Study guide
Supervision is the heart of the Series 26: the exam's second function accounts for 49 of the 110 scored questions, the largest share of the test. This chapter covers the supervisory system itself, office designations and inspections, review of communications, advertising rules, and the handling of complaints, gifts, and discipline that occupy a principal's daily work.
The Supervisory System: Rules 3110, 3120 and 3130
FINRA Rule 3110 requires every member firm to establish and maintain a supervisory system reasonably designed to achieve compliance with securities laws and FINRA rules. The system must include written supervisory procedures (WSPs) that state who is responsible for each supervisory task, what the supervisor does, how often, and how the review is documented. The firm must designate appropriately registered principals for each type of business, assign every registered person to a supervisor, designate offices of supervisory jurisdiction, and keep the WSPs current as rules and business lines change, communicating amendments to staff. Rule 3120 adds a second layer: a system of supervisory controls that tests and verifies, at least annually, whether the Rule 3110 procedures actually work, with a written report to senior management identifying the testing done, the gaps found, and the fixes made. Rule 3120 also imposes specific controls over producing managers, so that no supervisor reviews his or her own sales activity. Rule 3130 completes the structure: the firm designates one or more chief compliance officers on Schedule A of Form BD, and the chief executive officer certifies annually that the firm has processes in place to establish, maintain, review, test, and modify its compliance policies, after meeting with the CCO. A useful way to keep the three rules straight: 3110 is doing the supervision, 3120 is testing the supervision, and 3130 is certifying that the compliance processes behind it all exist.
OSJs, Branch Offices and Inspections
An office of supervisory jurisdiction (OSJ) is any office where certain high-responsibility functions occur, including final approval of new accounts, review and endorsement of customer orders, final approval of retail communications, order execution or market making, structuring of offerings, custody of customer funds or securities, or supervision of other offices. Each OSJ must have at least one on-site registered principal responsible for it. A branch office is any location where the firm conducts securities business with the public, registered on Form BR, while certain locations, such as an office used for less than a specified period or a primary residence meeting strict conditions, can qualify as unregistered non-branch locations. Since 2024, a qualifying private residence from which a principal performs supervisory functions may be designated a residential supervisory location and treated as a non-branch office for inspection purposes, and a voluntary pilot program permits eligible firms to conduct some inspections remotely; verify the current status of these programs, as they continue to evolve. The inspection schedule under Rule 3110(c) is heavily tested: OSJs and branch offices that supervise other offices must be inspected at least annually, non-supervising branch offices at least every three years, and non-branch locations on a regular periodic schedule the firm can justify. Inspections must be reduced to a written report, must test key controls such as transmittal of funds and changes of address, and cannot be conducted by a person assigned to the location or directly supervised by it.
Reviewing Correspondence, Email and Social Media
Rule 3110(b)(4) requires procedures for the review of incoming and outgoing written and electronic correspondence and internal communications relating to the firm's securities business. Review need not cover every message; a risk-based approach using lexicon searches, sampling, and escalation is acceptable if the WSPs explain it and the firm evidences the reviews performed, typically by logging who reviewed what and when. Supervisors may delegate day-to-day review, but the designated principal remains responsible and must take reasonable steps to see that delegated work is done. All business communications must be retained under SEA Rule 17a-4, generally for three years, regardless of the device or platform used. Social media follows the same logic through FINRA's guidance: static content, such as a representative's profile page or a posted article, is treated as a retail communication requiring principal approval before use, while real-time interactive content, such as a live chat or an unscripted post in an ongoing discussion, is treated like correspondence, subject to risk-based post-use review rather than pre-approval. The trap for firms is off-channel communication. If a representative named Priya Raman texts customers about fund recommendations from her personal phone and the firm cannot capture those messages, the firm has a recordkeeping and supervision problem even if every message was innocent. Principals should train representatives on approved channels, attest compliance periodically, and treat discovered off-channel business communications as a supervisory event to investigate and document.
Communications with the Public: Rule 2210
FINRA Rule 2210 sorts communications into three categories by audience. Correspondence is any written or electronic communication distributed to 25 or fewer retail investors within a 30-calendar-day period. A retail communication reaches more than 25 retail investors in that period, which sweeps in advertising, sales literature, websites, and most social media. An institutional communication goes only to institutional investors, such as banks, registered investment companies, and persons with at least 50 million dollars in assets. The category drives the supervision: retail communications generally require approval by a registered principal before first use, correspondence and institutional communications are subject to risk-based review under the firm's procedures, and everything is retained. Filing obligations with FINRA's Advertising Regulation Department matter to fund and variable products firms. A new member firm must file retail communications published in public media at least 10 business days before first use during its first year of FINRA membership. Established firms must file retail communications concerning registered investment companies, including variable contracts, within 10 business days of first use, and communications containing fund performance rankings not created by an independent entity require filing 10 business days before use. Content standards apply to everything: communications must be fair, balanced, and not misleading, must provide a sound basis for evaluating the facts, may not predict or project performance except in narrow cases, and fund performance must follow standardized SEC presentation, reflecting sales loads and showing 1-, 5-, and 10-year average annual returns. Variable product pieces must not overstate liquidity or bury surrender charges and fees.
