10.2 Inspection Reports, Independent Review, Signage, and Office Files
Key Takeaways
Every inspection is reduced to a written report addressing the applicable Rule 3110 content and retained for the required period.
The inspector must be sufficiently independent; a producing manager ordinarily cannot inspect and certify that manager's own supervisory work.
Inspection scope includes customer assets, books and records, supervisory personnel, transmittals, customer changes, sales practice, communications, complaints, and location-specific risks.
Office controls should reconcile public identification, bank-networking disclosures, mail, customer checks, stationery, electronic storage, and access to systems.
Written Report and Retention
Rule 3110 requires each office inspection to be reduced to a written report. The report identifies the office, date, reviewer, scope, records and accounts sampled, interviews, exceptions, corrective actions, owners and deadlines. It should distinguish work actually performed from information supplied by the person being inspected.
An inspection report generally is kept for at least three years. If a non-branch location is on a properly supported cycle longer than three years, the report is kept at least until the next report is written. Other records within the report may have longer retention requirements, so the firm applies the longest applicable period.
Required and Risk-Based Content
The inspection tests the location's compliance with securities laws, FINRA rules and firm procedures, including the applicable Rule 3110(c)(2) areas. Core subjects include safeguarding customer funds and securities; maintaining required books and records; supervision of supervisory personnel; transmittals to third parties, between customers, or to non-primary addresses; and customer changes of address or investment objective.
Risk expands the scope. A Series 26 office inspection may sample fund breakpoints and share classes, variable-annuity exchanges, correspondence and social media, complaints, outside activities, gifts, customer checks, privacy, AML escalation, trusted contacts, returned mail and remote workers. Sampling should be explainable and traceable to source populations.
Inspector Independence
The inspection ordinarily may not be performed by the branch manager, a person who reports to that manager, or a person directly or indirectly supervised by the manager when that structure compromises independence. Limited exceptions require the rule's conditions and heightened procedures. A producing manager should not select the only samples or close exceptions concerning the manager's own accounts.
Independence is practical, not just organizational. Compensation, reporting lines, family relationships, reciprocal inspection arrangements and fear of retaliation can impair a reviewer. Procedures should identify and mitigate these conflicts.
Physical and Operational Indicators
| Indicator | What to test |
|---|---|
| Exterior and lobby identification | Correct member name, branch status and required bank-networking disclosures |
| Customer checks or securities | Prompt forwarding, logs, secure handling and no personal custody |
| Mail and returned mail | Rule 3150 controls, authorization, duration, address verification and follow-up |
| Paper files and notes | Required records captured in firm systems; no hidden complaint or order records |
| Devices and electronic channels | Approved accounts, retention, supervision and access controls |
| Shared or residential space | Customer meetings, public holding out, other businesses and RSL eligibility |
Rule 3150 permits holding a customer's mail only if the customer gives written instructions stating the hold period; a hold longer than three consecutive months, counting earlier requests, requires an acceptable reason such as safety or security, and convenience is not enough. The firm must tell the customer in writing about alternative ways to monitor the account and obtain confirmation of receipt, verify at reasonable intervals that the instructions still apply, stay able to deliver important account information, and take steps to keep the mail from being tampered with or misused by an associated person. Repeated indefinite holds or mail routed to a representative require scrutiny.
Findings and Closure
The reviewer should preserve evidence, rate risk, identify affected customers and transactions, and determine whether the issue exists elsewhere. The responsible manager supplies corrective evidence, but an independent function validates closure. Material findings can require restitution, amended registrations, discipline, enhanced supervision, regulatory reporting, a lookback or an early reinspection.
Sampling and Interview Technique
The inspector should obtain populations independently from firm systems and document how samples were selected. Include risk-based items and a neutral sample so review is not limited to transactions the branch already flagged. Compare blotters, product-sponsor data, compensation, emails and account changes; one source may omit the conduct under review.
Interviews should include personnel other than the manager and ask how business is actually done: where customer checks go, which devices are used, who approves exceptions, how complaints arrive and what happens when the manager is absent. Inconsistent answers are evidence to test, not merely a training opportunity.
Remote Evidence Limits
For a remote inspection, validate camera coverage, document completeness and system access. Ask for contemporaneous views of storage, signage and work areas where lawful, but recognize that selected video can hide an unapproved person or file. Data showing cash receipts, customer visits or off-channel messages can require conversion to an on-site inspection.
Final reports should avoid vague conclusions such as "branch reminded." State the violated requirement, population affected, root cause, immediate containment, remediation owner and validation date. Repeat findings should be escalated because they show the earlier corrective action was ineffective.
The inspection universe should include recently closed and newly opened offices. Closing a branch does not eliminate the need to review unresolved complaints, records, customer property and representatives who moved to another location.
How long is a Rule 3110 office inspection report generally retained?
Only until the manager signs the corrective-action response.
At least three years, or for a longer supported non-branch cycle at least until the next report is written.
Permanently under all circumstances.
One year for every location without exception.
Why should a producing branch manager ordinarily not conduct the sole inspection of that manager's office?
Managers are never permitted to read branch records.
The manager would be reviewing supervisory work and business in which the manager has a direct conflict, impairing inspection independence.
Producing managers are exempt from supervisory procedures.
Only an SEC examiner may inspect a broker-dealer office.
Sections you finish are checked off in the contents.