Annual review guide
The Small RIA Annual Compliance Review: A Practical, Evidence-First Framework
An educational, source-backed framework for organizing a meaningful annual compliance review without treating it as a one-time paperwork exercise.
Start with adequacy and effectiveness
For SEC-registered advisers, Rule 206(4)-7 requires an annual review of policies and procedures to determine their adequacy and the effectiveness of their implementation. The SEC’s adopting release explains that a useful review considers compliance matters from the prior year, changes in the adviser’s business activities, and regulatory changes that may suggest updates.
For a small RIA, that is a practical prompt rather than an invitation to create unnecessary volume. The review should help the firm answer a basic question: do our written policies, disclosures, records, systems, and routines still describe how we actually operate?
Use a change log, not just a checklist
A checklist is valuable, but it can become static. A stronger approach begins with a year-in-review list of factual changes: fees, services, investment strategies, custodians, vendors, personnel, outside activities, client types, marketing, locations, privacy practices, and business continuity facts.
For each item, document who confirmed it, what source supports it, what documents or controls might be affected, and whether a follow-up review is needed. The log becomes evidence that the firm considered its real operating changes instead of repeating last year’s calendar.
Organize evidence before the review meeting
Small firms gain efficiency when the review is built from ordinary operating records rather than recreated from memory. Calendar completion records, marketing reviews, vendor notes, billing checks, training records, incident logs, client-communication controls, and prior open items can all show how a program was implemented.
Evidence does not need to be excessive. It should be retrievable, dated, and connected to the firm’s actual policies and decisions. If a process was not performed, the review should identify that fact and record the corrective decision rather than imply completion.
Finish with ownership and follow-through
The annual review should produce a short list of owners, due dates, and decisions—not a vague statement that the program was reviewed. If a policy needs revision, a disclosure needs confirmation, or a vendor process needs attention, assign the item and preserve the rationale.
This is educational information, not a determination of what any specific adviser must file or change. Registration status, business model, state requirements, and facts can materially affect the correct review process.
Primary sources
This educational resource is grounded in publicly available primary regulatory material. It is not legal or compliance advice for a specific firm.
Need a structured review of your firm’s specific facts?
Explore related support