CIRO Supervisor: Element 9 — Dealer Activity and Location Risks

Try 10 focused CIRO Supervisor questions on Element 9 — Dealer Activity and Location Risks, with answers and explanations, then continue with Securities Prep.

Topic snapshot

Sample questions

These questions are original Securities Prep practice items aligned to this topic area. They are designed for self-assessment and are not official exam questions.

Question 1

Topic: Element 9 — Dealer Activity and Location Risks

A regional supervisor reviews a remote registered location in a one-industry town. One Approved Person generates 82% of the location’s revenue and recently held retirement seminars for employees of a local mine that offered early-retirement packages. In the last two months, 19 of 24 new retail clients from that location were over age 60, and most bought the same speculative resource issuer using partial margin. The firm’s automated trade reports show no current exceptions, and the next onsite review is not scheduled for eight months. Which red flag most clearly requires stronger mitigation or escalation now?

• A. The fact that the location is remote and its onsite review is months away
• B. The need to evidence pre-use approval of the retirement seminar materials
• C. The fact that one Approved Person generates most of the location’s revenue
• D. The combined pattern of one-advisor dominance, local-client concentration, and leveraged purchases of the same speculative issuer

Best answer: D

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: The key issue is the combined risk pattern, not any single administrative gap. A remote location dominated by one producer is selling the same speculative, margined idea to a concentrated group of similar older local clients, which is the kind of branch-specific red flag that calls for enhanced review and possible escalation.

Location-specific risk becomes acute when several facts point to the same potential harm. Here, one Approved Person dominates production, many new clients come from the same local economic event, the client group is largely older retail investors, and most are being placed into the same speculative issuer using margin. That pattern suggests concentrated selling pressure and a heightened chance of unsuitable or poorly explained leveraged recommendations, even if routine automated surveillance shows no trade exceptions.

• move up a targeted review of the location;
• test KYC, suitability, leverage disclosure, and account approval files;
• sample client contact and consider escalation to compliance.

The seminar approval issue, the dominant producer, and the remote setting matter, but they are supporting factors rather than the main red flag.

• Seminar approval matters, but it is an administrative control issue and does not outweigh the concentrated leveraged-selling pattern.
• Dominant producer is a risk factor, but it becomes urgent here because of what is being sold and to whom.
• Remote location increases monitoring risk, but the immediate concern is the specific sales pattern already emerging at that location.

This combination signals a location-specific sales-concentration risk that can hide unsuitable leveraged recommendations and warrants immediate targeted review or escalation.

Question 2

Topic: Element 9 — Dealer Activity and Location Risks

A registered location shows rising complaint volume, sales concentrated in one speculative product, and heavy reliance on one senior Approved Person. Which supervisory action best reflects risk-based supervision of that location?

• A. Conduct a targeted location review and increase follow-up supervision
• B. Require the senior Approved Person to certify suitability each month
• C. Issue updated relationship disclosure to all clients
• D. Keep the normal review cycle but move account approvals to head office

Best answer: A

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: The best response is to increase the scope and intensity of supervision at the location itself. When several location-specific risk indicators appear together, a supervisor should apply targeted, risk-based review and documented follow-up rather than rely on disclosure or representative attestations.

Risk-based supervision means adjusting supervisory attention when a registered location presents elevated risk. Rising complaints, concentrated sales in a speculative product, and dependence on one high-producing Approved Person are classic warning signs of retail distribution and location risk. The supervisor should respond with a targeted review of the location and heightened follow-up, rather than treating the branch as if it were still low risk.

• Reassess the location’s risk rating.
• Expand the review scope to the identified risk areas.
• Document findings, corrective steps, and timelines.
• Monitor until the concerns are resolved.

Disclosure changes, centralized approvals, or monthly certifications may support supervision, but they do not replace direct, independent supervisory review of the location.

• Client disclosure helps inform clients, but it does not directly control the branch risks shown by complaints and concentrated selling.
• Head office approvals only address one control point, but keeping the normal cycle unchanged misses the broader location-specific risk.
• Representative certification is self-attestation and cannot substitute for independent supervisory testing and follow-up.

