How to create a formal compliance manual and monitoring plan

To remain on the right side of the Financial Conduct Authority (FCA), you must document how you intend to follow their rules (the Compliance Manual) and how you will check that you are actually doing it (the Monitoring Plan). These aren't just "tick-box" exercises; they are the living documents that protect your business from regulatory fines and ensure your clients are treated fairly.

Understanding the Compliance Manual

Think of your Compliance Manual as your business's internal "Rulebook." It translates the dense FCA Handbook into plain English instructions for your daily operations. Its purpose is to ensure that anyone working in your business knows exactly what is expected of them to keep the firm compliant.

A standard manual for a UK financial services firm usually includes sections on:

• Core Principles: How you meet the FCA's Principles for Business.
• Conduct of Business: Your procedures for giving advice and handling client money.
• Financial Crime: Your policies on anti-money laundering (AML) and preventing bribery.
• Complaints: How you record, investigate, and resolve client grievances.
• Conflicts of Interest: How you identify and manage situations where your interests might clash with a client's.

Understanding the Compliance Monitoring Plan (CMP)

If the manual is the rulebook, the Monitoring Plan is your "internal audit" schedule. It is a proactive calendar of checks designed to catch mistakes before they become systemic failures. The FCA expects you to "monitor the effectiveness" of your policies, and the CMP is your proof that you are doing so.

Your CMP should list specific tasks, who is responsible for them, and how often they occur. Here is an example of what a simple monitoring schedule might look like:

Area of Review	Frequency	Action
Client File Reviews	Monthly	Check a sample of files for suitability and correct documentation.
Financial Promotions	Quarterly	Review website and social media for "clear, fair, and not misleading" content.
Business Continuity	Annually	Test that your backup systems and "Plan B" actually work.
AML Controls	Six-monthly	Verify that identity checks are being completed for all new clients.

How to create these documents

1. Start with a Template: Do not start from a blank page. Use a template from a reputable compliance consultancy or trade body, but ensure you customise it. The FCA dislikes "off-the-shelf" manuals that don't reflect how your specific business actually works.
2. Risk-Based Approach: Focus your Monitoring Plan on the areas of highest risk. If you handle client money, your monitoring should be frequent. If you only provide fixed-fee advice, your focus might be more on the suitability of that advice.
3. Assign Ownership: Even if you are a sole trader, you must formally record that you (the Principal) are responsible for these checks.
4. Keep a "Breaches Register": When your monitoring finds a mistake, record it, fix it, and note down what you changed to stop it happening again. This "closed-loop" approach is exactly what the FCA looks for.

Pro Tip: Don't make your manual too long. A 200-page document that nobody reads is less effective than a 20-page manual that is used every day. Focus on clarity and usability.