CCC: Compliance Supervision

Topic snapshot

Compliance-supervision checklist before the questions

Compliance-supervision questions usually ask whether the firm is controlling a real risk, not whether it has a generic procedure. Start by identifying the business activity, the risk, the supervisor, and the proof of review.

• Escalate repeated exceptions instead of treating each file as isolated.
• Look for gaps between branch practice, head-office policy, and retained evidence.
• Choose the response that improves the control, not just the wording of the policy.

What to drill next after compliance-supervision misses

If you miss these questions, drill surveillance and reviews next. If the miss was about responsibility rather than review mechanics, return to the role of compliance and governance topics.

Sample questions

These questions are original Securities Prep practice items aligned to this topic area. They are designed for self-assessment and are not official exam questions.

Question 1

Topic: Compliance Supervision

An exempt market dealer’s CCO reviews the monthly representative-supervision report. Firm policy states that 3 or more material exceptions for one representative in a month require a targeted supervisory review and documented follow-up. Issuer Z pays a higher commission than most other products.

Exhibit: Monthly file-review summary

Which follow-up is best supported by the exhibit?

• A. Rely on next quarter’s firm-wide training as the main response.
• B. Exclude Patel because higher producers naturally create more alerts.
• C. Open a targeted review of Patel’s files and escalate the pattern.
• D. Review only Issuer Z approval, not Patel’s conduct.

Best answer: C

What this tests: Compliance Supervision

Explanation: The data shows a concentrated problem with one representative, not a general firm trend. Patel exceeds the firm’s escalation trigger and the pattern of same-day KYC changes plus concentration alerts in a higher-commission product supports targeted supervisory review and escalation.

Representative supervision should be risk-based and driven by evidence. Here, Patel stands out sharply from peers with 7 material exceptions versus 1 for each other representative, including repeated same-day KYC changes before purchases and multiple concentration alerts tied to a higher-commission issuer. That pattern raises suitability and conflict-management concerns and also meets the firm’s stated trigger for a targeted supervisory review and documented follow-up.

• Review the flagged client files and supporting notes.
• Test whether KYC changes were reasonable, timely, and properly documented.
• Assess suitability, concentration, and conflict handling for Issuer Z.
• Escalate the pattern and apply remediation based on findings.

Firm-wide training may still help later, but it does not replace immediate representative-specific supervision when one person shows a clear exception pattern.

• Higher volume is not a valid reason to ignore the pattern, because the issue is the severity and clustering of material exceptions.
• Training only is too weak under the stated policy, which calls for targeted follow-up once the trigger is met.
• Issuer-only focus misses the core supervision issue, which is Patel’s repeated conduct and file-quality concerns.

Patel’s repeated material exceptions meet the firm’s trigger and justify representative-specific supervisory follow-up.

Question 2

Topic: Compliance Supervision

During a routine review, a portfolio manager’s compliance officer discovers that an advising representative has been using a self-created client presentation stating the firm’s model portfolio is “low risk and suitable for any retiree.” The presentation was not approved under the firm’s communications policy, 18 clients received it last month, and another meeting using it is booked for tomorrow. What is the best next step for the firm?

• A. Send approved materials now and wait for complaints about the earlier presentation.
• B. Report the matter externally before reviewing scope, impact, and needed corrections.
• C. Stop use, preserve records, identify recipients, and escalate for prompt remediation.
• D. Let tomorrow’s meeting proceed with a verbal clarification from the representative.

Best answer: C

What this tests: Compliance Supervision

Explanation: The first compliance priority is containment and control. Because the presentation is both misleading and outside the firm’s approval process, the firm should stop further use, keep a record of what was sent, identify affected clients, and escalate quickly so corrective action can be assessed and documented.

For a misleading or poorly controlled communication, the best next step is not to improvise a fix or jump straight to external reporting. The firm should first contain the issue and gather enough facts to manage client risk properly. Here, that means stopping any further use of the unapproved presentation, preserving the exact version used, determining who received it, and escalating through the firm’s supervisory process for review and remediation.

This approach supports core compliance supervision because it:

• prevents more clients from receiving the problematic message
• preserves evidence for review and follow-up
• allows the firm to assess whether correction, client contact, training, discipline, or reporting is required

The closest distractors either allow continued use, wait for harm to surface, or take action before the facts are documented.

