As a matter of policy, the SEC disclaims responsibility for any private statement by an employee. The speaker's views are her own, and do not necessarily reflect those of the Commission, the Commissioners, or other members of the staff. |
Good Morning. I'm glad to be with you here today, I understand that this is the inaugural meeting of the Financial Services Institute's Public Policy Day. I am pleased to have been invited to address this group at its first such meeting. I have been asked to update you on SEC's activities in the last year. Hold onto your hat, because we've been very busy! At the outset, let me remind you that the views I express are my own views and not necessarily the views of the Commission, the individual Commissioners or my colleagues on the Commission staff.
The mission of this group, to serve as a forum for industry leaders in the broker-dealer independent contractor community to come together and address common concerns and issues, is certainly important. And, it is timely, as the securities industry is grappling with ways that it can ensure that it serves its customer - the investor - in the best possible way. Compliance breaches in the last year have certainly served as a warning that, in the drive for results, productivity and profit, firms must refocus and rededicate themselves to ensuring that they do not lose sight of their customer.
These compliance breaches are now well known by all of us and by the investing public -- the failure to provide customers with breakpoint discounts in selling mutual funds, abusive market timing and late trading, inappropriate sales tactics in the sale of variable annuities, research analysts' conflicts of interest, failing to inform brokerage customers of sales incentives provided by mutual funds - these are all examples of problems that recently beset a significant number of industry firms.
These breakdowns, as well as other problems we have seen in our examinations, indicate a need for more vigorous compliance and supervisory programs by financial services firms. More broadly, however, I believe that recent events should signal a need for deeper and more meaningful change than just adopting a new policy or procedure dealing with whatever particular misconduct may be on our radar screens. I believe that recent experiences indicate a need for firms to consider how they can be more proactive in ensuring that problems never occur in the first place. The concept of prevention is not new and is in fact a key aspect of the federal securities laws - as the Exchange Act, the Investment Adviser's Act and the Investment Company Act all have provisions that reflect the need for registered firms to have policies and procedures reasonably designed to prevent violations of the federal securities laws (Section 15(b)(4)(E) of the Securities Exchange Act of 1934, Rule 206(4)-7(a) under the Investment Advisers Act of 1940, and Rule 38a-1(a) under the Investment Company Act of 1940). I know that you share my view that problems are best prevented from occurring in the first place.
Just as compliance breakdowns have caused many firms to consider improvements that they can make in compliance, in supervision and in the firm's "Culture of Compliance," we as regulators have also taken steps to reassess both regulatory obligations of firms, as well as the way we conduct our oversight. Our primary mission is to protect investors and to maintain the integrity of the securities markets, and with this goal firmly in mind, we've made some changes. I thought this morning I would briefly summarize some of the regulatory changes that the Commission has taken in the last year that are of interest to broker-dealers and investment advisers, and then spend most of my time outlining developments in the SEC's examination program.
Recent regulatory actions affecting (or potentially affecting in the case of proposed rules) broker-dealers include the following:
With respect to investment advisers, some of the new rules (and proposed rules) include:
As I mentioned, I wanted to spend the bulk of my time with you today talking about SEC examinations. After all, your interface with the SEC may occur primarily during an examination, and I know that the industry is very interested in the changes to our program that we have recently implemented.
Let me begin by telling you about our philosophy -- we have dedicated ourselves to being more proactive, to identifying high risk conduct and taking steps to mitigate or eliminate it, before it can blow up and investors are harmed. This is a fundamental goal of our Chairman, and as an examiner, I've simply seen too much investor harm and abuse, and have heard from too many investors who were misled or taken advantage of not to think about how this misconduct might be prevented in the first place.
Think about the damage done in the last few years, which has had a real impact on investors, not just in terms of the dollars lost due to particular fraudulent or abusive behavior, but also in terms of trust, your customers' trust. I have often said that what's good for investors is good business for those who serve investors. The inverse is equally true -- loss of investor trust has real economic consequences for firms and for our markets overall. I know that most firms share this goal: they want to do business in an environment that fosters their customers' trust, and they want to compete in an industry where all firms are playing by the rules.
In the examination program, we intend to: 1) focus our limited resources on the areas presenting the highest risk to investors; 2) implement a proactive "problem solving" strategy designed to identify emerging compliance problems so that they may be remedied before they can become too severe or systemic; and 3) help foster strong compliance practices that help prevent problems from occurring in the first place.
How are we doing this?
First, beginning last fall, we improved the risk-based targeting of examinations. We implemented risk assessment strategies to identify high risk issues and we then launched targeted examination initiatives to probe these discrete issues "horizontally," or at several firms in the industry at once. These "risk-targeted examinations" provide us with a clear sense, relatively quickly, of industry practices with respect to a particular issue, and allow us to provide the Commission, its staff, and others with the information needed to address the issue, whether by issuing an investor alert, assessing whether changes to rules are needed, bringing an enforcement action or taking some other action to address the issue, using "all of the tools in our toolbox."
Our risk-assessment process utilized the very significant knowledge of our exam staff in the field -- those folks who are on-the-ground, out conducting examinations, and who see emerging issues. We asked all examiners to identify areas of compliance risk, and also to identify factors that would either mitigate or exacerbate that risk. For example, factors that might exacerbate a risk include the risk of non-detection, the likelihood of significant profits, the belief that "everyone is doing it," and the lack of clear regulatory or supervisory guidance. Factors that might mitigate a risk include, for example, a high risk of detection, low probability of profits, and a clear knowledge of the scope of permissible and impermissible conduct.