A targeted, risk-based review directly addresses complaint trends, product concentration, and key-person reliance at the registered location.

Question 3

Topic: Element 9 — Dealer Activity and Location Risks

A registered location has been rated low-risk and is not due for its next audit for 18 months. Since the last audit, the office has hired two newly registered Approved Persons, opened many margin and options accounts, and started using local-language seminar materials not previously used by the firm. The only planned training is the standard firmwide compliance module. What is the best next step for the supervisor?

• A. Obtain a branch manager attestation and revisit coverage after two quarters.
• B. Provide the standard annual module and test the new activity at the next audit.
• C. Reassess the location now and add targeted training and earlier audit testing.
• D. Keep the current audit cycle and ask for monthly exception summaries.

Best answer: C

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: The location’s risk profile has changed materially. New Approved Persons, more complex account activity, and local-language seminar materials create location-specific risks that generic firmwide training and the existing audit timetable may not adequately cover. The supervisor should respond now with a documented reassessment and enhanced coverage.

This tests risk-based business location supervision. A supervisor should not rely on a historical low-risk rating when the location’s actual risks have changed. Here, the office has three clear indicators of increased supervision risk: inexperienced staff, a shift into margin and options activity, and communications in a local language the firm has not previously used. Those facts indicate that location-specific training and audit coverage may be insufficient.

The appropriate next step is to promptly reassess the location’s risk profile and adjust the supervision plan, including:

• tailored training for the new staff and higher-risk activity
• focused review of the seminar materials and related controls
• earlier or expanded audit testing for that office

Prior clean audits or manager assurances do not replace independent supervisory follow-up. The key point is that material local changes require proactive, documented updates to both training and audit coverage.

• Rely on routine cycle is too passive because monthly summaries do not replace a revised risk assessment and independent testing.
• Generic training only fails because firmwide modules are not enough when the new risks are specific to one location.
• Manager attestation only is insufficient because self-certification does not address the need for tailored supervisory coverage.
• Delay action is the common trap; supervisors should adjust coverage when risk changes appear, not after a later review.

Material changes in staffing, business mix, and local communications mean the existing generic training and audit cycle are no longer sufficient.

Question 4

Topic: Element 9 — Dealer Activity and Location Risks

Which description best defines key-person reliance as a risk factor at a registered location?

• A. Complaints show a recurring sales-practice pattern at the location.
• B. Staffing and systems are insufficient for the location’s business volume.
• C. Product marketing is concentrated within one local community or affinity group.
• D. Critical functions, client relationships, and revenue are concentrated in one individual.

Best answer: D

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: Key-person reliance means a location depends too heavily on one individual for important business or supervisory functions. That concentration increases internal and reputational risk if the person is absent, leaves, or becomes subject to review or discipline.

Key-person reliance is a concentration risk within a registered location. The concern is not simply that one person is successful; it is that critical business functions, client relationships, local knowledge, revenue generation, or effective control activity are overly dependent on that one individual. If that person becomes unavailable, departs, or is involved in misconduct, the firm can face service disruption, weak supervision, and reputational harm.

Supervisors should distinguish this from other location risks:

• insufficient people or systems is a resource adequacy issue
• repeated client complaints indicate a complaints or conduct-pattern issue
• concentrated selling into one community points to community-specific sales-practice risk

The key idea is concentration of business and control in one person, not merely concentration in one product, client group, or complaint type.

• Insufficient capacity describes resource adequacy, not dependence on one individual.
• Complaint pattern points to conduct or supervisory concerns revealed by complaints history.
• Community concentration describes community-specific sales-practice risk, which is a different location risk factor.

Key-person reliance exists when a location depends heavily on one person for business, knowledge, or controls, creating continuity and oversight risk.

Question 5

Topic: Element 9 — Dealer Activity and Location Risks

A risk-based audit of a small registered location found repeated use of personal text messages for client instructions and no evidence that the branch manager completed the remediation promised after the prior audit. The location produces most of its revenue through one Approved Person, has had two client complaints in the last six months, and the branch manager will be away for five weeks starting next Monday. The firm’s normal audit cycle would not revisit the location for another nine months. What is the best supervisory response?

