FINRA Rule 4140 was adopted as one of the consolidated financial responsibility rules. How has its text developed since that adoption, and what material accompanies it?

Its text is unchanged since adoption, and Supplementary Material issued with it explains its application

Its text is unchanged since adoption, and it carries no Supplementary Material

Its text was amended once, and that amendment added Supplementary Material explaining its application

Its text was amended once after adoption, and it carries no Supplementary Material

SEC Exchange Act Rule 17a-5 governs the routine annual reporting obligations of every registered broker-dealer. Within what period after fiscal year end must the annual report be filed, and what extension may the SEC grant?

Thirty calendar days, with extensions of up to sixty days in limited circumstances

Ninety calendar days, with extensions of up to thirty days on written application

Sixty calendar days, with extensions of up to ninety days in limited circumstances

Forty-five calendar days, with no extension available under any circumstances at all

A member firm engages an accounting firm to certify the audited financial statements in its annual report. What must that accountant hold, and under what standards is the engagement conducted?

Registration in good standing with the PCAOB, with the engagement under PCAOB auditing standards

A CPA licence in the member's home state, with the engagement under generally accepted standards

Registration in good standing with the SEC, with the engagement under AICPA attestation standards

Membership of the AICPA in good standing, with the engagement under Regulation S-X standards

Alongside the financial report, SEC Rule 17a-5 requires a broker-dealer to file either a compliance report or an exemption report. What determines which of the two applies to a given firm?

Whether the firm maintained net capital above its minimum requirement throughout the reporting year

Whether the accountant identified a material weakness in the firm's internal control over compliance

Whether the firm is a clearing participant of a registered securities depository during that year

A member's FOCUS reports show fluctuations that do not match its apparent business activity, and a FINRA examination has found discrepancies in its books and records. FINRA is considering directing an audit under Rule 4140(a). What must FINRA have before doing so?

A completed investigation establishing that the member deliberately misstated its reported financial position

A determination that the member has already fallen below its minimum required net capital

Credible concerns about accuracy or integrity, without needing to establish that fraud has occurred

Written consent from the member's independent public accountant to the scope of the engagement

Rule 4140(a) reaches three categories of financial information, and one of them is a member's prior audited financial statements. What does including that category enable FINRA to do?

An extension of the retention period for those statements beyond the books and records schedule

A retrospective late fee for each year in which the statements proved to be inaccurate

An obligation on the original accountant to reissue a corrected opinion for that period

A fresh examination of a period already certified, without waiting for the next annual cycle

FINRA Rule 4140(a) does not require that every engagement it directs take the form of a full audit by an independent public accountant. What alternative form of engagement may FINRA direct instead?

An examination under AICPA attestation, review or consultation standards, scaled to the concern

A limited agreed-upon procedures engagement performed by any accountant that the member selects

An internal review by the member's own compliance department, scaled to the specific concern

A re-audit conducted by the same accountant who originally certified the statements in question

A member that has been directed to obtain an examination under FINRA Rule 4140 fails to file the resulting report within the prescribed time. What consequence does Rule 4140(b) specify?

A summary suspension of the member's securities business until the outstanding report has been filed

A late fee in the amount fixed by Schedule A, Section 4(g)(1) of the FINRA By-Laws

An automatic referral to the Department of Enforcement, with the late fee assessed only on repeat failures

A daily accruing penalty in an amount set by the Executive Vice President for financial responsibility

FINRA Rule 4140(b) does not reach every report that a member files after its due date. Which filings fall within its scope?

All financial and operational reports a member owes FINRA, whether routine or specially directed

Only the annual audited financial statements, and not any examination report FINRA has directed

The audited report and any directed examination report, not the routine FOCUS filings

Every report a member files with FINRA after its due date, without exception

An accountant engaged to perform an audit directed under FINRA Rule 4140 must be independent of the member being examined. Which provision governs that independence requirement?

