When people picture a broker-dealer’s back office, they imagine spreadsheets, quiet ledgers, and a once-a-year visit from an auditor who signs off and disappears. In reality, the compliance work sitting behind a registered firm is closer to a moving target than a checkbox. Rules shift, examiners sharpen their focus, and the cost of falling behind rarely shows up all at once.
So what does modern broker-dealer oversight actually ask of a growing firm?
The Annual Audit Is Three Jobs, Not One
Owners often talk about “the audit” as a single event. That framing understates the work. Under SEC rules, most SEC-registered broker-dealers must undergo three audit components each year: a financial statement audit, a review of the exemption report, and an attestation of supplemental information under Rule 17a-5.
Each piece answers a different question. The financial statement audit tests whether the numbers are right. The exemption or compliance report tests whether the firm followed the customer protection and net capital rules it claims to follow. The supplemental attestation ties the two together with the schedules regulators actually read.
Treating any one of these as filler is where small firms get into trouble.
PCAOB Standards Raised the Bar for Auditors
The rules for who signs the opinion changed more than a decade ago, and firms still underestimate the implications. The SEC’s 2013 amendments to Rule 17a-5 require broker-dealers to file annual financial reports audited in accordance with PCAOB standards, along with new compliance and exemption reports covered by an auditor’s report prepared under those same standards.
Practically, that means your auditor’s own work is inspected. The documentation, independence checks, and testing procedures behind the opinion have to hold up to PCAOB review, and any weakness in the audit trail lands on the firm as much as the auditor.
FINRA Keeps Moving the Focus Areas
Compliance officers who read only last year’s playbook fall behind fast. FINRA published its 2025 report on January 28, 2025, introducing new focus areas including third-party risk, extended-hours trading, and registered index-linked annuities.
The enforcement side has teeth too. Disciplinary case counts have climbed after years of decline, restitution orders have jumped sharply, and monetary sanctions continue to run in the tens of millions each year. Firms that treat exam prep as a paperwork exercise are the ones most likely to see those numbers land on their own ledger.
Where Growing Firms Actually Slip
The technical rules are public. The failures tend to be operational. A few patterns show up again and again inside firms that get surprised by an exam finding:
- Stale written supervisory procedures. Manuals get written at launch and quietly age out of sync with what the desk actually does. Examiners notice the gap immediately.
- Weak vendor oversight. Clearing, custody, and tech providers carry real regulatory exposure, but due diligence often stops after the contract is signed.
- Thin net capital cushions. Firms operating close to the minimum leave no room for a bad month, a delayed receivable, or a reclassified asset.
- Reactive record retention. Communications, trade tickets, and approvals get pulled together only when a request lands, instead of being organized as they occur.
Choose an Auditor Who Understands the Business
Not every CPA firm is built for this work. Broker-dealer audits sit at the intersection of PCAOB inspection risk, SEC filing deadlines, and FINRA’s evolving priorities, and generalist accountants tend to learn that on your dime. Firms that specialize in broker-dealer audits already know where regulators look, which schedules invite follow-up questions, and how to document exemption claims so they hold up under review.
The right auditor is closer to a second set of eyes on the control environment than a once-a-year visitor. That relationship is what turns compliance from a scramble into something predictable.