• A. Obtain the branch manager’s written assurance and keep the normal audit cycle.
• B. Pause new account approvals at the location until the complaint files are closed.
• C. Assign interim qualified supervision, require approved-channel communication only, document remediation deadlines, and perform a prompt targeted follow-up review.
• D. Provide refresher training to the location and reassess at the next annual audit.

Best answer: C

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: This location has a repeat control failure, no evidence of completed remediation, recent complaints, and an imminent gap in local supervision. The best response is a risk-based intervention that adds qualified interim oversight, imposes immediate controls, and verifies remediation through prompt follow-up rather than waiting for the routine cycle.

The core issue is weak business-location audit follow-up. A repeat finding plus missing evidence of remediation means the prior corrective action was not adequately verified, and the branch manager’s upcoming absence increases the control risk. In that setting, the supervisor should respond with a documented, risk-based plan that both contains the immediate risk and tests whether the weakness is actually fixed.

• Assign qualified interim supervisory coverage during the branch manager’s absence.
• Require immediate use of approved communication channels only and address the off-channel activity.
• Set clear remediation steps and deadlines with escalation for the repeat finding.
• Schedule a prompt targeted follow-up review instead of waiting nine months.

A routine-cycle review, training alone, or a narrow business restriction does not adequately address the combined planning, audit, and follow-up weakness.

• Written assurance only fails because a repeat finding with no proof of remediation requires verification, not another promise.
• Training alone is incomplete because it does not provide interim supervisory coverage or a prompt follow-up test of the control fix.
• Pausing new accounts only is too narrow because the known risk involves ongoing client communications and supervision, not just account opening.

A repeat finding with no verified remediation and an upcoming supervisory gap requires immediate interim coverage, documented corrective action, and an off-cycle follow-up review.

Question 6

Topic: Element 9 — Dealer Activity and Location Risks

Which feature most clearly shows that a business-location audit program does not match the risk profile of a registered location?

• A. Audit testing expands when a location adds complex products or leverage.
• B. High-risk and low-risk locations receive the same audit frequency and scope.
• C. Follow-up reviews target unresolved deficiencies and complaint trends.
• D. Locations with recent supervisory turnover receive added testing.

Best answer: B

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: A business-location audit program should be risk-based. If locations with materially different risk characteristics are audited on the same cycle and with the same depth, the program is not tailored to the actual risk of the registered location.

The core concept is risk-based supervision. A dealer’s business-location audit program should vary both audit frequency and audit scope based on the location’s risk profile. Relevant risk factors can include product complexity, leverage, complaint history, prior deficiencies, supervisory experience, rapid growth, and staffing changes.

When a high-risk location is reviewed no differently from a low-risk location, the program is using a uniform approach instead of a risk-sensitive one. That is the clearest sign the audit design does not match the location’s actual risk. By contrast, expanding testing after business changes, unresolved findings, or supervisory turnover shows the firm is adapting its audit work to higher-risk conditions.

The key takeaway is that equal treatment of unequal risks signals a weak audit program.

• Expanding testing for complex products or leverage supports alignment because the scope increases when location risk increases.
• Targeted follow-up on unresolved deficiencies and complaint trends is appropriate risk-based supervision, not a mismatch.
• Added testing after supervisory turnover is also risk-based because control effectiveness may weaken during staffing changes.

A program is mismatched when it applies identical audit timing and depth to locations with materially different risk factors.

Question 7

Topic: Element 9 — Dealer Activity and Location Risks

A dealer’s registered location is still rated low risk and is scheduled for a standard on-site audit every 36 months. In the last 12 months, the location grew from 5 to 14 Approved Persons, opened many margin accounts and several accounts using leverage strategies, generated five similar complaints, and has not fully remediated prior documentation and off-channel communication findings. What is the primary supervisory red flag?

• A. Incomplete remediation of earlier documentation findings.
• B. The audit rating, frequency, and scope are too light.
• C. Capacity strain from rapid growth in Approved Persons.
• D. Potential suitability weaknesses in leverage recommendations.

