that outsourcing is permitted, but accountability stays with the dealer. Here, the missing safeguards are fundamental: there is no independent assurance over the provider’s controls, no contractual access for the dealer and CIRO, no limit on subcontracting, and no tested business-continuity requirement. Those weaknesses matter even more because the dealer already has rising settlement breaks, limited RAC headroom, and a Form 1 filing during the transition period. The CFO should complete risk-based due diligence on the provider’s operational and financial resilience, amend the agreement to include access, audit, service, subcontracting, confidentiality, and contingency terms, and establish ongoing monitoring and an exit plan before go-live. Indemnities and exception reports are secondary protections; they do not replace effective control of the outsourced function.
The dealer may outsource the function, but not responsibility, so missing due diligence and control rights must be resolved before implementation.
Topic: Element 2 — General Financial Requirements
An Investment Dealer records a $3.2 million employee-fraud loss. After the entry, the firm remains solvent but enters early warning, and operations is still investigating a $600,000 client free-credit difference that must be resolved promptly. The CEO proposes waiting until the month-end filing to seek new capital and telling clients that CIPF protection means the firm can continue operating while the issue is sorted out. As CFO, what is the single best response?
Best answer: D
What this tests: Element 2 — General Financial Requirements
Explanation: The CFO should respond as if this is an immediate prudential and client-asset control issue, not a CIPF solution. CIPF exists to protect eligible client property when a member firm becomes insolvent; it does not provide working capital, cure free-credit deficiencies, or replace prompt escalation and remediation.
The core concept is CIPF’s purpose and authority. CIPF is an investor protection fund for eligible clients of an insolvent member firm; it helps address shortfalls in client property through the insolvency process, such as by supporting return or transfer of client assets within coverage limits. It is not the firm’s source of emergency liquidity, not a substitute for regulatory capital, and not a reason to delay action on an early-warning condition or a client-cash difference.
In this scenario, the CFO must treat the fraud loss and free-credit issue as immediate control and prudential matters:
The closest distractors confuse client insolvency protection with ongoing firm support, which is outside CIPF’s role.
CIPF protects eligible client property if a member firm becomes insolvent, so it cannot be used as operating support or a substitute for immediate prudential remediation.
Topic: Element 1 — General Regulatory Framework
Two days before the firm’s Form 1 filing deadline, the CFO learns that an unencrypted spreadsheet containing 1,200 retail clients’ names, SINs, account numbers, and free-credit balances was emailed in error to a former external consultant. Internal audit had already identified weak data-loss controls, and the consultant says the file was deleted but cannot provide independent evidence. The firm’s privacy officer has concluded that the incident creates a real risk of significant harm to affected clients. What is the single best immediate CFO response?
Best answer: B
What this tests: Element 1 — General Regulatory Framework
Explanation: The exposed file contains sensitive client personal information, and the firm has already assessed a real risk of significant harm. The best CFO decision is to trigger the PIPEDA breach process promptly rather than treating the issue as AML reporting or marketing consent.
PIPEDA is the federal statute aimed at protecting personal information used in private-sector commercial activity. In this scenario, the file includes highly sensitive identifiers and account data, and the firm’s own assessment says the breach creates a real risk of significant harm. That makes the CFO’s best immediate response to activate the firm’s privacy-breach process: contain the incident, notify affected individuals and the privacy commissioner as required, and maintain breach records while remediation proceeds.
The pending Form 1 deadline does not override privacy obligations. The key point is the statute’s purpose: this is a personal-information safeguarding and breach-response issue, not a money-laundering, insolvency, or marketing-permission issue.
PIPEDA’s purpose is to protect personal information in commercial activity, so a high-risk breach requires containment, notification, and documented follow-up.
Topic: Element 9 — Inventory, Pricing, and Underwriting
All amounts are in CAD. An Investment Dealer’s principal desk still holds 18 million face amount of a thinly traded corporate debenture from a recent bought deal. The desk marked the position at 99 using the trader’s estimate, but finance obtained two executable external dealer bids at 96.00 and 96.25, and no client trades have occurred for three days. Revaluing the position to 96.25 would reduce the firm’s RAC by about 2.7 million, and the monthly Form 1 package is due tomorrow. The desk head asks to keep the 99 mark until a client trade occurs and to continue adding inventory. What is the single best CFO response?
Best answer: A
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: The CFO should override the unsupported trader mark and require an immediate independent valuation based on observable external bids. Because the position materially affects RAC and Form 1 is due tomorrow, the impact must be recorded now, and further inventory growth should pause until the issue is reviewed.
Principal trading controls require independent price verification and timely recognition of valuation effects in the firm’s books and regulatory capital. Here, the trader’s 99 mark is contradicted by two executable external bids and there have been no recent client trades, so the CFO should require the inventory to be revalued using supportable market evidence for the current reporting cycle. Because the position is large enough to reduce RAC materially and the Form 1 filing is due tomorrow, the impact cannot be deferred to a later month or handled only as disclosure. The request to keep adding inventory should also be stopped until risk management reviews the exposure and the pricing-control issue is addressed. Disclosure, averaging, or hedging do not cure a current valuation-control failure.
Current principal inventory must be valued from independent, supportable market evidence, with the capital effect recognized immediately and position growth paused until the control issue is reviewed.
Topic: Element 6 — Corporate Governance and Ethics
An investment dealer’s RAC is only CAD 150,000 above its early-warning threshold, and its Form 1 monthly filing is due in five business days. Internal audit finds that the CFO personally advanced CAD 40,000 to a retail client two months ago so the client could meet a margin deficiency and avoid liquidation of a concentrated position. The client is not related to the CFO, there was no pre-existing business relationship outside the firm, and the advance was never disclosed to compliance. What is the best action for the CFO and firm to take now?
Best answer: C
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: A CFO cannot personally lend to a non-related client to solve a margin deficiency. That creates a serious conflict of interest and a supervisory breach, regardless of tight RAC or a near-term filing deadline, so the matter must be escalated immediately, handled independently, and remediated.
Directors and executives, including the CFO, must avoid personal financial dealings with clients that create conflicts and impair objective supervision. Here, the CFO used personal money to let a non-related client meet a margin deficiency without disclosure. That is not an acceptable workaround for a deficient account or a way to protect RAC before a Form 1 filing.
The closest distractor is waiting until after the filing, but prudential pressure never justifies personal funding of a client account.
Because an undisclosed personal loan from the CFO to a non-related client to meet a margin deficiency is an impermissible conflict and control breach requiring immediate escalation and independent remediation.
Topic: Element 13 — Protection of Dealer and Client Assets
An Investment Dealer still receives occasional paper securities from estate and transfer-in accounts. The CFO is comparing branch procedures. The deciding factor is safeguarding strength: the best procedure must separate custody and recordkeeping while creating a prompt audit trail. Which proposed procedure best fits that standard?
Best answer: C
What this tests: Element 13 — Protection of Dealer and Client Assets
Explanation: The strongest safeguard is the procedure that prevents one person from both controlling the certificates and controlling the records about them. Dual control on receipt, prompt movement to centralized custody, and independent daily reconciliation provide the clearest protection against loss or misappropriation.
Safeguarding client securities is not just about locking them up; it is about making unauthorized loss hard to commit and easy to detect. In this scenario, the strongest design uses dual control when certificates are received, moves them quickly out of the branch environment, and requires a daily reconciliation by staff independent of custody access. That combination creates a clear audit trail and reduces the chance that a missing or misdirected certificate goes unnoticed. By contrast, sole control, front-line custody, or delayed shipment all increase the period during which one person or one location can both hold the asset and influence the record of that asset. The key takeaway is that physical security must be paired with segregation of duties and independent verification.
It is the only option that combines dual control with independent reconciliation, separating physical custody from recordkeeping.
Topic: Element 10 — Credit Risk and Client Accounts
A dealer has let clients carry listed equity positions in accounts coded as margin accounts, but some files lack signed margin agreements and evidence of an enforceable right to liquidate collateral on default. The CFO is reviewing the exposure under CIRO prudential rules. Which statement is most accurate?
Best answer: A
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: For prudential purposes, a margin account is not created by coding alone. The dealer needs enforceable margin documentation and rights over collateral before a client debit can receive proper margin-account capital treatment.
The core concept is enforceability. A dealer may treat a client debit as properly margined for prudential capital purposes only when the account is supported by the required documentation and the firm has clear rights to realize on collateral if the client defaults. In the scenario, the accounts are labelled as margin accounts, but key legal support is missing. That means the CFO should not assume normal margin-account capital treatment is available. The fact that the securities are listed may matter to collateral eligibility, but it does not replace the need for a valid agreement. CIPF is an investor-protection mechanism, not a substitute for the dealer’s own capital treatment, and a client’s perceived wealth does not create an enforceable security interest. The key takeaway is that documentation drives prudential treatment.
Margin-account capital treatment depends on enforceable account documentation and collateral rights, not just on the securities held or the client’s apparent credit strength.
Topic: Element 10 — Credit Risk and Client Accounts
The CFO is mapping exposures on the firm’s daily credit dashboard. Which item should be classified as settlement risk because the decisive factor is a failed exchange of cash and securities on settlement date?
Item 1: Retail margin client with a $420,000 debit balance secured by liquid TSX-listed shares; the account is below house margin after a market decline.
Item 2: Regular-way institutional sale to another dealer; the firm delivered the securities on settlement date, but the cash was not received by end of day.
Item 3: 30-day repo with a pension fund under a written master agreement; collateral is marked to market and margined daily.
Item 4: Unsecured receivable from an introducing broker for prior-month shared commissions.
A. The under-margined retail margin debit
B. The dealer-to-dealer sale unpaid after delivery
C. The margined 30-day repo exposure
D. The unsecured introducing broker receivable
Best answer: B
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: Settlement risk arises when the expected exchange of cash and securities does not complete as scheduled. The unpaid dealer-to-dealer sale fits that classification because delivery occurred, but the offsetting payment was not received by the end of settlement date.
The core distinction is when and how the credit exposure arises. Settlement risk is tied to the settlement event itself: one side has delivered securities or paid funds, but the matching consideration has not yet been received. That is exactly the case in the institutional sale that was delivered but not paid.
The under-margined retail account is client credit risk from an extension of credit to a customer. The repo is ongoing counterparty credit risk under a financing contract, even though collateral and daily margining reduce the exposure. The introducing broker balance is an unsecured business receivable, which is also a counterparty or receivable exposure rather than settlement risk.
The key takeaway is that settlement risk is distinguished mainly by the failed completion of the exchange on settlement date.
It is settlement risk because the firm completed its side of the trade but did not receive the cash due on settlement date.
Topic: Element 9 — Inventory, Pricing, and Underwriting
The CFO reviews the following daily control report for a junior-resource trading desk at an Investment Dealer. Which interpretation is best supported?
Exhibit: Daily desk control report (CAD)
| Control item | Approved / limit | Today |
|---|---|---|
| Trader approval (M. Chen) | Listed Canadian equities only; no derivatives | 3 written call option trades entered |
| Desk gross inventory | Max $12.0 million | $9.6 million |
| Single-issuer concentration | Max 20% of RAC | Northern Lithium exposure $5.8 million |
| Firm RAC | — | $24.0 million |
Best answer: A
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: The exhibit shows two separate control failures. The trader executed derivatives despite an equity-only approval, and Northern Lithium exceeds the single-issuer cap because 20% of RAC is $4.8 million, which is below the $5.8 million exposure.
Desk oversight must match the desk’s actual activity profile, not just total inventory usage. Here, the trader’s approval allows listed Canadian equities only, so written call option trading is outside the approved mandate. The position control is also breached because the single-issuer limit is stated as 20% of RAC, and 20% of $24.0 million is $4.8 million. Today’s Northern Lithium exposure of $5.8 million is above that cap.
Remaining below the $12.0 million gross inventory limit does not cure either the approval mismatch or the issuer concentration excess.
The report shows both an approval breach and a concentration breach, so the desk’s controls are not adequate for today’s activity.
Topic: Element 10 — Credit Risk and Client Accounts
The CFO of an Investment Dealer is reviewing proposed responses to a large client margin exposure before month-end Form 1. Which proposal is the one that requires a specific written agreement before the firm can rely on it as client-account support?
Best answer: A
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: A guarantee is a legal undertaking by another party to stand behind the client’s obligations, so the dealer must have a specific written agreement before relying on it. The other proposals are internal risk or liquidity controls, not third-party credit support arrangements.
The core concept is enforceable documentation. When an Investment Dealer wants to rely on another party’s promise to cover a client’s obligations, that support must be set out in a specific written agreement so the firm can assess and enforce the undertaking. That matters directly to the CFO because unsupported assumptions about who will pay can distort credit assessment and prudential reporting.
By contrast, increasing house margin, freezing withdrawals, and arranging bank funding are all legitimate risk-management responses, but they are internal controls or liquidity actions. They should be documented in the firm’s records, yet they are not the type of arrangement that substitutes another party’s legal liability for the client’s. The key distinction is whether the firm is relying on a separate party’s contractual commitment.