Complaints, Rule 4530 Reporting, Gifts and Discipline
A customer complaint is a written grievance, including email and other electronic messages, involving the firm or an associated person. The WSPs must provide for logging each complaint, investigating it, responding to the customer, and escalating to a principal, with the complaint file retained. FINRA Rule 4530 imposes two distinct reporting duties. First, the firm must report specified events within 30 calendar days, including regulatory findings, certain internal conclusions of violations, criminal matters, and settlements of customer claims exceeding thresholds of 15,000 dollars for an associated person or 25,000 dollars for the firm. Second, the firm must file quarterly statistical summaries of customer complaints, due by the 15th day of the month following the end of each calendar quarter. Some complaint-related events also require Form U4 or U5 amendments. Gifts and entertainment are a classic sales-practice control. FINRA Rule 3220 caps gifts to a person connected with the business of another employer at 300 dollars per person per year, a limit raised from 100 dollars effective March 2026, with records kept of all gifts. The investment company and variable contract non-cash compensation rules add product-specific limits: occasional meals and entertainment are permitted if not preconditioned on sales targets, training and education meetings are permitted if attendance is not conditioned on production and guest expenses are not covered, and internal sales contests must credit total production with equal weighting across product types. Finally, internal discipline, such as warnings, fines, suspensions, or termination, must be documented, and principals should remember that some disciplinary conclusions are themselves reportable under Rule 4530.
Key terms
- Written supervisory procedures (WSPs)
- — The written procedures required by Rule 3110 identifying who supervises each activity, what they do, how often, and how the review is evidenced.
- Supervisory control system
- — The Rule 3120 requirement to test and verify annually that the firm's supervisory procedures work, with a written report of findings to senior management.
- CEO certification
- — The annual certification under Rule 3130, made after consultation with the chief compliance officer, that the firm has processes to establish, maintain, review, test, and modify its compliance policies.
- Office of supervisory jurisdiction (OSJ)
- — An office performing designated high-responsibility functions such as final approval of new accounts or retail communications; each OSJ requires an on-site registered principal and annual inspection.
- Branch office
- — A location where the firm conducts securities business with the public, registered on Form BR; non-supervising branches must be inspected at least every three years.
- Residential supervisory location
- — A qualifying private residence from which supervisory activity is conducted that may be treated as a non-branch location on a three-year inspection cycle under rules adopted in 2024.
- Correspondence
- — Under Rule 2210, a written or electronic communication distributed to 25 or fewer retail investors within a 30-calendar-day period; subject to risk-based review rather than pre-approval.
- Retail communication
- — A communication distributed to more than 25 retail investors within 30 calendar days; generally requires prior principal approval and may require FINRA filing.
- Institutional communication
- — A communication distributed only to institutional investors as defined by FINRA; exempt from pre-approval but subject to written procedures and training.
- Customer complaint
- — A written grievance, including electronic messages, from a customer involving the firm or an associated person; must be logged, investigated, and reflected in quarterly Rule 4530 filings.
- Rule 4530 reporting
- — The FINRA rule requiring firms to report specified disciplinary and litigation events within 30 calendar days and to file quarterly statistical summaries of customer complaints.
- Non-cash compensation
- — Gifts, entertainment, and training or sales-contest incentives connected with the sale of investment company and variable products, permitted only within specific rule-based conditions.
Exam tips
- Memorize the inspection cycle: OSJs and supervising branches annually, non-supervising branches every three years, non-branch locations on a documented periodic schedule, and no self-inspection.
- The 25-retail-investors-in-30-days threshold separates correspondence from retail communications, and the category determines whether pre-approval by a principal is required.
- Keep the three supervision rules straight: 3110 is performing supervision, 3120 is testing it with an annual report to senior management, and 3130 is the CEO's annual certification.
- Rule 4530 has two clocks: 30 calendar days for specified events and quarterly complaint statistics due by the 15th of the month after quarter end.
- The gift limit under Rule 3220 is 300 dollars per person per year as of March 2026; older study materials citing 100 dollars are out of date, though question banks may still test the concept rather than the number.