FRM Exam Part II · Case Study: Investor Protection and Compliance Risks in Investment Activities

Compliance Risk in Investment Activities for FRM Part II

Updated 11 October 2026 · Fact-checked

Compliance risk is the risk of legal or regulatory sanctions, financial loss or reputational damage from failing to follow laws, rules and standards. In investment activities it arises from conflicts of interest, insider trading and market abuse. You manage it by identifying the rule, finding the breach, and applying governance and controls.

Understand Compliance Risk in Investment Activities

Compliance risk is the risk that a firm or its staff breach laws, regulations, internal policies or codes of conduct. The result can be fines, restrictions on business, client compensation, loss of licence and damage to reputation. The reputational cost is often larger than the fine.

In investment activities, three themes appear again and again. The first is conflict of interest: the firm or an employee has an interest that competes with the duty owed to a client. Examples are favouring one fund over another when allocating trades, trading ahead of clients, receiving inducements for recommending products, and charging fees that reward the firm more than the client.

The second is insider trading: trading, or tipping others to trade, while in possession of material non-public information (MNPI). Information is material if a reasonable investor would likely treat it as important for the price. The third is market abuse, a wider group that includes market manipulation: actions meant to create a false or misleading picture of price, supply or demand. Examples are spoofing, wash trades, marking the close and spreading false rumours. The key difference: insider trading exploits an information advantage; manipulation distorts the market itself.

Firms manage these risks with a framework. They identify the rules that apply, assess where breaches could occur, set policies and controls, monitor, and report to senior management and the board. Typical controls are information barriers (Chinese walls), restricted and watch lists, pre-clearance of personal trades, trade surveillance, allocation policies, gifts and entertainment registers, and training.

The three lines of defense model sets roles. The first line is the business, which owns the risk and runs controls day to day. The second line is the compliance and risk function, which sets policy, advises, monitors and challenges. The third line is internal audit, which gives independent assurance to the board. Strong risk culture and tone from the top matter, because controls fail when incentives reward breaking the rules.

Key formulas to remember

Insider trading test: Insider trading = trading or tipping + material + non-public information; All elements must be present. Public or immaterial information does not create a breach.
Market manipulation test: Manipulation = actions that give a false or misleading signal about price, supply or demand; Intent to mislead or a misleading effect is the focus. No inside information is needed.
Conflict management hierarchy: Identify → Avoid → Manage (control and disclose) → Decline to act; Disclosure alone is rarely enough if the conflict cannot be managed fairly.
Three lines of defense: 1st line: owns and controls risk | 2nd line: oversees and challenges | 3rd line: independent assurance; Compliance sits in the second line. Internal audit is the third.
Compliance risk process: Identify → Assess → Control → Monitor → Report; Use this order to structure any framework question.

How to solve Compliance Risk in Investment Activities questions

Case-style questions describe a situation and ask you to classify the issue, name the right control, or assign responsibility. Work in a fixed order.

1Read the last line first so you know whether you must classify, choose a control, or assign a role.
2Identify who owes a duty to whom: firm, employee, client, fund or market.
3Check for information: is it material and non-public? If yes, think insider trading or tipping.
4Check for misleading activity: false orders, price marking, rumours or fake volume point to market manipulation.
5Check for competing interests: allocation, fees, inducements or proprietary trading against clients point to a conflict of interest.
6Match the control to the failure: information barrier, surveillance, allocation policy, pre-clearance, disclosure or segregation.
7Assign the line of defense: business operates, compliance monitors, audit assures independently.
8Eliminate options that overstate (for example, disclosure always cures a conflict) or mix up the lines.

Quickest way: Three-question triage

When to use it: Use when you have about two minutes per question and the stem is a short scenario.

Ask: was there inside information? If yes, insider trading.
Ask: was the market signal false or misleading? If yes, manipulation.
Ask: did someone put their interest ahead of the client's? If yes, conflict of interest.
Then pick the control that targets that exact failure, and check which line owns it.

