Free cheat sheet
Supervisor Branch Procedures Cheat Sheet
The supervisory and branch operations sections of the CIRO exams cover Rule 3300, Rule 3700, complaint handling under Rule 8000 series, AML obligations, and the specific duties of designated supervisors. This sheet presents the key rules as decision flowcharts and checklists. Rule numbers are IDPC Dealer Member Plain Language Rules unless stated otherwise. Verify current CIRO rules at ciro.ca. Last reviewed: 2026-05-08.
1. CIRO Rule 3300 - Supervisory Framework Overview
Rule 3300 requires every dealer member to establish, maintain, and apply a supervisory system that provides reasonable assurance that the business is conducted in compliance with applicable requirements. The system must be documented and kept current.
Three-tier supervisory structure:
- Senior management: Responsible for overall compliance culture; sets tone at the top; responsible for approving supervisory policies and procedures
- Compliance department: Designs and monitors the supervisory system; conducts internal reviews; reports material breaches to senior management and CIRO
- Branch/line supervisors (designated supervisors): Day-to-day oversight of registered representatives; review and approve trades, KYC updates, account openings, and complaints
Written supervisory procedures (WSP): The dealer must maintain written supervisory procedures covering all lines of business. WSPs must be updated when rules change and must be accessible to all supervised individuals. An outdated or absent WSP is itself a Rule 3300 violation.
Supervisory controls minimum requirements under Rule 3300:
- Trade review procedures (daily, weekly, periodic)
- Account opening and suitability review procedures
- KYC update procedures and trigger-event monitoring
- Conflict-of-interest identification and management
- Outside business activity monitoring
- Client complaint intake, escalation, and resolution procedures
- AML/ATF procedures per PCMLTFA requirements
- Training and continuing education requirements for registered individuals
2. Rule 3700 Series - Branch Operations Checklist
Rule 3700 series governs the operational requirements for branch offices of dealer members. Key requirements:
| Requirement | Frequency | Notes |
|---|---|---|
| Branch audit / inspection | At minimum annually | Compliance or internal audit must physically or remotely inspect branch operations; findings documented |
| Books and records review | Periodic (per dealer WSP) | Trade blotters, account records, order tickets, KYC files, complaint logs all reviewed |
| Designated supervisor review of accounts | Daily / per trade policy | Trade-level and account-level review; exception reports generated for flagged activity |
| Registrant continuing education verification | Annual | CIRO requires ongoing education; supervisor tracks completion |
| OBA disclosure review | As disclosed; annual confirmation | Supervisor confirms no new undisclosed activities |
3. Trade-Review Thresholds
No single numerical threshold is prescribed in CIRO rules for trade-review triggers. Dealers must establish their own thresholds in their WSPs. The following thresholds represent common industry practice and exam-tested scenarios:
| Flag | Typical threshold | Supervisory action |
|---|---|---|
| Trade size | Exceeds $X (set by dealer policy) | Supervisor pre-approval or same-day post-trade review |
| Trade frequency - churning | Turnover ratio > 6x per year in a fee-based account; or commissions > stated threshold | Supervisor investigation; potential compliance referral |
| Single-issuer concentration post-trade | >10% flag; >20% acute | Suitability review; documentation in account file |
| Trade outside stated objective | Any speculative trade in a capital-preservation account | Supervisor review; KYC update if client preference changed |
| Unusual pattern | Trades in thinly traded securities; round-lot concentrations; matched trades | AML review; possible STR filing; escalation to compliance |
4. Rule 3401 Account Approval - Branch Manager Touchpoints
The branch manager (or designated supervisor) must personally approve the following under Rule 3401:
- All margin account openings - review of net worth, income, and suitability for margin trading before account is activated
- All options account openings - review of investment knowledge and experience; assign appropriate options trading level (1-3)
- All short-selling accounts - confirm understanding of UMIR 3.3 locate requirement and margin implications
- Any account for a client who is a registered individual at another firm (CIRO gatekeeper requirement)
- Accounts where the rep has flagged an elevated risk or compliance concern at opening
- Re-approval when a client's account type is upgraded (e.g., cash to margin, or options Level 1 to Level 2)
Documentation: The supervisor's approval must be documented with a signature or electronic equivalent and a date. "Verbal approval" without a written record does not satisfy Rule 3401. The account record must show the date of approval, the approving supervisor's identity, and the basis for approval.
5. IDPC Rule 8000 Series - Complaint Handling Timeline
Rule 8000 series sets minimum standards for receiving, acknowledging, investigating, and resolving client complaints. Know these timelines precisely - they appear on exams.
| Step | Timeline | Content requirement |
|---|---|---|
| Acknowledgement letter | Within 5 business days of receipt | Confirm complaint received; provide name of person handling; describe complaint-handling process; inform client of right to escalate to OBSI |
| Substantive response | Within 90 calendar days of receipt | Decision or final response; if still investigating, written update on status and expected completion date |
| OBSI escalation notice | At time of final response or when 90 days have elapsed | Client must be informed of the right to escalate unresolved complaints to OBSI (Ombudsman for Banking Services and Investments) |
OBSI details:
OBSI (Ombudsman for Banking Services and Investments) is an independent dispute resolution service. OBSI can recommend compensation up to $350,000 per complaint (verify: the cap is subject to periodic OBSI policy review). OBSI recommendations are not binding on the firm, but firms that do not comply must publicly disclose their non-compliance. Clients must complete the firm's internal process before OBSI will accept the complaint.
