CISI GFC Regulatory Frameworks Decoded: FCA, Basel, MiFID II & AML

Table of Contents

• • The FCA Regulatory Architecture
• • Basel Capital Accords: From II to III
• • MiFID II: Investor Protection in Practice
• • AML Directives and the Risk-Based Approach
• • Global Sanctions and Cross-Border Compliance
• • Building Your Regulatory Framework Mastery

The CISI Global Financial Compliance (GFC) exam does not simply test whether you can recite regulatory definitions. It demands that you understand how major regulatory frameworks interconnect, why they exist, and how compliance professionals apply them in daily practice. For candidates preparing through our official CISI-accredited programme, grasping these frameworks at a structural level is the difference between passing and failing.

This article breaks down the five pillars of regulation that dominate the GFC syllabus — the FCA’s regulatory architecture, Basel capital accords, MiFID II investor protection rules, Anti-Money Laundering directives, and global sanctions regimes — and explains how each one appears in exam scenarios.

The FCA Regulatory Architecture

The Financial Conduct Authority (FCA) sits at the centre of UK financial regulation and is a critical topic in the GFC syllabus. Unlike prescriptive rules-based regulators, the FCA operates a principles-based approach, meaning firms must demonstrate they are meeting broad regulatory outcomes rather than merely ticking compliance boxes.

The GFC exam expects you to understand the FCA’s three operational objectives: consumer protection, market integrity, and promoting effective competition. Questions frequently test the distinction between these objectives and the FCA’s overarching strategic objective of ensuring markets function well.

Key areas that appear in exam scenarios include:

• The Approved Persons and Senior Managers & Certification Regime (SM&CR) — understanding individual accountability within regulated firms
• FCA enforcement powers — the authority to impose unlimited fines, withdraw authorisation, and prosecute criminal market abuse
• Principles for Businesses — the eleven core principles that all FCA-authorised firms must follow, from acting with integrity to treating customers fairly

The practical application questions often present a scenario where a firm has potentially breached one of these principles and ask you to identify which principle applies and what the regulatory consequence would be.

Basel Capital Accords: From II to III

The Basel framework is the global standard for banking regulation, and the GFC exam tests your understanding of how these accords protect the financial system from systemic risk. You do not need to perform complex capital calculations, but you must understand the structural logic behind the framework.

Basel II introduced the famous three-pillar approach:

1. Pillar 1 — Minimum Capital Requirements: Banks must hold sufficient capital against credit, market, and operational risk
2. Pillar 2 — Supervisory Review: Regulators assess whether a bank’s internal capital adequacy processes are robust
3. Pillar 3 — Market Discipline: Banks must publicly disclose risk information to allow market participants to assess their stability

Basel III strengthened these requirements following the 2008 financial crisis. The GFC exam focuses on two critical additions:

• Liquidity Coverage Ratio (LCR) — requiring banks to hold enough high-quality liquid assets to survive a 30-day stress scenario
• Net Stable Funding Ratio (NSFR) — ensuring banks maintain stable funding sources relative to their long-term lending activities
• Counter-Cyclical Capital Buffer — additional capital that regulators can require during periods of excessive credit growth

Exam questions typically present a banking scenario and ask you to identify which Basel pillar or specific requirement is relevant to the situation described.

MiFID II: Investor Protection in Practice

The Markets in Financial Instruments Directive II (MiFID II) is one of the most heavily tested regulatory frameworks in the GFC exam. Rather than memorising every article of the directive, focus on understanding the practical investor protection mechanisms it establishes.

The cornerstone of MiFID II is its three-tier client classification system: Retail clients receive the highest level of protection, Professional clients receive intermediate protection, and Eligible Counterparties receive the least. The classification directly determines which conduct of business rules apply — a critical concept for exam scenarios.

Key MiFID II provisions that regularly appear in GFC questions include:

• Suitability and Appropriateness Tests — firms must assess whether a product is suitable for the client based on their knowledge, experience, and financial situation
• Best Execution — the obligation to achieve the best possible result when executing client orders across multiple factors including price, speed, and likelihood of settlement
• Product Governance — manufacturers and distributors of financial products must define target markets and ensure products reach appropriate investors
• Cost Transparency — firms must provide clear, upfront disclosure of all costs and charges, both before and after the transaction

AML Directives and the Risk-Based Approach

Anti-Money Laundering (AML) regulation forms a substantial portion of the GFC syllabus. The exam tests your understanding of international AML standards, primarily driven by the Financial Action Task Force (FATF) recommendations, as well as regional implementations like the EU Anti-Money Laundering Directives.

The central concept you must master is the risk-based approach. Rather than applying identical checks to every client, regulated firms must assess the level of money laundering risk and apply controls proportionally:

• Simplified Due Diligence (SDD) for low-risk clients and products
• Standard Customer Due Diligence (CDD) as the baseline requirement, including verifying client identity and understanding the purpose of the business relationship
• Enhanced Due Diligence (EDD) for higher-risk situations, including Politically Exposed Persons (PEPs), clients from high-risk jurisdictions, and complex or unusually large transactions

The exam frequently tests Suspicious Activity Reports (SARs) — when they must be filed, who files them, and critically, the tipping-off offence that prohibits disclosing to a client that a report has been made. Scenario questions in this area often present a compliance officer with a suspicious transaction and ask you to identify the correct course of action.

Global Sanctions and Cross-Border Compliance

The final regulatory pillar in the GFC syllabus covers sanctions regimes and the challenges of maintaining compliance across multiple jurisdictions. This is an increasingly important area as geopolitical developments continuously reshape the sanctions landscape.

Candidates must understand:

• The difference between targeted sanctions (freezing assets of specific individuals or entities) and sectoral sanctions (restricting trade in particular economic sectors)
• The role of bodies like the UN Security Council, EU Council, and OFAC (US Office of Foreign Assets Control) in imposing and administering sanctions
• The compliance obligation to screen clients and transactions against sanctions lists and the severe penalties for breaches, which can include criminal prosecution

Cross-border compliance questions often present scenarios where a transaction touches multiple jurisdictions with conflicting regulations, testing your ability to identify the most restrictive applicable requirement.

Building Your Regulatory Framework Mastery

Success in the CISI GFC exam requires more than surface-level familiarity with these frameworks. Each regulatory regime exists for specific reasons — protecting consumers, preventing systemic risk, combating financial crime — and the exam tests whether you understand these purposes and can apply the rules to realistic compliance scenarios.

Focus your preparation on scenario-based practice. For every framework, ask yourself: What problem does this regulation solve? What would happen if a firm failed to comply? Which specific provision applies to this situation? This analytical approach mirrors how exam questions are structured and will serve you well beyond the test itself in your compliance career.

Our CISI-accredited GFC preparation platform provides structured coverage of every regulatory framework discussed here, complete with scenario-based practice questions that mirror the exam format. As an official CISI Accredited Training Partner, we ensure our materials align directly with the current GFC syllabus.