Description

A focused course, tailored for you

Regulatory Risk Analysis for Investment Advisers

Build the examination-ready risk framework that turns OCC, FINRA, and SEC exam cycles into repeatable, documented work.

Every examination cycle, the same pressure: a risk register that was built reactively, scores the examiner questions immediately, and gap memos that take two weeks to reconcile. The analyst who owns this problem doesn't lack information. They lack a structured methodology for turning regulatory obligations into calibrated, traceable risk scores and documented remediation chains.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

A regulatory risk analyst at an investment firm sits at the intersection of three examination bodies with overlapping but non-identical requirements: OCC heightened-standards expectations, FINRA Rule 3110 supervisory obligations, and SEC Regulation Best Interest suitability standards. Each examiner arrives with a different lens. The risk framework has to speak to all three without being so generic that it says nothing specific to any. Most analysts inherit a risk register that was assembled piecemeal across audit cycles rather than designed from first principles. The result is a document that answers last year's questions well and this cycle's questions poorly. This course teaches how to design the framework from scratch, calibrate it against the current regulatory calendar, and maintain it so that the next examination starts from a position of documented strength rather than reactive reconstruction.

What you walk away with

Map regulatory obligations from OCC, FINRA, and SEC rulebooks to specific business activities and control owners using a structured obligation-inventory method.
Score inherent and residual risk using a calibration approach that examiners can trace from score to rationale without follow-up questions.
Build a gap-to-remediation chain that documents the finding, the root cause, the control change, and the validation test in one connected record.
Construct an examination-prep briefing pack that anticipates the top ten examiner questions and answers them with pre-assembled evidence.
Maintain the risk register across examination cycles so that each new cycle begins from a verified baseline rather than a rebuilt document.
Present risk metrics to senior leadership in a format that communicates analytical rigour without requiring the audience to understand the underlying methodology.

The 12 modules

Module 1. The Obligation Inventory

Most risk registers start from a list of controls rather than a list of obligations. This module teaches how to build the obligation inventory first: pulling the specific rule text from FINRA Rule 3110, OCC Heightened Standards guidance, and Regulation Best Interest, then tagging each obligation to the business activity it governs. The output is a structured table that becomes the spine of the entire risk register, ensuring no regulatory requirement is orphaned.

Module 2. Mapping Obligations to Business Activities

Once the obligation inventory exists, it needs to connect to what the firm actually does: investment advisory agreements, suitability reviews, trade surveillance, branch supervision, and customer complaint handling. This module covers the mapping methodology: how to identify the correct unit of business activity, how to handle obligations that span multiple activities, and how to document the mapping so that an examiner can follow the logic from rule text to business process without a guided tour.

Module 3. Inherent Risk Scoring That Holds Up

Inherent risk scores are where most registers become indefensible. Analysts default to a 1-5 scale with no visible calibration. This module introduces a scoring rubric built on three dimensions: regulatory severity (what does the enforcement record say the regulator cares about most?), business exposure (how many customers, transactions, or dollars does this activity touch?), and control maturity baseline (how mature is the firm's starting position?). Each dimension produces a sub-score; the composite inherent score is traceable.

Module 4. Control Mapping and Residual Risk Calibration

A control that exists on paper but has not been tested recently does not reduce residual risk the way a functioning, evidenced control does. This module teaches how to assess control effectiveness using a four-level scale (designed, implemented, tested, evidenced), how to map controls to the obligations they mitigate, and how to calculate residual risk in a way that reflects the difference between a control that was verified last quarter and one that was documented three years ago.

Module 5. The Gap-to-Remediation Chain

When an examiner identifies a gap, the response document needs to answer four questions in sequence: what is the finding, what is the root cause, what is the control change, and how will the firm validate that the change worked. This module builds the gap record template and the remediation workflow that sits behind it. Particular attention is paid to root-cause classification (process gap, staffing gap, system gap, governance gap) because classification determines remediation type and examiner expectation for recurrence.

Module 6. FINRA Supervisory Obligation Specifics

FINRA Rule 3110 supervisory obligations run deeper than a written supervisory procedures manual. This module covers how to document the supervisory chain for investment adviser activities: who reviews what, at what frequency, using what evidence, with what escalation path. The deliverable is a supervisory mapping document that satisfies both the written supervisory procedure requirement and the examiner's expectation that the supervisory chain is actually functioning, not just documented.

Module 7. OCC Heightened Standards Alignment

For investment operations housed inside OCC-regulated institutions, heightened standards add a governance-and-accountability layer on top of the standard examination framework. This module covers the three-lines-of-defence documentation that OCC examiners expect to see, how to align the risk register's control ownership to that structure, and how to produce the risk appetite statement and risk limit structure that anchors the heightened-standards submission. Includes a worked example of a risk appetite statement for an investment advisory book.

Module 8. Regulation Best Interest: Suitability Risk Documentation

Reg BI suitability obligations generate examination risk at the account-recommendation level. This module covers how to document the suitability review process, how to design the transaction-level monitoring that demonstrates the firm is catching recommendations that fall outside the customer's best interest, and how to present the suitability risk score in the register in a way that connects to the monitoring data rather than standing as an unsupported assertion.