6. AML Branch Oversight Under PCMLTFA
Supervisors are responsible for AML oversight at the branch level. Know these thresholds and timelines precisely.
| Report type | Trigger | Filing deadline | Filed with |
|---|---|---|---|
| LCTR (Large Cash Transaction Report) | Single cash transaction of $10,000 CAD or more; or same-client aggregation to $10,000 in one business day | Within 15 calendar days of transaction | FINTRAC |
| EFT Report (International Wire) | International wire transfer of $10,000 CAD equivalent or more (single or aggregated in one business day) | Within 5 business days of transaction (outgoing) or same day for incoming | FINTRAC |
| STR (Suspicious Transaction Report) | No monetary threshold - reasonable grounds to suspect money laundering or terrorist financing | Within 30 days when suspicion arose; or 3 days if suspicion at time of transaction | FINTRAC |
Retention requirements:
- Client identification records: 5 years after the relationship ends (or 5 years after account closure)
- Transaction records (LCTR, EFT): 5 years from date of transaction
- STR copies: 5 years from date of filing
Note: CIRO's own books-and-records rules under IDPC Rule 3700 series and NI 31-103 §11.5 require 7 years for account records, trade records, and correspondence. The PCMLTFA's 5-year retention for AML-specific records and CIRO's 7-year requirement for general records coexist. Apply the longer period (7 years) to records that satisfy both categories.
Tipping-off prohibition:
Disclosing to a client that a STR has been filed is a criminal offence under PCMLTFA. This applies to all staff who become aware of the filing, not only the filer.
7. Audit-Prep Checklist - Books and Records by Category
| Record category | Examples | Retention |
|---|---|---|
| Account records | KYC forms, account applications, suitability assessments, signed disclosures | 7 years (NI 31-103 §11.5 and CIRO rules) |
| Trade records | Order tickets, trade confirmations, blotters, allocation records | 7 years |
| Correspondence | Client emails, letters, notes of verbal conversations | 7 years |
| Complaint records | Complaint intake forms, investigation notes, resolution letters, OBSI referrals | 7 years |
| Financial records | General ledger, trial balance, customer account statements, margin calls | 7 years |
| AML-specific records | Client ID verification, LCTR copies, EFT reports, STR copies, risk assessments | 5 years (PCMLTFA); use 7 years if also meeting CIRO requirement |
8. Designated Supervisor Responsibilities
A designated supervisor is a registered individual approved by CIRO to supervise the conduct and activities of other registered individuals. Designation requires CIRO approval (pass the Branch Manager exam or equivalent proficiency). Key responsibilities:
- Review and approve new account openings as required under Rule 3401
- Review and approve KYC updates for supervised individuals' accounts
- Daily review of trades using exception reports; investigate flagged activity
- Receive, log, and escalate client complaints per Rule 8000 series
- Monitor for outside business activities and ensure timely disclosure
- Conduct or oversee annual branch audits and submit findings to compliance
- Enforce AML/ATF procedures; escalate STR candidates to the firm's AML compliance officer
- Maintain written records of all supervisory actions taken, including approvals, denials, and investigations
- Verify continuing education completion for each supervised registrant
- Report material breaches to compliance immediately; never allow a breach to continue in order to preserve a business relationship
Test Yourself: 5 Supervisory Questions
Q1. A client submits a written complaint by email on March 1. By what date must the acknowledgement letter be sent?
Show answer
By March 8 (within 5 business days). The letter must confirm receipt, name the handler, explain the complaint process, and inform the client of their right to escalate to OBSI.
Q2. A client deposits $12,000 in cash to fund a new account. What AML report is required and when?
Show answer
A Large Cash Transaction Report (LCTR) must be filed with FINTRAC within 15 calendar days. The $12,000 cash deposit exceeds the $10,000 threshold. The supervisor must ensure the LCTR is completed and filed even if the client's identity is already known and the transaction appears legitimate.
Q3. A registrant discovers a colleague has been conducting outside consulting work without disclosing it to the firm. What should the supervisor do?
Show answer
Escalate immediately to compliance. An undisclosed OBA is a Rule 3300 and NI 31-103 §13.4 violation. The supervisor should not attempt to resolve it informally. The registrant must formally disclose the activity, and compliance determines whether it is permissible, requires conditions, or must be terminated.
Q4. A supervisor files a Suspicious Transaction Report on a client. The client calls the next day asking about the recent review of their account. What must the supervisor NOT do?
Show answer
The supervisor must not disclose that an STR was filed. Tipping off the client that a STR exists is a criminal offence under PCMLTFA. The supervisor can state that routine compliance reviews are conducted but must not confirm or deny the STR.
Q5. Under CIRO Rule 3300, what is the minimum documentation required for a branch manager's approval of a margin account?
Show answer
A written or electronic record showing the supervisor's identity, date of approval, and the basis for approval (that the KYC supports margin trading suitability). Verbal approval without a written record does not satisfy Rule 3401 and Rule 3300 documentation requirements.
Related Cheat Sheets
Last updated: 2026-05-08. OBSI $350,000 cap is subject to OBSI policy review - verify at obsi.ca. CIRO Rule 3300, 3401, 3700, and 8000 series references are to the IDPC Dealer Member Plain Language Rules current as of May 2026. Verify amendments at ciro.ca.