Investment Adviser Annual Compliance Review

A calendar reminder is not an investment adviser annual compliance review. The annual review required by Advisers Act Rule 206(4)-7 is a documented assessment of whether your policies and procedures remain adequate and whether the firm is actually following them. That distinction is where many otherwise well-run advisers create examination risk.

For SEC-registered advisers, the review must occur no less frequently than annually. State-registered advisers should confirm the requirements of their home jurisdiction, which may impose different expectations for timing, documentation, or specific control areas. In either case, the objective is practical: identify gaps before they become client harm, inaccurate disclosures, deficient books and records, or a regulatory finding.

What the Annual Compliance Review Must Accomplish

Rule 206(4)-7 requires an adviser to adopt and implement written policies and procedures reasonably designed to prevent violations of the Advisers Act and its rules. It also requires annual review of their adequacy and the effectiveness of their implementation. The review is not a request to certify that nothing went wrong. A credible review should show what was tested, what was found, how management evaluated the result, and who owns corrective action.

The SEC does not prescribe a single checklist because each adviser’s risks differ. A private fund adviser with performance fees, side letters, valuation discretion, and multiple service providers needs a different review than a retail RIA managing individual accounts through third-party custodians. A firm’s review should be driven by its actual business model, client base, compensation arrangements, investment authority, marketing activity, and technology environment.

The recordkeeping rule matters as much as the review itself. Advisers should maintain records documenting the annual review, including the analysis performed, supporting materials, identified exceptions, and remediation. A short memorandum can be sufficient only if the underlying work supports its conclusions. An examination team will generally place more weight on evidence than on a polished statement that policies were reviewed.

Start With Changes Since the Last Review

The most efficient review begins with change management. Compare the firm’s current operations to the conditions that existed when its compliance program was last reviewed. Changes often create new obligations before anyone updates the written policies.

Consider new advisory programs, wrap-fee arrangements, private funds, separately managed account strategies, model portfolios, solicitation arrangements, referral fees, affiliated businesses, fee schedules, custodians, trading platforms, portfolio management systems, or outsourced service providers. Personnel changes matter as well. A new supervised person, portfolio manager, chief technology officer, or operations lead may alter access rights, supervision needs, outside business activity disclosures, or conflicts of interest.

Regulatory developments should also be considered, but the review should not become a generic regulatory update. The question is whether a rule change, examination priority, enforcement trend, or state requirement affects the adviser’s own controls. If the answer is yes, document the impact assessment and the resulting policy, disclosure, system, or training changes.

Reconcile the Written Program to Actual Practice

A recurring weakness is the policy manual that describes controls the adviser no longer performs. For example, a policy may require quarterly best execution documentation while the firm conducts an informal annual discussion. Or it may state that employee personal trading reports are reviewed by the CCO when no review evidence exists.

Test the written procedures against reality. Interview the people performing the work, inspect sample records, and trace the control from policy requirement through completion and retention. Where a control has changed for a valid operational reason, revise the policy. Where the policy is appropriate but the control was not performed, record the exception and establish a corrective action plan.

Test High-Risk Compliance Areas

An effective investment adviser annual compliance review uses targeted testing rather than relying solely on confirmations from department heads. The sample size and depth should reflect the risk involved, the volume of activity, prior exceptions, and the strength of existing oversight.

For many advisers, the review should address Form ADV accuracy and timely delivery of required brochures and supplements. Confirm that advisory fees, assets under management, client types, disciplinary disclosures, conflicts, custody-related information, and marketing practices are reflected accurately in Form ADV Part 1 and the firm brochure. Material changes in services or compensation should not wait until the next annual amendment if an interim amendment is required.

Fee billing deserves close attention because small errors can affect many accounts. Compare advisory agreements, stated fee schedules, billing calculations, account values, billing periods, householding methods, and credits or refunds. For a sample of accounts, trace billed fees to custodial statements and confirm that authority to deduct fees is properly documented. Private fund advisers should also test management fees, expense allocations, offsets, capital account reporting, and disclosures against governing documents and side letters.

