Written Supervisory Procedures for Broker-Dealers

A supervisory failure rarely begins with a missing policy. More often, the policy exists but does not identify who performs the review, what evidence must be retained, when exceptions escalate, or how the firm confirms the control actually occurred. When firms search for “written supervisory procedures broker dealer,” they are usually looking for more than a document. They need an operating framework that can be followed by registered personnel, tested by supervisors, and explained to FINRA examiners.

For a broker-dealer, written supervisory procedures, or WSPs, should translate the firm’s actual business model, risks, people, systems, and regulatory obligations into repeatable supervisory actions. A generic manual may be a useful starting point. It is not a defensible final product.

What Written Supervisory Procedures Must Accomplish

FINRA Rule 3110 requires each member firm to establish and maintain a supervisory system reasonably designed to achieve compliance with applicable securities laws and regulations, as well as FINRA rules. The firm must also establish, maintain, and enforce written supervisory procedures that address that system.

That distinction matters. A WSP manual is not simply a collection of regulatory summaries. It should tell personnel how the firm supervises a particular activity. For each material obligation, an examiner should be able to see the responsible principal, the cadence of review, the records reviewed, the evidence retained, and the process for correcting exceptions.

A procedure that says a supervisor will “review correspondence regularly” is too thin. A usable procedure identifies which correspondence is in scope, how it is captured, the review frequency, the designated reviewer, the escalation path, and the documentation created. The same discipline applies to order handling, trade reporting, customer complaints, outside business activities, political contributions, gifts and entertainment, AML alerts, books and records, and financial reporting.

The required level of detail depends on the firm. An introducing broker with retail representatives faces a different supervisory profile than a proprietary trading firm, a placement agent, or an underwriting broker-dealer. The objective is not length. The objective is reasonable, specific control coverage that matches the activities the firm actually conducts.

Start With the Business Model, Not a Template

The most effective WSP project begins with a current-state review. Before drafting language, the firm should identify its lines of business, customer types, products, compensation practices, registrations, clearing arrangement, technology vendors, branch or office structure, and supervisory personnel. It should also confirm what the firm has represented in Form BD, FINRA filings, customer agreements, and prior examination responses.

This step often identifies a gap between the written manual and daily operations. For example, a firm may have procedures for retail communications even though it markets only to institutional investors. At the same time, it may lack procedures addressing private placement due diligence, transaction-based compensation, or supervision of representatives working remotely. The first issue creates unnecessary material; the second creates regulatory exposure.

A practical review also separates responsibilities among the CCO, designated supervisors, AML compliance officer, FINOP, operations personnel, and senior management. Titles alone do not establish accountability. If the WSP assigns a review to a principal, that person must have the authority, training, system access, and time to perform it.

Address the financial and operational control environment

Compliance procedures cannot be isolated from the firm’s financial operations. Net capital monitoring under SEC Rule 15c3-1, reserve requirements where applicable, books and records, expense allocation, payroll, commission accruals, and FOCUS reporting all involve control ownership and escalation. A broker-dealer should be able to show how financial variances, net-capital pressure, late reconciliations, or filing issues move from the accounting function to responsible management.

Where an outsourced FINOP or accounting team supports the firm, the WSPs should describe the firm’s internal review and approval responsibilities as well as the service provider’s role. Outsourcing a task does not outsource a broker-dealer’s regulatory accountability.

The Core Elements of Broker-Dealer WSPs

Written supervisory procedures broker-dealer firms can rely on should be organized around real supervisory functions rather than a copied table of contents. The exact structure varies, but each procedure should answer the same operational questions: what is reviewed, who reviews it, when it occurs, how the review is documented, and what happens if the review identifies an exception.

Supervision of associated persons is typically central. Procedures should address registration status, Form U4 and Form U5 reporting triggers, continuing education, outside business activities, private securities transactions, personal trading where applicable, disclosures, correspondence, communications, and customer complaints. If the firm permits remote work, the supervisory approach must reflect how records, communications, and customer interactions are monitored outside a traditional office.