Best answer: B

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: The strongest red flag is that the dealer kept a low-risk audit program despite several higher-risk indicators. A business-location audit program should become more frequent or more targeted when a location’s size, product mix, complaint pattern, and unresolved findings all worsen.

Business-location supervision should be risk-based and responsive to change. In this scenario, the location has grown sharply, added more margin and leverage-related activity, developed a complaint trend, and still has unresolved prior findings. Those facts mean the original low-risk classification and standard 36-month on-site audit cycle no longer fit the location’s current risk profile. The supervisor should expect the dealer to re-rate the location and increase audit frequency, expand scope, or add targeted interim reviews and follow-up.

The other issues are real risk indicators, but they are inputs to the main control weakness rather than the best answer themselves. The key takeaway is that a static audit program is a red flag when the location’s risk profile has clearly changed.

• Potential suitability weaknesses in leverage recommendations are important, but they are account-level risks that a stronger audit program should test.
• Capacity strain from rapid growth is a risk indicator, not the main supervisory control weakness described.
• Incomplete remediation is serious, but it mainly signals the location should be re-rated and reviewed more intensively.

Multiple risk indicators worsened, so keeping a low-risk, standard audit program leaves the location under-supervised.

Question 8

Topic: Element 9 — Dealer Activity and Location Risks

A business-location audit at a registered location finds the same deficiencies noted in the prior review: unapproved seminar materials and no evidence that branch trade-exception reports were reviewed. The branch manager previously marked both items as complete, but cannot show any remediation evidence. Which supervisory action is most appropriate?

• A. Provide refresher training and treat the issues as resolved once procedures are explained.
• B. Escalate the repeat findings, require evidence-based remediation, and schedule a targeted follow-up before the next regular audit.
• C. Change the reviewer for the location and reassess the branch at the next annual audit.
• D. Keep the normal audit cycle and obtain another written attestation from the branch manager.

Best answer: B

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: The key issue is not just the deficiencies themselves, but the failed follow-up. When findings repeat and prior remediation cannot be evidenced, the supervisor should escalate, require documented correction, and perform a targeted re-review instead of relying on self-certification or routine timing.

Business-location supervision is risk-based, and repeat findings are a warning sign that prior corrective action was not effective. Here, the branch manager previously reported the items as complete, yet cannot produce evidence of remediation. That makes this both a repeat-deficiency issue and a weak follow-up issue. The appropriate supervisory response is to escalate through the firm’s compliance or supervisory chain, require a written corrective action plan with accountable owners and documentary proof of completion, and perform a targeted follow-up before the normal audit cycle. This approach addresses timeliness, documentation quality, and escalation. Responses limited to another attestation, more training, or a different reviewer do not solve the core problem of unreliable closure and repeated control failure.

• Another attestation is weak because the prior self-certification was already unsupported.
• Training only misses the control failure; repeat findings need verified remediation, not just coaching.
• Changing reviewers may help independence, but it does not replace escalation and prompt follow-up.

Repeat findings with unsupported closure require formal escalation, verifiable remediation, and enhanced follow-up rather than another routine review.

Question 9

Topic: Element 9 — Dealer Activity and Location Risks

A dealer is finalizing its next business-location audit plan for two registered locations.

• Location A: 4 Approved Persons, standard cash and fee-based accounts, no complaints, clean last two audits, stable staffing.
• Location B: 10 Approved Persons, frequent margin and leveraged trades, three recent suitability complaints, prior audit found weak evidence of supervisory review, and two new hires have not completed location-specific training.

Which audit approach best reflects CIRO’s risk-based business-location supervision guidelines?

• A. Keep Location B on desk review until surveillance shows a confirmed breach.
• B. Move up Location B with broader testing, training checks, and written remediation follow-up.
• C. Move up Location A because smaller offices present greater key-person risk.
• D. Keep both locations on the same cycle and the same scope.

Best answer: B

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: Business-location supervision should be risk-based, not purely calendar-based. The location with higher-risk activity, recent complaints, prior audit weaknesses, and incomplete staff training should receive earlier and broader audit attention, plus documented follow-up.