Common mistakes in Compliance Risk in Investment Activities

Calling any profitable trade before news insider trading.
Students ignore the need for material non-public information.
Fix: Confirm the information was material and non-public and that the trader used or passed it on.
Treating market manipulation and insider trading as the same.
Both are grouped under market abuse.
Fix: Insider trading is an information advantage. Manipulation distorts price or volume signals. Both are market abuse.
Assuming disclosure removes a conflict of interest.
Disclosure is a common answer in practice.
Fix: Disclosure is one tool. If the conflict cannot be managed fairly, the firm should avoid it or decline to act.
Placing compliance in the first line or audit in the second.
Titles blur the roles in real firms.
Fix: Business is first, compliance and risk second, internal audit third.
Saying an information barrier stops all insider risk.
Students overstate control effectiveness.
Fix: Barriers reduce flows between areas. Firms still need watch lists, surveillance and wall-crossing procedures.
Viewing compliance risk only as the size of the fine.
Fines are easy to quantify.
Fix: Include reputational damage, client loss, business restrictions and remediation costs.

Worked examples

Example 1

An analyst at an asset manager learns in confidence that a listed company will announce a takeover bid next week. She tells a friend, who buys the shares and sells after the announcement at a gain. Which description is most accurate? (A) Market manipulation by the analyst (B) Insider trading and unlawful tipping (C) A conflict of interest only (D) No breach, because the friend is not an employee

Show the solution

Identify the information: a takeover bid is price-sensitive, so it is material, and it is not yet public.
Identify the actions: the analyst passed it on (tipping) and the friend traded on it.
Test manipulation: no false or misleading market signal was created, so A is wrong.
Test D: the rules cover tipping and trading by outsiders who receive the information, so D is wrong.
C understates the case: the conflict is secondary to the misuse of MNPI.

Answer: B. This is insider trading by the friend and unlawful tipping by the analyst.

Example 2

A portfolio manager runs two funds. He places a large buy order and allocates the early, cheaper fills to a performance-fee fund and the later, dearer fills to a fee-light fund. Which is the best response by the second line? (A) Rely on the manager's own judgement (B) Disclose the practice in the annual report only (C) Enforce a fair allocation policy with pre-set allocation and surveillance of allocation patterns (D) Ask internal audit to approve each trade in advance

Show the solution

Classify the issue: the manager favours one client group over another, so it is a conflict of interest in trade allocation.
A fails because the manager owns the conflict and cannot police himself.
B fails because disclosure afterwards does not stop unfair treatment.
D fails because internal audit is the third line and gives independent assurance. It does not approve trades.
C is a preventive and detective control run by the second line with the first line applying it.

Answer: C. Use a fair allocation policy with pre-allocation and monitoring of allocation patterns.

Exam tips

Always classify first: insider trading, manipulation or conflict. Most wrong answers come from a wrong label.
Look for the words material and non-public. Without both, insider trading is unlikely.
Match each control to its failure. Barriers address information flow, allocation policy addresses fairness, surveillance addresses manipulation.
Know the three lines cold. Questions often swap compliance and audit roles.
Distrust absolute wording such as always or eliminates in options about controls.

Practice questions from Case Study: Investor Protection and Compliance Risks in Investment Activities

Compliance Risk in Investment Activities: frequently asked questions

What is the difference between insider trading and market manipulation?

Insider trading uses or passes on material non-public information. Market manipulation creates a false or misleading picture of price, supply or demand. Both are forms of market abuse but the wrongdoing is different.

How do firms manage conflicts of interest in asset management?

They first identify conflicts, then avoid them where possible. Otherwise they manage them through policies such as fair allocation, fee and inducement rules, information barriers and personal trading limits, and disclose where appropriate. If a conflict cannot be managed fairly, the firm should decline to act.

Where does compliance sit in the three lines of defense?

Compliance is in the second line. It sets policy, advises and monitors the business. The business is the first line and owns the risk. Internal audit is the third line and gives independent assurance.

What are examples of market manipulation?

Examples include spoofing, wash trades, marking the close and spreading false rumours. Each aims to mislead other participants about real supply, demand or price.