A third party’s guarantee of a client’s obligations must be evidenced by a specific written agreement before the firm can rely on it.
Topic: Element 12 — Operations and Settlements
A dealer’s CFO is reviewing which back-office control most directly supports reliable books and records, accurate balances with the clearing agency, and defensible CIRO Form 1 capital reporting. Which procedure is most appropriate?
Best answer: A
What this tests: Element 12 — Operations and Settlements
Explanation: Timely independent reconciliation is the foundational back-office control because it compares internal records with external evidence. That supports accurate clearing balances, complete books and records, and reliable CIRO prudential reporting.
CIRO prudential reporting depends on accurate books and records, not just a clean year-end audit. The back office should reconcile internal ledgers and subledgers to independent external evidence, such as clearing-agency, bank, or custodian statements, on a timely basis and then investigate, resolve, or escalate any breaks. That process supports correct recording of receivables, payables, positions, and unresolved differences that can affect Form 1 capital reporting and ongoing financial monitoring. Independence is also important: a control is stronger when reconciliation is performed or reviewed outside the trading function and documented with follow-up. Netting unreconciled items, delaying cleanup until the next cycle, or waiting for auditors does not provide the current control support needed for prudential reporting.
Independent, timely reconciliation to external records is the core control that keeps balances accurate and supports Form 1 capital reporting.
Topic: Element 10 — Credit Risk and Client Accounts
The CFO reviews the March 10 exception package for a retail margin account. For this dealer, any unmet margin deficiency outstanding more than 5 business days must be fully deducted from capital.
Exhibit: March 10 margin file
Which control deficiency is most significant?
Best answer: A
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: The decisive gap is the failure to turn an aged unmet margin deficiency into a capital deduction. Since the deficiency is already 6 business days old, the March 10 prudential working papers should reflect the required provision.
This scenario tests the link between margin monitoring and regulatory capital. Once a margin deficiency remains unmet beyond the stated 5-business-day limit, finance should no longer leave the exposure untouched in capital reporting. Here, the account still has a CAD 95,000 deficiency at 6 business days old, yet the March 10 Form 1 working paper shows no deduction. That means the key missing control is an aging process that feeds overdue deficiencies into capital provisions.
A sound control would:
Other file enhancements may improve supervision, but they do not fix the immediate overstatement of regulatory capital.
Because the deficiency is 6 business days old and still unresolved, the file should have triggered a capital deduction in the Form 1 working papers.
Topic: Element 2 — General Financial Requirements
An Investment Dealer receives a CIPF assessment invoice for $420,000, payable in 10 calendar days. The invoice states that questions about the calculation do not extend the due date unless CIPF confirms a revision. The firm has adequate RAC, an unused bank line, and $14 million of client free-credit balances held in designated trust accounts. The CFO believes about $25,000 may be overstated because one branch closed mid-year. What is the single best CFO response?
Best answer: B
What this tests: Element 2 — General Financial Requirements
Explanation: CIPF funding is a direct obligation of the Investment Dealer, not a use of client money. Because the invoice says a calculation question does not extend the due date and the firm has its own funding sources, the CFO should pay on time from dealer resources and resolve the overstatement separately.
CIPF assessments are part of the dealer’s own regulatory funding obligations. A CFO should ensure the amount billed is funded from firm treasury resources, recorded appropriately, and remitted by the stated due date unless CIPF itself confirms a change. Client free-credit balances held in trust are safeguarded for clients and cannot be used to finance the dealer’s expenses, even as a short bridge. Here, the firm has adequate RAC and an unused bank line, so there is no prudential reason to delay or to touch client cash. The key point is that a billing dispute does not suspend payment when the invoice expressly says it does not.
CIPF assessments are mandatory dealer obligations, so they should be paid on time from firm resources while any billing issue is addressed separately.
Topic: Element 14 — Other Capital Provisions
An Investment Dealer’s treasury group asks the CFO to file month-end Form 1 with no provider-of-capital concentration adjustment. The firm has a $20 million subordinated loan from Maple Holdco, a capital provider. Separately, the financing desk has a $14 million call loan to Birch Investments, secured by listed shares. Treasury says Birch is independent and the call loan is limited recourse, so it should not be combined with Maple Holdco exposure. The file shows only a term sheet and the same family office contact for both entities. Before approving the filing, what should the CFO verify first?
Best answer: D
What this tests: Element 14 — Other Capital Provisions
Explanation: The CFO should first confirm who the real exposure is to and whether the call loan is genuinely limited recourse. Provider-of-capital concentration treatment turns on ownership, guarantees, common control, and indirect support, so classification must be settled before valuation or mitigation steps.
The core issue is exposure classification, not yet collateral measurement. When a financing exposure sits beside capital provided by a related or potentially connected party, the CFO must first verify whether the borrower is truly independent and whether the loan is genuinely limited recourse only to the pledged securities. If there is common ownership, a guarantee, cross-default, side support, or another indirect link, anti-avoidance principles can require the exposure to be looked through and combined with the provider of capital for concentration purposes.
Only after that first step does it make sense to test collateral value, issuer concentration, or possible ways to reduce the exposure, such as extra collateral or replacing the financing. Governance approvals for the subordinated loan may still matter, but they do not answer the prudential question driving the filing.
This establishes whether the call loan must be looked through or aggregated with the capital provider under concentration and anti-avoidance principles.
Topic: Element 11 — Significant Areas of Risk
The CFO of an Investment Dealer learns that a thinly traded corporate bond position was priced using stale quotes for the last two month-end filings. Using current exit prices would lower the position value enough to reduce RAC materially, and a filed MFR may now be inaccurate. The CFO decides to wait until the annual audit to review the issue because no client complaint has been received. What is the most likely immediate consequence of that decision?
Best answer: A
What this tests: Element 11 — Significant Areas of Risk
Explanation: Pricing and valuation are significant prudential risk areas because they feed inventory margin and RAC. Once the CFO knows stale prices may have overstated capital, the immediate consequence is a potential filing and capital problem that requires prompt correction and escalation, not waiting for the audit.
When a control failure affects a significant risk area such as inventory pricing, the issue is not merely accounting clean-up. Valuation feeds the dealer’s margin requirements and RAC, so overstated prices can overstate capital and make a filed MFR inaccurate. Once the CFO becomes aware of the problem, delaying review until the annual audit increases prudential risk because the firm may continue to rely on misstated capital and miss timely remediation.
The most likely immediate consequence is that the firm must reassess the position values, quantify the impact on RAC, determine whether any amended filing or regulatory notification is required, and escalate the matter internally. Reputational harm or realized trading losses may come later, but the first consequence is a current prudential and regulatory reporting issue.
A known pricing-control failure can immediately make RAC and regulatory filings unreliable, requiring prompt recalculation and escalation rather than delay.
Topic: Element 2 — General Financial Requirements
During a CIRO field examination, examiners request source records supporting month-end prices on thinly traded inventory used in the firm’s RAC. The CFO misses the production deadline and, after two extensions, still provides only a manually edited spreadsheet. What is the most likely regulatory consequence?
Best answer: C
What this tests: Element 2 — General Financial Requirements
Explanation: Prompt production of reliable supporting records is part of examination readiness. Missing the deadline and still failing to provide source support after extensions makes escalation to a formal investigation more likely than an immediate hearing, automatic settlement, or deferral until the annual audit.
CIRO examinations depend on the firm’s ability to maintain and promptly produce reliable books and records. When the CFO misses a document-production deadline and still cannot provide source support after extensions, the issue moves beyond an ordinary exam deficiency and can be escalated to a formal investigation. A hearing is not the automatic next step; hearings generally come later if allegations are advanced and contested. A settlement is also not automatic, because it is a negotiated resolution path after the regulator develops the case. Year-end external audit work does not replace the firm’s obligation to support balances and valuations during the examination. The key distinction is that weak record support plus non-cooperation points first to investigation risk, not procedural end-stage outcomes.
Repeated failure to produce required supporting records can justify escalation from routine examination work to a formal investigation.
Topic: Element 2 — General Financial Requirements
At a CIRO-regulated Investment Dealer, internal audit gives the CFO the following extract from a review of the finance oversight model. Which action is the only supported response?
Exhibit: Audit extract
| Area | Current practice | Audit note |
|---|---|---|
| Form 1 reporting | Controller prepares and files monthly Form 1; CFO receives the filed package the next business day. | No documented pre-filing CFO review or challenge |
| Tax awareness | New financing products are approved by business and legal. | No documented tax review of GST/HST, withholding, or other tax effects |
| Confidentiality | Form 1 working papers are stored in a restricted folder; external tax adviser access is limited by NDA and need-to-know. | No exception noted |
| Supervisory financial responsibilities | Capital and segregation exceptions above the firm’s internal trigger are escalated to the Controller. | Policy does not require direct CFO escalation |
Best answer: B
What this tests: Element 2 — General Financial Requirements
Explanation: The audit extract supports remediation of the CFO oversight model, not acceptance of the status quo. Confidentiality controls appear adequate, but the record identifies gaps in documented Form 1 review, tax awareness for new activities, and direct CFO supervision of key prudential exceptions.
A CFO may delegate preparation work, but not accountability for prudential reporting and financial supervision. An adequate oversight model should show documented review and challenge of Form 1 before filing, a process to identify tax implications of new products or activities, and escalation of material capital or segregation issues directly to the CFO.
In the exhibit, each of those elements is missing: the CFO receives Form 1 only after filing, tax effects are not formally reviewed, and important prudential exceptions bypass the CFO. By contrast, confidentiality appears to be covered through restricted access, need-to-know limits, and an NDA for the external tax adviser. The key takeaway is that sound confidentiality controls do not cure missing supervisory and reporting oversight.
The exhibit shows confidentiality is addressed, but Form 1 oversight, tax awareness, and direct supervision of key prudential exceptions are not.
Topic: Element 14 — Other Capital Provisions
When applying CIRO foreign exchange margin rules, what exposure amount is generally margined for an Investment Dealer?
Best answer: C
What this tests: Element 14 — Other Capital Provisions
Explanation: CIRO foreign exchange margin rules focus on the dealer’s remaining market exposure, not its gross trading volume or accounting translation entries. The amount generally margined is the net open position by currency after any permitted offsets are applied.
The core concept is that foreign exchange margin is meant to capture the dealer’s residual market risk in foreign currency. For that reason, the firm looks at its long and short foreign currency positions and foreign exchange commitments, applies any permitted offsets, and determines the resulting net open position in each currency. That remaining exposure is what is generally margined for prudential capital purposes.
Gross notional can materially overstate risk when positions offset each other. IFRS translation amounts are accounting measures, not the prudential exposure that the margin rule is designed to capture. Looking only at the largest unsettled contract is also incomplete, because FX margin considers the firm’s overall net currency exposure, not a single trade in isolation.
The key takeaway is to identify the residual net currency risk, not the accounting effect or gross volume.
FX margin is generally based on the residual net currency exposure after permitted offsets, because that is the dealer’s remaining market risk.
Topic: Element 12 — Operations and Settlements
All amounts are in CAD. An Investment Dealer expects a settlement-related cash shortfall of $12.0 million for 2 days. Assume simple interest, a 365-day year, no transaction fees, and that each borrowing choice is available for the full 2-day period.
Which choice best meets the full liquidity need at the lowest cost?
Best answer: D
What this tests: Element 12 — Operations and Settlements
Explanation: The repo is the best choice because it is both feasible and cheapest. The available Government of Canada bond collateral can support up to $12.125 million of repo cash, which covers the $12.0 million shortfall, and financing $12.0 million for 2 days at 5.10% costs about $3,353.
Liquidity management requires comparing both funding capacity and all-in short-term cost. Here, the repo first has to be large enough: 97% of $12.5 million is $12.125 million, so the firm has enough eligible collateral to raise the needed $12.0 million.
Over 2 days, the estimated costs are:
Because the repo fully covers the shortfall and has the lowest cost, it is the best liquidity-management choice. The bank line is the closest alternative because it also covers the need, but its financing rate is higher.
It covers the shortfall because 97% of $12.5 million is $12.125 million, and its 2-day cost is lowest at about $3,353.
Topic: Element 13 — Protection of Dealer and Client Assets
A dealer’s daily treasury exception report shows that, because of a mapping error, client free credit balances were swept for two days into the dealer’s general operating bank account rather than the account designated under the firm’s client-cash safeguarding procedures. No client loss has yet occurred, and the CFO has not escalated or corrected the problem. What is the most likely immediate consequence of leaving the issue uncorrected?
Best answer: D
What this tests: Element 13 — Protection of Dealer and Client Assets
Explanation: The key issue is safeguarding of client cash, not whether a loss has already occurred. Moving client free credit balances into the dealer’s operating account is an immediate control failure that should be corrected and escalated at once.
This scenario is a client-asset safeguarding breach. Client free credit balances must be handled under controls that keep them separate from the dealer’s own operating funds and reduce the risk of misuse, misidentification, or exposure to dealer creditors. Once those balances are swept into the general operating account, the firm has a control failure even if no client has yet suffered a loss.
