FSA recently issued a factsheet about using a compliance consultant for small personal investment, mortgage and general insurance firms. The following key messages are conveyed:
- The firm's compliance responsibility would not be "contracted out" by using the consultant.
- The compliance needs should be established in order to identify the right services (e.g. risk assessment, setting up procedures, training, etc.) from the consultant.
- Qualifications, experience and service standards of potential consultants should be assessed to ensure that they can meet the firm's needs.
- The firm should act on the recommendations made by the consultant.
In particular FSA visited 22 small firms employing compliance consultants in early 2007 and found nearly half of them still had significant weaknesses in respect of their regulatory requirements. The work also showed over a third of these firms were not acting on recommendations from their consultants that would have improved their regulatory position.
Does this survey indicate that small firms have only employed compliance consultants for "window dressing" instead of protecting them against regulatory risk?