CIRO expects business-location supervision to be planned and scoped according to actual risk at each registered location. In this scenario, Location B has several compounding risk indicators: higher-risk activity through margin and leveraged trading, recent suitability complaints, a prior finding showing weak supervisory evidence, and incomplete location-specific training for new staff. Those facts support an expanded audit program, earlier timing, targeted testing of the known weak areas, verification that training was completed, and written follow-up until remediation is evidenced.

A low-complexity location with clean audits, no complaints, and stable staffing can generally remain on the normal cycle unless new risks arise. The key point is to align scope and follow-up with the location’s risk profile, not to apply identical reviews everywhere.

• Uniform cycle misses risk-based planning; identical scope is not appropriate when one location has several clear red flags.
• Small-office focus overstates key-person risk and ignores the stronger complaint, product, training, and prior-deficiency signals at the other location.
• Desk review only is too passive; current complaints and prior weaknesses call for targeted audit work and tracked remediation, not waiting for proven misconduct.

Location B has multiple current risk indicators, so it warrants earlier, broader audit work and documented follow-up.

Question 10

Topic: Element 9 — Dealer Activity and Location Risks

An Investment Dealer’s registered location mainly serves clients in one linguistic community and has had three similar complaints in four months about unsuitable use of leverage. Supervisors know local staff used an unapproved translated handout, but the location received only standard annual training and its audit used a generic checklist with no extra testing or follow-up. If this gap is not corrected, what is the most likely consequence?

• A. Recurring issues may continue, exposing the dealer to a finding of inadequate risk-based supervision.
• B. No significant supervisory consequence is likely unless a regulator first examines the location.
• C. Firm-wide annual training is likely sufficient because complaint review is separate from location audits.
• D. Responsibility rests mainly with local advisors because the translated handout was not head-office approved.

Best answer: A

What this tests: Element 9 — Dealer Activity and Location Risks

Explanation: The location has clear local risk indicators: repeated similar complaints, leverage concerns, and unapproved translated communications. If supervisors still rely on generic training and a standard audit approach, the most likely result is ongoing misconduct risk and a finding that supervision was not properly tailored to that location.

Business-location supervision should be risk-based, not purely calendar-based or identical across all registered locations. When a location shows specific warning signs such as repeated similar complaints, a concentrated client base, or unauthorized communications, the dealer should increase audit depth, tailor training, and document follow-up aimed at that location’s actual risks. In this scenario, supervisors already know about a complaint trend and the use of an unapproved translated handout, yet they kept only standard annual training and a generic audit checklist. That makes it more likely the same conduct will continue and makes it harder for the dealer to demonstrate reasonable supervision. A regulatory exam or quantified client loss is not required before the supervision gap becomes a real supervisory risk.

• Treating firm-wide annual training as enough ignores the need to tailor supervision to known local risk indicators.
• Shifting responsibility mainly to local advisors misses the dealer’s duty to supervise communications, complaints, and audit follow-up.
• Waiting for a regulatory examination confuses a later possible event with the earlier need for risk-based intervention.

Known complaint patterns and unapproved translated material require targeted coverage; without it, repeat issues may continue and the firm’s supervision may be found inadequate.

Continue with full practice

Use the CIRO Supervisor Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, explanations, and web/mobile app access.

Related focused pages

• Free CIRO Supervisor Full-Length Practice Exam
• CIRO Supervisor: Element 1 — General Regulatory Framework
• CIRO Supervisor: Element 2 — Supervisory Structure
• CIRO Supervisor: Element 3 — Business and Operations Supervision
• CIRO Supervisor: Element 4 — Account Approval Supervision
• CIRO Supervisor: Element 5 — Account Activity Supervision
• CIRO Supervisor: Element 6 — Approved Persons Supervision
• CIRO Supervisor: Element 7 — Trading and Market Rules Supervision
• CIRO Supervisor: Element 8 — Communications and Research Supervision

Free review resource

Use the full Securities Prep practice page above for the latest review links and practice route.