For a CFO, the immediate consequence is the need for prompt remediation, escalation to appropriate senior management and the UDP, and investigation of the root cause. The firm should document the exception, restore the balances to the proper safeguarded arrangement, and assess whether any additional regulatory or prudential follow-up is needed. The absence of an actual loss does not make the issue immaterial.
The key takeaway is that safeguarding breaches trigger immediate corrective action; compensation, audit commentary, or month-end cleanup are not the primary first consequence.
Client cash has been placed outside the firm’s intended safeguarding framework, exposing it to dealer use or creditors and requiring immediate remediation and escalation.
Topic: Element 4 — Offering and Distribution of Securities
At closing-file review for a Canadian retail common-share offering, the CFO sees this package:
Which missing item is the most important deficiency from an investor-protection standpoint?
Best answer: C
What this tests: Element 4 — Offering and Distribution of Securities
Explanation: The key gap is the missing statement of purchasers’ statutory rights. In a Canadian prospectus offering, investor protection includes not only disclosure of material facts but also notice of the legal remedies available if the prospectus contains a misrepresentation.
In a Canadian public offering, the prospectus is the core investor-protection document. It must do more than describe the issuer and the securities; it also needs to alert purchasers to the statutory rights provided by applicable securities legislation, such as rights related to misrepresentation and, where applicable, withdrawal or rescission/damages. That notice is important because it tells investors what protections they have if the disclosure is deficient.
Internal controls and file-completeness items still matter, but they are not the decisive investor-facing protection here. A roadshow reconciliation supports consistent marketing, pricing minutes support governance, and selling-group instructions support distribution operations. None of those substitutes for disclosure of the purchaser’s statutory rights in connection with the offering.
A prospectus offering should include disclosure of purchasers’ statutory rights, including remedies for misrepresentation as applicable under securities law.
Topic: Element 6 — Corporate Governance and Ethics
Near quarter-end, the head of an Investment Dealer’s principal trading desk asks finance to replace the official settlement price for a thinly traded listed option with a higher internal value in the draft Form 1, saying the exchange price was “distressed” and the change would keep RAC above the firm’s internal limit. No external support is attached. Before the CFO approves the filing or closes the matter, what should be verified first?
Best answer: B
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: The first question is whether there is objective support for departing from the official settlement price. Without independent pricing evidence, the requested change may be an unethical attempt to improve reported RAC and could result in a misleading Form 1 filing.
When a proposed valuation change would improve capital at quarter-end, the CFO should first test the factual basis for the price, not the motive or the later governance response. The key control is independent price verification: can the firm show, under its valuation policy, that a departure from the official settlement price is supported by objective, contemporaneous market evidence and proper approval?
If that support is missing, the issue is more than a weak estimate. It may indicate unethical behaviour such as window dressing or deliberate misstatement of inventory values to present a stronger RAC position. That can lead to an inaccurate Form 1 filing, mislead CIRO, expose the firm and responsible individuals to discipline, and weaken the firm’s control culture. Incentive questions, prior audit work, and board reaction may matter later, but they do not establish whether the proposed mark is valid.
Unsupported quarter-end valuation changes that improve RAC must first be tested against independent evidence and approved valuation controls.
Topic: Element 5 — Capital, Records, and Reporting
Under CIRO rules, early warning tests are intended primarily to do what?
Best answer: B
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: CIRO’s early warning framework is designed to identify financial deterioration at an early stage. It gives CIRO a basis for closer oversight and related restrictions before the dealer reaches a more serious capital problem.
The core concept is prevention. Early warning tests are supervisory triggers used to spot signs that an Investment Dealer’s financial condition is weakening before the firm falls into a more serious minimum-capital or solvency problem. They do not replace the regular capital framework; instead, they sit on top of ongoing prudential calculations and reporting. When a dealer enters early warning, CIRO can require closer monitoring and impose related constraints, such as limits on certain capital withdrawals or similar actions.
A common confusion is to treat early warning as the same thing as a capital deficiency. It is not. Early warning is meant to surface trouble sooner, so corrective action can occur before the firm’s condition worsens further.
Early warning tests are preventive prudential screens meant to flag weakening condition before a firm reaches a more serious capital shortfall.
Topic: Element 8 — Risk Management and Internal Controls
The CFO is reviewing the documentation for the dealer’s daily inventory-pricing process, which feeds the firm’s RAC calculation. The package shows:
Which key control is missing or deficient?
Best answer: D
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: The process already includes several detective controls: exception reporting, investigation of unusual RAC swings, and board oversight after the fact. The key gap is the lack of a preventive control over who can change pricing inputs and formulas before those changes affect regulatory capital.
Preventive controls are designed to stop errors or unauthorized actions before they affect the firm’s books, capital, or risk position. Detective controls identify issues after processing has already occurred. In this scenario, the exception report, finance investigation, and board summary are all detective or monitoring controls.
The deficiency is that the trading desk can change price-source mappings and valuation formulas without independent approval or restricted access. Because that file feeds RAC, an unauthorized or mistaken change could immediately distort inventory values and regulatory capital before anyone detects it. Sound financial-risk governance therefore requires a preventive control such as role-based access, documented change requests, and independent approval by finance or risk management before a change is used.
More reporting may help oversight, but it does not replace a control that prevents the error from entering the process.
Because pricing changes affect RAC directly, sound governance requires a preventive control that blocks unauthorized edits before they flow into capital reporting.
Topic: Element 1 — General Regulatory Framework
At month-end, an Investment Dealer that is a CIPF member is preparing Form 1 after a trading loss materially reduced its RAC, but client cash and securities remain fully reconciled. The treasurer proposes recording an asset called anticipated CIPF assistance and using it to avoid an early-warning filing, arguing that CIPF exists to protect firms in distress. What is the best next step for the CFO?
Best answer: B
What this tests: Element 1 — General Regulatory Framework
Explanation: The CFO should not treat possible CIPF involvement as capital or use it to delay prudential reporting. CIPF’s role is to protect eligible clients if a member firm becomes insolvent and client property is missing, not to recapitalize the dealer.
CIPF is a client-protection fund, not a rescue fund for an Investment Dealer’s capital shortfall. In this scenario, the firm must complete Form 1 using its actual RAC and make any required CIRO filing or escalation based on real available resources. A hypothetical future benefit from CIPF cannot be recognized as capital, used to offset a trading loss, or relied on to postpone reporting. CIPF becomes relevant if a member firm becomes insolvent and eligible client property is unavailable, including through claims handling or facilitating transfers of client accounts.
The key distinction is that CIPF protects clients in an insolvency; it does not restore the dealer’s capital before one.
CIPF protects eligible client property in a member insolvency; it is not prudential capital the dealer can book to avoid required reporting.
Topic: Element 4 — Offering and Distribution of Securities
The CFO of a Toronto-based reporting issuer is reviewing litigation exposure after a financing. Management used a slide deck that overstated production capacity, and the issuer later disputed warrant exercise terms. Which statement about additional issuer liabilities is INCORRECT?
Best answer: D
What this tests: Element 4 — Offering and Distribution of Securities
Explanation: Issuers can face civil exposure beyond statutory securities-law claims. In a common law province such as Ontario, negligent misrepresentation, deceit, and breach of contract may all apply, but only deceit or fraud requires intentional deception.
Additional issuer liability is not limited to the statutory prospectus and secondary-market regimes. In Ontario, an inaccurate investor presentation can support a negligent misrepresentation claim if a plaintiff can establish a duty of care, a misleading statement, reasonable reliance, and resulting loss; proof of intent to deceive is not required. Deceit is different: it involves a knowingly false statement or reckless disregard for the truth. Separately, if the issuer fails to honour rights set out in warrants, subscription agreements, or other deal documents, investors may claim breach of contract. The inaccurate statement is the one treating intentional deception as an element of every misrepresentation claim, because that requirement applies to deceit, not negligence-based misrepresentation.
Intent is required for deceit or fraud, but negligent misrepresentation does not require proof of deliberate deception.
Topic: Element 2 — General Financial Requirements
All amounts are in CAD. An Investment Dealer’s CFO is reviewing CIPF funding items before June month-end. The treasurer suggests making one payment on June 30 and reducing it by a prior-year item that is still under review.
Exhibit:
| Notice | Amount | Due date | Terms |
|---|---|---|---|
| 2026 regular assessment, Q3 installment | $45,000 | July 15, 2026 | Part of quarterly regular assessment |
| 2026 special assessment | $90,000 | June 30, 2026 | Separate invoice; no offset against regular assessment |
| 2025 funding adjustment under review | $12,000 | Pending | Credit may be used only after written confirmation from CIPF |
Based only on the exhibit, what is the only supported action?
Best answer: B
What this tests: Element 2 — General Financial Requirements
Explanation: The exhibit shows two current CIPF funding obligations with separate due dates. It also states that the $12,000 item under review cannot be used as a credit until CIPF confirms it in writing, so current remittances cannot be reduced by that amount.
CIPF funding must be handled according to the terms of the assessment notices on hand. Here, the record shows a regular assessment installment and a separate special assessment, each with its own due date. The $12,000 prior-year item is not yet an available credit; the exhibit says it may be used only after written confirmation from CIPF. That means the firm has no support to net that amount against current invoices or to delay payment while the review remains pending. The supported action is to pay the special assessment by June 30 and the regular installment by July 15, leaving the $12,000 out of the remittance until CIPF approves it. The key trap is treating a pending adjustment as if it were already an authorized offset.
The exhibit requires payment of each current invoice by its own due date and permits use of the $12,000 only after written CIPF confirmation.
Topic: Element 11 — Significant Areas of Risk
An Investment Dealer uses a third-party custodian for certain retail client securities. At month-end, operations tells the CFO that external securities transfers were not posted for two business days because of the custodian’s system incident, but no client complaints have been received and the controller wants to proceed with the Form 1 filing. Before approving the filing or deciding whether escalation is needed, what should the CFO verify first?
Best answer: B
What this tests: Element 11 — Significant Areas of Risk
Explanation: The key first step is to determine whether the outage caused an actual difference in client securities or a segregation shortfall. That reconciliation shows the direct prudential impact on client-asset protection, books and records, and the accuracy of the Form 1 filing.
Outsourcing custody does not transfer the Investment Dealer’s responsibility for safeguarding client assets or maintaining accurate regulatory records. When securities transfers are not posted, the CFO should first review the latest stock-record-to-custodian reconciliation to see whether the incident created unresolved differences or a client-security segregation deficiency. That is the control that turns an operational event into a measurable financial and regulatory exposure.
If the reconciliation is clean, the firm can then address vendor remediation and governance reporting. If it shows breaks, the firm may need correcting entries, enhanced monitoring, filing adjustments, and prompt escalation. Reviewing the custodian’s incident report, insurance coverage, or board messaging first would be premature because those items do not establish the dealer’s current safeguarding or Form 1 impact.
This is the first evidence of whether the outage created actual client-asset differences or a segregation problem that could affect Form 1 and require escalation.
Topic: Element 2 — General Financial Requirements
All amounts are in CAD. After a dealer failure, CIPF sends a replenishment notice to Investment Dealers. The notice states:
Maple North Securities’ most recent regular assessment was $90,000. The industry total was $30 million. How much should Maple North accrue for the special assessment?
Best answer: C
What this tests: Element 2 — General Financial Requirements
Explanation: Because the notice says CIPF surplus absorbs the first $6 million, only the remaining $12 million is billed to dealers. Maple North’s share is $90,000 divided by $30 million, or 0.3%, so its accrual is $36,000.
A CIPF special assessment should be calculated exactly as the notice prescribes. Here, the CFO must first remove the portion funded from CIPF retained surplus, then apply Maple North’s pro rata share based on the firm’s most recent regular assessment relative to the industry total.
The key trap is using the full loss amount instead of the shortfall remaining after the surplus offset.
After reducing the loss by the $6 million surplus, Maple North pays 0.3% of the remaining $12 million, which equals $36,000.
Topic: Element 3 — Dealer Business Model
All amounts are in CAD. A CIRO investment dealer’s CFO is comparing four new client opportunities. For this planning exercise, the firm’s RAC committee applies these proxy capital charges to average unsecured settlement exposure: documented acceptable institution 5%, documented regulated entity 25%, other corporate client 50%, and retail individual 100%. If required status documents are missing, use 100% until received.
| Prospect | Client type | Status docs | Annual net revenue | Avg unsecured exposure |
|---|---|---|---|---|
| Canadian bank treasury | Acceptable institution | Complete | $150,000 | $2,000,000 |
| Portfolio manager | Regulated entity | Pending | $210,000 | $1,000,000 |
| Private corporation | Other corporate client | Complete | $175,000 | $300,000 |
| High-net-worth individual | Retail individual | Complete | $95,000 | $80,000 |
Based on these facts, which opportunity offers the best revenue-to-capital outcome?
Best answer: A
What this tests: Element 3 — Dealer Business Model
Explanation: Compare annual net revenue with the proxy capital consumed by each client type. The documented bank relationship uses $100,000 of capital on $2,000,000 of exposure, so its 1.50 revenue-to-capital ratio is higher than the other three opportunities.