• Verbal caveat fails because an unapproved, misleading presentation should not continue to be used while the firm is still assessing it.
• Wait for complaints fails because compliance must proactively review prior distribution and possible client impact, not rely on complaints to surface the issue.
• Immediate external reporting fails because the firm should first establish the scope and facts unless a specific immediate reporting trigger is already known.

It immediately contains the risk, preserves evidence, and scopes client impact before remediation decisions are made.

Question 3

Topic: Compliance Supervision

A portfolio manager’s CCO reviews this sales-practice review note after two client seminars.

Artifact: Review note

• Handout title: “Retirement Income, Safely”
• Claim: the firm’s balanced model “protects capital in down markets”
• 35 copies distributed to prospects and clients
• No evidence of compliance approval, version date, or supporting analysis

What is the best next compliance action?

• A. Add a disclaimer and approve the same wording retroactively.
• B. Suspend the handout, assess distribution, and remediate the communication and controls.
• C. Continue the handout with verbal risk explanations at future seminars.
• D. Record the issue and wait for client complaints or losses.

Best answer: B

What this tests: Compliance Supervision

Explanation: The review note shows both a content problem and a control problem. An absolute capital-protection claim without support, combined with missing approval and version control, calls for immediate containment, scoping of distribution, and remediation of the communication process.

The core concept is communications supervision: firms must control both what is said and how material is approved before use. Here, the handout makes an unqualified statement that the model “protects capital in down markets,” but the note shows no supporting analysis and no evidence of pre-use compliance approval or version control. That means compliance should not treat this as a minor wording issue.

• Stop further use of the handout.
• Determine who received it and whether corrective follow-up is needed.
• Revise or withdraw the claim unless it can be properly substantiated and fairly presented.
• Fix the approval, version-control, and recordkeeping process and document remediation.

A disclaimer or verbal explanation is not enough because it does not cure the misleading written statement or the control failure.

• Verbal cure fails because spoken explanations do not fix a misleading written handout or missing approval records.
• Wait and see fails because compliance should act when the risk is identified, not only after complaints or losses.
• Retroactive approval fails because later disclosure does not validate unsupported wording or weak version control.

The note shows a potentially misleading claim and a breakdown in pre-use approval and support, requiring immediate containment and remediation.

Question 4

Topic: Compliance Supervision

A mutual fund dealer’s compliance officer reviews the file-testing summary below. No complaints have been received, and the review is limited to the facts shown.

Exhibit:

What is the best compliance follow-up?

• A. Escalate all four files for substantive suitability review.
• B. Remediate all four files as documentation exceptions.
• C. Wait for a complaint before escalating any file.
• D. Escalate A2 for suitability review; remediate A1, A3, and A4 as documentation exceptions.

Best answer: D

What this tests: Compliance Supervision

Explanation: The key distinction is whether the problem is with the paperwork or with the recommendation itself. A2 presents a substantive suitability concern because a low-risk, short-horizon, capital-preservation client was concentrated in a single emerging markets equity fund. The other files show missing or incomplete documentation, not an obvious KYC-to-investment mismatch on the facts given.

A documentation gap is a recordkeeping or process deficiency, such as a missing date, omitted form field, or missing adviser initials, when the recommendation otherwise appears consistent with the client’s KYC information. Those issues still require correction, supervision, and follow-up, but they do not automatically mean the advice was unsuitable.

A substantive suitability concern exists when the recommended investment materially conflicts with the client’s objective, risk tolerance, time horizon, or financial circumstances. In the exhibit, concentrating 88% of a low-risk, 2-year, capital-preservation account in a single emerging markets equity fund is an on-its-face mismatch and should be escalated promptly for deeper review and possible client-impact assessment. By contrast, the other files mainly show incomplete documentation paired with otherwise aligned or diversified holdings. The key takeaway is that incomplete forms require remediation, but a clear KYC-to-product mismatch requires suitability escalation.

