CIRO Director: Element 4 — Corporate Governance and Ethics

Try 10 focused CIRO Director questions on Element 4 — Corporate Governance and Ethics, with answers and explanations, then continue with Securities Prep.

Topic snapshot

Sample questions

These questions are original Securities Prep practice items aligned to this topic area. They are designed for self-assessment and are not official exam questions.

Question 1

Topic: Element 4 — Corporate Governance and Ethics

Maple Crest Securities, a CIRO-regulated Investment Dealer, wants to hire a new CFO. The proposed employment letter would be signed by the CEO on behalf of the dealer and promises corporate indemnification plus a clause limiting the CFO’s personal liability for acts done in good faith. A director is asked to approve the package that afternoon, but no one has produced the dealer’s governing documents. What should the director verify first?

• A. External counsel memo on market-standard executive terms
• B. D&O insurance policy limits and exclusions
• C. Current bylaws and board resolutions on authority, indemnification, and liability limits
• D. Compensation committee report on CFO pay levels

Best answer: C

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The first issue is corporate authority, not whether the terms are common or insured. The current bylaws and related board resolutions are the primary internal evidence of who can bind the corporation and what indemnification or liability protections the corporation may grant.

Before approving the employment letter, the director should confirm that the corporation can validly make the promised commitments and that the proposed signatory has authority to do so. Bylaws commonly address officer authority, delegation, indemnification, and procedural limits, while board resolutions may supplement or narrow those powers. If the CEO lacks proper authority, or if the promised protections are broader than what the bylaws or board approvals permit, the dealer could be committing to terms that were not properly authorized.

• Confirm the current bylaw version is in force.
• Check any board resolution delegating signing authority.
• Verify whether indemnification and liability limits are permitted as proposed.

Insurance, market practice, and compensation data may matter later, but they do not cure missing corporate authority.

• Insurance first is tempting, but coverage does not determine whether the dealer validly authorized the promise.
• Market practice may help negotiation, but a common term is still improper if the dealer has not authorized it.
• Compensation review is relevant to pay governance, not to who can bind the corporation or grant protections.

These documents show whether the CEO may bind the dealer and whether the promised indemnity and liability protections are authorized.

Question 2

Topic: Element 4 — Corporate Governance and Ethics

An Investment Dealer’s CFO tells the board chair that she has accepted a paid advisory-board role with a private technology issuer and will receive stock options. The issuer is seeking a financing mandate from the dealer, and draft mandate terms were sent to her personal email before any internal approval of the outside role. The firm has no documented pre-approval process for Executive outside activities. What is the best immediate response by the Board and UDP?

• A. Permit the role with an annual conflict certification and email reminder.
• B. Defer review until the issuer formally becomes a client.
• C. Let investment banking assess the issue after the mandate is priced.
• D. Require disclosure, recusal from issuer matters, and formal conflict review.

Best answer: D

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The main red flag is the unapproved compensated role with an issuer seeking business from the dealer. Because the Executive also received mandate information through a personal email account, the Board and UDP should immediately restrict involvement and conduct a formal conflict and confidentiality review before the role continues.

Outside activities by Directors and Executives should be disclosed and assessed before they begin, especially when compensation, equity, or governance roles could influence the firm’s business decisions. Here, the Executive has a financial interest in an issuer seeking a mandate from the dealer and has already received mandate information outside normal firm channels. The immediate response is to escalate to the Board and UDP, remove the Executive from any issuer-related decisions or information flow, and complete a documented conflict and confidentiality review before deciding whether the activity must be prohibited or can continue with strict conditions. A later business-line review or a simple certification does not contain the current conflict.

• Certification only is too weak because the conflict and information-handling issue already exist and need immediate containment.
• Business-line review later fails because outside activities by Executives require senior governance oversight, not a post-pricing commercial judgment.
• Waiting for client status is inappropriate because a conflict can arise with a prospective issuer before a formal mandate is signed.

The outside role creates an immediate conflict and confidentiality risk, so it must be escalated, restricted, and formally assessed before it can continue.