FINRA Rule 4140(b), which applies whatever independence standards FINRA prescribes for the engagement

PCAOB Auditing Standard 1005, which applies the independence standards set out in the AICPA Code

Exchange Act Rule 15c3-3(e), which applies the independence standards governing approved control locations

SEC Rule 17a-5(f)(3), which applies the independence standards of Regulation S-X Rule 2-01(b) and (c)

A member has been directed to obtain an audit under FINRA Rule 4140. How does that engagement bear on the member's annual audit obligation under SEC Exchange Act Rule 17a-5?

It sits alongside the annual audit, which the member must still obtain for each fiscal year

It replaces the annual audit for the fiscal year in which FINRA directs the engagement

It postpones the annual audit until the directed engagement has been completed and filed

It is absorbed into the annual audit, whose scope FINRA then widens to cover the concern

A member filed its annual audited report under SEC Rule 17a-5 six weeks ago. FINRA now has concerns about the accuracy of the member's financial reporting. When may FINRA direct an audit under FINRA Rule 4140?

Not until the next annual audit, so that the two engagements do not duplicate one another's work

At once, since the authority is exercisable at any time, whatever stage the annual cycle has reached

Not until twelve months have passed since the period covered by the last certified annual audit

Only if the report already filed carried a qualified or adverse opinion from the member's accountant

Under SEC Exchange Act Rule 17a-5, who signs a broker-dealer's compliance report, and what does that report state?

A majority of the board of directors; that the firm's anti-money laundering programme was independently tested during the year, with a description of each exception found

A senior officer; that the firm's anti-money laundering programme was independently tested during the year, with a description of each exception the testing found

Under SEC Exchange Act Rule 17a-5, what work does the independent public accountant perform on a broker-dealer's compliance report or exemption report?

It examines a compliance report or reviews an exemption report, and issues a separate report on its findings

It carries out a limited review of a compliance report or a full examination of an exemption report, and issues a separate report

It examines either report to the same standard and adds its findings to the firm's own report rather than issuing one

It examines a compliance report, while an exemption report is filed with no involvement by the accountant at all

Each year a broker-dealer must notify the SEC and FINRA of the independent public accountant it has engaged, by filing a Rule 17a-5(f)(2) Statement. By what date must that statement be filed?

No later than the thirty-first of December in each year

No later than the tenth of December in each year

No later than the thirtieth of November in each year

No later than the thirty-first of January in each year

A broker-dealer replaces its independent public accountant. Under SEC Exchange Act Rule 17a-5, what must the outgoing accountant furnish?

A letter to FINRA stating whether any disagreements on accounting or disclosure matters arose in the most recent eighteen months

A letter to the SEC stating whether any disagreements on accounting or disclosure matters arose in the most recent twelve months

A letter to the SEC stating whether any disagreements on accounting or disclosure matters arose in the most recent eighteen months

A letter to FINRA stating whether any disagreements on accounting or disclosure matters arose in the most recent thirty-six months

SEC Exchange Act Rule 17a-5 filings made for the SEC must now be submitted electronically through EDGAR. From when does the electronic filing mandate apply, and what is the position on paper filings?

Reports filed on or after 1 January 2025; paper filings remain acceptable where an outside auditor submits them on the firm's behalf

Reports filed on or after 1 January 2026; paper filings remain acceptable where the SEC grants a hardship exemption

Reports filed on or after 1 January 2025; paper filings are no longer accepted in any circumstances

Reports filed on or after 1 January 2026; paper filings are no longer accepted in any circumstances

Who within FINRA exercises the authority to direct a member to obtain an audit or examination under Rule 4140(a)?

The Executive Vice President charged with oversight of financial responsibility, or a written officer delegate

The head of FINRA's Department of Enforcement, or an officer to whom that person delegates in writing

The Executive Vice President charged with oversight of financial responsibility, acting with the Board of Governors' approval

The head of FINRA's Department of Enforcement, acting with the Board of Governors' approval

The authority to direct an audit under Rule 4140(a) is exercised at a senior level within FINRA. What does that senior-level requirement ensure?