• Treating all four files as documentation issues ignores the clear mismatch in the low-risk, short-horizon account.
• Escalating all four as substantive suitability concerns overstates defects that, on these facts, are incomplete records rather than unsuitable advice.
• Waiting for a complaint is inconsistent with supervision, because file testing can reveal a suitability problem before a client reports harm.

A2 shows a clear mismatch between the client profile and the recommendation, while the other files show incomplete documentation with otherwise aligned holdings.

Question 5

Topic: Compliance Supervision

A portfolio manager’s monthly surveillance report has flagged the same advising representative three times for trades outside client mandate ranges. Under the current process, a supervisor can clear an alert by email without documenting file review, escalation, or remediation. While preparing for a provincial securities regulator review, the CCO sees there is no record showing what was investigated or fixed. What is the best next step?

• A. Ask the advising representative for written explanations and attach them to the existing alerts
• B. Finish the regulator response first and redesign the supervisory process after the review
• C. Open formal exception cases for the flagged trades and require documented review, escalation, remediation, and evidence retention before closure
• D. Update the policy manual immediately and let supervisors handle the current alerts case by case

Best answer: C

What this tests: Compliance Supervision

Explanation: The weakness is the supervision design, not just the wording of the policy. The best next step is to turn repeated alerts into a documented exception-management process with evidence, escalation, and remediation so the firm can protect clients and show regulators how issues were handled.

Effective supervision design turns alerts into documented supervisory decisions. Here, repeated trades outside mandate ranges create a potential client-protection issue, but the current process allows alerts to be cleared without showing what was reviewed, whether the matter was escalated, or what corrective action followed. The best next step is to open formal exception cases and require a consistent workflow before any alert is closed.

• Review the affected client files and trade rationale.
• Escalate repeated or higher-risk exceptions using preset criteria.
• Track remediation and supervisory follow-up to completion.
• Retain evidence that can be produced during a regulatory review.

A representative’s explanation may be useful, but it cannot replace independent supervisory review and documented closure.

• Rep explanation only is too weak because it relies on the individual under review and does not create independent supervisory evidence.
• Delay until after review fails because repeated exceptions remain unresolved and the firm stays unprepared for regulator questions.
• Policy update alone is incomplete because it does not address the current flagged trades or enforce a consistent follow-up process.

This adds the missing supervisory controls needed to address possible client harm and demonstrate effective follow-up to regulators.

Question 6

Topic: Compliance Supervision

At a mutual fund dealer, the CCO receives a weekly new-account exception report showing that one dealing representative opened nine accounts with incomplete annual income and net worth fields, and with risk tolerances that do not align with the mutual funds purchased. The representative says the clients were in a hurry and he can clean up the forms at their annual review. What is the best next step?

• A. Place the accounts on supervisory hold for new purchases, complete and verify the client information, and review the representative’s recent new accounts.
• B. Escalate directly to the regulator before confirming the scope of the problem.
• C. Have the representative send amended forms first, then assess later whether the issue is broader.
• D. Keep the accounts active and require updates at the next client meeting.

Best answer: A

What this tests: Compliance Supervision

Explanation: When account-opening records are incomplete or internally inconsistent, the firm should stop relying on them for new purchases and fix the deficiency promptly. The supervisory response should both protect clients now and determine whether the representative has a broader pattern of weak client-information practices.

This is a supervision and client-information issue, not just a paperwork issue. If required client information is missing or the recorded risk tolerance does not fit the purchased funds, the firm cannot confidently support account approval or suitability. The best next step is to contain the immediate risk, obtain and verify complete client information through proper firm procedures, and test whether the issue is isolated or systemic.

• Restrict affected accounts from new purchases while the deficiency is unresolved.
• Correct the records using properly obtained, client-confirmed information.
• Review the representative’s recent account openings and document findings, remediation, and any escalation.

Waiting for a later review, letting the representative fix files without immediate controls, or reporting externally before confirming scope all skip the core supervisory safeguard.

• Delaying updates leaves deficient files active and allows further activity to occur on unreliable client information.
• Fixing forms first skips the immediate safeguard and postpones the broader review needed to detect a pattern.
• Immediate external escalation may be required later, but it is premature before the firm contains the risk and confirms scope.

Missing or inconsistent client information should trigger immediate containment, remediation, and scope testing before the firm can rely on the files.

