Regulation, Governance, Ethics and Risk Management

Introduction and Context

Investment banking converts information, capital and risk into transactions: mergers and acquisitions, underwriting, trading, restructuring, private placements and financial advice. These activities create substantial economic value, but they also create opportunities for information asymmetry, conflicts of interest, excessive leverage, market manipulation, money laundering and failures of fiduciary judgment. Regulation and governance therefore do more than constrain banks. They establish the conditions under which trust, market integrity and efficient capital allocation can exist.

The regulatory environment is multilayered. It includes securities law, prudential banking standards, company law, competition law, anti-money-laundering requirements, tax rules, data and technology regulation, exchange rules and professional standards. Exact requirements vary by jurisdiction, so professionals must distinguish universal principles from jurisdiction-specific obligations. International standards such as those developed by the Basel Committee, the Financial Stability Board and the Financial Action Task Force influence national regimes but do not replace domestic law.

This chapter examines how investment banks should govern transactions, protect clients and markets, manage risk and make ethically defensible decisions. It treats compliance not as a checklist but as an integrated control system connected to strategy, incentives, culture and accountability.

Learning Objectives

After studying this chapter, the reader should be able to:

1. Explain the purposes and architecture of securities and prudential regulation.
2. Distinguish fiduciary duties, contractual duties and conduct obligations.
3. Analyse disclosure, market conduct, insider trading and conflicts of interest.
4. Apply governance and ethical frameworks to complex investment-banking transactions.
5. Explain AML controls, conduct risk management and the three-lines model.
6. Evaluate how prudential, operational, legal, reputational and systemic risks interact.
7. Recommend proportionate controls while recognising regulatory and ethical limitations.

1. The Regulatory Architecture of Investment Banking

1.1 Objectives of regulation

Financial regulation normally pursues several objectives that may conflict in the short term:

• Investor protection: reducing fraud, misleading disclosure and unsuitable advice.
• Market integrity: promoting fair, orderly and transparent markets.
• Financial stability: limiting the probability and impact of institutional failure.
• Competition: preventing concentration and exclusionary conduct.
• Consumer and client fairness: ensuring that products and services are appropriate and fairly priced.
• Financial inclusion and public confidence: maintaining access and trust.

No regulatory framework eliminates risk. Rather, it allocates risk, requires its disclosure or mitigation, and creates mechanisms for orderly failure and enforcement.

1.2 Major regulatory layers

A global bank must map each activity to the relevant legal entity, regulator, client category, venue, product and jurisdiction. A transaction that is permissible for a professional investor in one jurisdiction may require a different disclosure, suitability assessment or licence elsewhere.

2. Securities Regulation and Disclosure

Securities regulation addresses the problem that issuers and intermediaries generally possess more information and expertise than investors. Disclosure seeks to reduce this asymmetry, although disclosure alone cannot cure false statements, unsuitable products or abusive incentives.

2.1 Primary-market disclosure

An issuer raising capital may be required to publish a prospectus or offering document containing material information about its business, financial condition, risk factors, management, use of proceeds, legal proceedings and the securities offered. Investment banks often conduct due diligence, coordinate counsel and assist with drafting. Their responsibilities may include reasonable investigation, verification of financial information and escalation of inconsistencies.

A material fact is generally one that a reasonable investor would consider important in making an investment decision, or one capable of significantly affecting the price of the security. Materiality is context-dependent. A small claim may be material to a highly leveraged issuer, while a larger event may be immaterial to a diversified group.

Good disclosure should be:

• accurate and not misleading by omission or presentation;
• balanced, including both adverse and favourable information;
• comprehensible rather than obscured by excessive technical language;
• internally consistent across the prospectus, financial statements and presentations;
• updated when subsequent events make earlier information misleading.

Due diligence is not a guarantee that every statement is true. It is a disciplined process for identifying red flags, testing representations and documenting judgment. Reliance on management representations without independent corroboration is a weak control.

2.2 Continuous disclosure and selective disclosure

Listed issuers typically have continuing obligations to disclose price-sensitive information promptly, subject to carefully defined exceptions. Selectively providing material non-public information to favoured investors can undermine market fairness even if no trade occurs. Investor-relations teams, research analysts and bankers therefore require information barriers, approved communication channels and escalation procedures.