Question 3

Topic: Element 4 — Corporate Governance and Ethics

A board compensation committee at an Investment Dealer is asked to approve year-end bonuses for the CEO and Head of Retail. The firm exceeded revenue targets, but a whistleblower says senior leaders told staff to “fix suitability later,” and compliance noted a late-year spike in suitability exceptions, client complaints, and manual overrides. Management says no regulator inquiry has started and wants quick approval. Before the committee decides, what should it verify first?

• A. Outside counsel’s assessment of possible future litigation exposure
• B. Draft shareholder disclosure for the upcoming compensation circular
• C. Independent compliance and internal audit findings on misconduct-linked revenue and pay adjustments
• D. Peer dealer benchmarking on bonus levels and retention risk

Best answer: C

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The committee should first obtain independent control-function evidence on whether the revenue behind the proposed bonuses was generated through conduct failures encouraged by senior leadership. That goes directly to compensation conflict and tone at the top, so approving pay before verifying it would be a governance failure.

When executive compensation is tied to strong financial results but there are credible signs of sales-pressure misconduct, the board’s first task is to test whether the performance being rewarded was earned appropriately. Independent findings from compliance and internal audit help the committee determine whether senior leaders’ targets, messages, or override practices contributed to unsuitable activity, complaint-driven revenue, or weakened controls. They also show whether the pay framework includes non-financial risk adjustments, downward discretion, malus, or other mechanisms the committee should apply.

Management’s assurance that no regulator inquiry has begun does not resolve the underlying ethical issue. The governance risk is rewarding behavior that signals profits matter more than client outcomes or compliance. Benchmarking, disclosure drafting, and litigation analysis may matter later, but they come after the board establishes the facts about conduct and incentive alignment.

• Peer pay data helps assess competitiveness, but it does not show whether this year’s results were tainted by misconduct.
• Disclosure drafting is secondary because the board must first understand the underlying conduct and compensation implications.
• Litigation analysis may become relevant later, but the immediate governance question is whether pay would reward unethical behavior.

This evidence shows whether the results being rewarded were produced through misconduct and whether compensation should be reduced, withheld, or reconsidered.

Question 4

Topic: Element 4 — Corporate Governance and Ethics

The board asks why the firm’s ethics policy requires pre-approval, enhanced supervision, and possible prohibition when a Director, Executive, or employee wants to join a client’s business partnership or investment club. Which control function is this policy primarily serving?

• A. Preventing selective disclosure by issuers
• B. Verifying best execution in trading
• C. Monitoring capital adequacy and early warning
• D. Managing conflicts of interest in client relationships

Best answer: D

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: Business partnerships and investment clubs with clients create a direct personal financial stake in the client relationship. The main control purpose is to identify, manage, supervise, or prohibit conflicts of interest that could affect fair and objective treatment of the client.

The core issue is conflict of interest in personal financial dealings with clients. When firm personnel enter a business partnership or investment club with a client, their personal profit motive can compete with their professional obligations and can influence advice, service, supervision, or dispute handling. That is why firms use disclosure, pre-approval, enhanced supervision, and sometimes prohibition for these arrangements.

From a governance perspective, the board and UDP should expect policies that identify these relationships early, assess whether the employee has influence over the client, document the review, and escalate higher-risk cases. The purpose is protecting objective client treatment and the firm’s integrity. This is different from controls aimed at firm capital, issuer disclosure, or trade execution quality.

• Capital adequacy and early warning deal with the firm’s financial condition, not employee-client co-investment conflicts.
• Selective disclosure controls apply to issuer communication of material information, not personal business arrangements with clients.
• Best execution reviews focus on order handling and trading outcomes, not whether a staff member has a conflicted financial tie to a client.

These arrangements create personal profit motives and influence risks that can impair objective treatment of the client.

Question 5

Topic: Element 4 — Corporate Governance and Ethics

An Investment Dealer’s board reviews a quarterly memo. Seventy percent of retail adviser variable compensation is based on gross revenue from proprietary structured notes and new issues, with no reduction for client complaints or compliance findings. After the CCO reported a rise in complaints and that top producers received early, confidential notice of an upcoming underwriting mandate to “line up demand,” the CEO replied that “compliance must support production.” The compensation committee made no changes. What is the primary red flag?