That the member has an opportunity to be heard before any directed audit is allowed to begin

That directed audits are a considered use of supervisory authority rather than a casual or routine step

That each directed audit is coordinated in advance with the SEC's own examination programme for the member

That a directed audit is entered on the member's record as a formal disciplinary sanction against it

Once a member has been directed to obtain an audit or examination under Rule 4140(a), whose requirements govern the engagement's scope, methodology and reporting format?

Requirements set by the member's audit committee when it appoints the accountant

Terms the member negotiates with its accountant in the engagement letter

Requirements that FINRA prescribes for that particular directed engagement

Standards the SEC sets for each such engagement by a separate order

FINRA Rule 4140(a) is triggered by concerns about the accuracy or integrity of a member's financial information. Does the accuracy-or-integrity standard reach errors a member made honestly, with no intent to mislead?

Yes, but only once the errors have produced a deficiency in the member's net capital position

No, because the authority is reserved for cases of suspected deliberate manipulation of the figures

No, because honest errors are corrected by the member amending its FOCUS filings instead

Yes, because concerns about accuracy reach innocent error as well as deliberate manipulation

FINRA's concern about a member is confined to the reconciliation of one group of accounts; the rest of its records raise no question. What does Rule 4140(a) allow FINRA to direct?

A review or consultation engagement under AICPA standards, confined to that group of accounts

Nothing short of a full annual-scope audit, since a directed audit must cover the whole firm

A special FOCUS filing restating the affected accounts, certified by the member's own FINOP

An inspection by FINRA's own examination staff, since accountants are engaged for full audits

A member directed to obtain an audit under FINRA Rule 4140 because of concerns about its financial integrity does not obtain it promptly. Beyond any late fee, what does it face?

Automatic cancellation of its FINRA membership once thirty days have elapsed

An escalating FINRA examination, and proceedings under FINRA Rule 9557

Loss of SIPC protection for its customer accounts until the report is filed

A federal court order compelling the audit, obtained by FINRA on application

A member fails to obtain promptly an audit FINRA has directed under Rule 4140. When does that failure expose it to business restriction under FINRA Rules 4110 and 4120?

When its annual audited report for the following fiscal year is also filed late

When the late fee assessed for the missing report remains unpaid after thirty days

When the accountant it engaged loses its PCAOB registration before finishing the work

Between examinations, FINRA monitors the financial condition of its members. What routine source of data does that monitoring draw on?

Customer complaint statistics that members report to FINRA under FINRA Rule 4530

Monthly net capital certifications signed by each member's financial and operations principal

Quarterly reviews of each member's books performed by its independent public accountant

The periodic FOCUS reports that members file under Exchange Act Rule 17a-5

At what point in FINRA's oversight of a member's financial condition does a directed audit under FINRA Rule 4140 become the appropriate response?

When examination findings raise accuracy questions that a regulatory examination cannot itself resolve

As the first response whenever routine monitoring flags an anomaly, before any examination is opened

Once the member itself asks FINRA for independent verification of its own financial records

When a customer complaint alleges that the member's account statements are inaccurate

FINRA is weighing a business restriction on a member under Rules 4110 and 4120, but doubts whether the member's financial records can be relied on. In what order does the framework contemplate FINRA acting?

Impose the restriction at once, then direct an audit afterwards to confirm that it was justified

Verify the records through a directed audit first, then make the restriction decision on reliable figures

Impose the restriction on the reported figures, leaving any doubts about them to the next examination

Have the member's FINOP recertify the records, then decide on the restriction on that certification

The accounting firm a member proposes for an audit directed under FINRA Rule 4140 holds an equity stake in that member. May that firm perform the engagement?

Yes, provided it remains registered and in good standing with the PCAOB throughout the work

No, because only the accountant that certified the member's last annual audit may perform it

No, because a financial interest in the member compromises the independence the engagement requires

Yes, provided it discloses the stake to FINRA in writing before the engagement begins

Why does it matter that the accountant performing a FINRA Rule 4140 directed audit is independent of the member being examined?

