Received an SFC On-site Inspection Notification? A Professional Compliance Consultant’s 4-Step Preparation Checklist
When a licensed corporation receives an on-site inspection notification from the Securities and Futures Commission (SFC), the accompanying document request list can easily run to dozens of items. It is critical not to leave preparation until the last minute. Based on typical document requests issued by the SFC through the WINGS system, the request list usually covers five main areas: general corporate information, client and fund details, transaction records, internal control policies, compliance training records, and anti-money laundering (AML) documentation. This article outlines the core categories of documents commonly requested and provides a practical 4-step preparation checklist.
Five Core Categories of Documents Commonly Requested in SFC On-site Inspections
The SFC’s document requests are usually tailored according to the nature of the licensed corporation’s business. The table below summarises the typical categories for a Type 9 (asset management) licensed corporation:
文件類別 | 具體要求（僅列舉代表性項目） | 審查重點 |
|---|---|---|
Corporate Overview and Governance | Description of business activities, group structure chart, organisation chart and staff responsibilities, minutes of management meetings (Board, Investment Committee, Risk Committee, etc.) | Confirm that business activities are within licensed scope; management structure is clear; decisions are properly documented |
Client and Fund Information | Client list (categorised by fund or discretionary account), investor source, fund offering documents, latest audited financial statements | Verify client suitability, product distribution compliance, and whether there are unauthorised third-party referrals |
Transaction and Operational Records | Transaction register (at least last 3 months), broker/custodian reconciliations, net asset value calculation records, subscription and redemption records | Ensure transactions are genuine, valuations are accurate, and client assets are properly safeguarded |
Internal Control and Compliance Policies | Compliance manual, KYC procedures, conflicts of interest and employee dealing policies, complaint handling procedures, risk management policies, investment compliance monitoring framework | Assess whether policies are adequately designed and effectively implemented |
Anti-Money Laundering (AML/CFT) | Non-face-to-face account opening records, Politically Exposed Persons (PEPs) records, internal suspicious transaction reports, STR register, staff AML training records | Verify effectiveness of AML/CFT systems and timeliness of suspicious transaction reporting |
Note: The above table is for illustrative purposes only. The actual document request list may vary depending on the type of licence and complexity of the business.
4-Step Preparation Checklist Upon Receiving an Inspection Notification
Step 1: Notify Your Compliance Consultant Immediately – Do Not Conceal or Destroy Documents
Section 180 of the Securities and Futures Ordinance (SFO) empowers SFC inspectors to require the production of any records or documents. Concealing or destroying documents may constitute a criminal offence. As soon as the notification is received, engage a professional compliance consultant (such as ComplianceOne) to interpret the document request list, assess potential risks, and develop an appropriate response strategy.
Step 2: Organise Documents According to the Request List and Conduct a Gap Analysis
Your consultant will help categorise and compile the required documents (corporate documents, client lists, transaction records, compliance policies, and AML records). A gap analysis should be performed to identify any missing or non-compliant items, followed by the development of a remediation plan.
Step 3: Conduct Mock Interviews and Opening Meeting Rehearsals
The SFC typically conducts interviews with Responsible Officers (ROs) and Managers-In-Charge (MICs). ComplianceOne can arrange mock interview sessions to prepare the team for common questions on business processes, risk management, and compliance implementation, ensuring answers are consistent and clear.
Step 4: Provide On-site Support and Post-Inspection Follow-up
Consultants can attend the opening meeting and subsequent interviews as required to assist in responding to queries. After the inspection, the SFC may issue a closing letter, a letter of advice, or require submission of a remediation report. Your consultant can help analyse the findings, prepare and implement corrective actions, and ensure timely completion within any deadlines set by the SFC.
Frequently Asked Questions (Q&A)
Q1: How often does the SFC conduct on-site inspections?
A: Inspections are generally conducted on a 5-to-7-year cycle, although higher-risk firms may be inspected more frequently. The first formal step is usually receipt of a notification and document request list via the WINGS system, followed by face-to-face meetings with the assigned case officer.
Q2: The document request list contains dozens of items. How can we complete everything within the deadline?
A: It is advisable to maintain a “ready-for-inspection” filing system as part of day-to-day operations. ComplianceOne can help establish standardised document archiving procedures and, upon receiving notification, quickly mobilise resources to upload documents to the WINGS system on a prioritised basis.
Q3: What are the SFC’s main areas of focus during an inspection?
A: The SFC typically focuses on three key areas: (1) whether business activities are conducted within the scope of the licence; (2) whether internal controls are effectively implemented (particularly client asset protection and conflicts of interest management); and (3) whether the AML/CFT framework is robust (including client due diligence and suspicious transaction monitoring).
Q4: What should we do if we discover missing documents or policy gaps?
A: Do not attempt to fabricate documents. Be honest with the SFC and immediately initiate remedial actions. ComplianceOne can assist in preparing a compliance improvement plan and completing the necessary system enhancements within the required timeframe.
Q5: What specific support can ComplianceOne provide for an SFC on-site inspection?
A: ComplianceOne offers end-to-end support, including document organisation, gap analysis, mock interviews, opening meeting rehearsals, on-site attendance, and post-inspection remediation follow-up. For more details, please visit: https://www.complianceone.hk/sfc-onsite-inspection
Conclusion
An SFC on-site inspection is essentially a comprehensive health check of a licensed corporation’s compliance framework. Rather than scrambling at the last minute, firms should integrate compliance management into daily operations. Upon receiving an inspection notification, the most effective approach is to remain calm, engage professional consultants early, prepare systematically according to the document request list, and communicate honestly with the SFC. With extensive hands-on experience, ComplianceOne can help turn the pressure of an inspection into an opportunity to strengthen your internal governance and regulatory resilience.