UK Regulation and Professional Integrity: The Regulatory Framework relating to Financial Crime

Study the regulatory framework relating to financial crime for CISI UK Regulation and Professional Integrity, with a UK-specific reading frame built around the official chapter structure and exam weighting.

This is one of the heaviest chapters on the paper because it brings together market abuse, insider dealing, money laundering, sanctions, bribery, data protection, and whistleblowing. The volume can feel intimidating, but the exam is usually testing classification and escalation rather than encyclopedic detail. The strongest answer begins by asking what kind of misconduct or risk is present. Is it inside information, suspicious funds, market manipulation, sanctions exposure, bribery risk, or a speaking-up issue? Once the category is clear, the control logic becomes much more disciplined.

Chapter snapshot

CheckWhat matters
Official topic weighting18%
Core distinction under pressureidentify the type of financial-crime risk or market-abuse behaviour first, then route it to the correct control, escalation, or disclosure response.
Strongest use of this pageread it before timed sets so you can recognise the real route, rule, or conduct problem being tested
UK noteKeep UK framing active: FCA, PRA, Bank of England, HM Treasury, FOS, FSCS, FSMA, SM&CR, COBS, CASS, DISP, COMP, JMLSG, UK MAR, and GBP where a sterling amount matters.

What this chapter is really testing

The paper usually rewards candidates who can distinguish between different financial-crime and market-integrity problems that sound superficially similar. Insider dealing is not the same as general poor conduct; suspicious client funds are not the same as product unsuitability; sanctions screening is not the same as a complaint process.

It also tests escalation judgement. Many questions are really about what the firm should do when faced with a red flag, not about who can define a crime in the abstract.

Section map

SectionMain exam angle
FCA approach to financial-crime preventionIf the stem is about controls, monitoring, or prevention, think systems-and-controls first rather than individual punishment only
Market abuse concepts, reporting, and safe harboursIf the behaviour could distort the market or misuse sensitive information, move into UK MAR thinking
Market soundings and investment recommendationsIf the issue is sharing information in a controlled way, think process and safeguards rather than casual conversation
Insider dealing and inside informationIf the information is confidential and likely to move the price, inside-information logic is probably in play
Market manipulation and disclosure obligationsIf the conduct creates a false market impression, manipulation may be the decisive clue
Money laundering concepts and legal frameworkIf unexplained funds or criminal origin are the issue, move into AML reasoning rather than suitability or sales language
AML controls, KYC, due diligence, and reportingIf customer identity, beneficial ownership, or source of funds is unclear, think due diligence and escalation
Terrorist financing and sanctionsIf the issue involves listed persons, restricted jurisdictions, or severe financial-crime exposure, sanctions logic is likely central
Bribery, corruption, and data protectionIf an advantage is offered to influence behaviour improperly, bribery or corruption thinking is relevant
Whistleblowing and speaking upIf a serious concern cannot be safely resolved at desk level, speaking-up and escalation logic becomes stronger

Section-by-section lesson

FCA approach to financial-crime prevention

This section frames financial crime as a systems-and-controls issue. The firm is expected to have proportionate arrangements to reduce the chance that it is used for financial crime.

  • If the stem is about controls, monitoring, or prevention, think systems-and-controls first rather than individual punishment only.
  • The FCA lens here is about risk management as well as misconduct response.

Market abuse concepts, reporting, and safe harbours

Market abuse questions usually test whether conduct threatens market integrity and what sort of reporting or safe-harbour reasoning applies. The exact label matters because it drives the expected response.

  • If the behaviour could distort the market or misuse sensitive information, move into UK MAR thinking.
  • Safe harbour language is a clue that the question is about whether behaviour fits a permitted framework rather than an outright ban.

Market soundings and investment recommendations

This section is about how firms handle sensitive communications and recommendations without crossing into abusive conduct. The exam often uses it to test controlled communication and process discipline.

  • If the issue is sharing information in a controlled way, think process and safeguards rather than casual conversation.
  • An investment recommendation carries conduct and integrity responsibilities, not just marketing value.

Insider dealing and inside information

Inside-information questions usually turn on whether the information is precise, non-public, and price-sensitive enough to matter. Once that is recognised, the conduct consequences become more obvious.

  • If the information is confidential and likely to move the price, inside-information logic is probably in play.
  • Do not downgrade the issue because the information came from an informal source.

Market manipulation and disclosure obligations

Market manipulation questions focus on behaviour that gives a false or misleading impression or distorts the market. Disclosure obligations matter because withholding or mishandling information can also damage integrity.