Business-specific procedures deserve equal attention. A firm engaged in private placements may need documented review standards for issuer due diligence, offering materials, investor suitability or accredited investor verification processes, conflicts, compensation, and record retention. A trading firm may need detailed controls over market access, trade surveillance, restricted lists, error accounts, and supervisory review of electronic activity. An introducing firm must align its procedures with its clearing agreement without assuming that the clearing firm supervises the introducing firm’s obligations.

AML procedures should be consistent with FINRA Rule 3310 and the firm’s written AML program, but they should not merely repeat it. The WSPs should make clear how suspicious activity alerts are reviewed, who investigates them, how decisions are documented, when matters escalate, and how independent testing findings are addressed. OFAC screening, customer identification, beneficial ownership information where applicable, and SAR confidentiality require similarly clear ownership.

Documentation Is the Evidence of Supervision

A supervisor can perform a careful review and still leave the firm exposed if there is no evidence showing what was reviewed and how exceptions were resolved. FINRA examinations commonly focus on whether a firm can produce its supervisory records promptly and connect those records to the procedures on paper.

The evidence should fit the control. It may include review checklists, system-generated reports with annotations, exception logs, supervisory approvals, email records, meeting minutes, attestations, or remediation trackers. The firm should avoid creating checklists that are signed mechanically but provide no indication of substantive review. A recurring certification that says “review completed” may be inadequate when the procedure calls for analysis of exceptions, follow-up, and escalation.

Exception handling is where procedures become credible. WSPs should state whether an issue requires correction, retraining, heightened supervision, disclosure review, disciplinary action, or a broader control assessment. They should also require a record of the decision and its completion. A resolved exception without a documented disposition can appear indistinguishable from an exception the firm ignored.

Annual Review Is Not a One-Day Exercise

FINRA Rule 3120 requires firms to designate and specifically identify one or more principals to establish, maintain, and enforce written supervisory control policies and procedures. The rule also requires an annual report to senior management concerning the firm’s supervisory controls, including the results of the testing and any significant exceptions.

This is not the same as checking a box that the WSPs were reviewed. The annual supervisory controls process should test whether the firm’s controls operated as written and whether the written procedures remain appropriate. It should identify material weaknesses, assign remediation, establish deadlines, and provide management with enough information to exercise meaningful oversight.

Changes in business should trigger review before the annual cycle. New products, new locations, new clearing relationships, personnel changes, expanded solicitation activity, ownership changes, disciplinary events, and new technology can all change a firm’s supervisory risk. A procedure revision made after a problem occurs may still be necessary, but a timely pre-implementation review is far more defensible.

Common WSP Weaknesses That Create Avoidable Risk

The most common weakness is the generic procedure that does not match the firm’s actual operations. Other recurring issues include obsolete rule references, supervisors named in the manual who no longer work at the firm, review frequencies that are not being met, and procedures that assign tasks without specifying retained evidence.

Another issue is fragmentation. Compliance may maintain WSPs, operations may maintain separate checklists, and finance may work from a filing calendar that senior management never sees. Those materials can coexist, but they must be consistent. If the WSP says a monthly net-capital review occurs, the accounting records, supervisory sign-off, and escalation process should support that statement.

Firms should also avoid overpromising. Procedures that require daily reviews when the risk profile supports weekly review create an unnecessary failure point. The better approach is to establish a frequency that is reasonably designed for the activity and then perform it consistently.

Treat WSPs as an Operating Document

A defensible WSP manual should be accessible to the people who use it, controlled so that revisions are tracked, and supported by training and evidence of implementation. New supervisors should understand their assigned procedures before assuming responsibility. Existing supervisors should receive targeted training when rules, systems, or business practices change.

For firms using outsourced compliance, FINOP, accounting, or filing support, the engagement should create clearer ownership, not more ambiguity. RND Resources approaches WSP work as part of the broader operating program: aligning supervisory procedures with registrations, financial reporting, AML controls, books and records, and the firm’s actual filing calendar.

The strongest procedures do not sit untouched until an examination notice arrives. They give personnel a practical answer to a daily question: what must be reviewed now, who owns it, and what record will show the firm did its job?

Related service: Compliance and CCO support