For SEC-registered financial advisors, the prospect of an upcoming examination by the SEC can be a source of high anxiety. This is especially the case with newly registered advisors or formerly state-registered advisors who recently became SEC-registered since they may be uncertain about how the examination process will work, what elements of the firm the SEC will dig into, or what information the advisor will need to provide to the examiners. Even firms with robust compliance programs that do a good job following their required policies and procedures can struggle with examinations if they don't have the information that examiners will ask for readily available.
Thankfully, the SEC has published guidance that details the information typically requested during a first-time examination, as well as the questions examiners are most likely to ask the advisory firm, in the form of a Risk Alert titled "Observations from Examinations of Newly-Registered Advisors". Effectively, then, they've given out a 'cheat sheet' for the exam, from which advisors can glean information that can help them prepare for the inevitable phone call from the SEC initiating their next examination.
At a high level, the exam process typically kicks off with a phone call from the SEC examiner, followed by a secure email detailing the information being requested from the advisor. Advisors generally have about 2 weeks to collect the information for the specified examination period (which, for newly registered advisors, typically stretches back to the effective date of their initial SEC registration). Next, as detailed in the Risk Alert, the list of requested information tends to be similar for most advisors undergoing their first SEC examination and comprises various types of information.
First, the SEC will request information on the firm itself, including organizational charts, employee roles and responsibilities, financial statements, and/or any legal action against the firm that is pending or settled. Next, they'll want information on the firm's clients (including the number and types of clients served), client accounts (including Regulatory Assets Under Management and other assets managed such as "Assets Under Advisement"), and services (including the types of advisory services provided, authority to trade in client accounts, and use of third-party providers like custodians and subadvisors).
At the core of the examination, though, is a review of the firm's compliance policies and procedures and code of ethics, including not just a copy of the 'paper' compliance manual but also how the practices and controls the firm puts into place ensure it adheres to its compliance program. Which means the firm will need to provide records of holdings and transactions for each of its clients (which may require some training and practice for employees to be able to quickly pull the needed data from the firm's custodian), as well as archived client communications and any advertisements produced by the firm.
The key point is that even though the volume of information requested for an SEC examination may be large, advisors will be able to predict a large proportion of what that requested information will be since the SEC has given those details in its Risk Alert. Which ultimately helps advisors better prepare for an eventual examination by putting the systems in place to easily archive and submit information to examiners – and to reduce the chances of extended back-and-forth questions with regulators, so the firm and its advisors can get back to normal business!