The key concept is that client type and documentation status can change capital efficiency materially, even when absolute exposure is larger. Here, the documented acceptable-institution relationship gets the lowest proxy charge, while the portfolio manager loses its lower-rate treatment until status evidence is received.
The main takeaway is that the CFO should assess both the opportunity and the client-type requirements, not just the size of the exposure.
Its 5% proxy rate uses only $100,000 of capital, producing the highest revenue-to-capital ratio.
Topic: Element 5 — Capital, Records, and Reporting
The CFO of a CIRO Investment Dealer learns that a valuation loss on a proprietary position has caused the firm to trigger an early warning test. The firm still has positive risk adjusted capital, but it is now under the early warning system. While the firm remains in early warning, which response is NOT appropriate?
Best answer: D
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: CIRO early warning is a preventive regime, not a wait-and-see condition. Once triggered, the firm should escalate the issue, monitor capital and liquidity more closely, and avoid payments that reduce capital or transfer value to insiders without CIRO approval.
CIRO’s early warning system is meant to intervene before a dealer’s financial condition worsens further. A firm can be in early warning even with positive risk adjusted capital, so the CFO should treat the trigger as an immediate supervisory and governance matter. Appropriate responses include prompt escalation, more frequent monitoring of capital, liquidity, and funding, and a remediation plan for the cause of the trigger. The firm should also avoid actions that reduce capital or move value to insiders or capital providers unless CIRO consents, such as dividends, subordinated debt repayments, and discretionary payments to related parties. That is why continuing a discretionary bonus to a shareholder-officer without approval is inappropriate. Positive capital does not remove early warning restrictions.
Early warning status restricts capital-reducing or insider-related payments, so a discretionary bonus should not proceed without CIRO approval.
Topic: Element 3 — Dealer Business Model
Maple North Securities, an Investment Dealer, plans to operate as an introducing broker. A separate carrying dealer will hold client cash and securities, clear and settle trades, issue statements and confirmations, and maintain margin records.
The CFO’s launch file includes:
The client opening package is branded only with Maple North and does not explain the carrying dealer’s role. Which missing item is the most important deficiency?
Best answer: B
What this tests: Element 3 — Dealer Business Model
Explanation: In an introducing-broker model, the core requirement is clear documentation of which firm performs each regulated function and who holds client assets. Oversight metrics and reconciliation controls are useful, but they do not fix a basic gap in role clarity and client disclosure.
This scenario tests the foundational requirement of an introducing-broker business model. When another dealer carries the accounts, custody, clearing and settlement, statements, confirmations, margin administration, and related responsibilities should not be left to branding or informal understanding. The arrangement should be documented so each firm’s duties are clear, and the client package should disclose the carrying dealer’s role and who holds client cash and securities.
The other choices are worthwhile enhancements, not the decisive missing requirement.
An introducing-broker model requires clear written allocation of functions and clear disclosure of who holds client assets and performs key services.
Topic: Element 12 — Operations and Settlements
A CIRO Investment Dealer has several repo and reverse repo trades with the same bank counterparty. The CFO is deciding whether the firm can monitor and report the exposure on a net basis for prudential purposes rather than by gross contract amount. Which feature most directly supports that treatment?
Best answer: D
What this tests: Element 12 — Operations and Settlements
Explanation: Net reporting for securities financing arrangements rests first on legal enforceability. A master agreement that provides close-out netting and set-off rights is what supports treating offsetting positions with one counterparty as a single prudential exposure.
In securities financing, the decisive issue for prudential netting is legal structure, not just economics. Even if repo and reverse repo positions with the same counterparty appear to offset each other, the dealer should only rely on net exposure when an enforceable master agreement provides close-out netting and set-off rights, typically backed by legal review for the relevant jurisdiction. Daily mark-to-market, collateral movements, and reconciliation controls are still essential because they limit unsecured exposure and support accurate books and records. But those controls do not by themselves allow gross obligations to be collapsed into one reported amount. Common maturities, identical securities, or acceptable custody at CDS may improve operations or safeguarding, yet they do not create the legal right to net after default. The closest trap is daily collateralization, which is important but not sufficient.
Prudential netting depends on legally enforceable close-out and set-off rights, not merely economic offset or operational controls.
Topic: Element 11 — Significant Areas of Risk
During a same-day CDS settlement shortfall, an Investment Dealer’s operations team used $9 million of fully paid client securities from safekeeping to complete a proprietary delivery, expecting to replace them the next morning from a securities loan. The daily segregation report was skipped because the stock record was one day behind, but RAC remained above minimum. As CFO, which issue is the primary prudential red flag?
Best answer: C
What this tests: Element 11 — Significant Areas of Risk
Explanation: The most serious issue is the firm’s use of fully paid client securities to meet its own proprietary settlement need. That is a client-asset safeguarding failure and a core prudential breach, while the delayed reconciliation and possible financing or P&L effects are secondary consequences.
Managing significant areas of risk starts with protecting client assets. Here, the firm turned a settlement shortfall into a direct safeguarding breach by using fully paid client securities held for safekeeping to complete a house delivery. That is the primary red flag because client property cannot be used to solve the firm’s own funding or settlement problem.
The skipped segregation report and stale stock record make the situation worse, but they are supporting control failures around the main event. A CFO should treat this as an immediate escalation item, stop the practice, confirm client positions are fully restored, assess any capital or early-warning implications, and require remediation of stock record, segregation, and securities borrowing controls.
The key takeaway is that settlement pressure never justifies using client assets for firm purposes.
Using fully paid client securities to satisfy the firm’s own delivery is a safeguarding breach and the most serious immediate prudential concern.
Topic: Element 5 — Capital, Records, and Reporting
An Investment Dealer must maintain at least $2 million of FIB coverage at all times. Its policy states that any paid claim reduces the available limit until the insurer formally reinstates it. After a $1.6 million employee-fraud claim was paid, the CFO did not buy reinstatement or replacement coverage, did not notify CIRO, and left the same control weakness in place: one treasury employee can both release client-cash wires and reconcile the bank account. What is the primary prudential red flag?
Best answer: A
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: The main issue is immediate non-compliance with required FIB coverage, not the loss’s income effect or future premium impact. The paid claim reduced available coverage far below the required minimum, and the firm also failed to notify CIRO and fix the control weakness that caused the loss.
FIB coverage must meet the prescribed amount at all times. In this scenario, the dealer requires $2 million, but after the $1.6 million paid claim only $400,000 remains available because the bond is not automatically restored. That creates an immediate insurance deficiency that the CFO must correct promptly by reinstating or replacing coverage, while also giving required notice.
The unchanged segregation-of-duties weakness is equally important because the same flaw that enabled the fraud still exists. When one person can both release client-cash wires and perform the reconciliation, the firm remains exposed to another loss that may not be fully insured. Earnings pressure, operational disruption, and future renewal pricing are real consequences, but they are secondary to the current coverage shortfall and unresolved control failure.
Because the paid claim reduced available coverage to $400,000, the dealer is below its required FIB minimum until coverage is reinstated or replaced, while the same control breakdown still exposes the firm to another loss.
Topic: Element 15 — UDP Responsibilities
An Investment Dealer was designated in early warning after its March Form 1 filing. Assume for this question:
All amounts are in CAD millions.
| Month | RAC | Total margin required |
|---|---|---|
| March | 3.2 | 80.0 |
| April | 5.1 | 90.0 |
| May | 5.0 | 92.0 |
At the end of May, what is the best implication for the UDP and CFO?
Best answer: C
What this tests: Element 15 — UDP Responsibilities
Explanation: March failed because RAC was positive but only 4.0% of total margin required, which is below the 5% test. April and May both passed, so the firm may ask CIRO to lift the designation, but it remains in early warning until CIRO agrees.
The key concept is that a firm can fail an early warning test even with positive RAC if it falls below the stated percentage threshold. Here, March failed because \(3.2/80.0 = 4.0\%\). April passed because \(5.1/90.0 \approx 5.67\%\), and May passed because \(5.0/92.0 \approx 5.43\%\); both months also had positive RAC.
Because the dealer was already designated after March, those two consecutive passing months satisfy the stated condition to request lifting of early warning. The UDP and CFO should still treat the designation and any related restrictions as continuing until CIRO actually removes them. CIRO’s discretion matters: meeting the numeric test supports a request, but it does not create an automatic lift.
April and May are two consecutive passing months with positive RAC, but early warning is not lifted automatically.
Topic: Element 5 — Capital, Records, and Reporting
All amounts are in CAD. At month-end, an Investment Dealer’s CFO reviews this RAC summary:
The concentration charge and margin figures are correct as of month-end. Management expects to sell part of the concentrated position next week, but no trade has yet been executed. Which action is NOT appropriate?
Best answer: C
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: The exhibit shows a current RAC deficiency of negative $0.45M. A future sale that has not yet occurred cannot be used to reduce today’s concentration charge or improve today’s RAC.
RAC shows whether the dealer has enough capital after required deductions and risk charges. Here, $3.1M plus the approved subordinated loan of $0.5M, less minimum capital of $0.25M, less the concentration charge of $1.2M, and less margin required of $2.6M leaves negative $0.45M, so the firm is deficient at month-end.
The CFO must base the RAC calculation on facts that exist on the calculation date:
A planned sale next week may improve a later RAC calculation, but it does not allow the firm to ignore the current concentration charge today. Appropriate responses are to escalate, remediate, and recalculate once an actual change has occurred. The key trap is treating intended remediation as if it were already in place.
RAC must reflect actual month-end positions and prescribed charges, not a planned future sale.
Topic: Element 11 — Significant Areas of Risk
An Investment Dealer is launching a principal trading desk in less-liquid corporate bonds. The CFO has identified valuation uncertainty, concentration exposure, and intraday funding pressure as significant risks. Which response is LEAST appropriate for managing this risk area?
Best answer: D
What this tests: Element 11 — Significant Areas of Risk
Explanation: Managing a significant risk area requires clear limits, independent monitoring, and prompt escalation of exceptions. Allowing the trading desk to waive its own breaches removes independence from the control process and weakens governance over valuation, concentration, and funding risk.
In a significant risk area, the dealer should define risk tolerances, monitor exposures independently, escalate breaches quickly, and report material exposures to senior management and governance bodies. For a less-liquid corporate bond desk, documented limits, independent pricing checks, stress testing, and regular reporting are all appropriate ways to manage valuation, concentration, and funding risk. By contrast, letting the desk that takes the risk waive its own breaches undermines independence and can delay remediation. A favourable mark or temporary profit does not replace control discipline, because illiquid positions can reprice sharply and financing conditions can tighten quickly. The key test is whether the framework constrains and escalates risk, not whether current trading results appear acceptable.
Significant risk areas require independent oversight and documented escalation, so business-line self-waivers of breaches are not an appropriate control.
Topic: Element 9 — Inventory, Pricing, and Underwriting
Which statement best describes an adequate desk-limit framework for a CIRO Investment Dealer’s trading desk?
Best answer: B
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: Adequate desk limits are risk controls, not just administrative settings. They should match the desk’s products, liquidity, and trading strategy, and restrict each trader’s authority, position size, and capital usage accordingly.
Desk limits are preventive controls used to keep trading activity within the firm’s approved risk and capital capacity. A framework is adequate only when it is tailored to the desk’s actual activity profile, including the products traded, market liquidity, volatility, inventory risk, and the approved trader’s mandate. That means limits should connect trader approvals to measurable constraints such as permitted instruments, size, concentration, and capital usage, with monitoring and escalation for breaches. A uniform limit for every desk or reliance on a trader’s experience alone would miss the point of the control. The key takeaway is that desk limits must be risk-based and desk-specific, not generic or purely financial-reporting tools.
Adequate desk limits tie each trader’s permitted activity to the desk’s actual exposure characteristics and the firm’s capacity to absorb risk.
Topic: Element 9 — Inventory, Pricing, and Underwriting
An Investment Dealer CFO reviews the final settlement memo for an equity underwriting. All amounts are in CAD.
Exhibit: Syndicate close-out extract
| Item | Detail |
|---|---|
| Offering | 2,000,000 common shares at 18.00 |
| Spread per share | Management fee 0.20; underwriting fee 0.30; selling concession 0.50 |
| Roles | Maple Securities: lead manager; North Shore Capital: co-manager; Prairie Dealer: syndicate member; Harbour Broker: selling-group only |
| Sales | Harbour Broker sold 180,000 shares |
| Proposed expense charge | External legal, printing, roadshow hotel, and Maple’s in-house deal-team payroll |
| Settlement note | Syndicate profit will be distributed after allowable expenses are finalized and the account is closed |
Which interpretation is supported by the exhibit?
Best answer: D
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: The exhibit separates compensation by role. A selling-group firm earns the selling concession on the securities it places, while management fees belong to managers and syndicate profit is settled only after allowable expenses are finalized and the account is closed.
