Browse CIRO Exam Guides: CIRE, RSE, Trader, Supervisor & Derivatives

CIRO Supervisor Exam Cheat Sheet: Supervision Review

High-yield CIRO Supervisor Exam cheat sheet for account approvals, account activity review, Approved Persons, market rules, communications, registered locations, and escalation traps.

Use this page as the fast-decision layer for the CIRO Supervisor Exam. This is an applied supervision exam: the best answer usually identifies the first missed control step, the supervisor who owned it, the evidence that should exist, and the escalation or restriction needed before the issue worsens.

Quick facts

ItemValue
ProviderCIRO
ExamSupervisor Exam
Current site timing90 questions in 180 minutes
Core exam instinctidentify the earliest missed control step and the supervisor who owned it
Highest-weight areaaccount approvals and account activity review
Main trapchoosing vague monitoring instead of documented approval, review, restriction, escalation, or remediation

Element map

ElementQuestionsWhat to recall first
General regulatory framework10CSA, CIRO, registration, market infrastructure, complaints, recourse, settlement risk, ethics, conflicts, outside activities, and confidentiality.
Supervisory structure and dealer responsibilities10WSPs, training, product due diligence, executive accountability, audit, compliance, delegation, automation, manual triggers, and testing.
Business and operations supervision9Business model, locations of personnel, account/product/business-line risk, derivatives, compensation, and referral arrangements.
Account approvals20Account opening, timelines, institutional clients, qualifying hedgers, CARs, RDI, disclosure documents, fee-based, margin, managed, discretionary, leveraged, derivatives, and OEO accounts.
Account activity15Retail review, high-risk clients, cross-supervision, hold mail, institutional accounts, suspicious activity, DMA/OEO, derivatives, alternate supervisors, managed-account documentation.
Approved Persons8Permitted activities, account-opening duties, suitability, product due diligence, client education, qualifications, disclosures, and agreements.
Trading and market rules6UMIR, order review, trading systems, order types, regular review, risk-based supervision, and gatekeeping.
Communications and research7Advertising, sales literature, correspondence, social media, off-channel issues, designated approvals, research disclosures, and analyst conduct.
Registered locations and dealer activity risks5Location supervision, audit follow-up, location risk factors, and retail distribution control failures.

Supervisor answer hierarchy

When two answers both sound plausible, prefer the one that:

  1. identifies the correct supervisory stage: pre-approval, post-activity review, periodic review, exception review, or escalation;
  2. ties the issue to written procedures and supervisor authority;
  3. preserves evidence: approval record, review note, exception report, supervision log, communication approval, or audit follow-up;
  4. restricts activity when missing facts, missing approval, client risk, or product risk makes the situation not decision-ready;
  5. escalates to compliance, risk, senior supervision, or CIRO-facing processes when local follow-up is not enough.

Weak answers usually say “monitor more closely” without a record, treat training as enough after repeated issues, or solve a control failure with informal coaching only.

Control-recognition table

If the fact pattern turns on…Stronger first question
onboarding or account setupWhat should have been approved or rejected before the account started operating?
unusual account activityWhat review should have detected the pattern earlier, and what evidence supports that review?
Approved Person behaviorIs this training, heightened supervision, restriction, or formal escalation first?
communications or researchWho needed to approve, retain, or supervise the material before distribution?
branch or location riskIs the problem local monitoring, broader supervisory design, or both?

Account approval pressure table

If the stem mentions…Stronger first response
incomplete account documentsdo not approve until required information and evidence are complete
institutional client or qualifying hedgerconfirm classification, sophistication, authority, and account appropriateness
relationship disclosure or disclosure documentverify delivery, clarity, and record evidence before relying on it
fee-based accounttest whether the fee structure fits client activity and is disclosed properly
margin, leverage, or derivativesconfirm risk capacity, approval level, disclosures, and supervisory sign-off
managed or discretionary accountrequire proper authority, mandate, review process, and ongoing supervision
OEO accountcheck client understanding, platform controls, disclosures, and review triggers

Account approvals are the largest single element. Most strong answers slow down before the account begins operating.

Account activity review map

Activity cueBetter supervisory instinct
high-risk client patternincrease review intensity and document the reason
unusual trading, concentration, or leveragereview suitability, account objective, client risk, and escalation need
hold-mail requestconfirm legitimacy, duration, client protection, and review controls
cross-supervision issueclarify responsibility and avoid review gaps
institutional account activitydo not assume sophistication eliminates review of exceptions
suspicious activityescalate through AML/suspicious-activity procedures and retain evidence
DMA, OEO, or derivatives activityverify systems, permissions, notifications, and exception reporting
alternate supervisorensure authority, independence, access to records, and documented review

The exam often tests the difference between ordinary review and exception-driven review. If the facts show repetition, client harm, unclear authority, or higher-risk products, a passive review answer is usually weak.