Module 9. Building the Examination-Prep Briefing Pack

The 48 hours before an examination begins are not the time to assemble evidence. This module builds a pre-assembled briefing pack: a document index keyed to the most frequently requested items across OCC, FINRA, and SEC examinations, a one-page risk register summary for executive review, and a list of the ten questions examiners most commonly ask investment advisers, with the evidence package pre-mapped to each. The briefing pack is a living artefact, maintained quarterly so it is always current.

Module 10. Maintaining the Register Across Cycles

A risk register that is rebuilt from scratch before every examination is not a risk management tool, it is an examination-prep tool. This module covers the maintenance cadence: monthly control-effectiveness spot checks, quarterly obligation-inventory reviews triggered by new rulemaking, and the annual full re-scoring process. Includes a change-log template that records what changed, why, and who approved it, so that across examination cycles the register demonstrates continuous improvement rather than reactive patching.

Module 11. Presenting Risk Metrics to Senior Leadership

Risk committee reporting needs to communicate three things: where residual risk sits relative to appetite, what is moving and why, and what remediation is in progress. This module builds the one-page risk dashboard, the heat-map presentation for committee audiences, and the exception report for obligations where residual risk exceeds tolerance. Risk committee members who are not analysts must understand the document without a guided interpretation session.

Module 12. The Complete Risk Register: Assembly and Validation

The final module assembles the full risk register from the components built across the preceding eleven modules. It covers the internal validation process: a peer-review checklist, a self-audit against the examination-prep briefing pack, and a final cross-check between the obligation inventory and the register to confirm that nothing has been orphaned. The deliverable is a complete, examination-ready risk register and the reusable methodology for rebuilding it at the start of each new cycle.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

Modules 1-2 address the obligation-mapping problem: most registers are built from controls, not from rules. These modules build the structured foundation.

Modules 3-5 address the scoring and documentation problem: inherent risk, residual risk, and the gap-to-remediation chain form the analytical core of a defensible register.

Modules 6-8 address the multi-regulator problem: FINRA, OCC, and Reg BI each have distinct documentation expectations. These modules handle each in turn.

Modules 9-12 address the operational problem: examination prep, maintenance cadence, leadership reporting, and final assembly into a complete, validated deliverable.

What you get with this course

12 written modules covering the full risk register methodology for investment adviser regulatory risk.
Downloadable obligation-inventory template pre-structured for FINRA, OCC, and SEC obligation mapping.
Inherent and residual risk scoring rubric with worked calibration examples.
Gap-to-remediation chain template and root-cause classification guide.
Examination-prep briefing pack template with pre-mapped evidence index.
Risk committee reporting dashboard template.
Hand-built implementation playbook delivered alongside course access: a step-by-step build plan tailored to the specific regulatory obligations most relevant to investment adviser operations at a bank-affiliated firm.

What you will have in hand by Day 1, Week 1, Month 1

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.

Before and after

Before

A risk register assembled reactively before each examination cycle, scoring that examiners probe immediately, gap memos that take two weeks to reconcile, and no reusable framework to carry forward to the next cycle.

After

A structured, calibrated risk register maintained across cycles, a gap-to-remediation chain that answers examiner questions before they are asked, and an examination-prep briefing pack that turns the first day of a sweep into a documentation exercise rather than a discovery exercise.

What happens if you do not address this

Examination cycles that consistently begin from a reactive position compound over time. Each cycle's findings feed the next examiner's opening questions. The analyst who does not build a defensible methodology now will face a longer, more detailed examination next cycle, with a higher probability of a follow-up management response letter.

Who it is for

A regulatory risk analyst or compliance officer at a registered investment adviser, broker-dealer, or bank-affiliated investment arm. Typically two to eight years in the role, accountable for the risk register, examination management, and the gap-to-remediation tracking that feeds senior leadership reporting. Technically fluent in the regulatory obligations but looking for a more rigorous and defensible methodology for scoring, documenting, and presenting risk.

Who this is NOT for. Analysts looking for a survey of regulatory topics rather than a hands-on methodology for building and maintaining a defensible risk framework. Operations staff without direct accountability for the risk register or examination preparation.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Approximately 6-8 hours across the 12 modules. Each module is designed to be completed in a single sitting and produces a concrete work product. The full register can be assembled in parallel with module completion.

Why $199 is the right number

A regulatory consultant engagement covering the same methodology typically runs $15,000-$40,000 and produces a register that belongs to the engagement rather than to the analyst who will maintain it. This course produces the same work product and leaves the analyst with the methodology and the templates to rebuild it independently at the start of each new examination cycle.

FAQ

Does this course cover both broker-dealer and investment adviser obligations, or one or the other?

The course covers both, with specific modules addressing FINRA supervisory obligations (broker-dealer), OCC Heightened Standards (bank-affiliated operations), and Regulation Best Interest (investment adviser suitability). The methodology is designed to handle multi-regulator environments rather than treating each examination body in isolation.

How current is the regulatory content?

The obligation framework is built from current rule text and recent examination priorities. The methodology is designed to be maintained quarterly, so the course also teaches how to update the obligation inventory when new guidance or rulemaking arrives rather than treating the register as a static document.

Is the implementation playbook a generic template or built for my situation?

The implementation playbook is hand-built for investment adviser regulatory risk specifically, not a generic compliance framework. The step-by-step build plan in the playbook reflects the FINRA, OCC, and SEC examination context rather than a broader financial-services or corporate-governance framing.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.