FINRA Series 7 / 63 / 65 Supervision and Compliance
Last updated: May 2, 2026
Supervision and Compliance questions are one of the highest-leverage areas to study for the FINRA Series 7 / 63 / 65. This guide breaks down the rule, the elements you need to recognize, the named traps that catch most students, and a memory aid that scales to test day. Read it once, then practice the same sub-topic adaptively in the app.
The rule
Under FINRA Rule 3110, every member firm must establish, maintain, and enforce a written supervisory system reasonably designed to achieve compliance with applicable securities laws, regulations, and FINRA rules. The system must designate appropriately registered principals (typically Series 24, 9/10, or 26) to supervise each business activity, conduct documented reviews of customer accounts and correspondence, perform annual compliance meetings with all registered persons, and conduct internal inspections of every office (OSJs at least annually, branch offices at least every three years). Rule 3120 requires an annual report to senior management on the firm's supervisory controls, and Rule 3130 requires the CEO to certify annually that compliance and supervisory processes are in place.
Elements breakdown
Written Supervisory Procedures (WSPs)
The firm's documented playbook describing how each business line is supervised and by whom.
- Tailored to firm's actual business activities
- Identify supervisor by title for each function
- Describe review steps and frequency
- Updated promptly when rules or business change
- Maintained and accessible to all supervisors
Designation of Principals
Assignment of a registered principal to supervise each business line, office, and registered person.
- Principal must hold required registration (24, 9/10, 26, 4)
- One-up reporting line for each registered person
- OSJ must have a resident on-site principal
- Designation documented in WSPs and Form BR
Office Inspections
Periodic on-site reviews of branch offices to test supervisory controls.
- OSJs inspected at least annually
- Non-OSJ branches at least every three years
- Non-branch locations on a regular periodic schedule
- Written inspection reports retained
- Reviewer independent of office where feasible
Correspondence and Communications Review
Review of incoming and outgoing written and electronic communications between registered persons and the public.
- Reasonably designed sampling or pre-use review
- Lexicon and risk-based filtering acceptable
- Evidenced by signature, initial, or electronic mark
- Retained per Rule 4511 (generally 3 years)
Transaction and Account Review
Daily and periodic review of customer trading activity for suitability, churning, and rule violations.
- Daily trade blotter review by principal
- Heightened review for discretionary or active accounts
- Exception reports for unusual activity
- Suitability review under Rule 2111
Annual Compliance Meeting
At least one yearly meeting addressing compliance matters with each registered person.
- All registered persons must attend
- May be delivered in person, by webcast, or on-demand video with attestation
- Attendance documented
- Content tailored to firm's business risks
Rule 3120 and 3130 Certifications
Annual senior-management report and CEO certification of supervisory and compliance processes.
- CCO consults with CEO on certification
- Report identifies tested controls and gaps
- Submitted to firm's board or equivalent
- Retained as a firm record
Common patterns and traps
Paper-Only WSPs Trap
The fact pattern shows a firm with thorough written procedures, but no evidence of actual reviews, signatures, or follow-up on exceptions. Candidates who anchor on the existence of WSPs miss that Rule 3110 demands enforcement, not just documentation. The violation is failure to supervise even when the playbook reads well.
A choice that says 'No violation occurred because the firm's WSPs explicitly addressed this scenario,' ignoring that no review was actually performed.
Wrong-Principal Designation
The scenario assigns supervision of a specialized business line to a principal who lacks the specific required registration. Series 24 covers general securities, but options need a Series 4, municipal securities need a Series 53, and variable contracts need a Series 26. The exam tests whether you know that a general principal cannot substitute for a specialized one.
A choice approving an options account because 'a Series 24 principal reviewed and approved it,' when a Series 4 ROP was required.
Inspection Frequency Swap
Choices intentionally swap the inspection cadences for OSJs (at least annually), non-OSJ branches (at least every three years), and non-branch locations (regular periodic schedule). Candidates who memorize one frequency and apply it everywhere fall in.
A choice asserting that all branch offices must be inspected annually, or that OSJs are on a three-year cycle.
Compliance-Equals-Supervision Confusion
The scenario describes a CCO or compliance analyst performing what looks like supervisory action: approving accounts, signing trade reviews, or pre-clearing communications. Unless that person is also a registered principal, those approvals do not satisfy Rule 3110. The trap exploits the everyday overlap between 'compliance' and 'supervision.'
A choice stating that 'the CCO's review and approval of the new account satisfied the firm's supervisory obligation.'