An accountant tied to the member would expose FINRA itself to legal liability for the accuracy of that accountant's findings

An accountant tied to the member could not be compelled to share its working papers with FINRA's examiners

An accountant tied to the member would be barred from registering with the PCAOB for the engagement

An accountant tied to the member could endorse inaccurate statements as readily as the member's own staff, defeating the verification

FINRA Rule 4140 | Directed Audits for Member Firms

FINRA Rule 4140: FINRA's Authority to Direct Member Audits

FINRA Rule 4140 grants FINRA the authority to direct any member firm to obtain an independent audit or accounting examination at any time when FINRA has concerns about the accuracy or integrity of that member's financial statements, books and records, or prior audited financial statements.

The rule is compact — two substantive provisions — but it encodes an important supervisory power that sits alongside and supplements the broader audit framework governing broker-dealers under SEC Exchange Act Rule 17a-5.

Where Rule 17a-5 establishes the baseline mandatory annual audit requirements applicable to all registered broker-dealers as a matter of routine, Rule 4140 provides FINRA with the specific authority to compel an ad hoc, targeted audit or examination at any point in time when financial integrity concerns arise, regardless of whether the member's annual audit cycle is underway or recently completed.

Rule 4140 sits within the 4100 Financial Condition subsection of the 4000 Financial and Operational Rules series. It was adopted by SR-FINRA-2008-067 effective February 8, 2010 as part of the consolidated financial responsibility rules. Regulatory Notice 09-71 announced its adoption. The rule has not been amended since its adoption and contains no supplementary materials, reflecting its straightforward enabling function within the broader financial oversight architecture.

The Annual Audit Requirement: SEC Rule 17a-5 as the Foundation

Rule 4140 cannot be understood without first appreciating the mandatory annual audit framework established by SEC Exchange Act Rule 17a-5 — the rule that governs the periodic financial reporting and audit obligations of all registered broker-dealers as a matter of routine. Rule 17a-5 requires every registered broker-dealer to file an annual report with the SEC and FINRA within sixty calendar days of its fiscal year end, though the SEC may grant extensions of up to ninety days in limited circumstances.

The annual report package consists of a financial report containing audited financial statements — including a statement of financial condition, a statement of operations, a statement of cash flows, and a statement of changes in ownership equity — prepared in accordance with U.S. generally accepted accounting principles and certified by an independent public accountant registered with the Public Company Accounting Oversight Board.

The PCAOB registration requirement for the independent public accountant is significant. Following the Sarbanes-Oxley Act of 2002, which created the PCAOB to oversee audits of public companies, the SEC extended PCAOB oversight to broker-dealer audits as well, recognizing that the integrity of broker-dealer financial statements is systemically important in ways that parallel the public company context.

All broker-dealer audit engagements must be conducted under PCAOB auditing standards, and the independent public accountant must be in good standing with the PCAOB throughout the engagement.

Auditors that are not PCAOB-registered, or whose PCAOB registration has been suspended or revoked, cannot conduct broker-dealer audits — a restriction that FINRA examinations will verify when reviewing a member's annual audit compliance.

In addition to the financial report, Rule 17a-5 requires broker-dealers to file either a compliance report or an exemption report depending on whether they are subject to the customer protection requirements of Exchange Act Rule 15c3-3. A carrying firm that holds customer assets files a compliance report — signed by a senior officer — stating that the firm has established and maintained internal controls over compliance with the financial responsibility rules and identifying any material weaknesses identified.

An introducing firm exempt from Rule 15c3-3 files an exemption report asserting its continued qualification for the exemption. The independent public accountant must examine the compliance report or review the exemption report and issue a separate report on those findings. This dual reporting structure — financial statement audit plus compliance or exemption report examination — produces the comprehensive annual financial oversight package that Rule 17a-5 envisions.

Rule 17a-5 also requires that broker-dealers notify the SEC and FINRA of their independent public accountant engagement by filing a Rule 17a-5(f)(2) Statement no later than December 10 of each year. Regulatory Notice 14-39 announced the availability of an electronic filing template through FINRA Gateway for this purpose. Where a broker-dealer changes its independent public accountant, the notification requirements are more detailed — the outgoing accountant must furnish a letter to the SEC stating whether any disagreements existed on accounting matters or financial statement disclosures during the most recent eighteen-month period.