Question 7

Topic: Compliance Supervision

A mutual fund dealer’s CCO reviews the following file-testing summary for one branch. The firm’s policy says repeated exceptions by the same representative over more than one monthly review must be escalated beyond coaching. Which follow-up is best supported by the data?

Exhibit: Q2 branch file-testing summary

• A. Conduct a targeted review of Roy and branch supervision.
• B. Provide another coaching reminder to Roy only.
• C. Wait for next quarter before escalating supervision.
• D. Move the matter to the complaint register.

Best answer: A

What this tests: Compliance Supervision

Explanation: The data show a concentrated, repeated pattern in one representative’s files over three monthly reviews, while the other representatives have isolated and promptly corrected items. Under the firm’s stated policy, that supports escalation beyond coaching and raises a supervision concern.

The key distinction is recurrence and concentration. A one-off error is usually isolated, promptly corrected, and not repeated in later reviews. Here, Roy shows multiple exceptions in April, May, and June, while the other representatives show only single minor items. That makes the issue a pattern, not a random administrative mistake.

Because the same branch manager signed all of Roy’s files, the concern is broader than the representative alone. The reasonable compliance response is to escalate to a targeted supervisory review, determine root cause, document remediation, and perform follow-up testing. Waiting for more data or limiting the response to coaching would ignore both the trend and the firm’s own escalation rule.

• Coaching only fails because the exceptions recur over three monthly reviews and already meet the firm’s escalation condition.
• Wait for more data fails because the trend is already established; delay would weaken timely supervision.
• Complaint handling fails because the exhibit shows monitoring exceptions, not client complaints.

Repeated exceptions across three monthly reviews, all under the same branch manager, support escalation as a supervision pattern rather than a one-off error.

Question 8

Topic: Compliance Supervision

At an exempt market dealer, compliance reviews a new account file for a 71-year-old retired client whose KYC shows low risk tolerance, need for regular income, and limited investment knowledge. The dealing representative recommended a 7-year illiquid real estate limited partnership representing 40% of the client’s liquid net worth. The file contains no contemporaneous note explaining the recommendation, and the representative later says the client verbally asked for higher returns. What is the single best compliance response?

• A. Wait for the next KYC update to reassess the trade.
• B. Record only a documentation gap and obtain added notes.
• C. Accept the representative’s explanation and close the review.
• D. Escalate as a substantive suitability concern and assess remediation.

Best answer: D

What this tests: Compliance Supervision

Explanation: This should be treated as a substantive suitability concern, not just a file-completion issue. The client’s KYC profile already appears inconsistent with a concentrated, illiquid recommendation, so compliance should escalate promptly and assess whether remediation may be required.

A documentation gap exists when the file is incomplete but the available facts still support the recommendation. A substantive suitability concern exists when the client’s recorded KYC and circumstances do not reasonably support the product or concentration. Here, the client’s age, retirement status, low risk tolerance, income need, limited knowledge, and a 7-year illiquid investment representing 40% of liquid net worth create an apparent mismatch even before considering the missing note.

• Require prompt supervisory escalation.
• Obtain contemporaneous evidence of the suitability analysis.
• Assess potential client harm and whether remediation is needed.

A later statement that the client wanted higher returns may be relevant, but it does not reduce the issue to a mere documentation deficiency.

• Added notes only fails because backfilling the file does not resolve an apparent mismatch between KYC and the recommendation.
• Later verbal explanation fails because after-the-fact comments are not enough when suitability itself is in doubt.
• Wait for update fails because a potential unsuitable trade requires prompt review, not deferral to a future KYC refresh.

The recorded KYC and the product’s illiquidity, risk, and concentration indicate a possible unsuitable recommendation, so this is more than a missing-note issue.

Question 9

Topic: Compliance Supervision

The CCO of a mutual fund dealer reviews the following branch-review note. Based on the artifact, which supervision deficiency is best supported?

Exhibit: Branch-review note

• Sample: 15 new client files opened in the last month

• 5 files had one or more blank KYC fields when the first purchase was accepted

• 3 files showed risk tolerance or net worth changed after the first purchase, with no note of client contact

• 4 files were approved by the branch manager 2-6 days after the first purchase

• Local practice: “Representatives may fill in missing items after funding if the client is travelling”

• A. The branch’s primary deficiency is inadequate mutual fund product due diligence.

