Possession, Control, and Stock Records

Review how Series 27 tests stock-record discipline, control locations, hypothecation limits, and customer-information safeguards.

Customer protection starts with knowing where customer securities are and whether the firm has proper possession or control over them. Series 27 uses stock records, control locations, possession-and-control discipline, and hypothecation concepts to test whether the firm is truly separating customer property from firm property. The FINOP has to understand both the custody side and the recordkeeping side that proves the custody story is real.

This is one of the clearest examples of why the exam is operational rather than theoretical. A firm can believe it is carrying customer securities properly and still fail if the stock record is inaccurate, if securities sit in a noncontrol location too long, or if customer property is used in a way the rules do not permit. The correct answer usually protects traceability, separation, and evidence.

What possession and control really means in practice

TopicWhat the FINOP should verifyCommon exam trap
Stock-record accuracyThe stock record accurately reflects customer and firm positions and can support control conclusions.Trusting the record even when unresolved differences or timing gaps make it unreliable.
Control locationsCustomer securities are at proper control locations or are being handled under a permitted process.Treating any location used by the firm as automatically acceptable.
Segregation of customer propertyCustomer assets are not casually blended with firm inventory or used beyond permitted limits.Thinking operational convenience justifies temporary shortcuts.
Hypothecation limitsAny use of customer securities is kept within the permitted framework and monitored carefully.Forgetting that customer protection weakens quickly if the firm overreaches.
Privacy and information safeguardsCustomer information is protected as part of the broader property-protection boundary.Treating privacy as unrelated to customer-asset protection.

Series 27 usually rewards the answer that preserves a clean distinction between customer property and firm property. If the candidate is unsure, the safer instinct is to strengthen segregation and documentation rather than to rationalize a shortcut.

Control-location mindset

    flowchart TD
	    A["Customer securities are received, moved, or reviewed"] --> B["Check the stock record and the current location"]
	    B --> C{"Is the position at a proper control location and accurately recorded?"}
	    C -- "Yes" --> D["Maintain the record trail and continue monitoring"]
	    C -- "No" --> E["Escalate the difference or noncontrol-location issue"]
	    E --> F["Determine whether the problem is recordkeeping, custody movement, or improper use"]
	    F --> G["Correct the issue and retain evidence of resolution"]
	    G --> H{"Does the issue suggest a broader protection weakness?"}
	    H -- "Yes" --> I["Review possession-and-control procedures more broadly"]
	    H -- "No" --> D
	    I --> D

This is the exam instinct: a custody issue is not solved merely by saying the firm still “knows where the securities are.” The firm must be able to prove the location, the control status, and the record accuracy together.

Better exam instincts

  • Stock records matter because they support the firm’s custody claims.
  • A noncontrol-location issue becomes more serious when it is not noticed quickly.
  • Hypothecation questions are really about whether the firm has crossed the line from permitted use into customer-property risk.
  • When privacy appears in this topic, the exam is often testing whether the firm respects the boundary around customer property in both physical and informational form.

Sample exam question

A broker-dealer’s stock record shows customer securities at a location the firm has not confirmed as an acceptable control location, and the discrepancy is not yet reconciled. What is the best Series 27 response?

A. Continue normal treatment because the firm believes the securities are still somewhere in the system
B. Ignore the issue unless a customer requests delivery
C. Escalate the discrepancy, verify the location and record accuracy, and resolve the possession-and-control issue before treating the position as fully supported
D. Move the securities into firm inventory until the record is corrected

Answer: C. Series 27 expects the FINOP to protect customer property through traceability, acceptable control status, and accurate records. Belief is weaker than verified control.

Revised on Thursday, April 23, 2026