Business Conduct Residual Risk is an assessment of a firm’s overall risk profile after considering the firm’s methods of assessing and monitoring its business risks.

A firm’s residual risk is assessed as Low, Moderate-Low, Moderate-High or High in comparison with other IIROC Dealer Member firms.

Low:
By placing a firm in this risk category, IIROC has assessed the likelihood or probability of the firm failing to protect its customers with respect to business conduct matters as highly unlikely. The firm has demonstrated significant success in offsetting its business model’s risks with effective corporate governance and appropriate management practices.

Moderate-Low:
By placing a firm in this risk category, IIROC has assessed the likelihood or probability of the firm failing to protect its customers with respect to business conduct matters as unlikely. On balance, the firm has demonstrated reasonable success in offsetting its business model’s risks with its corporate governance and management practices.

Moderate-High:
By placing a firm in this risk category, IIROC has assessed the likelihood of the firm failing to protect its customers with respect to business conduct matters as a reasonable possibility. While, on balance, the firm has demonstrated success in offsetting its business model’s risks with its corporate governance and management practices, the potential for its risk levels to increase and/or its controls to falter makes the firm worth watching.

High Risk:
By placing a firm in this risk category, the IIROC has assessed the likelihood or probability of the firm failing to protect its customers with respect to business conduct matters as much higher than average

The firm has not demonstrated consistent success in offsetting its business model’s risks with its corporate governance and management practices; therefore the potential for its risk levels to overtake its controls is sufficiently significant to warrant priority regulatory focus by IIROC..