• B. The branch lacks a control that prevents account activity before complete client information and supervisory approval.

• C. The branch’s main weakness is annual KYC updating for existing clients.

• D. The exceptions are only minor paperwork delays and do not show a supervisory gap.

Best answer: B

What this tests: Compliance Supervision

Explanation: The artifact shows a pattern of accounts being used before KYC was complete and before branch approval. Unsupported changes to risk tolerance or net worth after the first purchase further indicate weak supervision over the accuracy and timing of client information.

At account opening, supervision should ensure client information is complete, reliable, and reviewed before the account is used. Here, several files had blank KYC fields when the first purchase was accepted, some key client details were changed afterward without evidence of client confirmation, and branch approval occurred after the purchase. The stated local practice shows this was not an isolated clerical issue but an accepted workaround, which weakens suitability oversight and the firm’s audit trail.

A sound compliance response would be to stop the practice, review affected accounts, confirm unsupported changes with clients, and reinforce pre-activity approval controls. This is more than a documentation backlog because the control failed before client activity occurred.

• Annual updates misreads the facts; the note is about new accounts and first purchases, not periodic refreshes for existing clients.
• Minor paperwork ignores the repeated exceptions and the stated local practice, which point to a real control failure.
• Product due diligence goes beyond the artifact; nothing in the note suggests a fund-shelf or product-governance issue.

Repeated blank KYC fields, unsupported post-purchase changes, and late approval show the onboarding control is failing before account activity occurs.

Question 10

Topic: Compliance Supervision

A registered mutual fund dealer is reviewing the design of its KYC supervision program for branch offices. The CCO receives this policy excerpt:

• Daily report identifies client files with KYC marked “update overdue.”
• Branch managers review open items each morning.
• An item may be marked “resolved” once the dealing representative says a client meeting has been scheduled.
• The procedure gives no trigger to escalate repeated or aged items to the CCO.

What is the best next action?

• A. Increase monitoring from daily to intraday.
• B. Make compliance staff the only reviewers of open items.
• C. Report every overdue file immediately to the board.
• D. Require verified completion before closure and escalate repeated items.

Best answer: D

What this tests: Compliance Supervision

Explanation: A sound supervision program needs more than frequent exception reporting. Here, detection already occurs daily, but items can be closed before the KYC update is actually completed, and repeated exceptions have no escalation trigger.

The core supervision-program issue is control design. An effective exception process should state what evidence is needed to clear an item, who must follow up, and when unresolved or recurring issues move to a higher level of supervision. In the excerpt, daily reporting and branch-manager review provide detection and first-line oversight, which can be appropriate. The weakness is that a file can be treated as resolved based only on a scheduled meeting, not a completed KYC update, and the policy does not require escalation when the same issue persists or reappears.

• Set evidence-based closure standards.
• Track aged and repeat exceptions.
• Escalate unresolved items to compliance or the CCO.

The key gap is ineffective remediation and escalation, not simply review frequency or reviewer title.

• More frequency misses the point because the report is already daily; the problem is weak closure and follow-up rules.
• Compliance-only review goes too far because branch managers can perform first-line supervision if controls and escalation are clear.
• Immediate board reporting infers a governance response beyond the artifact; the immediate need is operational escalation within the supervision program.

The excerpt shows a control gap because exceptions can be closed without proof of remediation and can recur without a defined escalation path.

Continue with full practice

Use the CCC Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, explanations, and web/mobile app access.

Related focused pages

• Free CCC Full-Length Practice Exam
• CCC: The Role of Compliance
• CCC: The Regulators
• CCC: Corporate Legislation and Governance
• CCC: Financial Condition
• CCC: The Compliance Regime
• CCC: Key Principles for Compliance Supervision
• CCC: Surveillance and Reviews
• CCC: Conflicts of Interest
• CCC: Complaints
• CCC: Dealing with the Regulators
• CCC: Legal Actions

Free review resource

Read the CCC guide on SecuritiesMastery.com, then return to Securities Prep for timed practice.