Syndicate accounting allocates compensation based on function, not simply on who sold the most securities. The selling concession goes to the dealer that places the securities with investors, the underwriting fee compensates members for underwriting liability, and the management fee compensates the managers for organizing and administering the offering. Because Harbour Broker is identified as selling-group only, the supported reading is that it earns the selling concession on the 180,000 shares it sold, but not management fees or syndicate profit.
The exhibit also signals two common limits: a manager’s in-house payroll is normal dealer overhead rather than an allowable syndicate expense, and syndicate profit is not distributed until allowable expenses are finalized and the account is closed. The closest trap is assuming that strong sales activity changes fee entitlement; role, not sales volume alone, determines which part of the spread a participant receives.
A selling-group participant can earn selling concession on the shares it sells, but it is not entitled to management fees or syndicate profit.
Topic: Element 12 — Operations and Settlements
A dealer plans to enter a 30-day repo to finance $18 million of corporate bond inventory before month-end. The draft terms provide daily margining, title transfer to the lender, and custody of the securities at the lender’s foreign affiliate until unwind. Operations proposes to book the cash today, leave the bonds on internal availability reports as unencumbered, and decide the Form 1 treatment when the MFR is prepared next week. As CFO, what is the best next step?
Best answer: D
What this tests: Element 12 — Operations and Settlements
Explanation: The proposed financing should not be treated as routine just because it has repo economics and daily margining. Before the transaction is booked or reflected in Form 1 and the MFR, the CFO should require documented confirmation of legal structure, collateral location and control, accounting treatment, and regulatory margin treatment.
Financing arrangements must be assessed by more than their funding economics. In this scenario, title transfer, foreign-affiliate custody, daily margining, and the proposed use of the bonds as “unencumbered” inventory all affect legal enforceability, collateral control, books and records, accounting presentation, and Form 1 margin treatment. The CFO’s proper workflow is to stop the “book now, analyze later” approach and require a documented pre-booking review.
Waiting for later review, relying only on daily margining, or escalating externally before internal analysis would skip key prudential safeguards.
The CFO should not rely on economics alone; the legal structure, collateral control, accounting, and regulatory treatment must be confirmed before booking and reporting.
Topic: Element 1 — General Regulatory Framework
An Investment Dealer leaves a client-segregation deficiency unresolved. Two months later, trading losses and funding pressure force the firm into insolvency proceedings, and the trustee finds a shortfall in client securities. What is the most likely consequence involving CIPF for eligible clients?
Best answer: A
What this tests: Element 1 — General Regulatory Framework
Explanation: When a CIRO member becomes insolvent and client property is missing, CIPF is meant to protect eligible clients by helping return their cash and securities or covering a shortfall, subject to applicable limits. It does not insure market performance or recapitalize the dealer.
The Canadian Investor Protection Fund (CIPF) is a client protection mechanism for insolvency of a CIRO member firm. In this scenario, the key facts are insolvency plus a shortfall in client securities. That is the situation in which CIPF may step in through the insolvency process to help return eligible client property or compensate for missing property, subject to applicable limits.
CIPF is not a prudential rescue fund for the dealer, and it does not guarantee that investments will not lose value in the market. A segregation failure matters here because, once the firm becomes insolvent, missing client assets can create a compensable client property shortfall. The closest trap is the idea that poor controls automatically make all client losses recoverable; CIPF protection is tied to missing client property at an insolvent member firm, not normal market losses.
CIPF’s role is to protect eligible clients of an insolvent CIRO member when client property is missing, subject to applicable limits.
Topic: Element 2 — General Financial Requirements
A CIPF invoice for an Investment Dealer states that the 2026 annual assessment was calculated from 2025 revenue reported for CIPF funding purposes of $101.4 million. The controller expected about $84 million because the dealer itself earned $84 million from securities business, but the parent group also has a non-member insurance subsidiary and a foreign affiliate. Before the CFO approves payment or disputes the invoice, what should be verified first?
Best answer: B
What this tests: Element 2 — General Financial Requirements
Explanation: The first issue is whether the invoice was calculated from the correct input. When the controller is comparing the bill to dealer-only revenue while the group has non-member affiliates, the CFO should first verify the filed reconciliation used for CIPF funding and confirm what revenue was included.
For CIPF funding, the key control is to validate the assessment base before approving payment or challenging the invoice. Here, the apparent difference may simply come from using consolidated group amounts instead of the Investment Dealer’s own reported revenue for CIPF funding purposes. The CFO should therefore obtain the filed reconciliation supporting that reported amount and confirm whether only the dealer’s covered business was included and whether affiliate revenue was excluded or treated correctly.
That first step answers the real question: is the invoice wrong, or is the firm’s internal expectation based on the wrong population of revenue? Capital forecasts, governance approvals, and client-asset schedules can matter operationally, but only after the assessment input itself has been confirmed.
That reconciliation shows whether the assessment used the correct dealer-only funding base rather than consolidated affiliate revenue.
Topic: Element 14 — Other Capital Provisions
All amounts are in CAD. At month-end, an Investment Dealer’s draft Form 1 shows no securities concentration charge. During the CFO’s review, the finance manager notes that a 4.8 million long position in ABC Mining common shares and a 1.1 million long position in ABC Mining warrants were tested separately. The firm’s policy requires same-issuer exposures to be aggregated, independently priced, and escalated to the UDP before filing if the tentative concentration charge exceeds 10% of RAC. RAC before any concentration charge is 13.0 million, and the controller estimates the aggregated charge at about 1.6 million; the warrant price challenge is still open. What is the best next step?
Best answer: C
What this tests: Element 14 — Other Capital Provisions
Explanation: The draft filing cannot stand because the exposure was split by instrument and the warrant valuation control is still unresolved. The CFO should complete price verification, aggregate the issuer exposure, reflect the concentration charge in Form 1/MFR, and follow the firm’s pre-filing escalation to the UDP because the estimated charge exceeds the 10% policy trigger.
Securities concentration oversight is a pre-filing control, not a post-filing cleanup. Here, the dealer has two proprietary positions tied to the same issuer, so the CFO should ensure they are aggregated and priced on a supportable basis before the month-end capital filing is finalized. Once the warrant price is verified, the concentration charge should be recalculated and included in Form 1/MFR using the month-end facts. Because the estimated charge is 1.6 million on 13.0 million of RAC, it exceeds the firm’s 10% internal trigger, so the CFO should also inform the UDP before filing. A later sale may reduce future exposure, but it does not remove the current reporting and escalation obligation.
Concentration must be measured on the month-end same-issuer exposure using supportable prices, and the firm’s 10% trigger requires pre-filing UDP escalation.
Topic: Element 5 — Capital, Records, and Reporting
An investment dealer recently expanded its principal inventory business into listed options and structured notes. Its RAC spreadsheet was never updated for those products, and manual price overrides are entered by one finance employee without independent review. The CFO discovers that the month-end RAC report materially understated inventory margin charges. What is the most likely consequence for the firm?
Best answer: C
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: The dealer’s capital-adequacy reporting system was not maintained for its changed risk profile, so inventory margin charges were understated and RAC was likely overstated. The immediate concern is a potentially misstated prudential filing and a missed early-warning signal, not just an accounting cleanup later.
This is a capital-control failure, not just a bookkeeping issue. When a dealer adds new product types but does not update RAC logic or maintain independent review over pricing overrides, the system may no longer capture the firm’s real risk. If inventory margin charges are understated, risk adjusted capital (RAC) is overstated.
That creates immediate prudential consequences:
A balanced general ledger does not make the RAC report reliable, and the issue is separate from client asset segregation unless there is an actual segregation shortfall.
Because the outdated RAC logic understated margin charges, the firm likely overstated RAC, which can mask early warning and require prompt correction and stronger controls.
Topic: Element 14 — Other Capital Provisions
An Investment Dealer’s CFO is reviewing month-end foreign exchange margin for RAC. For this question, apply these CIRO principles:
The worksheet shows:
Which treatment is INCORRECT?
Best answer: C
What this tests: Element 14 — Other Capital Provisions
Explanation: Foreign exchange margin is applied separately to each currency exposure. Same-currency netting and a matched same-currency hedge are acceptable, but a EUR position cannot be offset against a GBP position just because both are foreign currencies.
The key step in applying foreign exchange margin is to isolate the net exposure in each individual currency. Here, the USD receivable and USD payable can be netted because they are the same currency, and the remaining USD amount can be further reduced by the matched USD forward sale because its currency, amount, and settlement timing align. After permitted netting and hedging, any remaining exposure in EUR and GBP must still be assessed separately.
Trying to offset a long EUR position against a short GBP position is not permitted. Those are different currency risks and can move independently against CAD, so combining them would understate the dealer’s true FX exposure. The closest tempting alternative is the matched USD forward treatment, but that is appropriate because it offsets the same currency risk on matching terms.
EUR and GBP exposures must be margined separately because CIRO foreign exchange margin is applied by currency, not by overall non-CAD balance.
Topic: Element 4 — Offering and Distribution of Securities
Ridgeline Data Corp., a TSX-listed issuer, has approved the sale of its only operating subsidiary. The CFO reviews the disclosure file before it is marked complete. The file contains signed board resolutions, notice to the lending syndicate, a draft analyst-call Q&A, and an instruction to discuss the sale in the next quarterly MD&A. The issuer’s disclosure policy states that a material change must be publicly announced promptly and followed by a material change report on SEDAR+ within 10 days, and counsel has classified the sale as a material change. Which required disclosure step is missing?
Best answer: A
What this tests: Element 4 — Offering and Distribution of Securities
Explanation: The missing item is the formal material-change disclosure. Once counsel concluded the sale is a material change, the issuer must promptly tell the market and file the required report; internal approvals and future MD&A disclosure are not enough.
A public company cannot defer disclosure of a material change until its next periodic filing. When an event is determined to be a material change, the core continuous-disclosure requirement is timely public disclosure, typically through a prompt news release, followed by the prescribed material change report within the stated timeframe. In this scenario, the file includes supporting internal documents and investor-relations materials, but it lacks the mandatory market-wide disclosure step.
The key point is that selective or delayed communication does not satisfy continuous-disclosure obligations. Notifying lenders, preparing analyst scripts, or planning a later MD&A update may be useful, but they do not replace the required immediate public disclosure process.
Because the transaction has been classified as a material change, the issuer must make timely public disclosure rather than waiting for the next MD&A.
Topic: Element 3 — Dealer Business Model
A mid-sized Investment Dealer wants to expand services. The CFO wants a model that can add client-facing revenue while keeping the firm’s direct exposure to client custody, settlement, and margin financing as low as possible. The firm is willing to use a fully documented arrangement with another CIRO-regulated Investment Dealer. Which service model best fits that objective?
Best answer: D
What this tests: Element 3 — Dealer Business Model
Explanation: A fully disclosed introducing arrangement lets the firm serve clients while another Investment Dealer carries the accounts. That keeps the firm’s direct balance-sheet and operational exposure to custody, settlement, and margin financing lower than if it carried accounts, held client assets, or lent securities itself.
In a fully disclosed introducing arrangement, the introducing dealer can maintain the client relationship, but the carrying broker performs the account-carrying functions under a documented agreement. The decisive factor here is where the direct prudential and operational exposure sits. Compared with holding client assets or financing positions itself, the introducing firm generally has less direct exposure to custody, settlement, stock record, and client margin funding.
The closest distractor is custody-only safekeeping, but it still leaves the firm directly responsible for protecting client assets.
Because the carrying broker performs the account-carrying functions, leaving the introducing dealer with less direct custody, settlement, and financing exposure.
Topic: Element 5 — Capital, Records, and Reporting
The CFO of a CIRO Investment Dealer is reviewing the firm’s annual insurance renewal. The parent company proposes dropping the firm’s bond covering cash and securities handling risks and relying instead on D&O, cyber, and professional liability policies. Which exposure is part of the dealer’s required prudential insurance coverage?
Best answer: A
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: Required dealer insurance focuses on operational loss events involving cash and securities, not general business risks. A core element is fidelity-style protection for losses such as employee dishonesty and forgery, so removing that coverage would leave a prudential gap.
CIRO’s minimum insurance framework is meant to protect an Investment Dealer against specified operational losses that can directly affect money and securities handled by the firm. Core required coverage includes fidelity-type risks such as employee dishonesty, forgery or alteration, and other losses involving property on premises or in transit. In this scenario, replacing that protection with D&O, cyber, or professional liability coverage would not address the same prudential requirement.
A CFO should confirm that the firm’s insurance program still covers the dealer’s actual handling of client and firm cash and securities, including relevant locations and processes. By contrast, market losses, lost revenue, and regulatory sanctions are not the core exposures addressed by the required dealer bond or insurance framework.
CIRO’s required dealer insurance is designed to cover operational losses involving money and securities, including dishonest acts and forgery.
Topic: Element 3 — Dealer Business Model
An investment dealer’s CFO is deciding where to place the firm’s own surplus cash for about 45 days. The cash may be needed on short notice, so the board wants a security with a known maturity value and minimal issuer credit risk rather than equity upside. Which security best fits that requirement?