Annual Meeting Format Trap
Candidates assume the annual compliance meeting must be in-person or live. FINRA permits webcasts and on-demand video provided each registered person attests to participation and the firm documents attendance. The trap is rejecting a remote format as non-compliant.
A choice claiming the firm violated Rule 3110 by delivering the annual compliance meeting via on-demand video with electronic attestation.
How it works
Think of supervision as a layered system: WSPs at the top describe the rules, principals execute the reviews, and inspections plus annual certifications test whether the system actually works. Suppose Caldera Wealth Partners, LLC opens a new options desk. Before accepting the first ticket, a Series 4 Registered Options Principal must be designated, the WSPs must be amended to describe options account approval and trade review, and the registered representatives writing tickets must have appropriate options registrations. If the firm later discovers an RR placed discretionary options trades without written authorization, the supervisor's failure to catch it on the daily blotter review is itself a Rule 3110 violation, separate from the RR's misconduct. On the exam, watch for fact patterns where the firm has procedures on paper but no evidence of actual review, that is a classic failure-to-supervise scenario.
Worked examples
Which statement BEST describes Reyes Capital Markets' compliance with FINRA Rule 3110 office-inspection requirements?
- A The firm is in compliance because OSJs require annual inspections and non-OSJ branches require inspection only every three years, and 30 months is within that window.
- B The firm is in violation because non-OSJ branch offices must be inspected at least once every three years, and a risk-based justification does not waive the minimum cadence; the firm should also document a written inspection schedule. ✓ Correct
- C The firm is in violation because all branch offices, OSJ or not, must be inspected at least annually under Rule 3110.
- D The firm is in compliance because the absence of customer complaints constitutes a reasonable risk-based justification for reduced inspection frequency.
Why B is correct: Rule 3110(c) requires non-OSJ branch offices to be inspected at least once every three years. Although the 30-month-old inspections technically fall within the three-year window, the firm has not demonstrated a written, risk-based inspection schedule, and the CCO's reasoning (no complaints, therefore no inspection needed) is not a permissible substitute for the rule's minimum cadence going forward. The firm must maintain a documented schedule that meets or exceeds the three-year floor.
Why each wrong choice fails:
- A: While the three-year cadence is correct, this choice ignores the rule's requirement for a documented inspection schedule and improperly endorses a 'no complaints, no problem' approach as compliant. (Paper-Only WSPs Trap)
- C: Only OSJs require annual inspection; non-OSJ branches are on the three-year cycle. This choice swaps the cadences. (Inspection Frequency Swap)
- D: Rule 3110 sets minimum inspection frequencies that cannot be waived by a 'no complaints' rationale. Risk factors can require MORE frequent inspections, not fewer. (Paper-Only WSPs Trap)
Which of the following BEST describes the firm's supervisory deficiency, if any?
- A There is no deficiency because the CCO performed the substantive review and a Series 24 principal signed each account.
- B There is no deficiency because Series 24 is the senior principal registration and qualifies the holder to approve any securities account, including options.
- C The firm violated Rule 3110 because options accounts must be approved by a Registered Options Principal (Series 4); a Series 24 principal alone is not qualified to approve standardized options accounts, and a CCO without principal registration cannot perform the supervisory approval. ✓ Correct
- D The firm violated Rule 3110 only because the CCO is not a registered representative, but the Series 24 sign-off cured the defect.
Why C is correct: FINRA Rule 3110 requires that supervision of each business activity be performed by an appropriately registered principal. Standardized options account approval requires a Registered Options Principal (Series 4). A Series 24 general securities principal does not satisfy this specialized requirement, and a Series 14 Compliance Officer is not a supervisory registration that authorizes approval of accounts or trades. The firm needs a Series 4 ROP to supervise the options business.
Why each wrong choice fails:
- A: This conflates compliance review with supervisory approval. The CCO's substantive work cannot substitute for a properly registered supervising principal, and the Series 24 sign-off does not cover options. (Compliance-Equals-Supervision Confusion)
- B: Series 24 is broad but not universal. Specialized product lines require specialized principal registrations: Series 4 for options, Series 53 for municipals, Series 26 for variable contracts. (Wrong-Principal Designation)
- D: The CCO's RR status is irrelevant; the actual defect is the absence of a Series 4 ROP supervising options. This choice misidentifies both the problem and the cure. (Compliance-Equals-Supervision Confusion)
Under FINRA Rule 3110, which statement is MOST accurate regarding Caldera's annual compliance meeting?
