NISM-Series-X-A: Investment Adviser (Level 1) · Key Regulations

Client Onboarding, Risk Profiling and Suitability for Investment Advisers

Updated 11 October 2026 · Fact-checked

Under the SEBI (Investment Advisers) Regulations, 2013, an adviser must onboard a client with KYC and a written agreement, profile the client's risk, and give only advice suitable to that profile. The adviser must disclose conflicts and fees, and keep records. Exam questions test the sequence, the duties and the traps.

Understand Client Onboarding, Risk Profiling and Suitability

Investment advice is a regulated activity. Before you advise anyone, you must know who the client is, what the client wants and how much risk the client can bear. That is the purpose of onboarding, risk profiling and suitability.

Client onboarding starts with identifying the client through KYC and entering into a written client agreement. The agreement sets out the terms of the relationship: the services you will provide, the fees, the rights and duties of both sides and how complaints are handled. The client must get a copy. The adviser's registration details and key disclosures also go to the client.

Risk profiling means assessing the client's risk. Two parts matter. Risk tolerance (willingness) is how much loss the client is comfortable with. Risk capacity (ability) is how much loss the client can afford given income, assets, liabilities, goals and time horizon. When the two differ, the lower one should guide the advice. The adviser must use a structured, documented process, not a guess. SEBI requires that the risk profile be based on a fair assessment of the client and that the adviser keeps the basis of that assessment on record.

Suitability means every piece of advice must match the client's risk profile, goals, financial situation and needs. A product can be good in general and still be unsuitable for this client. Advice on a product that is riskier than the profile allows is a breach, even if the client asks for it. You may document the client's wish, but you must explain the risk and not push the client to take it.

Disclosure and records complete the picture. You must disclose any conflict of interest, any material fact that could affect the client's decision, and your fees. You must keep records of the agreement, the risk profile, the advice given and its rationale, and the fees charged. The Regulations require records to be maintained for a minimum period; check the exact number of years in your NISM workbook, and do not guess it in the exam.

Key formulas to remember

Risk profile rule: Effective risk level = lower of (risk tolerance, risk capacity); If willingness is high but ability is low, advise on the basis of low risk. This is a safe way to answer exam cases.
Suitability test: Advice is suitable only if it fits risk profile + goals + time horizon + financial situation; All four must match. One mismatch makes the advice unsuitable.
Onboarding sequence: KYC → client agreement → data gathering → risk profile → suitable advice → disclosures → records; Risk profiling comes before any advice is given.
Agreement basics: Written agreement + copy to client + fees and services stated + grievance terms; The agreement is in writing and the client must receive a copy.
Disclosure duty: Disclose conflicts, fees and material facts before or at the time of advice; Disclosure does not remove the duty to give suitable advice.

How to solve Client Onboarding, Risk Profiling and Suitability questions

Use this method on any scenario question about onboarding, profiling or suitability.

1Identify the stage the question is about: KYC and agreement, risk profiling, suitability, disclosure or records.
2List the client facts given: age, income, goals, time horizon, liabilities and attitude to loss.
3Separate risk tolerance from risk capacity. Note which one is lower.
4Check the advice or product against the lower of the two and against goals and horizon.
5Look for missing steps: no written agreement, no risk profile, no disclosure of a conflict, no record.
6Reject options that say the client's request or consent alone makes unsuitable advice acceptable.
7Choose the option that follows the regulatory duty most strictly and protects the client.

Quickest way: Lower-risk and process-first check

When to use it: Use when time is short and the options look similar.

Ask: was the risk profile done before advice? If not, that option is wrong.
Ask: is the product riskier than the lower of tolerance and capacity? If yes, it is unsuitable.
Ask: was the agreement in writing and given to the client? If not, it is a breach.
Prefer the option that discloses the conflict and documents the reason for the advice.
Drop absolute words like 'always' or 'never' unless they match a firm rule.

Common mistakes in Client Onboarding, Risk Profiling and Suitability

Treating risk tolerance as the only measure of risk profile.
Students focus on what the client says about comfort with loss.
Fix: Always check risk capacity too, and go by the lower of the two.
Thinking client consent makes an unsuitable product acceptable.
It feels fair that the client decides.
Fix: Suitability is the adviser's duty. Consent does not cure unsuitable advice; explain the risk and advise within the profile.
Giving advice first and profiling later.
Students mix up the order of steps.
Fix: Remember: KYC, agreement, data, risk profile, then advice.
Assuming a one-time risk profile lasts forever.
The profile feels like a form completed once.
Fix: Profiles change with age, income and goals. Update the profile when circumstances change and at reviews.
Believing disclosure of a conflict removes the duty of suitability.
Disclosure sounds like a full safeguard.
Fix: Disclosure and suitability are separate duties. You must do both.
Quoting a record-keeping period from memory without certainty.
Numbers blur between regulations.
Fix: Learn the exact period from your workbook and match it to the Investment Advisers rules, not to other intermediaries.

Worked examples

Example 1

A 58-year-old client, retiring in two years, says he is willing to take high risk to grow his corpus. His income will drop after retirement and he has a home loan. His adviser puts the whole corpus in small-cap equity. Is the advice suitable?

Show the solution

Risk tolerance: high, as the client says.
Risk capacity: low, because retirement is close, income will fall and he has a loan.
Effective risk level is the lower of the two, so low.
A full small-cap allocation is high risk and does not match the low capacity or the short horizon.
The advice fails the suitability test.

Answer: Not suitable. The adviser should base advice on the client's low risk capacity, explain the risk and recommend a more conservative allocation.

Example 2

An adviser meets a new client, gives verbal advice on a product in the first meeting and plans to prepare the agreement and risk profile next week. Which duties has the adviser breached?

Show the solution

Onboarding requires KYC and a written client agreement before the advisory relationship begins.
A risk profile must be completed before advice is given.
The adviser gave advice first, so the profile did not guide it.
No written agreement existed when advice was given, so the terms and fees were not set out for the client.

Answer: The adviser breached the onboarding and suitability process: advice was given without a written agreement and without a prior risk profile.

Exam tips

Expect short case questions where one step is missing. Find the missing step.
When tolerance and capacity differ, the safe answer is the lower one.
Treat options with 'client insists, so it is fine' as traps.
Learn the exact record-keeping period from the workbook; options often change the number.
Negative marking applies, so skip a question only if you cannot narrow to two options.

Practice questions from Key Regulations

Client Onboarding, Risk Profiling and Suitability in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

FRM Part IISuitability, Disclosure and Client Classification

Client Onboarding, Risk Profiling and Suitability: frequently asked questions

Is a written agreement mandatory for investment advisers?

Yes. An investment adviser must enter into a written agreement with the client and give the client a copy. It sets out the services, fees and the rights and duties of both sides.

What is the difference between risk tolerance and risk capacity?

Risk tolerance is how much loss the client is willing to bear. Risk capacity is how much loss the client can afford. Advice should follow the lower of the two.

Can an adviser recommend a risky product if the client asks for it?

The adviser must still ensure suitability. Client request does not remove that duty. The adviser should explain the risk and advise within the client's risk profile.

Do I need to update the risk profile later?

Yes. Circumstances change with age, income, goals and liabilities. Review and update the profile when they change and during periodic reviews.