  • If the conduct creates a false market impression, manipulation may be the decisive clue.
  • Disclosure failures can be part of the integrity problem rather than an administrative afterthought.

This section anchors AML in broad legal and practical terms. The exam wants candidates to know why laundering is harmful and how the legal framework supports prevention and reporting.

  • If unexplained funds or criminal origin are the issue, move into AML reasoning rather than suitability or sales language.
  • The laundering framework is about protecting the system, not just collecting client documents.

AML controls, KYC, due diligence, and reporting

This is the operational AML heart of the chapter. Questions often test onboarding, source-of-funds enquiries, suspicious activity, and what the firm should do with unresolved concerns.

  • If customer identity, beneficial ownership, or source of funds is unclear, think due diligence and escalation.
  • If concern remains, the answer is rarely to proceed quickly and ask questions later.

Terrorist financing and sanctions

Sanctions and terrorist-financing questions are about restricted dealings, screening, and heightened caution. The main exam skill is recognising that these are not ordinary client-onboarding inconveniences.

  • If the issue involves listed persons, restricted jurisdictions, or severe financial-crime exposure, sanctions logic is likely central.
  • Proceeding first and checking later is especially weak in this part of the chapter.

Bribery, corruption, and data protection

These topics share a theme of misuse of power or misuse of information. The exam tests whether the candidate can recognise conduct that compromises integrity and lawful handling of data or advantages.

  • If an advantage is offered to influence behaviour improperly, bribery or corruption thinking is relevant.
  • Sensitive information handling should be treated as an integrity issue, not just a technical IT matter.

Whistleblowing and speaking up

This section tests whether firms allow problems to be raised and whether individuals respond properly when concerns cannot be resolved informally. The exam often rewards escalation where silence would prolong harm.

  • If a serious concern cannot be safely resolved at desk level, speaking-up and escalation logic becomes stronger.
  • Whistleblowing is about protecting the firm and market, not betraying the team.

Best study order inside this chapter

  1. FCA approach to financial-crime prevention: Start with the control framework.
  2. Market abuse concepts, reporting, and safe harbours: Then secure the market-integrity lane.
  3. Market soundings and investment recommendations: Add controlled communication next.
  4. Insider dealing and inside information: Then sharpen your inside-information recognition.
  5. Market manipulation and disclosure obligations: Add the false-market-impression logic.
  6. Money laundering concepts and legal framework: Then move into AML foundations.
  7. AML controls, KYC, due diligence, and reporting: Secure the operational AML steps.
  8. Terrorist financing and sanctions: Add the sanctions and restricted-dealings layer.
  9. Bribery, corruption, and data protection: Then cover misuse of advantages and information.
  10. Whistleblowing and speaking up: Finish with escalation and internal challenge.

Quick map

    flowchart TD
	A["Red flag appears"] --> B{"What kind of red flag is it?"}
	B -->|"Inside information or false market impression"| C["Market abuse or insider-dealing control route"]
	B -->|"Suspicious funds or unclear beneficial ownership"| D["AML due diligence and escalation route"]
	B -->|"Listed person or restricted jurisdiction"| E["Sanctions route"]
	B -->|"Improper advantage or pressure"| F["Bribery or corruption route"]
	B -->|"Serious unresolved internal concern"| G["Speaking-up and whistleblowing route"]

What stronger answers usually do

  • name the risk category before deciding the control response
  • treat AML, sanctions, and market abuse as distinct lanes even where they all involve red flags
  • prefer escalation and control discipline over convenience when key information is missing
  • recognise that financial-crime compliance is about protecting the system, not just completing forms

Sample Exam Question

During onboarding, a prospective client provides incomplete information about beneficial ownership and offers inconsistent explanations for the source of a large incoming transfer. What is the strongest immediate response?

  • A. Pause progression and escalate through the firm’s AML controls
  • B. Proceed if the client seems commercially attractive
  • C. Ignore the issue unless a complaint is later received
  • D. Treat it only as a marketing-communications problem

Answer: A.

The facts point to AML and due-diligence concerns. The correct response is to pause and escalate through the appropriate AML control route rather than proceeding for commercial reasons.

Common traps

  • treating all red flags as the same kind of issue
  • using complaint-handling logic when the issue is suspicious activity or inside information
  • thinking partial information is enough if the client seems valuable
  • equating speaking up with disloyalty instead of control discipline

Key takeaways

  • This chapter is about classification and escalation under pressure.
  • Financial-crime controls work only if the firm acts on red flags rather than rationalising them away.
  • Inside information, AML, sanctions, and bribery are related by integrity, not identical in control response.
Revised on Thursday, April 23, 2026