Skip to content

FRM Exam Part II · Case Study: Investor Protection and Compliance Risks in Investment Activities

Suitability, Disclosure and Client Classification for FRM Part II

Updated 11 October 2026 · Fact-checked

Suitability means a firm must check that an investment or advice fits the client's objectives, risk tolerance, knowledge and financial capacity. Disclosure means telling clients about risks, costs and conflicts in clear terms. Client classification sets the level of protection: retail clients get the most, professional clients less. To solve questions, identify the client type, then test the facts against these duties.

Understand Suitability, Disclosure and Client Classification

Investor protection rests on one idea: the firm knows more than the client, so the firm carries duties. Three duties matter most in this case-study area: know the client, tell the client, and match the product to the client.

Suitability applies when a firm gives advice or manages a portfolio for a client. The firm collects facts first. These cover the client's objectives, time horizon, risk tolerance, financial situation, ability to bear losses, and investment knowledge and experience. A recommendation is suitable only if it fits all of these together. A product can be sound in itself and still be unsuitable for a particular client.

Appropriateness is a lighter test. It applies when a client trades without advice, often on complex products. The firm checks whether the client has the knowledge and experience to understand the risks. If not, the firm must warn the client. Under many regimes, such as the EU's MiFID II, execution-only trades in simple products can skip this test. Rules differ by jurisdiction, so read the question's stated regime.

Disclosure covers the nature and risks of the product, all costs and fees, conflicts of interest, and how the firm is paid. It must be fair, clear and not misleading. Burying a risk in fine print, or stressing returns while hiding costs, is a disclosure failure even if every fact is technically stated.

Client classification sorts clients into groups, commonly retail, professional and eligible counterparty. Retail clients get the full set of protections. Professional clients are presumed to have the experience and resources to assess their own risks, so some duties are reduced. Classification can often be changed on request, but a firm must not push a client into a professional category just to cut its own obligations.

Mis-selling happens when these duties fail: a complex or high-risk product sold to a client who cannot understand or afford it, with weak disclosure. The result is fines, compensation and remediation costs, and reputational damage. For a risk manager, this is compliance risk, a type of operational risk.

Key formulas to remember

Suitability test
Suitable = fits objectives AND risk tolerance AND capacity for loss AND knowledge/experience
All parts must be met. Failing any one makes the recommendation unsuitable.
Appropriateness test
Appropriate = client has the knowledge and experience to understand the product's risks
Used for non-advised sales of complex products. If it fails, the firm must warn the client.
Protection by client type
Retail > Professional > Eligible counterparty
Protection falls as assumed expertise rises. Retail is the highest protection.
Disclosure standard
Information must be fair, clear and not misleading
Covers risks, costs, fees, conflicts and how the firm is paid.
Risk tolerance vs capacity
Willingness to take risk ≠ ability to bear loss
Assess both. The lower of the two should limit the risk taken.

How to solve Suitability, Disclosure and Client Classification questions

Use this order for any case question on mis-selling, advice or client treatment.

  1. 1Identify the client type: retail, professional or eligible counterparty. Note whether it was assigned or opted into.
  2. 2Identify the service: advice or portfolio management (suitability applies) or execution only (appropriateness, or none for simple products).
  3. 3List the client facts: objectives, horizon, risk tolerance, capacity for loss, knowledge and experience.
  4. 4Describe the product: complexity, risk, liquidity, costs and any embedded features such as leverage or capital loss.
  5. 5Compare product and client. Any mismatch means unsuitable or inappropriate.
  6. 6Check disclosure: were risks, fees and conflicts clearly stated, and was the client able to understand them?
  7. 7Name the failure and its consequence: for example mis-selling, a compliance breach, fines or remediation.
  8. 8Pick the answer that matches the exact duty and client type given in the question.

Quickest way: Client, service, product, disclosure

When to use it: Use it on case-style multiple-choice questions when time is short and four options all sound plausible.

  1. Underline the client type and the service in the stem.
  2. Match the duty: advice means suitability, no advice means appropriateness.
  3. Scan for a mismatch between client profile and product risk.
  4. Eliminate options that apply professional-client relief to a retail client.
  5. Choose the option that fixes the mismatch or names the correct breach.