Best answer: D
What this tests: Element 3 — Dealer Business Model
Explanation: A Government of Canada treasury bill best matches a short-term liquidity need because it is a debt security with a stated maturity and very low sovereign credit risk. The other choices are equity or equity-like exposures, so their value can move materially before the cash is needed and they do not promise principal repayment on a near-term date.
The decisive factor is the combination of short maturity and predictable repayment. A treasury bill is a short-term debt security issued at a discount and repaid at par on maturity, so if the dealer holds it to maturity, the value is known in advance, subject to minimal sovereign credit risk. That makes it appropriate for temporary treasury placement when cash may be needed soon.
By contrast, common shares, perpetual preferred shares, and equity ETF units are equity exposures. They may offer dividend income or upside potential, but they do not provide a contractual repayment date for principal. Their prices can also change materially over a 45-day period, which is inconsistent with a near-term liquidity reserve. The key takeaway is that short-term government debt is generally better suited than equity securities when certainty of value and timing matters most.
A short-term Government of Canada treasury bill is debt with a fixed maturity and very low credit risk, making it the best fit for a near-term liquidity reserve.
Topic: Element 10 — Credit Risk and Client Accounts
The CFO of a CIRO Investment Dealer is reviewing unsecured settlement exposures before month-end Form 1. All amounts are in CAD. For this question, use the firm’s CIRO-based margin rates for these counterparties: AI 0%, AC 2%, RE 5%. Any required margin reduces RAC dollar-for-dollar.
Current exposure
Assume all listed actions are operationally and legally available. Which action would improve RAC the most?
Best answer: B
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: The best action is the one that removes the largest margin deduction. Moving 4,000,000 from an RE exposure with 5% margin to an AI exposure with 0% margin lowers required margin by 200,000, which is more than any other single remediation.
Counterparty category drives the margin deduction, and that deduction reduces RAC dollar-for-dollar. Here, AI exposure carries 0% margin, AC 2%, and RE 5%, so the CFO should choose the action with the largest drop in required margin.
The key comparison is margin rate times the exposure moved or reclassified, not the largest nominal balance.
This shifts 4,000,000 from 5% margin to 0% margin, cutting the deduction by 200,000, the largest RAC improvement.
Topic: Element 6 — Corporate Governance and Ethics
The CFO of a CIRO-regulated investment dealer reviews an internal audit file on the firm’s containment program for confidential and material non-public information related to corporate finance mandates. The file includes:
For wall-crossed situations, the written procedure only states that information may be shared “when business requires it.” The file has no record of who was wall-crossed, who approved the disclosure, what matter it related to, or when the person’s access and trading restrictions ended.
Which missing control is the most significant deficiency?
Best answer: D
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: The decisive gap is the absence of a documented wall-crossing and need-to-know process. A firm must be able to show who received confidential and material non-public information, who approved that access, what it related to, and when the restriction was lifted.
Containment policies for confidential and material non-public information must do more than state general confidentiality expectations. In this scenario, the firm already has several supporting controls, but it lacks the core evidence trail for wall-crossed disclosures. When MNPI is shared outside the immediate deal team, the firm should document the recipient, the approver, the relevant matter, the reason access was needed, and when access and related trading restrictions end.
Training, physical-security checks, and board reporting can all be useful, but they do not replace the fundamental control over who was given MNPI and for how long.
Without documented wall-crossing records and need-to-know approvals, the firm cannot evidence who received MNPI or when related access and trading restrictions should end.
Topic: Element 8 — Risk Management and Internal Controls
The CFO of an Investment Dealer is redesigning the firm’s enterprise risk-management framework after a CIRO review. The board wants clear roles for risk appetite, limit-setting, and control oversight across trading, treasury, operations, and finance. Which feature is MOST consistent with a sound framework?
Best answer: A
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: A sound dealer risk framework starts with board-approved risk appetite and tolerance, then translates that appetite into measurable limits and controls through management. Independent risk or compliance oversight monitors adherence and escalates breaches, while internal audit remains an assurance function rather than a limit-setting one.
The core governance principle is clear allocation of roles across the enterprise. The board approves the firm’s overall risk appetite and tolerance. Senior management then converts that appetite into measurable limits, monitoring metrics, mitigants, and escalation triggers for areas such as trading, treasury, operations, and finance. Business units own the risks they take, but independent risk and compliance functions provide challenge, monitor breaches, and support timely escalation. Internal audit is the third line: it evaluates whether the framework and controls are designed and operating effectively, but it should not run the framework day to day.
This structure fits CIRO prudential expectations because risk identification, measurement, limits, controls, and responsibilities must work across the whole dealer, not as isolated desk-by-desk practices. The closest distractor confuses risk ownership with risk appetite governance.
It properly assigns board governance, management implementation, and independent oversight within an enterprise-wide risk framework.
Topic: Element 9 — Inventory, Pricing, and Underwriting
The CFO of a CIRO-regulated investment dealer reviews a monthly trading-desk exception report. One approved Trader on the corporate debt desk has twice exceeded an internal concentration limit, two thinly traded positions were manually priced above the last independent quote, and one illiquid inventory position has remained unchanged for 30 days. The desk head says the positions are profitable and asks finance to leave the report open until next quarter. Which response by the CFO is NOT appropriate?
Best answer: B
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: The inappropriate response is to accept the desk’s reassurance based on profitability. A CFO’s oversight role requires independent challenge of trader marks, recurring limit breaches, and stale or illiquid inventory that could distort reported results and regulatory capital.
Oversight of approved Traders and trading desks requires the CFO to act as an independent control function, not simply accept the desk’s explanation. In this scenario, repeated limit breaches, manual marks above independent quotes, and aged illiquid inventory are all warning signs that require challenge, documentation, and follow-up. The CFO should ensure independent price verification, review whether valuation or capital adjustments are needed, and escalate unresolved or repeated exceptions through the firm’s governance channels. Increased monitoring is also prudent while the issues remain open. Profitability is not a control substitute: unsupported unrealized gains can overstate P&L and capital, so leaving the report open without challenge would be inappropriate.
The key takeaway is that desk profitability never eliminates the need for independent oversight and escalation.
Positive unrealized P&L does not replace independent oversight of limit breaches, pricing exceptions, and illiquid inventory.
Topic: Element 10 — Credit Risk and Client Accounts
During an internal review, the CFO must decide which margin account can continue to receive guarantee-supported credit treatment. The dealer’s policy allows that treatment only when the guarantee is written, signed by an authorized person, clearly covers the account obligation, is in place before or when credit is extended, and is backed by documented evidence of the guarantor’s financial capacity.
Which file best supports leaving the current treatment unchanged?
Best answer: A
What this tests: Element 10 — Credit Risk and Client Accounts
Explanation: For prudential purposes, the firm can rely on a third-party guarantee only if the file supports enforceability, clear obligation coverage, and ability to pay. Only Patel Family Holdings has all of those elements documented before the client debit was created.
The key issue is documentation quality for a client-account credit support arrangement. From a CFO oversight perspective, the firm should not rely on a guarantee unless the file shows an enforceable written commitment, clear linkage to the specific obligation, an authorized signatory, timing that predates or matches the extension of credit, and evidence that the guarantor has the financial capacity to perform.
If one of those elements is missing, the proper corrective response is to stop relying on the guarantee, reclassify the exposure based on the client alone, and assess any related margin, capital, or supervisory follow-up. The written guarantee with vague scope is the closest distractor, but unclear obligation coverage and missing authority evidence still make it unsuitable for continued prudential treatment.
This is the only file with a written, account-specific guarantee from an authorized signer, obtained before credit was extended and supported by documented capacity.
Topic: Element 1 — General Regulatory Framework
A CIRO-member Investment Dealer routes listed equity orders to Canadian marketplaces and outsources trade reporting and stock-record maintenance to a non-member service provider. Over the last month, the vendor caused repeated incorrect short-sale markers under UMIR and several unresolved position differences. The COO tells the CFO that the contract makes the vendor responsible, so CIRO would deal with the vendor, not the dealer. What is the primary prudential red flag?
Best answer: A
What this tests: Element 1 — General Regulatory Framework
Explanation: The key issue is management’s mistaken view of CIRO’s authority. A CIRO-member dealer remains responsible for compliance with applicable CIRO requirements, including UMIR and IDPC obligations, even when an outsourced provider performs part of the process.
CIRO’s recognition orders and mandate let it oversee member dealers’ compliance with the IDPC Rules and, for marketplace activity, UMIR. Outsourcing trade reporting or stock-record maintenance does not transfer that accountability to a vendor. The COO’s statement is therefore the main red flag because it shows a misunderstanding of CIRO’s jurisdiction and enforcement reach over the dealer’s regulated functions.
Funding strain, contract remedies, and client reporting issues may follow, but they are downstream consequences rather than the core prudential weakness.
A dealer cannot outsource away compliance, because CIRO can examine and enforce the member’s UMIR and IDPC obligations even when a vendor performs the function.
Topic: Element 5 — Capital, Records, and Reporting
A CIRO Investment Dealer that carries client accounts holds client securities partly in its vault and partly at acceptable securities locations. During the year-end Form 1 audit, the CFO asks for a substantive procedure aimed specifically at safeguarding client assets and segregation, not just record agreement or contractual responsibilities. Which procedure is most appropriate?
Best answer: B
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: A safeguarding-assets review focuses on whether client property actually exists, is held in permitted locations, and is properly segregated. Observing vault counts and tracing sampled securities to segregation records and acceptable locations most directly addresses that objective.
The core concept is distinguishing the audit objective behind each substantive procedure. A safeguarding-assets review is designed to verify the protection, location, and segregation of client assets. In this scenario, physically observing vault holdings and tracing sampled securities to segregation records and acceptable securities locations directly addresses whether the dealer is actually safeguarding client property in accordance with its custody obligations.
A reconciliation procedure tests whether internal records agree with each other. An introducing-carrying relationship review examines which firm is responsible for custody, margin, statements, or recordkeeping under the agreement. A confirmation procedure obtains evidence about balances from an external party or client. Those procedures can all be useful, but they do not most directly test the firm’s actual safeguarding of client securities here.
This directly tests the existence, location, and segregation of client securities, which is the core of a safeguarding-assets review.
Topic: Element 6 — Corporate Governance and Ethics
At a CIRO investment dealer, the CFO learns on the day a Form 1 filing is due that a thinly traded inventory position was marked using trader estimates with no independent support. Using a supportable price would materially reduce RAC. The CEO says the position will likely recover and asks the CFO to file now and adjust next month. Which response by the CFO is NOT appropriate?
Best answer: D
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: Ethics and integrity require the CFO to ensure regulatory reporting is honest, supportable, and not shaped by pressure from business management. Filing first and fixing later is improper when the CFO already knows the valuation support is deficient and the capital picture would change.
For a CFO, ethics and integrity are not limited to avoiding fraud; they also require resisting pressure to present a misleading prudential position. In this scenario, the valuation lacks independent support and affects RAC, so the CFO should treat it as a reporting integrity issue, not a temporary business inconvenience.
Prudent actions include:
The problematic response is the one that knowingly leaves unsupported marks in place to avoid the immediate consequences of a weaker capital result.
Knowingly filing with unsupported values to preserve a stronger capital position is inconsistent with the CFO’s duty of integrity and fair regulatory reporting.
Topic: Element 7 — Duties, Liabilities and Defences
An Investment Dealer’s CFO tells the CEO and the audit committee chair that a thinly traded debenture position is carried at an internal model price that is $2.4 million above the most supportable exit value. Operations also reports a $900,000 client-segregation shortfall that has remained unresolved for 12 business days. Management decides to leave both items unchanged until after quarter-end because recording them now would push RAC below the firm’s internal early warning level. Which is the primary prudential red flag?
Best answer: C
What this tests: Element 7 — Duties, Liabilities and Defences
Explanation: The most serious issue is management’s decision to knowingly defer correcting a valuation overstatement and an unresolved segregation shortfall because the adjustment would weaken RAC. For directors and executives, that is a governance and prudential oversight failure, not just a market or liquidity concern.
Directors and executives must act honestly, in good faith, and with reasonable care when significant prudential issues are identified. Here, the CFO has identified two concrete problems: an overstated inventory value and an unresolved client-segregation shortfall. The key red flag is the decision to leave both uncorrected until after quarter-end solely because the entries would reduce reported RAC.
Illiquidity, funding strain, and reporting delay may follow, but they are downstream effects of the more serious choice to ignore and postpone a known prudential problem.
Directors and executives must address and escalate known prudential deficiencies, not defer them to avoid a capital impact.
Topic: Element 14 — Other Capital Provisions
At month-end, the CFO is preparing the dealer’s Form 1 working papers. For this question, apply the firm’s CIRO foreign exchange margin worksheet as follows: net exposures are calculated separately by currency; same-currency cash items and forward contracts may be offset; different currencies may not be offset; and the applicable FX margin rate for both USD and EUR is 5%.
What total FX margin should the CFO record?