These change-of-auditor provisions mirror the requirements applicable to public company registrants and reflect the same concern about auditor shopping and suppression of adverse audit findings.

Beginning with reports filed on or after January 1, 2026, all Rule 17a-5 filings for the SEC must be submitted electronically through EDGAR — paper filings are no longer accepted under any circumstances. This modernization, implemented through 2025 SEC amendments to Rule 17a-5 and confirmed by FINRA guidance, applies to all annual audited financial statements, compliance reports, exemption reports, and associated accountant reports.

Manual wet signatures and mailed submissions, which some firms had historically used through outside auditors, must be replaced with fully electronic EDGAR-compliant processes. Both manual and electronic signatures are permitted for reports filed on or after January 1, 2026, eliminating the prior ambiguity about whether electronic signatures were acceptable.

FINRA's Directed Audit Authority Under Rule 4140(a)

Against this backdrop of mandatory annual audits under Rule 17a-5, Rule 4140(a) grants FINRA a separate and independent authority to direct any member to obtain an additional audit or examination at any time when concerns arise about the accuracy or integrity of the member's financial statements, books and records, or prior audited financial statements. Three features of this authority deserve careful attention.

First, the authority is triggered by concerns about accuracy or integrity — a standard that encompasses both innocent error and deliberate manipulation. A member whose FOCUS reports show unusual fluctuations inconsistent with its apparent business activities, a member whose books and records show significant discrepancies during a FINRA examination, or a member whose prior audited financial statements appear to have contained material misstatements are all potential subjects of a Rule 4140(a) directed audit. FINRA does not need to establish that fraud has occurred — the existence of credible concerns about the reliability of financial information is sufficient.

Second, the authority extends to three distinct categories of financial information: the member's financial statements generally, its books and records, and specifically its prior audited financial statements. The explicit inclusion of prior audited financial statements is significant. An annual audit under Rule 17a-5 produces a snapshot of the firm's financial condition at fiscal year end, certified by an independent accountant. If subsequent information calls into question whether that certification was accurate — whether the financial statements as audited fairly presented the firm's condition — Rule 4140 enables FINRA to direct a fresh examination focused on the period covered by the prior audit, without waiting for the next annual cycle.

Third, the authority is exercised by FINRA's Executive Vice President charged with oversight for financial responsibility, or their written officer delegate. This senior-level authorization requirement ensures that Rule 4140 directed audits are not initiated on a casual or routine basis — they represent a considered exercise of supervisory authority by the FINRA official with primary responsibility for member financial condition. The requirement for written delegation of authority means that any exercise of Rule 4140 authority by an officer delegate is documented and traceable.

The form of the required examination is flexible. Rule 4140(a) allows FINRA to direct either a full audit by an independent public accountant or an examination in accordance with attestation, review, or consultation standards prescribed by the American Institute of Certified Public Accountants. The flexibility to direct a review or consultation engagement rather than a full audit allows FINRA to calibrate the scope of the required examination to the nature of the concern — a targeted review of specific account reconciliations or specific transactions may be more proportionate and timely than a full annual-scope audit when the concern is focused on a particular area of the firm's records. The audit or examination must be conducted in accordance with such requirements as FINRA may prescribe, giving FINRA authority to specify scope, methodology, and reporting format for the directed engagement.

The Late Filing Penalty

Rule 4140(b) provides the enforcement mechanism for the timely filing obligation: any member failing to file an audited financial and operational report or examination report under this rule in the prescribed time is subject to a late fee as set forth in Schedule A Section 4(g)(1) to the FINRA By-Laws.

The late fee provision applies to reports required under Rule 4140, not to the routine monthly and quarterly FOCUS report filings under Rule 17a-5, which carry their own penalty provisions.

However, in practice the late fee consequences of Rule 4140 are rarely the primary concern when a member fails to comply with a directed audit — a member that has been directed to obtain an audit due to financial integrity concerns and then fails to do so promptly faces the more serious risk of examination escalation, Rule 9557 proceedings, and potential business restriction under Rules 4110 and 4120 if the financial condition concerns that prompted the directed audit remain unresolved.