2.3 Research independence

Research can influence prices and capital allocation. Conflicts arise when an analyst’s compensation, issuer relationships or investment-banking mandates affect published opinions. Sound governance separates research judgment from deal pressure, controls analyst communications with issuers and preserves an audit trail for material changes.

3. Prudential Requirements and Risk Capacity

Securities rules protect investors and markets; prudential rules protect the institution and the financial system. Prudential supervision is especially important because banks are leveraged, interconnected and vulnerable to liquidity runs.

3.1 Capital and leverage

Capital absorbs unexpected losses. A simplified risk-based capital ratio is:

Eligible capital includes regulatory forms of loss-absorbing capital, subject to deductions and eligibility rules. Risk-weighted assets assign different risk weights to exposures. The ratio is meaningful only when the definitions, regulatory adjustments, measurement horizon and applicable jurisdiction are known.

A leverage ratio is commonly expressed as:

The exposure measure is generally broader than risk-weighted assets and may include on-balance-sheet and selected off-balance-sheet exposures. Capital ratios do not measure profitability; they measure a loss-absorption buffer under regulatory definitions.

3.2 Liquidity and stress testing

Liquidity risk is the possibility that an institution cannot meet obligations when due without unacceptable loss. A bank may be solvent on an accounting basis but fail because assets cannot be sold or funded quickly enough. Liquidity management therefore considers cash-flow projections, collateral, funding concentration, market depth, intraday needs and contingency funding.

Stress testing explores outcomes under adverse but plausible assumptions, such as widening credit spreads, collateral calls, deposit outflows, failed refinancing or a sharp fall in asset values. It is not a prediction. Its value lies in revealing vulnerabilities, management actions and decision thresholds.

3.3 Risk appetite

The board-approved risk appetite translates strategy into boundaries. It may specify limits for market, credit, liquidity, counterparty, operational, legal, conduct and reputational risks. A useful risk appetite statement combines quantitative limits with qualitative prohibitions, escalation triggers and named accountability. Limits without credible consequences are merely reporting statistics.

4. Governance, Fiduciary Duties and Accountability

4.1 Governance as a control system

Governance allocates authority, supervises management and creates accountability. Core components include a competent board, independent challenge, effective committees, transparent reporting, internal audit, remuneration alignment and documented decision rights.

The board should understand the institution’s business model, material risks and control weaknesses. It cannot delegate ultimate oversight merely because a matter is technically complex. Management, in turn, must provide information that is timely, decision-useful and candid about uncertainty.

4.2 Fiduciary and professional duties

A fiduciary relationship involves trust and discretionary power. Depending on law and mandate, an adviser or director may owe duties of loyalty, care, good faith, confidentiality, proper purpose and avoidance or disclosure of conflicts. Not every banker is a fiduciary in every relationship; classification depends on the engagement, representations, discretion exercised and applicable law.

Contractual duties may be narrower or different. For example, an underwriting agreement, engagement letter or trading mandate may allocate responsibilities expressly. A contractual disclaimer does not necessarily eliminate statutory, fiduciary or anti-fraud obligations.

4.3 Conflicts of interest

Conflicts can be actual, potential or perceived. Common examples include:

• advising both sides of a transaction;
• underwriting securities while research staff publish opinions on the issuer;
• using client information to benefit the bank or another client;
• allocating scarce securities among preferred clients;
• compensation linked to transaction completion rather than client outcomes;
• personal investments or outside relationships of employees;
• lending to a company while advising on its restructuring.

A robust conflicts process follows four stages: identify, assess, manage and monitor. Management may involve disclosure, informed consent, recusal, independent review, information barriers, separate teams, declining the mandate or terminating the relationship. Disclosure is not automatically sufficient where consent is uninformed, the conflict is too severe or the bank cannot provide impartial service.

5. Market Conduct and Insider Trading

Market-abuse regimes commonly prohibit insider dealing, unlawful disclosure, manipulation, false trading, benchmark abuse and misleading conduct. Exact legal tests differ, but the underlying principle is that market participants must not exploit confidential price-sensitive information or manufacture a false appearance of supply, demand or price.

5.1 Inside information

Information is generally treated as inside information when it is non-public, specific or sufficiently precise, price-sensitive and relates directly or indirectly to an issuer or instrument. Examples include an undisclosed takeover approach, unexpected earnings, a major financing, regulatory action or imminent default.