- A The meeting is non-compliant because Rule 3110 requires the annual compliance meeting to be delivered in person to all registered representatives.
- B The meeting is non-compliant because on-demand video may only be used for representatives in remote locations who cannot reasonably attend a live session.
- C The meeting is compliant because Rule 3110 permits the annual compliance meeting to be delivered through on-demand media, provided each registered person attests to participation and the firm documents attendance. ✓ Correct
- D The meeting is compliant only if the firm also requires each RR to attend a separate live Q&A session within 30 days of viewing the video.
Why C is correct: FINRA Rule 3110(a)(7) and related guidance permit firms to satisfy the annual compliance meeting requirement through various formats, including in-person sessions, live webcasts, and on-demand recorded media. When using on-demand format, the firm must obtain each registered person's attestation of participation and maintain documentation of attendance. Caldera's process meets these conditions.
Why each wrong choice fails:
- A: Rule 3110 does not mandate in-person delivery. FINRA has long permitted alternative formats, including on-demand video, when paired with attestation and documentation. (Annual Meeting Format Trap)
- B: There is no 'remote location only' restriction on on-demand format. Any registered person may receive the annual meeting via on-demand media so long as participation is attested and documented. (Annual Meeting Format Trap)
- D: A separate live Q&A is not required by Rule 3110 when on-demand format is used. Attestation and attendance documentation are the controlling requirements. (Annual Meeting Format Trap)
Memory aid
WRITE-DESIGNATE-INSPECT-REVIEW-MEET-CERTIFY: WSPs, Designate principals, Inspect offices, Review trades and correspondence, annual Meeting, CEO Certifies.
Key distinction
Compliance personnel ADVISE on rules; registered principals SUPERVISE business activity. A CCO without a Series 24 cannot approve new accounts or sign off on trade reviews, even though they may draft the WSPs that govern those approvals.
Summary
FINRA Rule 3110 requires a documented, principal-led supervisory system with periodic inspections, evidenced reviews, and annual certifications, and the system must be actually enforced, not just written.
Practice supervision and compliance adaptively
Reading the rule is the start. Working FINRA Series 7 / 63 / 65-format questions on this sub-topic with adaptive selection, watching your mastery score climb in real time, and seeing the items you missed return on a spaced-repetition schedule — that's where score lift actually happens. Free for seven days. No credit card required.
Start your free 7-day trialFrequently asked questions
What is supervision and compliance on the FINRA Series 7 / 63 / 65?
Under FINRA Rule 3110, every member firm must establish, maintain, and enforce a written supervisory system reasonably designed to achieve compliance with applicable securities laws, regulations, and FINRA rules. The system must designate appropriately registered principals (typically Series 24, 9/10, or 26) to supervise each business activity, conduct documented reviews of customer accounts and correspondence, perform annual compliance meetings with all registered persons, and conduct internal inspections of every office (OSJs at least annually, branch offices at least every three years). Rule 3120 requires an annual report to senior management on the firm's supervisory controls, and Rule 3130 requires the CEO to certify annually that compliance and supervisory processes are in place.
How do I practice supervision and compliance questions?
The fastest way to improve on supervision and compliance is targeted, adaptive practice — working questions that focus on your specific weak spots within this sub-topic, getting immediate feedback, and revisiting items you missed on a spaced-repetition schedule. Neureto's adaptive engine does this automatically across the FINRA Series 7 / 63 / 65; start a free 7-day trial to see your sub-topic mastery climb in real time.
What's the most important distinction to remember for supervision and compliance?
Compliance personnel ADVISE on rules; registered principals SUPERVISE business activity. A CCO without a Series 24 cannot approve new accounts or sign off on trade reviews, even though they may draft the WSPs that govern those approvals.
Is there a memory aid for supervision and compliance questions?
WRITE-DESIGNATE-INSPECT-REVIEW-MEET-CERTIFY: WSPs, Designate principals, Inspect offices, Review trades and correspondence, annual Meeting, CEO Certifies.
What's a common trap on supervision and compliance questions?
Confusing OSJ inspection frequency (annual) with branch inspection frequency (every 3 years)
What's a common trap on supervision and compliance questions?
Assuming compliance officers supervise; only registered principals supervise
Ready to drill these patterns?
Take a free FINRA Series 7 / 63 / 65 assessment — about 25 minutes and Neureto will route more supervision and compliance questions your way until your sub-topic mastery score reflects real improvement, not luck. Free for seven days. No credit card required.
Start your free 7-day trial