Best answer: D
What this tests: Element 14 — Other Capital Provisions
Explanation: FX margin is based on the net unhedged position in each currency, not on one combined foreign-currency total. Here the dealer is long USD 500,000 and short EUR 600,000; after translating each net position to CAD and applying 5%, the total margin is $77,850.
Under the worksheet rule, the CFO must net assets, liabilities, and forwards within each currency, translate each net exposure to CAD, and then apply the 5% rate to each currency separately. The USD items net to a long USD 500,000. The EUR items net to a short EUR 600,000. Because CIRO foreign exchange margin is applied by currency, the long USD position cannot offset the short EUR position.
\[ \begin{aligned} \text{USD margin} &= 500{,}000 \times 1.35 \times 5\% = 33{,}750 \\ \text{EUR margin} &= 600{,}000 \times 1.47 \times 5\% = 44{,}100 \\ \text{Total} &= 77{,}850 \end{aligned} \]The key trap is either netting different currencies together or ignoring the forward sales when determining the same-currency net exposure.
This is the sum of 5% of the CAD-equivalent net USD exposure and 5% of the CAD-equivalent net EUR exposure, calculated separately by currency.
Topic: Element 9 — Inventory, Pricing, and Underwriting
Under CIRO inventory margin rules, which statement best describes a margin offset?
Best answer: B
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: A margin offset is not automatic netting or a revaluation method. It is a permitted reduction in required inventory margin when positions are sufficiently related so that their market risks offset each other to a recognized extent.
The core concept is that inventory margin measures market risk, and a margin offset adjusts that requirement when two positions move in related ways so the dealer’s net exposure is lower than if each position were margined separately. The key idea is reduced combined risk, not elimination of risk.
A margin offset therefore means:
The closest trap is the idea of automatic long-short netting, because offsets depend on qualifying relationships and prescribed treatment, not just opposite position signs.
A margin offset recognizes that qualifying related positions reduce net market exposure, so the combined margin can be lower than the sum of standalone margins.
Topic: Element 13 — Protection of Dealer and Client Assets
A CIRO investment dealer’s CFO is preparing month-end RAC. For this question, assume fully paid client securities meet the minimum safekeeping requirement only if they are held in segregation at CDS, at a Canadian bank or trust company custodian under a written agreement, or at the issuer’s transfer agent while being registered directly to the client. Any other location requires a 100% RAC deduction. All amounts are CAD.
Exhibit:
What RAC deduction should the CFO record for safekeeping deficiencies?
Best answer: D
What this tests: Element 13 — Protection of Dealer and Client Assets
Explanation: The deduction is based on the market value of client securities not held at an acceptable securities location under the assumptions given. The holdings at CDS, the trust company custodian, and the transfer agent qualify, while the non-approved affiliate and the branch cabinet do not, so the total deduction is $1.2 million.
This item tests whether the CFO can apply minimum safekeeping requirements to a capital consequence. Under the stated assumptions, the first three holdings satisfy the requirement because they are at acceptable locations and are properly segregated or in transfer. The last two holdings do not satisfy the requirement: a non-approved affiliate is not an acceptable securities location, and a branch cabinet is not an acceptable external custody location. Because the question says deficient positions require a 100% RAC deduction, the CFO must deduct their full market value.
The main trap is over-deducting for the transfer-agent position even though the stem specifically treats it as acceptable during direct registration.
Only the $0.9 million at the non-approved affiliate and the $0.3 million at the branch fail the stated safekeeping test, for a $1.2 million RAC deduction.
Topic: Element 8 — Risk Management and Internal Controls
The board of an Investment Dealer has approved a risk appetite stating that total risk consumption under the firm’s stress-testing model must remain within a firm-wide limit, and any breach must be escalated the same day to the CFO and UDP. Internal audit found that the equity desk, fixed-income desk, and treasury unit each monitor separate desk limits, but no one consolidates the results under the enterprise-wide model. Which control enhancement best fits that gap in the dealer’s risk-management framework?
Best answer: C
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: The decisive factor is enterprise-wide measurement against the board-approved risk appetite, not a local or after-the-fact control. A daily aggregated dashboard with automatic breach escalation aligns risk identification, limit monitoring, and accountability with the roles of the CFO and UDP.
A risk-management framework is effective only if exposures are identified, measured, and escalated at the same level where the firm sets its risk appetite. In this scenario, the board limit applies to total risk consumption under an enterprise-wide stress model, so desk-by-desk monitoring is not enough. The best control is one that aggregates all relevant business-unit results each day, compares the combined amount with the approved firm-wide limit, and automatically routes breaches to the CFO and UDP for action.
Funding capacity, local reporting, and annual attestations may support the framework, but they do not close the core gap in enterprise-wide measurement and breach governance.
It directly measures risk against the board-approved firm-wide appetite and assigns immediate escalation to the accountable executives.
Topic: Element 15 — UDP Responsibilities
At month-end, the CFO of a CIRO Investment Dealer receives independent price verification showing a thinly traded debenture position is overstated by $1.8 million. Recording the prudent valuation adjustment now would move the firm into early warning under CIRO capital rules, and the monthly financial report (MFR) is due the next business day. The CFO also learns that a prior internal exam finding on daily inventory price verification at that desk remains unresolved. Under the firm’s procedures, any early-warning trigger or material control breakdown must be escalated immediately to the UDP. The head trader asks the CFO to wait 48 hours for a new quote. What is the single best action for the CFO?
Best answer: D
What this tests: Element 15 — UDP Responsibilities
Explanation: The CFO should recognize the prudent valuation adjustment when reliable evidence exists, not when the desk prefers. Because the adjustment triggers early warning and stems from an unresolved control weakness, it must be escalated immediately to the UDP and reflected in required CIRO reporting.
This scenario tests the UDP’s responsibility to oversee significant risks and ensure compliance deficiencies are addressed promptly. A validated inventory valuation overstatement is a prudential issue because it affects capital, and it is also a control issue because a prior price-verification finding remains unresolved. Once the CFO has credible evidence of the overstatement, the firm should record the full prudent valuation adjustment in current books and ensure the MFR and any required early-warning notices reflect that reality. Immediate escalation to the UDP is appropriate because the UDP must ensure management responds properly, the control weakness is remediated, and board awareness is achieved as needed.
Waiting for a more favorable quote, booking only part of the loss, or separating the control issue from the valuation issue would all weaken the firm’s prudential response.
A known valuation overstatement that triggers early warning and exposes an unresolved control deficiency requires immediate recognition, UDP escalation, and timely CIRO reporting.
Topic: Element 2 — General Financial Requirements
An Investment Dealer receives a CIPF assessment notice for $280,000. The notice states that the full amount is due June 30 and that any accepted change from revised data will be settled later through a debit or credit adjustment. The CFO believes the dealer’s data overstated the assessment. Which response best fits the required funding procedure?
Best answer: B
What this tests: Element 2 — General Financial Requirements
Explanation: The decisive factor is timing. When CIPF issues an assessment notice with a due date and an explicit later adjustment process, the dealer should pay as invoiced and resolve any revision afterward through that process.
CIPF funding is collected from Investment Dealers through assessments. In this scenario, CIPF has already specified both the current payment obligation and the mechanism for fixing any later error: pay the assessed amount by the due date, then settle differences through the later debit or credit adjustment. A dealer may challenge or revise the underlying data, but it should not create its own payment terms by delaying cash payment, paying only the portion it considers correct, or netting against an expected credit that has not yet been issued. The practical rule is to follow the assessment notice first and use the prescribed true-up process second. The closest distractor is partial payment, but the notice does not permit a unilateral holdback.
The notice makes the current assessment payable by the stated date, with any later correction handled through the formal CIPF adjustment process.
Topic: Element 8 — Risk Management and Internal Controls
All amounts are in CAD. An Investment Dealer with current RAC of $14.5 million is considering a new OTC equity derivatives desk. Independent risk management estimates these direct first-month RAC reductions:
Because the independent risk system is not yet connected, the desk proposes that traders perform daily price verification and limit monitoring for the first month. Firm policy requires escalation to the CFO and board risk committee before launch if modeled RAC falls by more than 10% or if a material control is not independent from the business line. What is the best conclusion?
Best answer: D
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: Independent risk management should escalate before launch because the proposal breaches both stated conditions. The modeled RAC reduction is $2.0 million, taking RAC from $14.5 million to $12.5 million, and the planned control setup is not independent of the trading desk.
The key issue is launch readiness for a higher-risk derivatives business line. Under the firm’s policy, independent risk management must escalate if either the modeled RAC drawdown exceeds 10% or a material control is not independent; here, both conditions are met.
Because the independent risk system is not connected, having traders perform daily price verification and limit monitoring would place key controls inside the business line. Remaining above zero RAC does not remove the obligation to escalate when the firm’s stated trigger has been exceeded.
The direct RAC reduction is $2.0 million, about 13.8% of current RAC, and trader-run verification and limit monitoring are not independent controls.
Topic: Element 8 — Risk Management and Internal Controls
An Investment Dealer’s RAC is still comfortably positive, and no CIRO filing is currently overdue. Over the last week, unresolved settlement breaks with one clearing counterparty have doubled, a thinly traded debenture position is still carried at a week-old price, and internal audit found that treasury exceptions were discussed informally but not logged or escalated. The monthly board risk package is due tomorrow. As CFO, what is the single best response?
Best answer: D
What this tests: Element 8 — Risk Management and Internal Controls
Explanation: The best response is the one that applies risk management as a firm-wide, preventive process rather than a narrow fix. The CFO should assess the combined exposure, strengthen interim controls, and escalate promptly because the objective is to manage material risks before they turn into breaches or losses.
Risk management is the disciplined process of identifying, assessing, controlling, monitoring, and escalating risks so the dealer stays within risk appetite, protects client and firm assets, and meets regulatory obligations. In this scenario, the problem is not just one stale price or one settlement issue. The rising counterparty exposure, possible valuation weakness, poor exception escalation, and imminent board reporting together indicate a broader control and governance risk. The CFO should therefore coordinate an immediate cross-functional review, measure the aggregate exposure, put temporary limits or enhanced approvals in place, and escalate to senior governance bodies, including the UDP and board.
A response that waits for a capital breach or fixes only one symptom is reactive, not effective risk management.
Risk management is meant to identify, assess, control, monitor, and escalate aggregate risks before they become capital or compliance breaches.
Topic: Element 2 — General Financial Requirements
The CFO of a CIRO investment dealer is preparing staff for a routine financial examination. Which briefing statement about the Canadian prudential oversight framework is most accurate?
Best answer: B
What this tests: Element 2 — General Financial Requirements
Explanation: For routine prudential examinations, the CFO should treat CIRO as the primary regulatory examiner. CIPF is separate and focused on investor protection, so it is not the firm’s normal examiner for Form 1 support, capital records, or segregation evidence.
The key framework point is that CIRO is the self-regulatory body that conducts routine prudential oversight of investment dealers. In practice, that means CIRO examines books and records, capital adequacy, regulatory reporting such as Form 1, segregation and safeguarding controls, and related supervisory evidence. CIPF is a separate investor protection fund; its role is tied to protecting client property in member-failure contexts and related risk monitoring, not replacing CIRO as the firm’s day-to-day prudential examiner.
A CFO preparing for an examination should therefore organize support primarily for CIRO review, including reconciliations, capital calculations, exception logs, and remediation evidence. External auditors and clearing agencies are important control participants, but neither performs CIRO’s routine regulatory examination function.
Routine prudential reviews of capital, reporting, books and records, and segregation are conducted by CIRO, while CIPF has a separate investor-protection role.
Topic: Element 13 — Protection of Dealer and Client Assets
The CFO of a CIRO investment dealer reviews the monthly control file for client free credits. It shows:
Which required element is deficient?
Best answer: A
What this tests: Element 13 — Protection of Dealer and Client Assets
Explanation: The key gap is the absence of the required client free credit disclosure on the actual account statements sent to affected clients. Giving that disclosure only at account opening is not enough when statements continue to show free credit balances.
Client free credit disclosure is an ongoing client-reporting requirement, not just an onboarding disclosure. If a client account statement shows a free credit balance, the firm must ensure the statement itself includes the required disclosure so the client is informed each time that balance appears.
For a CFO, the decisive control is the link between the report identifying accounts with free credit balances and the statement production process for those same accounts. A monthly reconciliation to the general ledger supports balance accuracy, but it does not prove the required disclosure was actually delivered on client statements. Governance or analytics enhancements may be helpful, but they do not fix the central compliance deficiency: the affected statements lack the required disclosure.
Account-opening disclosure does not replace the required ongoing disclosure on client statements that show client free credit balances.
Topic: Element 7 — Duties, Liabilities and Defences
After a Form 1 reporting breakdown, an Investment Dealer’s board reviews whether it can protect a director who is now named in a civil suit and a regulatory proceeding. Which statement about directors’ indemnity is INCORRECT?
Best answer: D
What this tests: Element 7 — Duties, Liabilities and Defences
Explanation: Director indemnity is conditional, not automatic. A board cannot override the basic requirement that the director acted honestly and in good faith, and penal or regulatory matters also require a reasonable belief that the conduct was lawful.