Possession alone may create restrictions, even if the person does not trade. Controls include restricted lists, watch lists, wall-crossing procedures, pre-clearance, personal-account dealing rules, surveillance and controlled disclosure. A wall-crossing should record the information provided, the recipient’s consent, restrictions imposed and the process for cleansing or releasing the person.

5.2 Information barriers

An information barrier is an organisational and technological arrangement designed to prevent inappropriate movement of confidential information. It may include separate reporting lines, restricted systems, need-to-know access, code names, physical separation and surveillance. Barriers are not effective if senior personnel routinely bypass them or if shared collaboration tools expose documents broadly.

5.3 Market manipulation

Manipulation may involve wash trades, spoofing, layering, marking the close, dissemination of false rumours or transactions designed to create artificial prices. Legitimate trading strategies can resemble manipulative conduct, so assessment requires attention to purpose, pattern, effect, communications and market context.

6. Anti-Money-Laundering and Counter-Terrorist-Financing Controls

Investment banks can be exposed to illicit finance through clients, correspondent relationships, securities transactions, private placements, trusts, shell companies and complex ownership structures. AML/CFT compliance is risk-based: resources should reflect the nature, scale and risk of the relationship rather than treat every client identically.

A typical control cycle is:

1. identify and verify the customer;
2. identify beneficial owners and understand control structures;
3. establish the purpose and expected activity of the relationship;
4. conduct sanctions and politically exposed person screening;
5. assign a risk rating and apply enhanced due diligence where appropriate;
6. monitor transactions and investigate unusual activity;
7. report where legally required and retain records;
8. review the relationship periodically or upon trigger events.

Beneficial ownership analysis is often difficult because legal ownership, control and economic benefit may differ. High-risk indicators include opaque structures without commercial rationale, unexplained wealth, unusual jurisdictions, rapid movement of funds, inconsistent business activity, third-party payments and reluctance to provide information.

A suspicious-activity report is not proof of criminal conduct. It is a confidential regulatory communication based on reasonable suspicion under applicable law. Employees must avoid tipping off clients where prohibited. Over-reporting can overwhelm authorities, while under-reporting exposes the institution to enforcement and reputational damage.

7. Conduct Risk and Ethical Decision-Making

Conduct risk is the risk that an institution’s behaviour produces unfair outcomes for clients, markets or society. It includes mis-selling, unsuitable advice, unfair pricing, misleading communication, poor complaint handling, abusive incentives and failures to act on known harm.

7.1 Rules, principles and culture

Rules establish minimum standards, but ethical conduct requires judgment where rules are incomplete. A culture based solely on legal defensibility may permit behaviour that is technically permissible but unfair or damaging to trust. Senior leaders influence culture through promotion decisions, compensation, tolerance of challenge and responses to bad news.

A practical ethical test asks:

• Is the action lawful in every relevant jurisdiction?
• Is it consistent with the client’s legitimate interests and mandate?
• Would the rationale remain defensible if disclosed publicly?
• Does it exploit information, power or complexity unfairly?
• Would the action be acceptable if incentives were reversed?
• Have affected stakeholders and foreseeable harms been considered?

These questions do not replace legal advice. They improve judgment where law, contract and commercial pressure leave room for discretion.

7.2 Incentives and remuneration

Sales-based compensation can encourage excessive risk-taking and concealment. Balanced scorecards should include risk-adjusted performance, client outcomes, compliance behaviour, teamwork and long-term consequences. Clawbacks, malus provisions, deferrals and independent remuneration oversight can reduce—but not eliminate—short-termism.

8. Enterprise Risk Management

Investment-bank risk is interconnected. A failed disclosure may create legal liability, market loss, reputational damage, liquidity pressure and regulatory intervention simultaneously. Enterprise risk management therefore aggregates risk without pretending that all risks can be reduced to a single number.

8.1 The three lines model

The first line consists of business units that own risks and operate controls. The second line includes risk management and compliance, which set frameworks, challenge decisions and monitor adherence. The third line is internal audit, which independently assesses governance, risk management and controls. The board and its committees provide oversight rather than constituting a separate substitute for these lines.

8.2 Risk identification and assessment

A risk assessment typically considers likelihood, impact, velocity, persistence, control effectiveness and interdependence. A qualitative heat map can support prioritisation, but it may create false precision. Scenario analysis is especially useful for low-frequency, high-impact events such as a major cyberattack, sanctions breach or collapse of a critical counterparty.

