Compliance Insights
Practical guidance on SEC Regulation S-P compliance for small registered investment advisers. Written by compliance professionals who understand the reality of running a small RIA.
Reg S-P Compliance Readiness Checker
Take our 3-minute assessment to find out how ready your firm is for an SEC examination now that Reg S-P is in force.
Investment Adviser Representative (IAR) Registration: State Requirements, Form U4, and Exemptions
Investment adviser representatives (IARs) of SEC-registered firms register at the state level, not with the SEC. This guide explains who must register, how Form U4 works, competency requirements, and which state exemptions apply.
Investment Adviser Written Compliance Policies and Procedures: The Rule 206(4)-7 Program Explained
Every SEC-registered investment adviser must maintain written compliance policies and procedures under Rule 206(4)-7. Here is what the program must include, what your CCO must do, and what examiners look for.
SEC Investment Adviser Registration: Requirements, AUM Thresholds, and Compliance Obligations
A practical guide to SEC investment adviser registration: who must register, the $110M AUM threshold, how the IARD system works, and the compliance obligations -- including Regulation S-P -- that apply the moment registration becomes effective.
SEC Form ADV for Investment Advisers: Registration Requirements and Reg S-P Disclosures
SEC Form ADV is more than a registration form. It is the first document SEC examiners review before arriving at your firm, and it must stay consistent with your Regulation S-P privacy and information security program.
SEC Risk Alerts: What Investment Advisers Need to Know
The SEC's Division of Examinations publishes risk alerts to signal upcoming examination priorities. Here is what investment advisers need to know about risk alerts and how to use them as advance compliance signals.
SEC Rule 204-2: Investment Adviser Books and Records Requirements Explained
Rule 204-2 under the Investment Advisers Act requires registered investment advisers to maintain specific books and records for defined retention periods. Here is what must be kept, for how long, and how Reg S-P recordkeeping fits in.
SEC Reg S-P Deficiency Letters: What Happens After an Examination and How to Respond
An SEC examination that finds Reg S-P gaps results in a deficiency letter. Here is what a Reg S-P deficiency letter contains, how to respond within the required timeframe, and how to prevent one from being issued.
SEC FY2026 Examination Priorities: What Investment Advisers Need to Know
The SEC's Division of Examinations named Reg S-P compliance a priority for FY2026. Here is what the priorities document means for investment advisers and how to prepare before your exam notice arrives.
SEC Cybersecurity Rule for Investment Advisers: What Reg S-P Actually Requires
Two major SEC cybersecurity rules exist -- but only one applies to your RIA. Here's what Regulation S-P actually requires for investment advisers, and what SEC examiners check for in FY2026.
Reg S-P Compliance for Newly Registered Investment Advisers: What to Do First
Just registered with the SEC? Reg S-P applies from day one. Here's what newly registered RIAs must build, when the first examination arrives, and the four documents you need ready before it does.
Reg S-P Service Provider Oversight Policy: Template Language for Investment Advisers
Exact policy language for a Reg S-P-compliant service provider oversight policy. Covers scope, due diligence, contract standards, ongoing monitoring, and incident coordination. Ready to customize.
Reg S-P Compliance Software vs. Consultants vs. DIY: What Small RIAs Should Know
Compare three approaches to Reg S-P compliance for small RIAs: hiring a compliance consultant, building policies yourself, or using AI compliance software. Real costs, time commitments, and exam-readiness outcomes for each.
SEC Regulation S-P Compliance Checklist for Small Investment Advisers
A practical Reg S-P compliance checklist for small RIAs. Covers the five required program elements, documentation standards, and SEC examination readiness steps.
Regulation S-P Breach Notification Requirements Explained
The amended Reg S-P requires RIAs to notify affected clients within 30 days of detecting a breach. Here is exactly what triggers the clock, who must receive notice, and what the notice must say.
What SEC Examiners Look For in a Reg S-P Examination
Reg S-P is a named SEC FY2026 exam priority. Here is what examiners request, the deficiencies they cite most, and how to get your RIA exam-ready.
Reg S-P and Your Annual Rule 206(4)-7 Compliance Review
Now that Reg S-P is in force, it must be part of every RIA's annual Rule 206(4)-7 compliance review. Here is exactly what to test, document, and update each year.
Reg S-P Cybersecurity Controls: What Every RIA Must Implement
Complete guide to Reg S-P cybersecurity controls for RIAs. Covers encryption, MFA, access controls, and more now that the rule is in force.
How to Conduct a Reg S-P Cybersecurity Risk Assessment for Your RIA
Step-by-step guide to conducting a Reg S-P cybersecurity risk assessment for your RIA. Covers the 5-step process, risk matrix, and SEC documentation requirements.
Reg S-P Compliance for Solo RIAs: The One-Person Firm's Complete Guide
Solo RIA compliance guide for SEC Reg S-P. Practical steps, real costs, and exact requirements for one-person investment advisory firms.
How to Build a Reg S-P Incident Response Plan: A Step-by-Step Guide for RIAs
Build an SEC-compliant Reg S-P incident response plan for your RIA. Step-by-step guide with templates, timelines, and tabletop exercises.
Missed the Reg S-P Deadline: What SEC Enforcement Looks Like Now
The Reg S-P compliance deadline has passed and the rule is now in force. Here's what the SEC can do if your RIA is not compliant, from deficiency letters to enforcement actions and financial penalties.
SEC Reg S-P Vendor Management: What Your Firm Must Document
The amended Regulation S-P requires RIAs to document oversight of every vendor that touches client data. Here's what SEC examiners expect and how to build a compliant vendor management program.
The 4 Documents Every RIA Needs Under Amended Reg S-P
The SEC's amended Regulation S-P requires 4 specific policy documents from every RIA. Here's what each one must contain and how to get compliant now that the rule is in force.
How Ready Are You for Reg S-P? Take Our Free Compliance Assessment
Most small RIAs do not know where they stand on Regulation S-P compliance. Our free readiness checker evaluates your firm across all four compliance areas in under 3 minutes.
SEC Regulation S-P: What Small RIAs Need to Know Now It Is In Force
A practical guide to the amended SEC Regulation S-P requirements for small registered investment advisers. Covers the now-passed compliance dates, key changes, and what documents you need.
The True Cost of Reg S-P Compliance: DIY vs Consultant vs RegShield
What does Reg S-P compliance actually cost? We break down DIY, hiring a consultant, and using RegShield so you can make the right choice for your firm.