• A. Insufficient adviser product training as the main control gap
• B. Excess dependence on proprietary products for quarterly revenue
• C. Inadequate documentation of compensation committee deliberations
• D. Misaligned incentives reinforced by poor ethical tone at the top

Best answer: D

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The most serious issue is that leadership is rewarding conflicted sales behaviour and signalling that compliance should yield to revenue. That combination weakens ethical culture, increases the risk of confidential-information misuse and client harm, and reflects a governance failure the board must challenge.

The core concept is tone at the top: compensation conflicts become a governance problem when senior leadership normalizes revenue-first behaviour over client interests and compliance. Here, variable pay is heavily tied to sales of higher-conflict products, with no offset for complaints or compliance findings. The CEO’s statement that compliance must “support production” is a direct ethical warning sign, and the early sharing of a confidential underwriting mandate shows those incentives may already be distorting behaviour.

• The board should challenge whether pay metrics encourage conflicted conduct.
• It should require conduct-based adjustments, stronger confidentiality controls, and clear remediation.
• It should also evidence active oversight rather than passive acceptance.

Revenue mix, training, and recordkeeping may matter, but they are secondary to the culture and incentive structure driving the risk.

• Revenue mix matters, but product concentration is a secondary business-model issue unless leadership incentives are pushing conflicted conduct.
• Training gap is too narrow because the facts point to executive pressure and pay design, not just a knowledge problem.
• Committee records should be adequate, but weak documentation is less serious than the board’s failure to confront an unethical compensation culture.

The pay design, executive message, and confidential-information leakage together show a board-level ethics and conflict-management failure, not just an isolated control issue.

Question 6

Topic: Element 4 — Corporate Governance and Ethics

An Investment Dealer underwrote a new issuer note and still holds a large unsold position. To move the inventory, senior management proposes a 6-week campaign paying advisors double compensation credits for these notes versus comparable third-party notes. The memo to the board says no change to compensation or approval controls is needed because the firm’s standard conflict disclosure already tells clients the dealer may have underwriting and compensation interests. Which red flag is most significant from a CIRO conflicts perspective?

• A. Holding a large unsold underwriting position in one issuer
• B. Needing clearer client education on the note’s features
• C. Running a short campaign focused on a single product
• D. Relying on disclosure while leaving a recommendation-biasing incentive intact

Best answer: D

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The key issue is not merely that the firm has inventory or is running a campaign. The most serious red flag is that management created a strong compensation incentive that could put the firm’s and the advisor’s interests ahead of the client’s, then tried to rely on generic disclosure instead of meaningful controls.

Under CIRO’s conflicts framework, a firm must identify material conflicts and address them in the client’s interest. If a conflict could reasonably bias recommendations, the firm should first consider avoiding it or reducing it; if it remains, the firm needs effective controls, supervision, and governance. Generic disclosure is a supporting measure, not a cure for a compensation structure that rewards advisors more for selling the firm’s own underwritten inventory than comparable third-party products.

Here, the underwriting position and inventory pressure explain why the conflict exists, but the control failure is management’s decision to keep the heightened sales incentive in place without stronger mitigation. That is the red flag a board or UDP should challenge first. The campaign details and product education issues are secondary to the core conflict-management failure.

• Unsold inventory increases pressure, but inventory itself is the source of the conflict, not the main control weakness.
• Short campaign may intensify sales urgency, but duration is secondary to the biased compensation design.
• Client education matters for fair communication and suitability, but it does not resolve a material recommendation conflict.

A material conflict that can bias recommendations must be avoided or controlled in the client’s interest, so disclosure alone is not an adequate primary response.

Question 7

Topic: Element 4 — Corporate Governance and Ethics

Maple Harbor Securities, an Investment Dealer, has expanded into small-issuer underwriting, retail margin lending, and proprietary trading. Its six-member Board consists of the CEO, who is also Chair, the CFO, the Head of Investment Banking, the founder of the firm’s main technology vendor, the controlling shareholder’s lawyer, and one retired industry executive with no current ties. Executive bonuses are driven largely by new-issue revenue. The audit and risk committee includes the CFO, Head of Investment Banking, and the vendor founder. What is the primary governance red flag?