Expected loss is sometimes represented as:

Here probability of default is a probability over a specified horizon, loss given default is the proportion of exposure not recovered, and exposure at default is the amount outstanding when default occurs. This simplified expression applies to credit-risk estimation under stated assumptions; it does not capture unexpected loss, dependency, liquidity effects or model uncertainty.

8.3 Operational resilience

Resilience requires identifying important business services, mapping people, processes, technology, data and third parties, setting impact tolerances, testing severe scenarios and improving recovery capability. Outsourcing transfers activities, not accountability. Cloud providers and vendors must therefore be subject to due diligence, contractual controls, access management, incident notification and exit planning.

9. Antitrust and Competition in Investment Banking

Investment banks may support mergers, participate in syndicates, share market information and interact with competitors. Competition law risks include price fixing, market allocation, bid coordination, exchange of competitively sensitive information and anticompetitive mergers.

During merger advice, the bank should control clean teams, limit access to non-public competitor information and distinguish legitimate due diligence from premature coordination. A syndicate agreement should define roles and communications without becoming a mechanism for fixing fees or allocating clients. Merger analysis may require assessment of market definition, concentration, entry barriers, efficiencies and effects on consumers or competitors.

Confidentiality does not excuse antitrust violations. Nor does the fact that an activity is customary in finance make it lawful.

10. Technology, Data and Artificial Intelligence

Technology strengthens surveillance, transaction monitoring, identity verification and control testing, but it creates model, privacy, cybersecurity and explainability risks. An AI system that flags suspicious transactions may reduce manual workload while generating discriminatory false positives or missing novel typologies.

Responsible use requires:

• a defined purpose and accountable owner;
• data quality, lineage and access controls;
• validation against representative scenarios;
• human review for consequential decisions;
• monitoring for drift, bias and false negatives;
• records explaining outputs and overrides;
• protection of confidential client and inside information;
• controls against entering restricted information into public tools.

Automation should support professional judgment, not obscure responsibility. A model’s high accuracy on historical data does not prove reliability under regime change or adversarial behaviour.

11. Illustrative Case: The Dual-Role Restructuring Mandate

Background

This illustrative case concerns Meridian Capital, an investment bank advising Alpha Manufacturing on a debt restructuring. Meridian also holds a significant loan to Alpha and is invited by a distressed-debt investor, Orion Fund, to advise it on purchasing Alpha’s bonds.

Problem

The bank could earn fees from Alpha, protect its lending exposure and advise Orion on a position whose success might harm Alpha’s existing creditors. During discussions, Alpha’s chief financial officer discloses an unannounced asset sale and possible covenant breach. An analyst asks whether the information may be used in a market update.

Analysis

Several risks arise. The lending relationship creates a conflict with Alpha’s advisory mandate. Advising Orion creates a direct conflict with Alpha and may involve confidential information. The asset sale and covenant information may be material, non-public information. Trading or selective disclosure could breach market-conduct rules. The bank also faces conduct, legal, reputational and credit risks.

Approach and solution

The conflicts committee should immediately record the relationships, suspend informal communications and determine whether the mandates can be managed at all. Possible controls include separate teams, independent senior supervision, information barriers and client consent. However, consent is not automatically adequate because the bank’s incentives may be fundamentally incompatible with impartial advice.

The compliance officer should place relevant securities on a restricted list, control personal and proprietary trading, document the wall-crossing and determine who may receive the information. The analyst should not publish or amend research using the information unless and until it is lawfully public and independently assessed. The bank should obtain legal advice on disclosure obligations and consider declining the Orion mandate or appointing an independent adviser.

The credit team should not pressure the advisory team to recommend an outcome that merely protects Meridian’s loan. Compensation should not reward concealment or transaction completion without regard to creditor and client outcomes.

Outcome

Assume Meridian declines to advise Orion, establishes a restricted project team for Alpha, discloses its lending conflict to Alpha’s board and appoints an independent fairness adviser. The asset-sale information is handled under documented inside-information procedures. The restructuring proceeds with clearer governance and a defensible record of decisions.

Learning points

1. A conflict is a governance issue before it becomes a legal issue.
2. Disclosure is meaningful only when clients can understand and act on it.
3. Information barriers require behavioural and technological enforcement.
4. Independence may require declining profitable work.
5. Documentation should show not only what was decided but why alternatives were rejected.