Approved Person supervision

If the issue is…Stronger response
outside or unpermitted activityidentify, restrict or escalate, and document the supervisory response
repeated suitability missesreview account activity, product due diligence, training, and heightened supervision
missing client educationrequire disclosure or education before activity proceeds
qualification or proficiency gapconfirm approval conditions and restrict unsupported activity
missing agreement or disclosurestop relying on informal understanding and get the required evidence

Supervision of Approved Persons is not just discipline. The exam often rewards earlier controls: permitted activities, account-opening responsibilities, product understanding, disclosure, and review evidence.

Communications, research, and market rules

Fact patternFirst control to check
advertising or sales literaturedesignated approval, fair balance, risk disclosure, and retention
correspondence or social mediacapture, review, supervision, and off-channel controls
research disclosure issuerequired disclosure, analyst conduct, conflicts, and approval process
off-channel communicationretention, surveillance, training, and escalation
UMIR or order-review issuegatekeeping, order review, trading-system controls, and exception follow-up
automated trading or manual triggerstest whether system review and manual escalation worked together

The stronger answer usually connects content control to records and supervisory design. A correct message used through the wrong process can still create a supervision problem.

Registered location and audit follow-up

Location factStronger response
remote or small locationconfirm supervision coverage, records access, escalation, and local risk factors
branch audit issueassign ownership, deadline, evidence, and follow-up testing
retail distribution weaknessexamine training, approvals, sales practices, complaints, and exception reports
repeat deficiencyescalate beyond local coaching and document remediation
personnel spread across locationsclarify supervisory responsibility and reporting lines

Scenario workflow

  1. Classify the situation before choosing an action.
  2. Identify the dominant client, product, governance, or control constraint.
  3. Gather missing facts if the scenario is not decision-ready.
  4. Choose the most defensible compliant action.
  5. Document and escalate whenever the facts show a conduct, control, or integrity risk.

Fast answer filters

Ask thisWhy it matters
What was the first missed control?The exam often asks what should have happened before the final failure appeared.
Was approval required before activity?Account approvals, discretionary authority, derivatives, margin, and OEO issues often turn on timing.
Is there a review record?Supervision without evidence is usually an incomplete answer.
Is this a one-off error or a pattern?Patterns require escalation, remediation, and often heightened review.
Does automation need manual follow-up?System alerts, exception reports, and electronic controls still need testing and supervisory response.

Common traps

  • Jumping to discipline or remediation before identifying the first missed approval or review step.
  • Treating account-opening failures and account-activity failures as unrelated when the exam often links them.
  • Choosing vague “monitor more closely” answers when written follow-up, restriction, or escalation is the stronger control response.
  • Treating communications issues as content-only problems instead of approval and retention problems.
  • Assuming a senior compliance function cures a supervisor’s own review duty.
  • Treating institutional or OEO clients as outside meaningful supervision.
  • Accepting automated surveillance without testing, exception review, or manual escalation.
  • Fixing repeat Approved Person issues with training only when restriction or heightened supervision is needed.

Last-week drill sheet

DrillStandard
Rebuild the nine elementsName each element and explain one control decision it can test.
Drill account approvalsPractice CARs, RDI, fee-based, margin, managed, discretionary, derivatives, leveraged, and OEO account approval issues.
Drill activity reviewTag misses as high-risk client, suspicious activity, institutional, DMA/OEO, derivatives, hold mail, or cross-supervision.
Drill evidence languageFor every scenario, state what record should exist after the supervisor acts.
Drill communications and market rulesPractice approval, retention, research disclosure, off-channel issues, UMIR, order review, and gatekeeping.

Sample Exam Question

A supervisor approves a margin account after receiving incomplete client risk information because the Approved Person says the client is experienced. Within weeks, the account shows concentrated leveraged trading and exception reports are closed with brief notes stating “client understands risk.” What is the strongest supervisory concern?

A. No concern exists because the client was experienced.

B. The issue is only an Approved Person training matter.

C. The supervisor may have failed at both the account-approval stage and the account-activity review stage because the file, risk evidence, exception review, and escalation record are weak.

D. The supervisor should wait for a complaint before reviewing the account.

Correct answer: C. The question links account approval to later activity review. Experience does not cure incomplete approval evidence or weak exception handling; the supervisor should have documented the approval basis, reviewed leveraged activity, and escalated or restricted when the facts showed risk.

Next move

Once these rules feel natural, switch to web practice and test whether you can apply them without slowing down. Pair it with the Study plan, FAQ, and Resources.

Practice this exam

Use this free guide for review, then Start CIRO Supervisor Practice on Finance Prep for timed questions, topic drills, and detailed explanations.

Revised on Friday, May 29, 2026