• A. Audit and risk oversight lacks independent directors.
• B. Executive pay overweights new-issue revenue.
• C. The board is too small for the business.
• D. Board leadership is combined in one person.

Best answer: A

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The main governance deficiency is the lack of independent oversight on the Board’s core audit and risk function. In this scenario, insiders and a conflicted outside director control the committee that should challenge management on controls, financial reporting, and risk-taking.

Effective corporate governance depends on a Board structure that can independently oversee management, especially through audit and risk functions. Here, the dealer has expanded into higher-risk activities, but the audit and risk committee is made up of the CFO and Head of Investment Banking, who are members of management, plus a director connected to a major vendor relationship. That means the committee is not positioned to provide objective challenge on financial reporting, internal controls, conflicts, capital, or business-line risk.

A combined CEO-Chair role and incentive pay tied to underwriting revenue can also create concern, but those are secondary. An adequately independent Board could question those arrangements and require changes. The more fundamental weakness is that the Board’s key oversight committee is structurally non-independent.

• Combined leadership is a concern, but separating the CEO and Chair would not fix a committee still dominated by insiders and conflicted members.
• Revenue-heavy bonuses may encourage risk-taking, but compensation design is a downstream issue that an independent Board should supervise.
• Board size is not inherently deficient; a smaller Board can still be effective if independence, skills, and committee composition are sound.

The key committee is controlled by insiders and a commercially connected member, so objective oversight of management and firm risk is weakened.

Question 8

Topic: Element 4 — Corporate Governance and Ethics

A CIRO Investment Dealer faces a one-day liquidity squeeze after an underwriting settlement mismatch. Management negotiates a $30 million overnight loan from the dealer’s parent at terms comparable to the firm’s bank line, and the dealer would remain above capital requirements if the loan is drawn.

The bylaws provide that:

• any borrowing over $10 million or from a related party requires full Board approval
• quorum for a Board meeting is 5 of 8 directors
• a written Board resolution is valid only if all 8 directors sign

The Chair emails a written resolution to all directors at 6:00 p.m. Four sign, one objects that the Board should meet, and three do not reply. Management plans to draw the loan before markets open.

What is the primary red flag?

• A. Defective Board authorization under the bylaws
• B. Increased reliance on related-party liquidity
• C. Potential strain on future Board communications
• D. Lack of independent benchmarking of loan terms

Best answer: A

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The key issue is that management is about to act on a Board decision that was not authorized in the manner required by the bylaws. Urgency does not override the bylaw rules for quorum, full Board approval, or unanimous written resolutions.

Company bylaws determine how the Board can validly exercise corporate authority. In this scenario, the proposed parent loan is expressly reserved to the full Board because it is both over $10 million and from a related party. The Chair’s email process did not produce a valid Board action: there was no Board meeting with the required quorum of 5 directors, and there was no unanimous written resolution because only 4 directors signed, 1 objected, and 3 did not respond.

That is the primary red flag because the firm is preparing to rely on a decision that may be procedurally invalid and open to challenge. Questions about pricing support, future dependence on parent funding, or Board dynamics may still matter, but they are secondary once the approval mechanism required by the bylaws has failed.

• Term benchmarking is secondary because the stem already says the parent loan terms are comparable to the firm’s bank line.
• Parent funding dependence can be a real liquidity-management concern, but it does not fix the missing bylaw authorization.
• Board communication strain is downstream; the more immediate issue is whether the Board validly approved the borrowing at all.

The bylaws require full Board approval through a quorate meeting or unanimous written consent, and neither occurred.

Question 9

Topic: Element 4 — Corporate Governance and Ethics

An Investment Dealer is acting on a confidential bought-deal financing for North Shore Energy Inc., which is already on the firm’s grey list. Draft underwriting materials were mistakenly stored in a shared folder visible to research for 90 minutes, and IT has not yet confirmed whether anyone opened them. The firm’s policy uses the restricted list when trading or research activity must stop. A North Shore analyst is due to issue a research update before the market opens. What is the best next step for the UDP to direct?

• A. Tell sales and trading about the financing and then assess research.
• B. Wait for proof files were opened before restricting research or trading.
• C. Revoke access, preserve logs, move to restricted list, and hold the report.
• D. Leave it on the grey list and publish with enhanced disclosures.