12. Practical Governance Framework for Complex Transactions

Before accepting or executing a transaction, professionals should complete a structured review:

This framework should be proportionate. A routine transaction should not receive the same process as a highly leveraged cross-border restructuring, but neither should commercial urgency eliminate control discipline.

Challenges and Limitations

Regulation can produce complexity, duplication and compliance costs. Excessive reliance on rules may encourage box-ticking, while principles-based regulation can create uncertainty. Disclosure may overwhelm investors rather than inform them. Capital requirements depend on models and assumptions that can fail during structural breaks. Surveillance systems produce false positives and may miss sophisticated misconduct. Ethical cultures are difficult to measure, and senior employees can undermine controls through informal influence.

Regulatory arbitrage remains a challenge when activities migrate to less-regulated entities or jurisdictions. Cross-border enforcement is complicated by conflicting privacy, secrecy and reporting laws. Finally, no framework can remove judgment from decisions involving competing clients, uncertain information and distributional consequences. The appropriate response is transparent reasoning, independent challenge, escalation and continual learning.

Best Practices

• Treat compliance, risk and ethics as part of transaction design, not post-approval review.
• Maintain a current regulatory-perimeter and legal-entity map.
• Use independent challenge for conflicts, valuation, disclosure and model assumptions.
• Make senior managers accountable for control failures within their remit.
• Link remuneration to sustainable, risk-adjusted outcomes.
• Test information barriers and surveillance through realistic scenarios.
• Refresh customer and beneficial-ownership information when circumstances change.
• Record decisions, dissent, assumptions and escalation—not merely final approvals.
• Use technology with validation, human oversight and data governance.
• Learn from near misses, complaints, whistleblowing and enforcement actions.

Chapter Summary

Investment banking regulation protects investors, markets and financial stability through securities rules, prudential requirements, company law, competition law, AML/CFT controls and market supervision. Disclosure must be accurate, balanced and comprehensible, while due diligence should test information rather than merely collect representations. Capital and liquidity requirements provide loss-absorption and survival capacity, but their interpretation depends on regulatory definitions and assumptions.

Governance allocates authority and accountability. Fiduciary, contractual and conduct duties may overlap but are not identical. Conflicts require identification, assessment, management and monitoring; disclosure alone is insufficient when independence cannot be preserved. Insider trading and manipulation controls depend on information classification, barriers, restricted lists, surveillance and disciplined communication.

AML/CFT is a risk-based cycle involving customer identification, beneficial-ownership analysis, monitoring and reporting. Conduct risk is shaped by incentives, culture and leadership as well as formal rules. Enterprise risk management integrates business ownership, second-line challenge and independent audit. In complex transactions, ethically defensible decisions require lawful conduct, client fairness, market integrity, stakeholder awareness and documented reasoning.

Key Terms

Regulatory perimeter: The activities, entities and jurisdictions subject to a particular regulatory regime.

Material information: Information a reasonable investor would consider important or that may significantly affect price.

Prudential regulation: Rules designed to protect the solvency, liquidity and resilience of financial institutions.

Risk-weighted assets: Regulatory exposure measures adjusted for prescribed risk weights.

Liquidity risk: The risk of being unable to meet obligations when due without unacceptable loss.

Fiduciary duty: A duty arising from a relationship of trust, commonly involving loyalty and proper use of discretion.

Conflict of interest: A circumstance in which competing interests may impair impartial judgment or client service.

Information barrier: Controls restricting inappropriate movement of confidential or inside information.

Inside information: Non-public, sufficiently precise and price-sensitive information under applicable law.

Market manipulation: Conduct that creates a false or misleading appearance of supply, demand or price.

Due diligence: Investigation and verification undertaken to assess information, risks and representations.

Beneficial owner: The natural person who ultimately owns or controls an entity or arrangement.

Enhanced due diligence: Additional investigation and monitoring applied to higher-risk relationships.

Conduct risk: The risk that institutional behaviour produces unfair or harmful outcomes.

Risk appetite: The amount and type of risk an organisation is willing to accept in pursuing objectives.

Three lines model: Business ownership, risk/compliance challenge and independent internal audit.

Operational resilience: The ability to continue important services through disruption.

Antitrust: Law addressing anticompetitive agreements, conduct and concentrations of market power.

Model risk: The risk of adverse consequences from flawed models, data or assumptions.

Wall-crossing: A controlled process by which a person receives confidential market-sensitive information.