It will never be possible for regulators to detect every covert act, every concealed motive, every falsified record, every violation, nor will ever be possible for regulators to address every risk in the securities industry. But we can improve our ability to identify the types of conduct that can lead to the most serious violations and we can act promptly to solve problems once they are identified. We have been actively seeking ways to further refine and improve this process throughout the Agency, to better anticipate areas of emerging risk, and to coordinate methods to solve the problems that are identified. Indeed, the Commission has created a dedicated "Office of Risk Assessment" to serve exactly this function. The new director of that Office, Charles Fishkin, is now on-board at the SEC, and we expect that he will help the Agency's staff spot issues and coordinate solutions.
With respect to mutual funds specifically, we are also actively thinking about how we can use data and information to target our resources more precisely to those firms, and those areas within firms, where there are indications of problems. Chairman Donaldson has created a "Task Force on Mutual Fund Surveillance" to determine how the Agency can better obtain and use data and technology in this effort.
How has this risk-based targeting worked so far? This targeted approach is working to identify problems. Indeed, recent SEC examinations have detected significant and emerging compliance problems, which led (and are leading) to SEC remedial and corrective actions. Let me give you some examples:
In addition to better identification of emerging wide-spread problems, the greater focus on risk-based targeting and more in-depth examinations has resulted in an increase in examinations finding significant problems. For example, one measure, the number of examinations referred for enforcement investigation, increased significantly in the last year. Clearly, a result of better targeting is being able to detect and remedy serious problems promptly.
We have made this targeting process a part of our program, and have a number of risk targeted examinations now underway. Let me describe, thematically, some of the things we're looking at now:
As I said at the outset, we view our mission as not just the detection of problems, but also, in a proactive way, to encourage firms to take steps to improve compliance practices before problems can develop. As an examiner, I have too often discovered problems occurring in one firm after another, not to think about ways that firms could prevent the problem in the first place. I like nothing better than when firms improve their compliance practices to prevent problems and violations. I know that many firms certainly share this view. And as a practical matter, while we have recently increased the size of our examination staff (we now have approximately 490 staff people dedicated to examining investment advisers and mutual funds and 315 staff people to oversee broker-dealers), we can't ever replace the obligation of firms, first and foremost, to prevent, detect and correct problems in their own shops.
What steps can we as regulators take to help firms' improve compliance practices? We can look back up the compliance and supervisory chain and try to determine what led to problems in the first place. In the last year, SEC examiners initiated targeted examinations to focus on firms' efforts to prevent problems, including by reviewing firms' compliance programs and handling of conflicts of interest. I submit that these efforts are among our most important, and, as I said at the outset, the identification of strong proactive measures to prevent problems should be a top priority for all firms.
One step we can take to help foster stronger compliance is to highlight problem areas, and spur greater communication about strong compliance practices and internal controls. Recently, we issued public reports that aim to do that. For example:
I have heard from many firms' compliance staff that they value this type of report, because it can help generate ideas on how they might improve their own internal controls. Compliance folks have also said that this type of regulatory report gives them support in asking the business leaders of the firm for more resources or more attention to compliance issues!
This examination approach means that an SEC examination of your firm may be focused on a discrete area or issue. While the examination focus may be narrow, in that area, examiners will likely probe deeply, asking for records and documents, including internal communication, like emails, if they are relevant. We will work with firms on the timeframes for producing documents, but as you will understand, so that we can do our work effectively and efficiently, we ask for prompt production of relevant information. We are also working on ways that we can improve the flow of information between the largest firms and our oversight staff, to help ensure that we are aware of significant developments in the regulated community.
From all firms, we expect cooperation and candor, and that you will help us to understand your compliance controls, and how they work to prevent and detect problems. We will also want to understand what steps were taken to correct problems that were detected. From us, you can expect that we will conclude our work as quickly as possible, and provide you with the results of the examination in writing - in a deficiency letter if we found deficiencies, or in a "no further action" letter if no deficiencies were identified. We recognize that given the concentration of investor assets and accounts in the largest asset management and brokerage firms, the largest firms in the industry may be subject to several risk targeted reviews at once. In fact, some firms may see more of us in these risk targeted exams, and less of us for routine full-scope examinations. We will seek to do our work, and to identify firms to be examined, with minimum burden to the firms' examined. We encourage communication during the examination - please talk with examination staff about any issues that arise.
If your firm is an investment adviser or investment company, we will be examining high-risk firms regularly - these are very large firms with significant investors' assets under management, and firms with less-than-robust internal controls or with other high risk characteristics. All other firms may be examined for cause (for example, based on a tip or complaint), pursuant to a risk targeted examination or randomly.
If your firm is a broker-dealer, we will be examining large firms' internal controls regularly, and other firms will be examined for cause, pursuant to a risk targeted examination, to evaluate the oversight of an SRO, or randomly.
I want to say a few words about the outcome of examinations. Most examinations are concluded, after an exit interview, with a deficiency letter that outlines our findings, and asks for corrective actions to fix the problem and preventative actions, to ensure that it does not reoccur. These deficiency letters serve a very important purpose -- they may be early warnings for firms about problem areas that need to be remedied.
I am often asked about the criteria we use in considering whether examination findings ought to be referred to our colleagues in the SEC's Division of Enforcement. Among the factors that are considered are:
I know that the prospect of an SEC examination is not eagerly anticipated. I understand that producing documents and answering questions may not be part of your business plan. I submit, however, that it should be -- all firms that handle other people's money should be prepared to demonstrate that they are doing so with the utmost of care. This responsibility is not to be undertaken lightly, it means having strong internal controls designed to prevent abuse and violations of the rules. It means investing in the compliance infrastructure needed to handle other people's money. If you approach your work with this responsibility in mind, you will understand that our mission is not to "get you," but to make sure that you are acting in the best interests of both of our clients - investors.
I will end here. I hope I've provided you with a sense of current developments at the SEC and in the Examination Program in particular.
Thank you, and I'm happy to answer any questions you may have.