Best answer: C

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: When confidential deal materials may have crossed an information barrier, the firm should first contain the control failure and stop activity that could use possible MNPI. Because research is about to be published, grey-list monitoring is no longer enough; the issuer should be restricted while access is investigated.

The key issue is a possible breach of the firm’s information barrier caused by a permissions error. The immediate response is to contain the cybersecurity/control problem by removing unauthorized access and preserving audit logs so compliance can determine who could view or download the materials. Because a research report is imminent and the firm cannot yet confirm that the analyst remained insulated, the issuer should move from grey-list monitoring to restricted status and the report should be held.

Research disclosures remain important when coverage later resumes, but disclosures do not cure a potential MNPI leak or allow publication to proceed after a firewall failure. The main takeaway is: contain first, restrict affected activity next, then investigate and document before resuming research or trading.

• Grey list only is insufficient once research activity may need to stop; added disclosures do not fix possible MNPI exposure.
• Broad internal notice spreads confidential deal information beyond need-to-know staff and weakens the information barrier.
• Wait for proof is too late; the firm should act on a credible exposure risk before confirming actual use.

Potential MNPI exposure requires immediate containment and a temporary stop on research activity, not just disclosure or later escalation.

Question 10

Topic: Element 4 — Corporate Governance and Ethics

An Investment Dealer that is also a public issuer is finalizing year-end executive pay. The board compensation committee learns that the CEO and Head of Retail receive most of their variable compensation from short-term revenue growth in proprietary products, while control-function hiring was deferred because of capital pressure. The UDP has twice reported that senior executives dismissed compliance objections as ’not commercial,’ and the board will file its compensation disclosure next month. No regulator has yet made a finding and no client losses have been confirmed. What is the board’s best decision?

• A. Pause the awards and launch an independent board review, then add conduct, risk, and control metrics.
• B. Leave the issue to the UDP and revisit compensation after the next bonus cycle.
• C. Maintain executive pay but require more sales-practice training for representatives.
• D. Approve the awards now because no client harm or CIRO finding is yet established.

Best answer: A

What this tests: Element 4 — Corporate Governance and Ethics

Explanation: The facts show more than a possible sales-practice issue; they show misaligned executive incentives and weak tone at the top. The board should intervene before approving compensation by using an independent review and by linking pay to conduct, risk management, and control effectiveness.

When executive compensation is driven mainly by short-term revenue and senior leaders dismiss compliance concerns, the problem is a governance and culture issue at the top of the firm. Directors should not wait for a formal CIRO finding or confirmed client losses before acting. The board is responsible for overseeing whether incentives, resourcing, and leadership behaviour support ethical conduct and effective controls.

• Pause or condition the affected variable awards.
• Use an independent board-directed review to assess tone, escalation, and incentive design.
• Rebalance scorecards to include conduct, risk, and control-function outcomes.
• Ensure the upcoming compensation disclosure fairly reflects the board’s response.

Training or later monitoring may help, but they do not cure a current executive compensation conflict or the message being sent by senior management.

• Approving pay because no loss or CIRO finding exists mistakes the absence of a final outcome for the absence of a clear governance warning.
• Requiring more representative training addresses front-line behaviour, not the executive incentives and tone driving the risk.
• Deferring the matter to the UDP after year-end is too passive because the board must oversee senior pay and respond before disclosure is filed.

This best addresses both the compensation conflict and the poor ethical tone by using independent board oversight before pay and disclosure are finalized.

Continue with full practice

Use the CIRO Director Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, explanations, and web/mobile app access.

Related focused pages

• Free CIRO Director Full-Length Practice Exam
• CIRO Director: Element 1 — General Regulatory Framework
• CIRO Director: Element 2 — Dealer Business Model
• CIRO Director: Element 3 — Offering and Distribution of Securities
• CIRO Director: Element 5 — Duties, Liabilities and Defences
• CIRO Director: Element 6 — Risk Management and Internal Controls
• CIRO Director: Element 7 — Significant Areas of Risk
• CIRO Director: Element 8 — UDP Responsibilities

Free review resource

Use the full Securities Prep practice page above for the latest review links and practice route.