Charta is on Google Play: practise on the go. Get the app
Charta

Outline what the case studies on breaches of investor protection or compliance rules teach.

FRM® Part II · Operational Risk and Resilience · Case Study: Investor Protection and Compliance Risks in Investment Activities · FRM2.ORR.14.b

The idea

The case studies of investor protection and compliance failures show recurring root causes rather than one-off bad luck. Mis-selling of complex products to retail clients, such as structured notes sold to unsophisticated investors, came from weak suitability checks and sales incentives that rewarded volume. Undisclosed conflicts of interest, as in the SEC case over the Abacus CDO, show that omitting a material fact from a sale is itself a breach, even when every statement made is true. Fraud such as the Madoff Ponzi scheme shows the need for independent custody and independent verification of assets and returns. It also shows the need to escalate red flags like implausibly smooth returns. Costs go well beyond fines. They include client redress with interest, remediation, litigation and lost reputation. The lessons are a strong compliance culture and incentives aligned to client outcomes. Firms also need product governance, information barriers, surveillance and independent due diligence. Exam point: link each failure to the control that would have caught it.

Formulas

Sharpe ratio

Sharpe ratio = (Rp − Rf) ÷ σp

Rp
the portfolio's return
Rf
the risk-free rate
σp
the standard deviation of the portfolio's return

In due diligence an implausibly high ratio from very smooth returns is a red flag, as with Madoff, calling for independent verification of assets.

A practice question

From the question bank, with the reason each wrong option is wrong.

The Madoff Ponzi scheme is most often cited as a lesson in which investor protection control?

  1. Capital adequacy requirements for broker-dealersWhy not: Madoff's scheme was fraud on investors, not a failure of capital ratios; the lesson concerns asset verification.
  2. Position limits on commodity derivativesWhy not: Position limits address market manipulation in commodity markets and are unrelated to the Madoff fraud.
  3. Pre-trade transparency for equitiesWhy not: Pre-trade transparency concerns market quotes; Madoff's reported trades were never real.
  4. Independent custody and verification of client assets and reported returns - correct

Madoff acted as manager, broker and effective custodian with a tiny auditor, so no one independent verified that assets and trades existed. The lesson is independent custody, verification and due diligence.

A harder one

A bank's relationship managers, paid mainly on sales volume, sold a complex capital-at-risk note to elderly retail clients with low risk tolerance, as happened in several mis-selling cases after 2008. Which control response most directly addresses the root cause?

  1. Raise the VaR limit of the structuring desk to absorb larger inventoryWhy not: A market risk limit does not address client suitability or sales incentives, which caused the breach.
  2. Enforce suitability checks against a target market and redesign volume-based pay - correct
  3. Move the clients to execution-only accounts so the bank has no advisory dutyWhy not: Reclassifying to avoid duties is itself a conduct failure and does not repair the mis-selling.
  4. Increase the Basel capital charge held against the note portfolioWhy not: Capital covers losses to the bank, not harm to clients from unsuitable sales.

Mis-selling cases show weak suitability processes and volume-based incentives. The fix is target-market product governance, effective KYC checks and incentives aligned with client outcomes.

The hardest tier

A bank mis-sold a product to 1,200 clients with an average loss of USD 40,000 each. The regulator requires full redress of losses plus interest of 3% per year compounded for 2 years. It also imposes a fine of 15% of total redress paid, and the bank spends USD 3 million on remediation. The total cost is closest to:

  1. USD 58.2 millionWhy not: Omits the interest on the redress, using 48.0 million of losses plus a 15% fine and remediation.
  2. USD 61.6 million - correct
  3. USD 53.9 millionWhy not: Leaves out the regulatory fine, adding only remediation to the redress with interest.
  4. USD 58.6 millionWhy not: Leaves out the USD 3 million remediation cost, counting redress with interest plus the fine only.

Losses = 1,200 x 40,000 = 48.0 million; redress with interest = 48.0 x 1.03² = 50.92 million; fine = 15% x 50.92 = 7.64 million; remediation 3.0 million. Total = 61.56 million. The costs of a breach go well beyond the fine.

In the app: 6 practice questions on this outcome, spaced review that brings it back before you forget it.

Start free →

More in Case Study: Investor Protection and Compliance Risks in Investment Activities