Connection to the Financial Responsibility Framework

Rule 4140 fits within the 4100 Financial Condition subsection alongside Rules 4110, 4120, and 4130 as part of FINRA's layered financial oversight architecture. The relationship between the rules is sequential and complementary. FINRA Rule 4521 — Notifications, Questionnaires and Reports — empowers FINRA to require carrying and clearing members to submit such further financial and operational information as it deems essential, supplementing the routine FOCUS report data, filed monthly or quarterly under Exchange Act Rule 17a-5, from which financial condition monitoring occurs between examinations. When that monitoring identifies concerns, FINRA's examination program provides the first-line investigative response. When examination findings raise more serious questions about the accuracy or integrity of a member's financial reporting — questions that go beyond what a regulatory examination can resolve — Rule 4140 provides the authority to require independent professional verification through an audit or accountant examination.

The interaction with FINRA Rule 4110 is particularly important in practice. A member whose net capital adequacy is in question — whose capital position may be misrepresented through inaccurate financial records — presents exactly the type of concern that Rule 4140 is designed to address.

An accurate net capital determination is the foundation of every obligation in Rules 4110 and 4120. If the financial records underlying that determination are unreliable, the entire financial responsibility framework rests on a compromised base. Rule 4140's directed audit authority enables FINRA to restore confidence in the accuracy of a member's financial reporting before making consequential determinations about business restriction or suspension.

The independence requirement for the accountant performing a Rule 4140 directed audit is governed by SEC Rule 17a-5(f)(3), which requires compliance with the independence standards of Rules 2-01(b) and (c) of Regulation S-X. An accountant that has a financial interest in the member, is employed by the member, or has other relationships that compromise independence cannot conduct a Rule 4140 directed audit. This independence requirement ensures that the verification function of the directed audit is genuine — a compromised auditor could validate inaccurate financial statements just as readily as the firm's own personnel, defeating the purpose of the independent examination.

Examination Relevance and Key Takeaways

FINRA Rule 4140 is tested on the Series 27 Financial and Operations Principal examination as part of the financial responsibility and audit compliance framework. Series 24 General Securities Principal candidates encounter the rule in the context of supervisory oversight of financial reporting and the broader relationship between FINRA's examination authority and members' annual audit obligations. The rule's connection to SEC Rule 17a-5 makes it relevant to any examination covering broker-dealer financial reporting requirements, including the annual audit obligation, the PCAOB registration requirement for auditors, and the compliance and exemption report framework.

The key points to retain are these: FINRA Rule 4140 grants FINRA authority to direct any member at any time to obtain an independent audit of its accounts or an AICPA-standard examination when FINRA has concerns about the accuracy or integrity of the member's financial statements, books and records, or prior audited financial statements; the authority is exercised by FINRA's Executive Vice President for financial responsibility oversight or a written officer delegate, and the audit or examination must be conducted in accordance with FINRA's prescribed requirements; Rule 4140 operates alongside and supplements the routine mandatory annual audit obligation of SEC Exchange Act Rule 17a-5, which requires all registered broker-dealers to file annual audited financial statements and either a compliance report or an exemption report within sixty calendar days of fiscal year end, with the independent public accountant required to be registered with the PCAOB and the engagement conducted under PCAOB auditing standards; beginning January 1, 2026, all Rule 17a-5 filings must be submitted electronically through EDGAR with no paper filings accepted, and both manual and electronic signatures are permitted; broker-dealers must notify the SEC and FINRA of their independent public accountant by filing a Rule 17a-5(f)(2) Statement no later than December 10 of each year; any member failing to file an audited report or examination report under Rule 4140 in the prescribed time is subject to a late fee under Schedule A Section 4(g)(1) of the FINRA By-Laws; and the directed audit authority of Rule 4140 is most significant in the context of financial condition concerns that implicate the accuracy of the net capital determinations underlying Rules 4110 and 4120, where independent verification of a member's financial records is essential before FINRA can make reliable determinations about business restriction or suspension requirements.