Common mistakes in Suitability, Disclosure and Client Classification

  • Treating suitability and appropriateness as the same test.

    Both check the client against a product, so they blur together.

    Fix: Suitability needs advice or management and covers objectives and finances. Appropriateness covers knowledge and experience only, for non-advised sales.

  • Assuming a professional client needs no protection at all.

    Reduced duties get remembered as no duties.

    Fix: Professional clients still get fair, clear and not misleading communication. Only some duties are relaxed.

  • Judging suitability by the product alone.

    Students think a safe product is always suitable.

    Fix: Suitability is about the fit. A low-risk product can be unsuitable if it fails the client's liquidity need or horizon.

  • Confusing risk tolerance with capacity for loss.

    Both are called risk appetite in everyday talk.

    Fix: Tolerance is willingness. Capacity is ability to absorb loss. A willing client with little capital still needs lower risk.

  • Thinking disclosure is satisfied if the information exists somewhere in the documents.

    Students focus on whether facts were given, not how.

    Fix: Check clarity and prominence. Hidden or misleading presentation is still a failure.

  • Treating client classification as fixed and one-way.

    Labels feel permanent.

    Fix: Clients can often opt up or down, but the firm must assess and document it, and cannot use reclassification to dodge duties.

Worked examples

Example 1

A bank adviser recommends a leveraged structured note to a 68-year-old retired retail client. The client wants stable income, has a low risk tolerance and will need the money in two years. The client signs a risk warning. Has the bank met its duties?

Show the solution
  1. Client type: retail, so full protection applies.
  2. Service: personal recommendation, so the suitability test applies.
  3. Client facts: income need, low risk tolerance, two-year horizon, limited capacity to absorb loss.
  4. Product: leveraged, complex, possible capital loss, likely illiquid.
  5. Compare: the product conflicts with objective, tolerance and horizon.
  6. A signed risk warning does not cure an unsuitable recommendation.

Answer: No. The recommendation is unsuitable and is a mis-selling risk. The signed warning does not remove the suitability duty.

Example 2

A client of a broker, classified as professional, places an order for a complex derivative with no advice from the broker. Which test applies and what must the broker do if the client lacks relevant experience?

Show the solution
  1. No advice was given, so suitability does not apply.
  2. The product is complex, so an appropriateness check is relevant where the regime requires it.
  3. A professional client is generally presumed to have the needed experience, so the broker may rely on that presumption unless it knows otherwise.
  4. If the broker knows the client lacks knowledge or experience, the presumption fails.
  5. The broker must then warn the client that the product may be inappropriate.

Answer: Appropriateness is the relevant test. If the broker knows the client lacks experience, it must warn the client.

Exam tips

  • Always read the client type first. It often decides which answer is right.
  • Look for the trigger word advice. It signals suitability rather than appropriateness.
  • Watch for distractors that rely on a signed disclaimer to excuse an unsuitable sale.
  • In case studies, link the failure to its consequences: fines, remediation, compensation and reputational damage.
  • State the regime only as the question gives it. Do not import local rules the stem does not mention.

Practice questions from Case Study: Investor Protection and Compliance Risks in Investment Activities

Suitability, Disclosure and Client Classification in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Suitability, Disclosure and Client Classification: frequently asked questions

What is the difference between suitability and appropriateness?

Suitability applies to advice or portfolio management and tests objectives, risk tolerance, finances and knowledge. Appropriateness applies to non-advised sales of complex products and tests only knowledge and experience. Failing appropriateness usually means a warning to the client.

What is the difference between retail and professional clients?

Retail clients get the highest level of protection and the fullest disclosure. Professional clients are presumed to have the experience and resources to judge their own risks, so some duties are reduced. Clients can often change category, subject to assessment by the firm.

What causes mis-selling of investment products?

Common causes are sales incentives that reward volume, weak client profiling, poor product governance and unclear disclosure of risks or costs. Complex products sold to clients who cannot understand them are a typical case. Strong controls and clear accountability reduce the risk.

Does a signed risk disclosure protect the firm?

Not by itself. If the product was unsuitable for the client, the recommendation still breaches the duty. Disclosure helps only when the sale was otherwise suitable and the information was clear.