Know-Your-Client (KYC) & suitability

Firms hold information that would move a market if it leaked. The controls that stop it moving are called information barriers, sometimes firewalls. They separate the parts of the firm that hold sensitive information from the parts that could act on it.

Three areas are named in the syllabus, and each has a different reason to hold information. Investment banking knows about deals before the market does. Research forms views on issuers that clients will act on. Corporate finance sits close to both. The barriers stop a view formed on inside information from reaching a recommendation.

Two lists do the day to day work, and the exam tests the difference.

A grey list is a watch list. The firm may hold, or may come to hold, sensitive information about an issuer, so trading attracts heightened review and caution. It is a yellow light.

A restricted list is a stop. The firm cannot trade or solicit in that security, usually because a transaction is live and the conflict is real. It is a red light.

Cybersecurity and privacy belong in this section because they are the same duty with newer doors. Client information must be protected from unauthorised access, and personal information must be collected, used and kept within the limits the law allows. A stolen client list is a confidentiality breach that also breaks privacy law, and the exam may ask you to see both.

The analyze level matters here. You will not be asked to define a barrier. You will be asked to spot the moment when two duties collide, such as a research analyst being asked to join a marketing call about an issuer the firm is advising, and to say what the control is for.