Under Canadian corporate law, indemnity is a limited protection for directors, not a blanket shield against misconduct. A corporation may generally indemnify a director for costs, settlements, or judgments only if the director acted honestly and in good faith with a view to the corporation’s best interests. For criminal, administrative, or other proceedings that may impose a penalty, the director must also have had reasonable grounds to believe the conduct was lawful. A corporation may also carry D&O insurance, and derivative actions can require court approval before indemnification is allowed. The key point is that bylaws or a board resolution cannot make bad-faith conduct indemnifiable.
Indemnity cannot be created simply by board approval when the director knowingly failed the good-faith standard.
Topic: Element 15 — UDP Responsibilities
During a monthly risk review, the UDP of an Investment Dealer learns that traders have overridden prices on illiquid debentures without documented approval, two client-position stock-record differences have remained unresolved for four business days, and daily free-credit reconciliations were skipped twice because of staff vacancies. The CFO reports that RAC remains above the firm’s internal alert level. Which UDP response is NOT appropriate?
Best answer: D
What this tests: Element 15 — UDP Responsibilities
Explanation: The UDP’s role is not limited to watching RAC. Significant weaknesses in valuation, books and records, and client asset controls require escalation, remediation oversight, and follow-up even if capital is still above an internal threshold.
This scenario presents multiple significant risk indicators: undocumented pricing overrides, unresolved stock-record differences, and missed free-credit reconciliations. A UDP is responsible for ensuring that material compliance and control issues are identified, addressed by accountable management, and monitored to resolution. That responsibility is broader than simply reacting to a RAC breach.
Here, prudent UDP action includes requiring a formal remediation plan, ensuring adequate resources and interim controls, escalating material issues within the governance structure where warranted, and monitoring until fixes are proven effective. The flawed approach is to treat the matter as solely the CFO’s problem and remain passive unless a capital limit is hit. Capital is one signal, not the only trigger for UDP supervision.
The UDP must oversee significant risk remediation and follow-up, not wait for a capital trigger before acting.
Topic: Element 5 — Capital, Records, and Reporting
At month-end, an Investment Dealer’s capital adequacy system reports RAC of $1,180,000. The firm’s policy requires immediate CFO escalation if corrected RAC falls below $1,000,000, and assume CIRO early warning reporting is required below $900,000. During the CFO’s review, a corporate bond inventory position is found to have remained in its pre-downgrade margin class. Each additional margin dollar reduces RAC dollar-for-dollar.
Exhibit:
What is the best conclusion?
Best answer: B
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: The wrong margin class understated inventory margin by $400,000. Because extra margin reduces RAC dollar-for-dollar, corrected RAC is $780,000, which breaches both the firm’s escalation floor and the stated CIRO early warning trigger, showing why system maintenance is a critical RAC control.
Capital adequacy reporting depends on accurate security-master data and margin mapping. Here, the bond remained in its pre-downgrade class, so the system used too little inventory margin and overstated RAC.
Because $780,000 is below both the internal escalation floor and the stated CIRO trigger, the CFO should not wait for the next cycle; the capital report must be corrected promptly and the breach escalated. The key takeaway is that maintaining pricing and margin classifications is central to reliable RAC oversight.
The margin increase adds $400,000, reducing RAC to $780,000, below both stated thresholds and requiring prompt escalation and filing.
Topic: Element 9 — Inventory, Pricing, and Underwriting
A CIRO Investment Dealer’s equity facilitation desk uses this policy for inventory risk. All amounts are in CAD.
Today’s positions are:
What is the best implication for the CFO?
Best answer: A
What this tests: Element 9 — Inventory, Pricing, and Underwriting
Explanation: Using the desk’s stated policy, residual inventory risk is 1.95 million, so the desk remains within its 2.0 million limit. However, the inventory system and daily P&L report are weak controls because they net raw market values at only 0.5 million, materially understating the actual remaining risk.
The key control test is whether inventory, hedges, limits, and P&L are measured on the same risk basis. Here, the long stock position has market value of 3.0 million and beta-adjusted exposure of 4.2 million. The short ETF hedge has market value of 2.5 million and beta-adjusted exposure of 2.25 million. Residual inventory risk is therefore 1.95 million.
Because 1.95 million is below the desk’s 2.0 million limit, the desk is not over limit today. But the inventory system nets only raw market values, showing 0.5 million instead of 1.95 million. That is a material understatement of residual risk and weakens both limit monitoring and daily P&L oversight. The key takeaway is that hedge effectiveness and escalation should be measured using the same risk metric as the approved limit, not simple net market value.
The residual beta-adjusted risk is 1.95 million, so the desk is within limit, but raw market-value netting reports only 0.5 million and understates exposure.
Topic: Element 7 — Duties, Liabilities and Defences
An investment dealer’s board approved a dividend to its parent after management reported excess capital. Two weeks later, an underwriting loss puts the firm into early warning, and creditors allege the directors breached their duty of care by approving the payment. Which director is best positioned to rely on a legal defence?
Best answer: D
What this tests: Element 7 — Duties, Liabilities and Defences
Explanation: The strongest defence comes from a well-documented, informed decision made in good faith. Reviewing capital forecasts, probing assumptions, reasonably relying on written advice, and ensuring the minutes reflect that process best supports the director if the decision is later challenged.
For directors, a key legal defence is that they exercised reasonable care by making an informed decision in good faith on the basis of appropriate information and advice available at the time. Courts are generally more concerned with the decision-making process than with hindsight about how the outcome later turned out. In this scenario, the best defence is the director who actively reviewed risk adjusted capital forecasts, tested management’s assumptions, relied on written finance and legal advice, and ensured the minutes captured the reasoning.
A later loss and early warning event do not, by themselves, defeat a defence when the original approval was reached through a prudent and well-documented process.
A contemporaneous, informed, good-faith process supported by reasonable written advice provides the strongest business judgment and due diligence defence.
Topic: Element 12 — Operations and Settlements
Under CIRO procedures for unresolved differences, which pairing of item and usual corrective action is correct?
Best answer: A
What this tests: Element 12 — Operations and Settlements
Explanation: An unresolved short security difference means the firm has a shortage of securities relative to its records or control location. The usual corrective action is to buy in the missing securities; the other items involve different reconciliation, transfer, or margin treatment.
The key distinction is whether the unresolved item is a shortage, an excess, a reconciliation mismatch, or a transfer item. An unresolved short security difference is a shortage of securities, so the normal operational correction is to obtain the missing position through a buy-in and restore control. An unresolved long difference is an excess position and follows a different correction path. A break is a reconciliation exception that must be investigated and cleared through records matching and follow-up, not by automatically trading the security. A position in transfer is still a tracked position moving through transfer, and if it remains unresolved, prescribed margin treatment may apply. Buy-ins address shortages; they do not describe the standard treatment for longs, breaks, or transfers.
A short security difference is a shortage, so the usual corrective action is to buy in the missing securities and eliminate the deficit.
Topic: Element 12 — Operations and Settlements
An Investment Dealer’s CFO reviews the daily clearing control note before approving the day’s internal capital package. Firm policy requires any clearing deposit or margin movement that appears on the clearing statement and is confirmed by treasury to be posted and reconciled the same day.
Exhibit: Daily CDS deposit reconciliation (March 12, 2026; CAD)
| Item | Amount | Note |
|---|---|---|
| CDS cash deposit per 4:30 p.m. statement | 2,800,000 | Includes a 10:12 a.m. intraday deposit call |
| Treasury wire to CDS at 10:40 a.m. | 300,000 | Bank confirmation received |
| General ledger clearing deposit asset at 5:00 p.m. | 2,500,000 | No journal booked for intraday call |
| Operations comment | — | “Post tomorrow in normal batch” |
What is the only supported action?
Best answer: A
What this tests: Element 12 — Operations and Settlements
Explanation: The exhibit shows a supported same-day increase in the firm’s CDS deposit: the clearing statement includes the call and treasury has confirmed the wire. Under the stated control policy, the unresolved issue is the unposted journal, so the balance must be booked and reconciled before it is used in capital reporting.
This is a clearing reconciliation and control issue, not a discretionary accounting choice. Once the CDS statement shows the higher deposit and treasury has bank confirmation of the related wire, the firm has evidence that the clearing deposit increased to 2,800,000 that day. The remaining break is in the firm’s own books.
The CFO should require a same-day journal entry and completed reconciliation support before relying on the balance:
Waiting for the next batch, using suspense, or reporting the lower GL number would leave a known clearing balance misstated and weaken daily settlement oversight.
The CDS statement and bank confirmation support the extra 300,000 today, so the GL must be updated and reconciled before reporting.
Topic: Element 13 — Protection of Dealer and Client Assets
An Investment Dealer holds $42 million of fully paid client securities at CDS. To reduce recurring U.S. settlement fails before month-end, operations asks the CFO to move the securities for two weeks to an omnibus account at the dealer’s foreign affiliate. The affiliate is not a regulated custodian, is not on the firm’s approved acceptable securities location list, and no custody agreement or legal opinion is in place; internal audit also flagged weak oversight of securities locations last quarter. Form 1 is due in four business days. What is the best CFO decision?
Best answer: B
What this tests: Element 13 — Protection of Dealer and Client Assets
Explanation: Client securities must remain at an acceptable securities location supported by proper approval and custody documentation. Here, the proposed affiliate is not approved, not a regulated custodian, and lacks the required legal and custody framework, so operational pressure and the filing deadline do not justify the move.
The core issue is oversight of acceptable securities locations. A CFO must ensure client securities are held only at locations the firm has determined are acceptable under its CIRO-aligned custody framework. In this scenario, the proposed foreign affiliate fails several key conditions at once: it is not a regulated custodian, it is not on the approved list, and the firm has no custody agreement or legal opinion supporting the arrangement. That means the transfer should not proceed, even on a temporary basis.
Daily reconciliations, affiliate support, or later disclosure are secondary controls; they do not make an unacceptable location acceptable. The proper response is to keep the securities at CDS, stop the proposed transfer, and escalate the control deficiency for remediation. The key takeaway is that acceptability must be established before client assets are moved, not after an operational problem arises.
A non-approved, non-documented foreign affiliate is not an acceptable securities location for these client assets, so the CFO should block the move and escalate immediately.
Topic: Element 6 — Corporate Governance and Ethics
The CFO reviews a month-end inventory valuation file for thinly traded corporate debentures in the firm’s principal account. The file includes trader marks, one external quote screen, and an email from the desk head stating, “Use the desk marks this month so we do not trigger a capital discussion before the financing closes.” Firm policy requires any override of an independent price source that improves RAC by more than $300,000 to be documented, approved by finance and risk management, and escalated to the CFO and UDP. The override would improve RAC by $420,000. Which deficiency is most significant?
Best answer: C
What this tests: Element 6 — Corporate Governance and Ethics
Explanation: The key issue is not file completeness in general; it is an apparent management override aimed at improving the firm’s reported capital position. When a pricing override is explicitly motivated by avoiding a capital discussion and the firm’s escalation rule is triggered, the missing independent approval and escalation create the clearest ethical and regulatory risk.
This scenario tests the risk consequences of unethical behaviour showing up through a control failure. The desk head’s email indicates an intent to influence valuation for capital optics rather than fair pricing. Once the proposed override would improve RAC by more than $300,000, the firm’s policy requires documentation, independent finance and risk approval, and escalation to the CFO and UDP. Those missing steps are the decisive deficiency because they allow a potentially biased valuation to enter books and records and regulatory reporting.
Additional valuation support or risk reports may be useful, but they do not address the evident management-override risk.
The missing approval and escalation are decisive because the email shows a deliberate attempt to use pricing to avoid scrutiny of a material RAC impact.
Topic: Element 5 — Capital, Records, and Reporting
Under the CIRO capital formula, what term describes the dealer’s residual capital after prescribed deductions and risk charges are applied, and therefore the amount used to assess prudential capital adequacy?
Best answer: A
What this tests: Element 5 — Capital, Records, and Reporting
Explanation: Risk Adjusted Capital is the residual amount produced by the CIRO capital formula after prudential adjustments and prescribed risk charges are taken. It is the core measure used to judge whether an investment dealer has sufficient capital.
The core concept is that the capital formula does not stop at accounting capital. It adjusts for prudential concerns by removing or discounting items that are not fully reliable for regulatory capital purposes and by recognizing prescribed risk charges. The resulting residual amount is Risk Adjusted Capital (RAC), which is the main measure of capital adequacy for a CIRO investment dealer.
By contrast, total financial statement capital is an earlier accounting-based figure, and net allowable assets is an intermediate prudential amount rather than the final residual after all capital formula adjustments. The early warning reserve is a supervisory buffer concept, not the name of the formula’s residual capital output.
Risk Adjusted Capital is the capital formula’s bottom-line prudential measure after required deductions and risk charges.
Use the CIRO CFO Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, explanations, and web/mobile app access.
Use the full Securities Prep practice page above for the latest review links and practice route.