Compliance with the FCA’s CASS regulations remains a significant operational challenge for investment firms. While the rules are prescriptive in nature, a level of interpretation is required on the application of each rule to a firm’s own business model. This can add complexity, where an alternative interpretation can be the difference between compliance and non-compliance.
In this blog we break down 5 key areas within CASS for investment firms and summarise the most common challenges encountered in achieving compliance.
- CASS 6 – Custody Rules
Custody asset protection sits at the core of CASS compliance. Firms must ensure client assets are accurately identified, properly registered, fully segregated from firm assets, and protected throughout the asset lifecycle. The FCA expects firms to maintain complete and accurate books and records and perform regular reconciliations to verify ownership and safeguard client positions.
Key CASS 6 challenges:
- Managing internal and external custody asset reconciliations
- Reconciling data across asset classes, multiple custodians, fund managers and third parties
- Handling trade-date vs settlement-date data differences
- Clear understanding of internal systems and data
- Identifying, investigating and resolving discrepancies without undue delay
- Correctly valuing and covering custody asset shortfalls when they arise
Why it matters:
Failure to maintain accurate custody asset records can impact a firm’s ability to return client assets promptly in the event of insolvency. Firms must ensure that assets are correctly registered and segregated from the firm’s own assets. The performance of regular reconciliations is a key component of identifying where insufficient assets are held to meet client obligations. In this scenario, firms must take action to address any shortfall and appropriately segregate the correct value of assets.
2. CASS 7 – Client Money
CASS 7 is often considered the most operationally challenging chapter of the rulebook. Firms holding client money must segregate funds into appropriately designated accounts and ensure internal records accurately reflect client entitlements. With close to 400 rules, guidance points and evidential provisions, maintaining compliance requires robust controls and oversight.
Key CASS 7 challenges:
- Maintaining accurate internal client money records which document transactional flows at both client and cashbook level
- Performing daily internal client money reconciliations utlising only the firm’s internal data sources
- Completing timely external client money reconciliations to identify and resolve exception items
- Managing control accounts and in-flight transactions in line with internal systems and transactional flows
- Identifying and resolving client money shortfalls or excesses quickly
- Ensuring the diversification of client money adheres to the requirements of CASS 7.13.20 R and internal business policy
Why it matters:
Internal and external client money reconciliations are a fundamental requirement of the CASS rules and are a key element tested as part of an annual CASS audit. Failings in this area will result in breaches reported to the regulator and likely bring further scrutiny. With obligations to execute processes on a daily basis, firms must have adequate systems and controls in places to ensure adequate protection of client money.
3. CASS 10 – Resolution Pack
The CASS Resolution Pack rules set out in CASS 10 ensure that, should a firm fail, an insolvency practitioner can rapidly access all information required to return client money and assets. The CASS RP must be maintained continuously, with documents kept complete, accurate and readily retrievable within FCA-determined timeframes.
Key CASS 10 challenges:
- Maintaining an up-to-date repository of required documentation
- Ensuring all records are retrievable within FCA-prescribed timeframes
- Tracking ownership and accountability for each document
- Keeping information accurate following organisational or operational changes
- Demonstrating ongoing review and maintenance
Why it matters:
The quality of a firm’s Resolution Pack directly determines how orderly the return of client assets will be during an insolvency event. Where a firm’s CASS Resolution Pack is manual, this causes a significant challenge to demonstrate the appropriate ongoing oversight and maintenance. Firms must be able to execute updates to Resolution Pack artefacts in a timely manner and also ensure that all documentation can be accessed as required.
4. CMAR – Regulatory Reporting
Medium and large CASS firms must submit a monthly Client Monet and Asset Return (CMAR) to the FCA, providing a comprehensive overview of their client money and custody asset environment. The submission must be accurate, timely (within 15 business days of month-end), and supported by robust controls.
Key CMAR challenges:
- Consolidating data from multiple systems and sources
- Managing inconsistent data formats and MI reporting from across the business
- Reducing manual data preparation and spreadsheet reliance
- Tracking accurate high and low balances across reporting periods
- Applying correct FX rates and data validation
- Managing audit trails, approvals and accountability
Why it matters:
CMAR is a key supervisory tool the FCA uses to assess compliance and identify emerging risks across the industry, making accuracy and timeliness non-negotiable. This is the FCA’s insight into the operations of investment firms – reporting delays and inaccuracies will only heighten the level of scrutiny the regulator considers is necessary.
Firms must have reliable and repeatable processes and controls in place to ensure timely generation of their CMAR. Holding data across multiple spreadsheets requires manual consolidation and analysis, often resulting in a lengthy process to submit the final version to the FCA. Data governance controls are key to ensuring an efficient and accurate regulatory reporting submission.
5. CASS Governance & Oversight
Strong governance underpins every element of CASS compliance. Beyond processes and reconciliations, firms must create a culture of accountability, risk awareness and continuous oversight across the organization. Effective governance demonstrates to regulators that CASS obligations are understood, monitored and controlled.
Key governance and oversight challenges:
- Establishing clear ownership and accountability of CASS operations
- Creating a positive CASS culture throughout the business
- Maintaining a robust risk and control framework
- Ensuring timely identification and escalation of issues and breaches
- Documenting rule applicability, risks and controls
- Producing meaningful management information and audit evidence
- Supporting annual CASS audit requirements
Why it matters:
Firms must create a positive culture around CASS compliance which promotes the early escalation of issues when they are identified. While firms must advocate breach-avoidance, incidents must also be viewed as a key opportunity to learn and improve controls.
Weak governance often leads to ineffective controls, recurring breaches and increased regulatory attention. Firms which create the right environment with focus on CASS governance will enable proactive risk management and compliance confidence.
The bottom line for CASS compliance
Addressing these five areas correctly is the difference between CASS compliance as a burden and CASS compliance as a controlled, scalable advantage. CASS operations now have the opportunity to transition beyond core automation towards applied, governed intelligence. The firms that plan for this shift now will be the ones best placed to manage rising volumes, tighter timelines and closer regulatory scrutiny with confidence.
See how AutoRek can strengthen your CASS framework with our end-to-end reconciliation, reporting and governance solution.
Book a demo to see AutoRek in action today.