Custody is another area where facts matter more than labels. Review whether the firm has authority to deduct fees, serves as trustee, has access to client credentials, acts through related persons, or has other arrangements that may trigger Rule 206(4)-2 requirements. Confirm that the compliance approach matches the adviser’s actual custody profile and that required notices, account statements, surprise examination arrangements, or audited financial statement delivery are handled correctly when applicable.

Other core testing areas commonly include best execution, trade allocation, aggregation, principal or agency cross transactions, gifts and entertainment, political contributions, pay-to-play controls, privacy safeguards, cybersecurity incident escalation, business continuity, client complaints, and vendor oversight. The appropriate depth depends on the firm. A low-trading financial planning practice will not test trade allocations in the same manner as an active discretionary manager, but it should not ignore the issue if it retains discretion.

Review Code of Ethics and Personal Trading Evidence

Rule 204A-1 requires SEC-registered advisers to maintain a code of ethics and administer it in a way that identifies and addresses personal trading conflicts. The annual review should test the process, not merely confirm that employees signed an acknowledgment.

Review the current access person population, initial and annual holdings reports, quarterly transaction reports, pre-clearance records where required, restricted lists, duplicate statement feeds, exception logs, and evidence of supervisory review. Reconcile access rights in portfolio, trading, and research systems with the persons designated as access persons. If an employee changed roles, joined midyear, or left the firm, determine whether reporting and access were updated promptly.

The same discipline applies to outside business activities, private investments, board service, gifts, and political contributions. These areas often rely on annual attestations, but an attestation should be supported by reasonable follow-up when responses identify a potential conflict.

Examine Marketing, Disclosures, and Client Communications

Marketing review should cover the adviser’s full communications inventory, not only the website. Test advertisements, pitch books, factsheets, social media activity, consultant databases, email campaigns, performance presentations, testimonials, endorsements, and third-party ratings used during the review period.

Under the Marketing Rule, Rule 206(4)-1, firms should be able to substantiate material statements of fact and demonstrate that advertisements are not misleading. For performance materials, test whether the presentation is consistent with the relevant requirements and with the firm’s disclosed methodology. Review composite construction, model performance, extracted performance, predecessor performance, net and gross returns, benchmark comparisons, and required disclosures based on the type of communication.

Disclosures should agree across Form ADV, advisory agreements, private placement materials, client reports, websites, and marketing pieces. Inconsistency is not always intentional, but it can signal that the firm lacks a controlled process for approving and updating client-facing materials.

Turn Findings Into Owned Remediation

The annual review has limited value if exceptions disappear into a file after the CCO signs the report. Each meaningful finding should identify the issue, root cause, risk rating, required action, accountable owner, target date, and validation method. The CCO should report significant findings to senior management and, where appropriate, the governing body or fund manager.

Not every exception requires a major policy rewrite. A one-time clerical error may call for correction and retraining. Repeated late attestations may indicate that the workflow, escalation process, or supervisory capacity needs to change. The right response depends on the cause and potential impact, not on how easily the issue can be described in the annual report.

Maintain a remediation log throughout the year. This allows the next review to test whether prior findings were resolved and whether the corrective action worked in practice. It also demonstrates that compliance is managed as an operating function rather than a once-a-year exercise.

Build a Review Process That Supports Examinations

A well-organized review file reduces disruption when the SEC or a state regulator requests documents. Retain the annual review memorandum, risk assessment, testing schedules, source documents, interviews, certifications, committee minutes, issue logs, updated policies, training records, and evidence that remediation was completed. Organize files so that a reviewer can move from a stated conclusion to the supporting evidence without reconstructing the process from email archives.

Many firms benefit from assigning a compliance calendar owner and coordinating the review with finance, operations, portfolio management, information technology, and outside service providers. RND Resources often sees the strongest results where the CCO has direct access to the accounting, billing, registration, and operational records needed to test controls rather than collecting fragmented answers at year-end.

The annual review should leave leadership with a clear view of what is working, what needs attention, and who is responsible for the next step. That discipline does more than prepare the firm for an examination. It gives the adviser a controlled way to grow without allowing its compliance program to fall behind its business.

Related service: RIA registration and compliance