Review Questions

Short Answer Questions

1. What are the principal objectives of securities regulation?
2. Distinguish a fiduciary duty from a contractual duty.
3. Why is disclosure not always sufficient to manage a conflict of interest?
4. Identify the main stages of a risk-based AML control cycle.
5. What are the three lines in the three-lines model?

Long Answer Questions

1. Explain how securities regulation and prudential regulation address different forms of financial risk.
2. Analyse the role of information barriers in preventing insider trading and managing conflicts.
3. Discuss how remuneration and organisational culture influence conduct risk.
4. Explain the governance responsibilities of a board in relation to risk appetite and operational resilience.
5. Evaluate the advantages and limitations of risk-based AML/CFT supervision.

Analytical / Application Questions

1. An investment bank is advising a company on a takeover while providing credit to the target and preparing research on the acquirer. Design a conflicts-management plan and identify circumstances in which the bank should decline one or more mandates.
2. A client with a complex offshore ownership structure proposes a large, rapid securities purchase inconsistent with its stated business. Analyse the AML, market-conduct and reputational risks and recommend controls.
3. A surveillance algorithm generates many alerts but misses a new form of spoofing. Explain how the bank should investigate the failure, govern the model and protect markets while the system is remediated.

Multiple Choice Questions with Answers

Question 1

Which statement best describes the primary purpose of prudential regulation?

A. To maximise investment-bank fee income

B. To protect solvency, liquidity and financial-system resilience

C. To replace all private contracts with statutory rules

D. To guarantee that every investment produces a profit

Correct Answer: B. To protect solvency, liquidity and financial-system resilience

Question 2

Which item is most clearly an example of material non-public information?

A. A company’s published annual report

B. A public exchange announcement

C. An unannounced major covenant breach

D. A historical share price available on a trading screen

Correct Answer: C. An unannounced major covenant breach

Question 3

What is the most appropriate first response when a serious conflict is identified?

A. Ignore it if the transaction is profitable

B. Identify and assess the conflict before deciding how it can be managed

C. Disclose it only after closing

D. Transfer it informally to an unrelated employee

Correct Answer: B. Identify and assess the conflict before deciding how it can be managed

Question 4

Which activity belongs primarily to the third line of the three-lines model?

A. Executing a business transaction

B. Setting a client’s trading strategy

C. Independently auditing governance and controls

D. Negotiating an underwriting fee

Correct Answer: C. Independently auditing governance and controls

Question 5

In the simplified expected-loss expression, loss given default represents:

A. The probability that a borrower defaults

B. The amount originally approved by a committee

C. The proportion of exposure not recovered after default

D. The institution’s annual operating expense

Correct Answer: C. The proportion of exposure not recovered after default

Question 6

Which practice is most consistent with risk-based AML supervision?

A. Applying identical review procedures to every client regardless of risk

B. Avoiding beneficial-ownership checks for institutional clients

C. Applying enhanced due diligence to relationships presenting higher risk

D. Reporting every transaction automatically as criminal activity

Correct Answer: C. Applying enhanced due diligence to relationships presenting higher risk

Question 7

Why may a bank need to decline a mandate despite obtaining client consent to a conflict?

A. Consent always increases legal risk

B. The conflict may be too severe for impartial service to remain credible

C. Conflicts are prohibited in every banking activity

D. Disclosure eliminates the need for professional judgment

Correct Answer: B. The conflict may be too severe for impartial service to remain credible

Question 8

Which conduct is most closely associated with market manipulation?

A. Publishing audited financial statements

B. Executing a client-authorised purchase at a disclosed price

C. Creating a false appearance of demand through coordinated fictitious trades

D. Diversifying a portfolio across asset classes

Correct Answer: C. Creating a false appearance of demand through coordinated fictitious trades

Question 9

What is a central limitation of automated compliance surveillance?

A. It can never process large volumes of data

B. It eliminates the need for records

C. It may create false positives or miss novel misconduct patterns

D. It is legally incapable of supporting human investigation

Correct Answer: C. It may create false positives or miss novel misconduct patterns

Question 10

Which governance practice best supports ethical decision-making in a complex transaction?

A. Rewarding completion regardless of client outcome

B. Recording assumptions, dissent, escalation and reasons for the decision

C. Restricting information from independent reviewers

D. Treating customary industry practice as conclusive evidence of legality

Correct Answer: B. Recording assumptions, dissent, escalation and reasons for the decision